{"type": "bundle", "id": "bundle--47afb66e-08a2-4a9d-ac81-f08a53e58f96", "objects": [{"type": "identity", "spec_version": "2.1", "id": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "name": "James Brine", "identity_class": "individual", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "location", "spec_version": "2.1", "id": "location--c71c2550-5849-4a8d-b050-635a93ef5467", "name": "DigitalOcean London", "latitude": 51.5177, "longitude": -0.6215, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "GB"}, {"type": "location", "spec_version": "2.1", "id": "location--c8625a69-b7e6-4cad-99d8-76632a875c20", "name": "Reverse Proxy (Perth)", "latitude": -31.9505, "longitude": 115.8605, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "AU"}, {"type": "location", "spec_version": "2.1", "id": "location--6152e233-0fe4-4ca1-80d8-e6937bc133a9", "name": "Vultr Melbourne", "latitude": -37.8136, "longitude": 144.9631, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "AU"}, {"type": "location", "spec_version": "2.1", "id": "location--b35d6f36-498c-4c95-89ef-649df5576b3a", "name": "Vultr Tokyo", "latitude": 35.6762, "longitude": 139.6503, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"], "country": "JP"}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--a1b50e4f-4cf2-4fcb-a89c-dcfffe6473d5", "name": "Cloudflare Global Edge", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--d0c5b3fe-a412-47cf-a56e-bc3b3691121f", "name": "DigitalOcean London", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--41a42288-5651-4f92-9d30-39a32a93b244", "relationship_type": "located-at", "source_ref": "infrastructure--d0c5b3fe-a412-47cf-a56e-bc3b3691121f", "target_ref": "location--c71c2550-5849-4a8d-b050-635a93ef5467", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--6c33c90a-8e68-48f2-86b2-0240266e08eb", "name": "OpenCLAW Dashboard Decoy", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--cf4e6eaf-8b04-4c73-9fc9-cacddb8dd48b", "name": "Reverse Proxy (Perth)", "infrastructure_types": ["firewall"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a3664cc2-f155-48b3-abb7-524c28efde83", "relationship_type": "located-at", "source_ref": "infrastructure--cf4e6eaf-8b04-4c73-9fc9-cacddb8dd48b", "target_ref": "location--c8625a69-b7e6-4cad-99d8-76632a875c20", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--425e1045-a88b-4269-8ba1-47bac6f4332b", "name": "Vultr Melbourne", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3b0c5b3d-34d3-4a1f-b82d-7994343384c1", "relationship_type": "located-at", "source_ref": "infrastructure--425e1045-a88b-4269-8ba1-47bac6f4332b", "target_ref": "location--6152e233-0fe4-4ca1-80d8-e6937bc133a9", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "infrastructure", "spec_version": "2.1", "id": "infrastructure--82310ab8-6380-41ff-9e97-92d2d7eb179a", "name": "Vultr Tokyo", "infrastructure_types": ["honeypot"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8dc2c454-75a7-47f9-a482-6d4abf2ce3c7", "relationship_type": "located-at", "source_ref": "infrastructure--82310ab8-6380-41ff-9e97-92d2d7eb179a", "target_ref": "location--b35d6f36-498c-4c95-89ef-649df5576b3a", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--9f6b4a40-b312-4d6c-8962-53e248873558", "name": "CVE-2002-1149", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--3045e6f6-ddbe-4766-a0f4-ade41e3bfe58", "name": "CVE-2019-0193", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0193", "external_id": "CVE-2019-0193"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--53f2ce60-c955-4767-b602-d139545467b2", "name": "CVE-2019-5418", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5418", "external_id": "CVE-2019-5418"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--af124007-9bf3-4a17-87d5-a9b52e563fa7", "name": "CVE-2021-26855", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-26855", "external_id": "CVE-2021-26855"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--b5147848-022b-4261-a578-bf3291614d40", "name": "CVE-2021-34473", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-34473", "external_id": "CVE-2021-34473"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--89ba54c8-32ee-4c29-8d36-1bdeaa7ced46", "name": "CVE-2021-41773", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41773", "external_id": "CVE-2021-41773"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--05684841-0870-4611-b7fb-21478ee0dc72", "name": "CVE-2021-42013", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42013", "external_id": "CVE-2021-42013"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--7981112b-110c-4ce1-bd6d-9361a9d00747", "name": "CVE-2022-22274", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22274", "external_id": "CVE-2022-22274"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--a28b04e8-ad85-462c-b923-9158a7008803", "name": "CVE-2022-22947", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22947", "external_id": "CVE-2022-22947"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--611e800c-c845-478a-b4bc-40f780f1b283", "name": "CVE-2023-0656", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-0656", "external_id": "CVE-2023-0656"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "vulnerability", "spec_version": "2.1", "id": "vulnerability--85ee6c0b-63a7-4b7a-b655-2209db1298db", "name": "CVE-2026-9198", "external_references": [{"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9198", "external_id": "CVE-2026-9198"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--dac02ec7-9fab-40e8-ab91-f7aa9152bf58", "name": "Network Service Scanning", "external_references": [{"source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1046/", "external_id": "T1046"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--70763895-ef5a-42ed-a5bb-49eaddeeb4ed", "name": "Exploit Public-Facing Application", "external_references": [{"source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1190/", "external_id": "T1190"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--0e6e4145-cd99-4e68-a56c-3613ee5420af", "name": "Credentials in Files", "external_references": [{"source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1552/001/", "external_id": "T1552.001"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "attack-pattern", "spec_version": "2.1", "id": "attack-pattern--95634810-4d5c-4cb2-8998-8afc1f8d05a9", "name": "Cloud Instance Metadata API", "external_references": [{"source_name": "mitre-attack", "url": "https://attack.mitre.org/techniques/T1552/005/", "external_id": "T1552.005"}], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbe9497c-95e3-4741-a67f-edb0bdeec1cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.174.10.102']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--245c9df0-33e8-46f3-a627-ff0572ce1309", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.238.106.229']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d70b5259-3e64-4b53-81a9-9ab0970b52d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.24.16.152']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6542d40b-ea50-4ce1-8a07-0784b594f812", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '1.24.16.25']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e22cdab8-f0a9-4589-a859-5a2dd8e11424", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.28.153.226']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa8194e2-0802-46a3-a1c4-adbe43c222f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.1']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e92f782e-d230-4716-baae-65dbb4bdd2e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.108']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--367c443a-b177-4f50-92b1-035ad1e0d662", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.109']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a18cfdc-c08e-4d9a-89cf-b0636efe6fbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.116']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23698a96-8e68-4b6b-9b3a-73533dd8a0ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.12']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0638914-087a-4aaa-9aa7-90a14592d726", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.123']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7f94751-f249-42d4-aaed-fe8ea19b3e7e", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.15']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1acdedaf-d295-46f6-bbaa-9e844e802e35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.18']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c336336f-2cbe-4fa9-a7d1-f873ea380644", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.28']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0c03b32-3a33-4903-b8e6-f0266040453c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.42']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d7ac90c-36f1-42e6-982b-b7a61c1cfef2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.43']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9d4b8c1-4c62-41dc-b466-8f0de21a5165", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.5']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1d98a01-0543-466c-9b0f-856e3bb6ff55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.53']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--064261ea-20e0-4bd1-83c7-ac9bd76a597b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.55']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbd00299-8ace-4f40-808a-c0fd00849ee8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.57']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d0b78a5-d0bb-4d3c-bd07-cc25b24582fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.67']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0db6f91-729c-4ac7-826e-c5bd332a83da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.71']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53303a5b-46e1-4e68-b457-00599e5590e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.76']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51b36fa9-d895-4276-a902-f0c91bd8f572", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.29.192.89']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d1c240a-0e70-4819-af17-d8f09a8bf9bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.49.117.77']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d60062d6-5696-43b9-ab2d-1d40b2f73fa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.50.17.159']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c4c2c56-0252-4c9f-957e-2a69946150cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.58.126.190']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afd1479f-04a8-4ce0-82e1-f361edcbb801", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.58.203.239']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5475360a-13e3-4d90-b091-8600c654208a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '100.59.195.187']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cb4c212-7d82-4942-88af-ae81691026ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.126.11.137']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e4b5b14-d934-41fd-ba54-1c46de8612eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.200.236.207']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3307811-8111-4e63-a00c-0397defcf661", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.32.52.164']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be1eece2-496d-476e-9113-af070ce86d8a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.32.57.90']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dd55466-8fc9-412f-9300-2bc8988736aa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.33.122.184']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bd15955-25a6-458e-8bd0-691ddcad31ea", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.33.80.42']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df05d8b3-0de6-4aa0-97ed-c2d60d7a2669", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.107.65']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0cf765c-113b-4719-b919-cf1c23b254dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.158']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbb80d28-661b-4699-86aa-3650f38f4b1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.175']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8819b3be-0722-47bf-b12d-8564066ef606", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.108.191']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5df7fd68-d119-4137-8b80-5e250fb8d627", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.112.101']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--578b2e58-0a71-422a-8dba-4949f8a2e919", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.114.198']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20659574-7437-48e6-815f-928f72540e7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.114.209']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baf6ad07-c38e-425b-bd23-6f099f9dfbb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.118.148']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21373121-0f4b-41da-9adb-2c72285ed906", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.118.248']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a043c7a-8eed-42d6-808a-a179ff3019e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.119.146']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41fdf0cb-97d2-4264-a9b0-a159a4428855", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.124.220']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f149663a-7030-4605-a392-248a7c28f697", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.172']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf561b9f-4a01-4c37-8c02-1c05374b62d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.187']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de9f5cec-6659-4373-81f0-843046f182a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.205']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ada6e545-78f4-4145-9ee7-95fed50a9d5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.36.97.74']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b676bff-0808-40d6-be25-a263996595e4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.159.59']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d21035fe-96c8-47ef-8dbc-3e2e5840caf3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.24.172']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--978b00d9-9dc5-425f-bc1a-afc753bc37e1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.47.25.46']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b740a45-e6f5-41f2-ac66-f0f13797564b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.58.64.223']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d3443c2-1057-4efc-b51c-50a3a280931a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.73.191.44']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f266be44-b4ea-4d09-83be-c935004413ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '101.96.234.223']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2ff32ee-6fdb-4469-9b95-7a27fa14ea90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.158.138.253']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a76bcafd-0219-4aa9-a04a-113a0f808a5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.220.160.110']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--570171a3-63b5-490a-ab49-c32bb476223e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.220.160.115']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--496e3576-9dcd-415d-a278-b59e749794a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.220.160.124']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f323c79e-e2f2-4358-9197-3d487015551d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.220.160.172']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0150d1f8-ea62-43c3-826b-d8cc4fe253d2", "name": "Malicious Host", "description": "Web exploits: wordpress-wlwmanifest-scan. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '102.220.160.173']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44106968-9f65-48a5-b1ad-6df5a3bde8c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.220.160.227']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35cc87ce-c99a-424e-b9ca-4aa36ba29f7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.220.160.38']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ce50bbc-5f7e-43f9-94b7-badd6532bb01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.220.161.79']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84c8b50f-ea01-40ce-8bee-89087e39b497", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.220.161.89']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4efc85dc-52e9-4665-a108-ba2ca87e2dc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.51.18.203']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21c7cb98-5d25-45f7-ac44-60467e046e57", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.53.12.221']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aba1f1a-48d8-4111-b125-713e6689e926", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '102.90.126.94']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a655ca5e-8019-41f5-9d91-432867e671b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.1.210.25']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2af59f0f-d672-4b7f-acbb-c68832765948", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.100.211.183']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12d729d2-0d85-4285-b54e-efaf8959596f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.105.23.176']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e194aca-4c63-483d-9dde-ef2b03d49aae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.118.29.32']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fdedc5e-7b40-476e-8856-5ba12e42158a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.129.77.243']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e5b66f7-8f1c-4f66-b065-9c0f86f81bf3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.130.128.157']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1a2820f-87ad-4773-9862-60d7cadc48a3", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.130.18.101']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--266b22d9-c08b-4ee0-b54b-f60888b27f72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.152.101.204']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f51a7070-7175-4bb5-8918-53b48be714f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.152.101.205']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90eb2234-f7bd-4955-88bf-d74497b2fff6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.152.101.206']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f861b14-1c66-427f-9eb9-22b6823eed74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.152.101.207']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1053335f-28d5-4515-802f-435d647acd42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.161.144.77']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ddf4bbc-e09e-435f-8d98-6bc600ef8999", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.161.207.6']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25c96dc7-c6e7-4966-a542-b25a7ad86849", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.162.64.102']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25174c7b-e4e3-4656-82b1-0ccc6a28afa2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.187.123.158']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87bb4ed2-a270-4465-82e3-16c0be604429", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.189.190.28']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--825f8034-4044-4665-8847-96b26a799bc4", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.135.43']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--645ced76-2145-4adc-86ed-727557e32f0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.15']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15301c19-1416-468b-845d-2d3a1abf274b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.19']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f145248f-0b09-4ce0-9092-0aada3b3d643", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.2']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c71b0a9c-b6cf-41e2-ae59-1350e303fecc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.57.4']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--016e0b04-ad42-49cf-9df5-d64610f36449", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.59.0']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e34c3a4-37c3-45b6-ae69-269177e352f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.59.3']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db9c43f1-001e-4e89-883a-e114cfb6e99d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.203.66.116']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee9dda14-95f5-4f83-b895-02ade690b4b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.209.196.227']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23cbf448-64b7-4a1c-95f6-04f5648a46aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.217.191.237']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ff5c6f1-28a3-4aca-b759-77f197be066b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.229.125.91']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f962e626-ce48-4ccb-8eaf-762a4d0ef6e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.229.81.225']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--718d7795-8587-48c4-96e1-1f2454d22c8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.31.101.4']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de5d9217-2a9e-446e-a406-4a16713c9ce7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.54.178.228']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69f688dd-2096-4570-86a9-9d14783a18cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.75.118.126']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9998201b-fe4b-43c9-a220-94022df55f0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.121.219']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e555d0f5-cb86-4397-89d3-83bad3d100f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.0']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9673c94e-6799-4b0f-ad66-deb42762c2ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.1']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bf578e2-939e-4856-bb66-46c4ff6c30e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.10']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74ff6f07-ac07-4a33-9604-7753a868ed98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.100']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8bedc4d-dfca-4e0b-b227-7ea92722e171", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.101']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d125a55-7b3c-4542-b515-a6e26abf543f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.102']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69b38f9c-d331-4e7c-b287-a8eec257b9fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.103']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30c4e3dc-49d2-431f-8ffd-5f59e18e755b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.104']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01fed1b2-46bc-43c9-b1b6-2115f55a3f17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.105']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38072f8b-5d50-464f-8689-5494906409dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.106']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2726385-b0b0-463e-a114-74e77c59bebe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.107']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59188eb9-2f5f-47c1-a5b0-b188b02f48ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.108']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--444b0ba3-b585-4eae-ac2b-69c5a945d559", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.11']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6232c64f-fc3d-4064-808b-ac7a86cc2205", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.110']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--488dc3bb-e239-4b21-95ce-27bf17fe33da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.111']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ea4c2b6-aea4-456f-8549-52ef852ece97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.112']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--745f96fd-df55-42df-9946-465ac3536088", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.113']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a436681-de52-4a4c-bbdf-18b29887dcf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.114']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a96847d6-c3ae-4098-8b9d-7888417ab3dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.115']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b56f802-f5fc-4d29-a781-9055eb5ee3d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.116']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9424444c-b111-4f9e-a53c-a0b66bba2d35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.117']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52c4d04c-f0cd-4258-ac9f-fc329047d2c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.118']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47708daf-34e8-4cf2-bd97-f6b68c456cd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.119']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f27685f8-0611-4054-aab7-91963041db57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.12']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e7ccfdb-398d-47d4-b77f-a1e2cf87db97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.120']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71488eaa-c821-462c-aae2-1c972a1889a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.121']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19f0c0e7-e467-4716-948c-90358fc55ccc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.122']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93669de9-e90e-4f20-8e48-81d2d63fac42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.123']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--188392c4-1356-42b5-b24d-5ae12315d926", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.125']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7916d28c-c6bf-4b92-8fe8-2b8408b3c47e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.126']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26510252-791d-4f14-90ba-887f7e2824eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.127']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e636d686-d89f-4df8-97b4-f9b98bb6a6e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.128']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32635ad7-064a-47ed-8943-3239525407d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.129']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7dce4b2-f16c-41f0-adaf-c4b2430e37e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.13']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4482f98e-ec54-462d-882a-38efa3f6e672", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.130']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1454e2bf-001a-46f5-9716-56c56b679777", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.131']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77d7a890-40c5-4d90-9aa1-74c45ef056c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.132']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73e2ea60-468e-4864-8be8-41d0ddc60335", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.133']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e5c0914-c943-4fa5-bdb2-1561d65d23e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.134']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85373dca-fae6-4205-a723-142ea275fbc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.135']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25631c5f-6e84-4c24-a436-8fcfe4583ee1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.136']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b37350cc-7e8d-4baf-b38f-963ac7f9e346", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.137']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8f2593a-a8f5-49dc-aac4-0352d3980722", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.138']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a9d7e8f-4dbb-4d5c-8fd1-4454f430ef5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.139']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f41d51c8-c74c-4f19-ad59-9a972447496d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.14']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fc7cc4a-8bf8-4d8f-bf8e-09907de8b31b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.140']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44c111b9-88c3-483f-8c40-1f62e4086dac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.141']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--382060fc-edf4-42c6-a221-94c5d7bf7d8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.142']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d4b46cd-577d-4053-9ae5-71df4475ca11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.143']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59417241-abe4-473f-81b3-815a7ee65592", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.144']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc5a134a-29cd-4012-8535-1cefe99c973f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.146']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c353411b-f68b-4997-8776-075b2f872624", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.147']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bb3cb70-87d9-408b-ad24-69989b595015", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.148']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5264e44b-73c4-4128-bb5f-faedf9dfe418", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.149']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bc5ce83-6ae6-44d1-8343-f758849ef15d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.15']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4540d9e9-091d-47a9-9358-0129ce33a5c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.150']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e60a46e8-a621-45fe-baf4-e685545e7c3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.151']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4876eda-3566-4cb9-851c-741d663ce8d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.153']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d928659a-7160-49be-8744-6dd4f95a9b23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.154']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed9f1153-b3c8-4d16-a7c3-43bdb13f244e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.155']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a25eb1dc-29d6-4eaa-87cd-634d6c07f9ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.157']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a34ea61-4b1a-4a1c-86e6-f07ba714e309", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.158']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee0bdf42-1b3c-4fae-9a4b-87f6c61af8c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.159']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f272feb3-e1da-4105-b04b-e5128c7a8c51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.16']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1079034-d773-416b-aa79-879c7c0b4ca1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.160']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c004d7c6-fb11-42da-a5c6-43e38221eaa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.161']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6092b9a2-5ece-44b8-9b6c-bce1cf4be3b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.165']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef5bcc42-a1c2-4319-b2ed-31cd3a10d340", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.166']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d1e58d7-eb61-44fc-87b9-9cdef48a74ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.167']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ee4704c-df4b-4bd0-aa5d-079f1c42e7cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.168']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6effa454-c887-49f2-afba-4d7108b28706", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.169']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--161102bc-42de-4d02-8399-2a75280397f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.17']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a71c78c3-b197-4628-87d9-85fb715eaca6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.170']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8874e8e3-f106-4aec-9bd8-6e35e0c51dc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.171']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89925a50-7823-4c1c-a217-ff983b63c27b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.172']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7871c945-2e8c-4d41-a330-5f8f470ce84d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.173']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f290a690-0c48-4c45-9701-9466f1d9434b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.174']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6ef72e6-161d-40cb-b817-503c2f16b5ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.175']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdef5c0d-78bc-4a63-af72-f53be0f6f2ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.176']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0343b543-4d4f-4020-ad66-5310f5fdf2e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.177']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac5f7f0b-fbb9-468d-96dc-b07a6a55b124", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.178']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80920913-66a3-4832-a299-cd80d1d24a65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.179']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79c3d327-fb8a-4c8b-a03f-36b212811e6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.180']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75513ef5-5978-4d6f-a6a8-4d6143168ebf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.181']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d1eedde-85cd-45c2-9e2d-b3cf820df300", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.182']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc4a92b3-7778-4434-be7e-4185cdcc2fee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.183']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2aed6fdf-be15-45b9-aae1-2e1a016c2327", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.184']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56bab24f-7de6-42a6-bb11-165638c83131", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.185']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c97bc3c7-67a9-47b7-9657-907bacc4fd1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.186']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64d3b77a-0652-4226-85b5-8c74be486bd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.187']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69e2480a-75d9-4f6e-9210-4226d6054c18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.188']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b23bcf83-d281-4334-a7a0-72ebbc81e74e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.189']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3961e92f-7a88-46dd-8722-915e07edab39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.19']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c32bdfe-4ced-4e12-bf2a-be47c5229e40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.190']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5673681-041b-4f1d-a72d-5c23bfcea405", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.191']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de3d598e-6bf6-46fb-8693-5e84bef0b2ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.192']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8f32465-7752-4c08-af34-c9b887d0c331", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.193']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dce417f1-80c1-4f23-bf57-7771a1522b86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.194']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cc5c74c-5a22-4392-88a3-119216a0fa98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.195']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdedb4cd-3465-4794-902d-0405c5c20296", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.196']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc4bb1d7-2003-45e0-912a-5d03ab5ecccf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.197']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd3e2dd8-c486-433e-8d07-fa942bb67607", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.198']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e34f9c5-295b-466f-8e8b-19d9c2f4217a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.2']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9636c5d5-f7e8-4736-b6ea-789e34304779", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.20']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13277eba-090b-4545-af00-90f850c06f02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.200']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c906317-93fb-4047-a09d-ffcd84ef3891", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.201']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dc75404-5561-42f4-af92-aec887600960", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.202']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc7a784b-245b-4831-81ce-d96cc6a089b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.203']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3df5ec73-f0a4-4873-b0c4-18a1dc3bacb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.204']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75244b3e-2bc3-455c-859c-6e0233867401", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.205']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b267c35-e516-4f75-a73e-9173f50dbd4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.206']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b2b3472-7e80-445b-b514-18788bb585e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.207']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fffb7e2-0c98-4d92-a0b5-fc754434bd17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.208']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82be4f37-504c-4be1-93eb-3dce477b61f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.21']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0881ae24-08ad-4361-aab7-8d545d21e8cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.210']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--193bfe47-c14a-49d0-af81-c70e3a0a143d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.211']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4eb9ef6-96d2-4e8a-a652-42064d63ce7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.212']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94574a31-7d7c-42e7-b1e1-e5f97148ae96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.214']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--412bde2d-ed96-4e4f-9d4e-e67c84005aea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.215']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f72c230a-f126-47df-b77c-82529a206676", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.216']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80d51ace-453c-4c7e-b610-fa8281c0d55b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.217']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e439ba6-7862-4e74-bcee-21074bed5cd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.218']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ce4eab1-5aec-4f1b-9697-cb143141749d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.219']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eb10767-957d-4c87-9f9b-d30021758c5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.220']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13db6c3b-25cd-4c19-8720-566990824c58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.221']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f09bc852-17b7-4369-b6cb-281614924d0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.222']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcdbf4d2-028c-4a55-94e7-759f2d4abc06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.224']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7db023f-1206-432b-be7f-eacd71876fa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.225']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c56b127-7add-4944-aa29-d1cb95308257", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.226']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de701a6a-5b41-4795-bd5a-7bbd45f212b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.227']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20fb6215-b07c-4fa4-aa6e-f31e211caf3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.228']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6da2a93c-3249-40bf-a69c-2b2fad798466", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.229']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6bb5a34-1089-4ba3-961d-04a9fdcdc053", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.23']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3ef967e-9fa5-4066-b0db-c81aa72c39e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.231']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--632701af-0333-4c17-8a20-83f14a6395cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.232']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--defc80bc-38b5-4cd4-8259-49a192690213", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.233']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f857350-d5c8-47f5-bf7f-8e94f7014ba1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.234']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f29f1e2-3d3f-4f2a-869d-796830dbf2d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.235']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaa76a3a-3b0b-4095-820c-b7edf4b34afa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.237']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbaa42d5-5f24-4b24-b94e-9e1720b4c81c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.238']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2d46d08-9148-49c5-b6ff-9c9a85c3ff3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.239']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95f7fc79-368d-4e4d-83f9-8028fb63b246", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.24']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d52c408a-7bf9-4210-9238-837dc4ba9c6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.240']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51d1ba02-cad0-429c-965f-8ebc3f8db706", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.242']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11af89d7-9f21-417d-aa8f-20439a214f7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.243']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2c16e55-dbb2-4bfd-9c2b-72abbb36de8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.244']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--276a0475-cb73-4182-855d-1863de1229d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.245']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16dc27d3-3821-4995-8e8c-a83d3f60855a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.246']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0839c383-e579-4497-9fb7-b21be0828ede", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.247']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d255c7aa-21fc-455b-9f46-f1f69aa6c254", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.248']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bf4c51f-c40e-44b7-9df5-2942a9346a90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.249']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c104c13b-f50f-45c3-b774-21fbaaf3c01b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.25']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c807797-deca-4a71-b9ba-318774569803", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.250']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1321364-ac30-46c7-ac85-bde15652457d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.251']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7027b3da-57d4-440b-b349-ccb9543b70dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.252']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03e10513-8c1f-4d4e-a0de-50d2051411da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.253']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9cfca96-586c-497f-b604-52a84dd71b2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.254']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9be8a38e-65bc-43a9-864f-ccfbf677ca54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.255']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--496f413e-bc73-466f-851f-9c37d2881a49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.26']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc608659-cc74-421e-bb05-ac1b043a38e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.27']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0751073a-4140-485a-a236-57dfb8b49147", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.28']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8a6305f-3f2b-4793-a995-3a6cf9262b3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.29']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1f3e5d0-140b-4f0f-9fc9-dfdb5a8a0052", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.3']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--047c50a6-6330-4b98-a8d6-77a09edaabb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.30']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65f396dc-909f-46e6-9b96-cccc4e307701", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.31']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fcd7c37-e3ed-4385-a7b9-864230bd91d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.32']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--467ac19c-0790-47c5-82d6-f38a99cf864a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.33']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e9597e8-cbb3-4eb2-81a9-f3a9bc300372", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.34']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffa8b052-fec4-4501-b00b-1beefcd43f35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.35']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--218786f1-5d6d-4007-a842-40d6a3623742", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.36']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adb5b41d-946c-4374-8eb3-03856a5b2af4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.37']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56593fd5-7f01-47f3-a7f0-61e1a789c88b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.38']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c194e8cb-398b-4a9a-9225-02a4f71a41ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.39']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0e391c4-adef-4b73-8aac-4a6b186db383", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.4']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02c380b3-a47d-4e36-802c-801a61c05b44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.40']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77485ecd-e091-42f8-8fa4-17970abc0f34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.41']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c46c6af-adab-4297-84d1-d7e9ded79016", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.42']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08e35703-2558-42cb-86e6-10e49bf21180", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.43']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--437cf3af-3e35-4527-80b8-0144f78e83fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.44']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b23699eb-e2c5-4bad-b7e5-515e1a10e53d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.45']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--399411f0-5a9d-47ce-a380-17614bf33d63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.46']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c27940d6-6c76-44a9-933a-684887621c5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.47']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa65f270-3c04-41bb-94d9-7491a48d82a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.48']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b66e974-1d32-41c7-ab4e-e5e39ad7bd13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.49']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e6263bb-069f-402a-bc3d-743af35d3176", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.5']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86cc978d-c194-4bda-af69-209a88b73f88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.50']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cb9ccd4-d6c8-4bf2-b87c-88caf845d166", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.52']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--648bdb62-7513-4692-bfa0-3efde1b772af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.53']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b49e569-77f6-428f-a518-963a7fed952b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.54']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--379f74d5-3f6e-487f-97a4-a38058fe81f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.55']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--215f8539-23dc-43e4-9e1f-a08f5188ad55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.56']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--322932a2-2518-48aa-a0c2-015f3d2b73a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.57']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc1d0001-726a-4e38-93fa-8b4cac53a6fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.58']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfd9d3c0-589b-4f7a-8464-17131c2639f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.59']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98843b74-aad5-4dd4-845c-ea00a271c583", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.6']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3602e437-89f9-468b-8474-8a258e112e4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.61']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a42a3957-bf30-447a-b69e-a61c9b6a5ef1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.62']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58bee921-e5ee-4f22-b877-421c2dd3ff5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.63']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edd42e13-db04-4c55-9249-211fdcf0f134", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.64']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--590fede5-5b0a-49d5-99ee-23fbcdd01b5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.65']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5567dbf-b694-4203-b4d7-77831e86f0a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.66']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efdd5260-ca56-40c3-965f-43b40f755690", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.67']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac894b68-69c9-4e37-9797-ad35d525b12d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.68']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae944011-8602-4cc5-8c32-430c93f71326", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.69']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab5c2f78-233b-44bd-a154-fb494bdd4911", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.7']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f86d5bba-dc30-41b9-9ceb-63c4c9490af4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.70']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cc4f07e-154a-4ecd-a09b-e6dbf38eec9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.71']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54a16cd8-b822-44ea-954e-c781defe134f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.72']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f88e8448-d5eb-4de5-bea9-2f4c2aa511d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.73']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22f4829d-0b93-421f-bbfd-0924527fa253", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.74']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49e5aa6b-5aa3-4d5a-a92a-c0430758a044", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.75']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8c8ab65-c94f-455c-ad0a-95abccfa2e68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.76']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dea94e48-a674-454e-8e56-5744693a055a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.77']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e70c032f-d637-427a-b430-da2fe787e72d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.78']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d2853ec-d0c9-4917-b6e4-39fecf1782ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.79']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5040de04-6d0b-49a7-8502-42f2417196ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.8']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37b2f038-a9f9-4f82-ac5e-bcddabfbefa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.80']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--935b6d47-bbc1-4c52-b795-60718128afd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.81']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7b70e89-ce59-4ca4-a009-52bcbc709c32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.82']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a1a6ae9-5c02-4dad-9688-e04c6f6f06c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.83']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01a61f9d-0b93-421e-b34b-2df3af2aa886", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.84']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36826538-cf06-4375-9502-714ae8d1c4e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.85']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c2021bd-a7e4-4282-b696-63d303c000c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.86']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9e02d93-84b9-43b9-9ca7-1e431331a344", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.87']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1de9d32b-92d7-4d7b-a593-fa882c6f237d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.88']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fffc9d85-96c1-4b27-b597-7753f729bcd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.89']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0392cc7-66de-4802-bdcc-3c0124e8e4b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.9']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd486d01-3534-479a-9af1-0901fec32286", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.90']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fd4dd7a-cfa0-48dd-a22b-73d6db37a8bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.91']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6e34be8-6cff-42cf-8b17-25462568eb91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.92']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2c9621c-bc02-401b-a5a1-02bac50bbfca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.93']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83e10246-7427-492b-a234-03d0c1398045", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.94']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fce46367-426c-455b-90e5-1332e1ac4267", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.96']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f775c415-fe3d-4b2d-b4c2-5f66e1fd7fb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.97']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46670fda-450b-4ca3-8f70-f8c1a2508430", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.98']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20fac94b-882e-4a4d-b5f3-507831dea32a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.192.99']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cefa1142-762e-4288-854c-ecb82bafeadf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.0']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b917d67-b637-4b4b-9a6c-b21a143b9567", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.1']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ee284bf-a3c5-4419-ba56-24456024c98e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.10']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ea5d033-d7a0-412e-a389-6394052985e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.100']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a174f89-8b9f-476f-ae67-d161ce42dd20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.101']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ec61552-54e4-440c-85c0-e0b520771f61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.102']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03a8c4b2-ba36-4345-9b07-4a4adc1916c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.103']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dc16bd8-18e7-402b-987f-a4f519275749", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.104']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b44a9164-87b1-4adb-afbd-c43da95fdd1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.105']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9949340-0c39-4fdb-876f-273341fee7a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.106']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--911813db-1db2-4943-977b-0d80b5604273", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.107']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4210e5d-ec69-4819-8181-cd38fa2c2571", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.108']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e968de28-0227-42c6-b2c3-ce3998919039", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.11']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95fe1bb8-12cd-4b08-bebb-7ac240c280b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.110']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9c8744f-579d-4366-8c59-c7fd270deb07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.111']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9336d07c-2c3f-48c1-bbee-4f9677bd69f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.112']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cf64b11-7b16-414f-8b27-a9b52c20220f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.113']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe6b0155-adc7-4572-9241-c12d370ce3e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.114']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ece8c4b3-05bf-41f1-977c-178bcd8c3369", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.115']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f44986f6-08e8-4047-8b3f-1d784d7cc343", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.116']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42122f3e-f942-4d8e-b1bc-668fbf8f6552", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.117']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca04230d-4741-4954-a16d-e614ab978f1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.118']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--662d2575-8ceb-47a8-ae2c-00bb76463d51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.119']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e3e7e9e-1a2d-4158-b314-efbd1043fc42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.12']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01562dd5-f233-4c70-bd4d-e1c4556816f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.120']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8226d19-bb0b-431a-bae9-990150fd7bfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.121']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e03f401-7d36-4003-b39d-a3c4509d147b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.122']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f1567bc-518e-4cf6-b533-d43d9c8bd22d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.123']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7513c494-20ec-47b7-8c7d-8269a1f229ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.124']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5fdbc67-fd13-4465-890b-783329e73d48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.125']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--481dbb3a-253c-4493-b8bd-5003ec8b1cf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.126']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72720593-1b9f-4872-ace2-2e361a7e24b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.127']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02ae3ae3-5d09-4096-a0e1-dcc08015a56d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.128']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eb9c593-2f93-4834-a3bd-74ec91831543", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.129']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b23babf-1492-4b9f-80fa-5402819129ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.13']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--256eaa7f-a495-422f-be36-11d4d82f787e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.130']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27e7e0a2-4cc2-406d-8f70-22d423df6a5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.131']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3b1c732-6ad7-44f1-bf2d-998f91b0cbbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.133']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3339687c-ed84-4475-b1c6-173581f67077", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.134']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88286622-725b-4b48-8b4b-6a378814ea36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.135']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecec251a-0a17-4871-9f84-d499d900fe4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.136']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce955ccc-fb8d-4163-b781-126e22875924", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.137']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--760fad6b-b3fe-4e16-b141-e838e9c7e5d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.138']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b586cf5c-f425-4000-9885-b835dfdbcb13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.14']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--001c5cb4-e8e4-438a-8b5a-00376f66d30c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.140']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d046f62f-8c3c-4ad3-8134-8ea0edea3ad0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.141']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be056893-5642-4b86-9b63-f1aedc552902", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.142']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08cd7180-adec-440f-8e59-26a1449718f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.143']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f20ad85-7628-4681-89fb-f0e668ae8043", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.144']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b03e151e-0174-46af-9469-6869115e79f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.145']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3037aafe-b644-4cd5-a898-7cc23410c079", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.146']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f952844-2759-48bb-be73-a9b2957e664e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.147']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dc57370-3407-4234-a3ef-69dbb1e16bc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.148']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86b1b087-8aa0-48d4-9289-29a9a5ed5f07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.149']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25c8ebbe-3fca-4d34-963f-c84a77b088a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.15']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cbc21c3-952b-4e55-a5bf-4856d27d6786", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.151']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0895a5a8-1fe0-43d9-81b3-9db18f512a2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.152']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fbdac93-6011-444b-b1b1-a4633f43e48a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.153']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1d31d5e-2cc8-4baa-ac29-5700b250bb41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.154']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a238bbd-867d-4fc7-938c-6214c9109c83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.155']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8114fe1-66c6-4c0b-a3f5-299d039152fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.156']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37134b20-e7bf-4ee1-94e0-31dd6c8a8d5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.157']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54bf2b0f-f3e7-46fe-b2ce-48adb208a2fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.158']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c29c660-d429-4b93-b567-70992e662b1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.159']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41533380-a9bf-45eb-8ac0-71679933f73e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.160']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a3bb9a7-4a77-4862-ae27-bb21f9590557", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.161']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90c59cac-70c5-469b-87e1-58421d947063", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.162']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f30dac3-6c08-4224-8772-2075b2b44c8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.163']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e58afbe2-4ad8-42a8-960b-e14687b3a54a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.164']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--325fb119-5e69-4826-8fb0-845901aec057", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.165']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e5e49dc-88c6-4ee7-9250-686cc32612aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.166']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--077e1e95-5971-4c64-a246-b16965fa91bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.168']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeb13824-c243-4cf1-a297-8c444a2acace", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.17']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f5a945c-9c20-4ae2-a1ac-c5218b1088b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.170']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a03a3db8-102d-4d8b-ae27-10c2c000ccf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.171']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--349c3b7a-393d-4b9a-9695-5811e097a87f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.172']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d86aef21-bdfa-4605-968b-1fa054f95f84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.173']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec96ab5f-e574-4fd9-8761-51bb2af3e380", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.174']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--649705ac-52fd-4b84-8269-8d070d091fa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.176']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71332f55-4d70-4d51-afab-3918002ad569", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.177']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--860b7510-be20-48af-975d-66b11187d04f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.178']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b041fa10-4658-44bb-aaf5-9ecf413fd460", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.179']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56f7290f-743f-4cc1-8128-be4a015c04b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.18']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d9b9c4d-cb15-42c4-adca-84bb3f5587de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.180']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17163849-41f2-4e3c-99d2-6abe1b7fd358", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.181']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a7ba721-28c7-4e6f-8661-b5310d2a8820", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.182']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8a1c2fb-3d4d-4fc4-9a36-03401d549a79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.183']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13af4ad7-d156-4ad9-933d-8e80a1e04f5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.185']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebdefc5d-8236-4c82-8d58-021dd00ffb8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.186']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f660373-edc7-4a9a-ab7d-acb5a7d436c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.187']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3f34dcb-10f6-4ce6-9555-7878194e0125", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.188']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a70c1f2d-d257-42ab-b8b3-e30f0804b929", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.189']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--491860a7-cf32-44fd-8559-d06b32185289", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.19']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd5a37b1-bd3a-48a3-925d-d1aadcae158d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.190']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f251bef9-849f-493f-8dc5-6f8e011783f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.191']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--254335ff-7dcb-4a5d-9b72-3d1334d50993", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.192']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75e695a3-6755-4a97-ba55-3d53b3e53198", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.193']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6373ecf-3684-44f6-8a43-f721f4a372d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.194']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef8b3fe4-acd8-4cee-a3d8-35eb50ffae2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.195']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b5fd2a3-f36b-43a0-90d3-af80b780acd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.196']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e16aa475-643a-4eb7-9864-6e1b917f8537", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.198']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8c5f2f4-0b8c-4e78-9b89-59cec71d5b39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.199']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f42e038-bc45-4f9d-9304-97f021e4bb33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.2']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a39366e9-3f12-41f9-a988-94706b5fbc24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.20']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81ccd41a-3a54-43a4-b245-5933432fb12a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.200']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87267495-a950-48ad-a0c6-3232a23ff536", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.201']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f4e1b2d-92fb-4b0c-8dee-a52821c763ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.202']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b035805-d4df-4eb2-82a9-ca252402e4aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.203']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e004d8df-1578-4a8a-b516-f5b536d22402", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.204']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d64a14f9-dc91-4ca7-886a-7b337b9cbf9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.205']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8acdfa6a-e3a3-4bfc-9723-1eea3780bb0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.207']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90e42751-f5ce-4838-9cc5-9e862dca5ec3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.209']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efe7cc24-eb68-4841-81f5-28e458ad7a04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.21']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b5c58ca-45aa-4a76-8e4c-0acc1519da80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.210']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1e8a3e2-9925-4ca2-871d-22aedc71e15d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.211']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ca50c5b-3d57-40ee-84b5-4a87cfd8e3d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.213']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74b828f1-3ee6-4f60-85e5-64b4f9694a4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.214']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2eb6dcd9-dc05-4c8e-817d-c640d115784e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.215']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9892f525-2deb-49fd-b1a8-3a0b30814f8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.216']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba4f9ace-1634-4c49-ae20-4605dc957cb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.218']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0abfec8c-7203-4520-ad1a-7708db70cdbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.219']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5cf1154-9945-409d-ac5e-f9e5f67593be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.22']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c180af1-1eec-414b-accc-c45d5a2c67b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.220']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6772270-243e-46fd-a34c-495e68e5cf17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.221']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a60d66b9-c5aa-4b71-812d-c6deef34122f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.222']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d4c4394-ecd9-47a3-be68-0657e50c09bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.223']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c6befa2-ec33-4392-9ac7-cb9cb4d09d56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.224']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2746c76-d80d-405d-bbbf-f9fe4060544c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.225']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c91e8648-0476-4364-81a2-a3d8cfa724bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.226']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c09360d-f868-49bd-85f0-742d2f839dda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.227']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68270faf-9a1b-47cc-985c-1aa712e07db9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.228']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61a5b98f-3d47-411a-af1d-a102560c79ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.229']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73dc9fdb-d252-4b37-a554-599a528e724c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.23']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4040ce63-05af-42f3-86e3-a4b911ef4753", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.230']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b316308e-aa05-4ce3-b09a-d903c8c8c1ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.231']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--006bb4dc-1ebd-4aec-98b0-b82dd6527c07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.232']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7525c596-7720-4ff6-a9ee-11738213da6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.233']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b70dc0d6-7539-45d1-a276-5bbe1615c0d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.234']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04edca95-73ac-4639-8aca-1ce046d5def2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.235']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54d6201f-1802-4fc3-977a-0b8782f746d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.236']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eed0610-1c32-4b22-ad88-087d1fb936c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.237']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb102e33-7baf-4d9d-a5f1-a014172f9fb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.238']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--469fb52b-7eb7-454b-ae99-338db9f43a67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.239']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--957e4b87-e770-4bdd-b9af-5671189f35a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.24']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eb13d54-dfca-43c5-9916-e336c6220b98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.240']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1a57c9d-9d2d-422c-8ba6-5ba30b46ab2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.241']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9bd3cef-0d3a-4b5f-bf1a-6642a4b47b55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.242']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf1b527b-c702-45be-bf57-8f68f20162c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.243']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b566801-b658-46fe-b1b6-7e7ef3704955", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.244']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15429565-70f5-4c68-aea6-41da1fb4a982", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.245']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd423f54-db34-4fa6-b03c-1b8db1a273c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.246']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75dd8268-de99-4fdb-b070-0631a71966b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.247']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a4b1f2c-b13b-4835-8a91-be7af4c4bd9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.248']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--890d95cd-60aa-4c8c-a08a-8a071402923c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.25']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2258808-6d79-45bf-b11a-f6f79e531545", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.250']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab210931-16de-44cc-8dc4-d0bbd62f67eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.251']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14a261d1-1800-4bfa-9ff7-d51fcc89d62a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.253']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dec1b372-4062-4917-806e-836478893efe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.254']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--650b7e79-f6c2-43f1-8dde-f3e197c177ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.255']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--158d17ec-9507-4b4f-b6ef-15107ef6566d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.26']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5017c26-0acd-44d6-87ff-177007b28695", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.28']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c24cfbd-cb4f-4a7e-bd64-163bfd7ce5c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.3']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9d429d6-5114-4cc8-ac99-cb782e9fcbd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.30']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b88bfa90-e6cc-43f8-be58-ad92cdf835cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.31']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f18bf3c-fb7a-45b2-8768-750d80bfbcd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.32']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77a0030d-9fe6-4eeb-9d84-fb4a3dee3364", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.34']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc77f3db-5e8d-46cb-9c34-ce5a190f3a57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.36']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9b77e2f-9271-47bf-9c08-d792f16d1976", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.37']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0defa40-6ded-4f3b-a1fe-734520cf78fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.38']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0974c26-4a48-409f-b8b6-eb0d7135cab9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.39']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e374ff1-e845-4474-8d9c-9fae6b67478e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.4']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6ad8651-10d2-42bb-9ce7-6f9d283b7a62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.40']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d59ddb54-b5bb-4572-8ba4-e22763ae5f1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.41']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7910293a-7a7a-4589-a675-a6b0a33cb708", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.42']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1a2535c-9aed-42fe-b686-f2331b265760", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.43']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--373c4405-ef39-4ace-854f-f06685442a7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.45']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2c1547b-6c31-4418-ad10-9d5cc7376a86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.46']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b5557ae-24ff-44d2-a57b-a54743514d9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.47']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74970dad-916d-48e0-b7dc-a6a0b264ad43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.48']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1689e818-e88c-4c85-a9e8-dfc16aa3b218", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.5']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19121931-6930-42fe-a8da-732b0647877d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.50']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f7632fe-c7e4-4f67-8dc9-93014023877d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.52']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5c9949d-7e68-49c4-9e18-7abcf79f7600", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.53']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86f01857-35a1-468e-97e3-39b1750cddf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.54']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41f1b581-8134-4657-947c-ecde213809c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.57']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac14c56d-3254-47e2-8102-8a49dd0d6425", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.58']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10e89117-ff30-4339-a4a2-7c4af5c73b3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.59']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--537c92c3-5ed3-4513-955e-4e85f1b76095", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.6']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65b06e3e-bba0-4d2c-b159-47ffdf09015c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.60']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96efbf61-aff5-4bcf-9a63-af3f96b6fe9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.61']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4428c9dc-3a73-4367-8609-eaac0b38f1ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.62']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29d649c7-54f6-48ef-89fc-00fca681decc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.63']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdec7e4f-61bf-4980-babb-ada3645a61ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.64']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc5519f7-efc7-4468-9d66-03489454071e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.65']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab61f8a2-6a35-475c-85cc-1c678e1215aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.66']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9157948-ab17-4a69-b98f-7a744900a20e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.67']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--200203f2-a33c-472e-b963-6d12c1ccaad5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.68']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--628763e1-3cbf-4037-a1f5-d9294ccfe1ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.7']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfdd172b-36c4-4e4d-863c-98f650653b15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.71']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0edfc7d-79a6-4314-881e-2d194cc571e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.72']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8654873-ffa0-48d9-99a4-5b5f7d5e9c1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.73']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20aa87de-86c5-4c6c-a0fa-6b5017888754", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.74']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bc79de2-dcc7-4d7f-81aa-a9a3bb928747", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.75']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b26b648-cfd5-4a2e-84ee-1fb742e39c61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.76']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0836e51c-8fa5-48f9-9c5e-877349ff3e5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.77']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4442c523-a793-4985-9027-41d4046bc3d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.78']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd513fc9-f6e7-4632-bfb9-26709e6b41e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.79']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a95bc85-8e09-46b0-a223-a42ce774c166", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.8']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98473b6f-0d72-4cfd-a4f9-7b524ead1055", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.80']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b525410b-a2a4-4cd1-9572-bc32a6a66bde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.82']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4712348b-5afa-4cd9-accf-3b4cda8f0602", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.83']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44fa9601-d2b2-4d94-b389-f544699dc74c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.84']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e6d8341-514a-4b33-9b26-f79a449cdc5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.85']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7a79efb-ecd2-44ad-91ae-164572d50f48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.86']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b32f1ea8-d955-4c77-84a7-3c61cb37a3b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.88']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfdedf2d-5220-413e-b00b-5d4dbe833f89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.89']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de30d5f9-46b5-4529-a1ff-26387a40e0f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.90']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51c214e9-09de-488d-a3c5-ec2d767ed436", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.91']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d38b1081-ef0d-4da7-96bd-397c6a2e88a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.93']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c9343aa-dc73-4e8b-b97d-23ac422956b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.94']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe9b03d8-800a-482d-857a-2715fc7de6bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.95']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6f99174-4184-4e74-ae00-c19c4105fe06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.96']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ba5f61f-e808-44cf-9c0c-3ea0da236868", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.97']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b0bde42-60c7-403c-bc48-168ff0c08967", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.193.98']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21a4ef87-e251-4205-897e-4d3acb276213", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.0']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99631c3f-c904-4122-b0c4-d6f3b2e63cd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.1']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea4aba60-e685-4b76-8143-439558b15ee5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.10']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaf95293-5adf-4d35-8a2d-3d1df2d55887", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.100']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ef9f8f6-2105-486b-a15f-c3674be12fef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.101']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d9b0af6-7409-4dfb-abd1-3312e0be48ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.103']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71d6f58c-9e37-4419-87b5-08800fdaa037", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.104']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--949e71b3-64a6-434f-b7fa-cdffdd777a66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.105']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec864010-1ccb-4401-94c9-7b2d94e4f302", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.106']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2614223c-6ae9-4aca-96cb-fad086840f46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.107']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c625cc33-be16-4e7f-81e4-93a9220228c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.108']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f5731c0-b18a-48f3-8581-d54758511c86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.109']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--974995d3-faea-465f-985e-7e7507682e6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.11']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50357909-0207-4b40-bfbb-9fab1dc614ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.110']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6dc65e6-5457-49b9-a0b2-e51b7f824f0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.111']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9be7d84-52e0-43bf-9b4f-099da13edfdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.112']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--477bb785-24ac-4edc-94da-ff3f5ab4754b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.113']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d5a24af-2e74-49d3-934f-01a6eefc1f7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.114']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe24214f-19a0-4b6a-9590-8caa4befdf1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.115']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5dda39e-1861-433f-ac1a-b9f0eb211db9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.116']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d98449cf-f214-4b18-bd19-e8b666d4c326", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.117']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--119548d6-756d-4e5a-9675-0d04323e601d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.118']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be70d3ec-4e19-4b8f-b41f-ee824117ee42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.12']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc9d3403-eb60-4da3-9ac0-59c48aec9185", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.120']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baad8939-5368-4b3f-9312-e5d8f183cf27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.121']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33717896-631c-4b67-bdba-9eccbbd43e64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.122']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2d40a54-ffc8-4111-a310-14e606e94c26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.123']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89fe4709-487e-4331-a7f1-cdd8117ad01d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.124']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--756bfda8-d053-4614-b080-6d94ee7d9374", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.125']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f268462e-5248-486c-aef1-9dfd1fde7669", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.126']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--998921c6-f5c8-4526-94a0-3d8494519ec2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.127']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38ae5954-5f35-4852-8550-a8b970e85d24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.128']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--166c6086-3c41-47aa-bbc2-7748101ca57d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.129']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0213d093-1548-415f-9664-569601f6e973", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.13']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0ce88ad-5402-44cf-baf1-a791a8dabc53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.130']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d5b905b-d6b6-4583-afa0-2ce9b05cd8d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.131']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efedb033-c374-4539-b770-a8fe32c2102b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.132']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--691eefd6-ee24-44d7-adb0-afab4f1f6f51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.133']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c68d0aa2-5c1d-4f95-b685-f890fd6a5d02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.134']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7aef45fe-39ff-47bb-9e33-70e2fef4476d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.135']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57d7788c-b391-44e2-aa5e-b57b65f8e7bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.136']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b549d6fe-183a-49f4-a2ad-42ad73bab715", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.137']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff4d9f9c-751a-4f60-ac53-ac9b830d0c74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.138']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ca1edd1-0bac-48b6-9aee-20817c6b64f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.139']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--526c24a1-8a76-4c7f-88ea-ba1b0dfe3b39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.14']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9ae0fcf-fff6-439d-a4d9-74808d1a8e75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.140']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42dfe6b5-5e15-43fb-969a-ff574373e1ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.141']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2377eb99-6902-43ab-b2b5-8466357faec7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.142']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4136162c-8d91-4d34-9a7f-fdb8f0315208", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.143']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--903b0a75-3d0c-43aa-aa0b-38f16274ccf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.144']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba91adb5-5580-43e2-b228-aace6690d7d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.145']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dadf1f8-2337-4ea8-8980-bbdbc44a0949", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.147']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c12d4fd-28d0-4be3-a66f-bbfc81f00b0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.148']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54f0315c-bc46-4325-96d2-46fd24d99469", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.149']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2daf27b3-f4d0-4b98-9720-e3cdbd60872e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.15']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9225928-afb4-47b1-a86d-e1ac65639bea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.151']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f667221-4413-4a20-8e3c-456a0f3b876e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.152']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--813c1f10-f09b-4db8-9d12-3bcd120ec82e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.153']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c00568d-1ef3-4e39-8456-45efd4dc5faa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.154']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22a4135c-c5db-4b11-be72-a054593e8cc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.155']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67c360d9-8c22-466c-8c6c-56f1ded39cd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.159']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb7dcf84-54a4-47a4-b175-cdfe09e2e33d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.16']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa5bf798-e458-4dcb-bbee-557376ec3a57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.160']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6737c8d-31b0-4dc4-9c9f-6d25b8791e1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.161']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41c881ab-fb8a-4069-9d6b-6764dab5f537", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.162']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78b4d9ed-ae6e-4a31-af21-4a7364d6c9f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.163']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--190766dd-0262-4d0c-8f5e-0d648e292345", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.165']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6072430e-a2b2-4af3-bff8-61aafd98cc04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.166']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c61076cf-982d-420c-b0ca-e5b9fb698c92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.167']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c164c5c1-386d-413c-8980-d726bc608226", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.168']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--294f257a-1a94-4c6a-82f9-f70a09643df6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.169']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abeed735-fdc9-4be9-bd2f-18ca41d7b82d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.17']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c24aad0-bb60-42a9-a380-7079f5062421", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.170']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f00c9e0b-ea64-4977-b860-f383cd5af53c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.171']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2fe8f61-3f8e-4d40-b410-59744c999b1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.172']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c078e800-cc42-4718-a8db-94c8e3414738", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.173']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29f4d04c-0c9e-45ec-b01a-b2c019e55722", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.174']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54becd69-16c1-4826-9a4c-471e211b62a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.175']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c258db3-e2ca-41ef-b9d2-07db74ae1b25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.176']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5927455f-d5be-4cf4-ba13-61b480f3a7ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.177']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--334d129e-3520-48ea-95c3-726d74743b8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.178']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aedae914-e30a-4b87-842f-2b422705a274", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.179']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1c41353-5c1f-42bb-bace-a6e85406a8ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.18']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44d7acb5-df92-4e0f-92d5-93c89f2b61ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.180']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c38b1579-e9ef-4302-926c-9d3ffe821805", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.181']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9faa7a3-94ac-4844-860e-26fb75e977ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.182']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1448582-ea62-46e2-8740-aecc5e0fab3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.183']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b1980a6-c192-4a38-8af0-f891fe1049a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.184']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbedbaed-b79e-49b5-86f0-41b95a94bb1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.185']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30030b64-d382-4ff7-9347-6d67e3496879", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.186']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1566d6b6-5b76-4f72-86aa-f987a38b13bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.188']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--917c0f82-ca44-47e2-b119-9412bf95e22b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.189']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--434425cf-bd31-432e-b232-12445117b5e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.19']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e33b1d1-0546-4f90-88a0-b80a81c806f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.190']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd974db5-6f03-4039-aa32-5f4b2717f95e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.192']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a80b757-d816-4cec-97d8-c2da7f8f4f5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.195']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2947bbde-02ae-448f-ac5b-4fa55cbae7f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.196']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--315ecae0-e9ea-498e-9397-be99be265433", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.197']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83e24c23-3702-4cca-8cea-fc7751276c7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.199']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdd32144-9c8d-46d4-aa72-d02b9e662b31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.2']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9a42812-46fc-4275-8fda-7a0175a09dd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.20']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4063c07-9a3f-474a-b8e3-5778310525ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.201']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99d084f6-1a5a-4fc5-bdde-2ef14ed4aa74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.202']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--116f5b6b-4b89-4038-8c13-6aa4d9c5db55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.203']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccc68ab3-d622-4bca-abe2-a02f40a90304", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.204']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfebbf39-c105-4969-923a-4de49a319103", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.205']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b4a9a16-95ed-4132-b516-920ce3454579", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.206']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--669d5e9e-62d3-4f97-8f86-2f018fad8253", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.207']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a7314f4-cd8e-4e1b-a955-7af9857a5c64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.208']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0984ee3f-c29d-49d1-a532-28b0ae10114c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.209']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa766ca7-9274-4d86-b990-fe5675583779", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.21']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8d46172-27fe-4806-a608-60bc62b0960a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.210']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e20ed38b-332f-49d1-be5d-ed6800c9a5f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.212']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2083d2d-0a75-48ef-a300-ecd1cefb4a86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.213']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9f3fe83-3652-4d02-a83f-07d98bb33e36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.214']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c918c6b-e7e9-4091-b2d1-261738f0a672", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.215']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a7ece9f-ba9d-43ab-8c70-48a6abba88cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.217']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db9cc94e-d4cf-4010-a5f6-39b54af34b18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.218']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4af3c7fe-f16a-416d-9ad6-4f1d69071f72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.219']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f2371eb-a894-4d31-b20c-3f3115473612", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.22']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94173fe9-0a39-4626-b08f-693f5cf713ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.220']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55e8c86e-3569-43ca-8cbb-73ac92250abf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.222']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f32db14-4244-49a9-8ad1-dcc0366a5f8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.223']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e764fe7-f288-4bf5-9ce5-4c64f7397a42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.224']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63cc6d13-b36b-4cf0-9cca-e1447014ac07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.226']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ef1689a-769b-45d4-8cd8-f05fd5e7d3ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.227']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85c4f087-cfab-455c-9585-d1932b80beed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.228']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34e2893a-10c9-4f0f-af26-db0a0e29d742", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.23']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fae3680-b23e-4c8c-bfe5-42c0e8f91ba3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.230']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9109fcf-f9d3-44a1-8234-8f9362b740e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.231']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f71f10a9-7352-429f-a5ca-5cb341dda107", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.232']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e2da92f-8ea2-44c8-9254-9ff3aa7669c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.233']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1e27171-7673-4476-a415-2e8bd553ce65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.234']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4f03e0c-54ad-4529-aa07-4a57e4ee2a7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.236']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25476aed-1bdb-403f-bf46-cb29a3de35b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.237']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--707eaf91-ad4e-425d-a3ea-dec4deffd0d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.238']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05b25f18-fef8-438d-a3c4-06f6791c52a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.239']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0520a555-b418-423a-8e66-f7b8c735b17c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.24']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38ce95be-cb58-4ca4-b532-296770afda87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.240']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--110cc2d5-6e26-4daa-82e2-cf95f2193a98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.241']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4dedc57-d663-45d2-8658-cf67077eeba8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.242']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d278698f-9709-4bc0-a730-74d38fc1447a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.243']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25f2c4c8-7f6f-4446-80b5-d6d4b8f4c1c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.244']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc391b41-02e3-49b1-b22a-3cbc77e830a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.245']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0f2270a-5dcf-4c79-bafa-500ade4e0e1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.246']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57c3f570-29e7-4611-a0e1-62c341d7b03a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.248']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d67613e4-c677-445b-a923-521571b1a27b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.249']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bae6ec5-def2-4742-8b6e-f4b3bd747312", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.25']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a67f3bea-8c29-45cf-bee8-49005cc58e72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.251']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43743575-ddc5-4c01-9905-b14835c63a7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.253']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ee705c7-c276-471a-b9c4-805ca3f59017", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.254']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fc6b886-9b42-4ec0-a87c-a95521bf51ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.255']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--793c542c-77a5-400b-a483-4e6d723cc7b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.26']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c8c63d9-c42d-47fc-be54-caed7c273308", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.27']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2419fb91-c461-433f-89fe-50e41759dca7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.28']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71259005-14fb-4051-a7a3-18ed1e38a74a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.29']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--048c4315-e2cc-41ba-b5e0-7e2f39fd20a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.3']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdff9f91-726c-498c-91fb-341a6d308788", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.30']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c985f60-b77f-4e45-824f-b058bc055bca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.31']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b4ad302-37ef-47d5-ad36-96a476c15120", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.33']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe8f0a53-b79d-40c6-b626-d98883d5a96c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.34']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4e93a5e-9861-404e-baa6-06d815161314", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.35']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cd53e21-86e3-4f60-abc7-fc357f94992d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.37']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32494e66-823d-4bbf-a5d6-d42463438c5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.38']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3e38585-6ac5-4e41-ad54-bdfe99feb1a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.39']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40aef310-11e7-460d-98b7-adaecaab0eb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.4']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--638a9d02-97fa-4221-adb0-27083fcfe663", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.40']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d768394a-0f70-49f7-b3cb-d7e915cdb77d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.41']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbb67f6d-aabc-43d6-aa61-cf6ced5c8f68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.42']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fc4792f-4c27-4c39-b0c4-76095c03c66f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.43']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a8a6774-d5d4-4dcb-a137-81f988d65c94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.44']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d02ff8c-b19a-4be1-8df4-b7afdb188bf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.45']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a88fde4-1020-4339-85f1-cd68cf318f08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.46']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11bf1d5a-9bef-4edb-9c7a-4d9ed07deda7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.47']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--298a0a6f-dffc-4596-9e5b-d3abc8dbb6eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.48']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae2b6246-377c-4db8-864a-0f5970f344b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.49']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a399db28-9d79-4a70-8b85-8d8eca807ca5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.5']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fddd5e72-e7af-439d-af36-df88487a66c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.50']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4582fee8-9847-4cb5-a5a5-935fdaa0f61c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.51']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03b37887-4063-4291-be64-f539e5044254", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.52']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d182873c-0b0f-481f-9011-28672ac4d8c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.53']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ec88202-1aed-4c01-bac2-649cb22a7bfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.54']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--954ae547-40b5-424e-9276-bf132dfcc6cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.55']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a97ba4f8-aec4-4739-8e55-a474dfd8bef4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.56']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--408b7536-bbcc-4bff-9380-7ef8cae683e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.58']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75993d05-c112-4624-bb7f-77ffeb5cf0fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.59']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40842b9b-f1bc-457e-8353-1f23630d2c6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.6']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0f041b9-8698-4ac2-9a71-7b2cf5020f81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.60']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--086a293c-96d3-4f15-ac7d-ea2ee94008ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.61']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbb70a64-234f-4b4e-9ff3-56c45efad2a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.62']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fd76f4f-7de6-45e9-84b9-6ac387edbf36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.63']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cb1eaa0-5074-423c-9599-e6ade893f4ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.64']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a394131-ca51-4fb6-a4e5-39982550a482", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.65']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61b10283-3077-480a-88d2-36f42a6a4f0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.66']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--139ad1cd-60a9-4816-962b-1b150e34a8c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.67']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f420c4b-baf5-4fe4-9893-39e63f7b8d4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.68']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--618739a3-4a02-4437-9971-951f2325fa65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.69']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f44d361-b900-4717-93c2-937ce1fb4c8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.7']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acdaf6d0-298e-4b65-a557-965275e15082", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.70']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a200913-f41e-4b42-9b99-c2b996a94e83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.71']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d600e876-69a7-410c-8be5-302049e4f186", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.72']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f566e07b-9f3c-40b8-bbdf-d6b6e73bc6d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.73']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4203262f-7881-4c1d-8a08-0c6100cdb8ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.74']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51f3f63f-f684-4510-8485-041391c21107", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.75']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3fd1d19-82ec-449e-bf6f-59aade308237", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.76']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f02facd4-bf59-4e56-9673-e2d67bf49b9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.77']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--503ed7f6-c446-4d16-baee-c73474922841", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.78']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eba127c-3339-4e47-bac6-eb08090e7958", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.8']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d12f4fd9-5e97-40b8-918b-ebaeadba4d55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.81']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25205dd1-8a4c-4fed-b07c-cbdca494f3e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.82']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e39228c-ff67-49b2-9c9e-f2324d49b4a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.83']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9073536d-54ce-4ba7-a527-c9e0d9024ad9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.84']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2766a09-639d-47ad-82d7-bce73e57d463", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.85']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ec2cdf4-729d-43e6-a513-eeefc23beba1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.86']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc2b85d1-708c-4e11-802d-986b30b7c519", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.88']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32de8671-8893-4a6d-a5e0-b83023618cb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.89']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b8a0aea-865d-44cb-92ae-c35f6d4b81ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.9']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--499be84e-fb4d-42e0-a5ed-a6d1a0750629", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.91']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e70d5c1-403e-47e0-b3dc-d22121fea7bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.92']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee289ee0-7d06-4a40-8d3d-ffc054f930f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.93']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83f93aba-2854-443b-bbd8-c3cb61a4542c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.94']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70407963-35ee-4932-b25f-511bbef6f018", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.95']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3a73a03-bda2-450b-a565-c96bc04e808d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.97']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d86bed25-a296-47f3-95a5-2cb218ab3887", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.98']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05ea0051-1db9-4666-a0c1-1c27791507fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.194.99']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b58db6af-ea5b-486b-9a6e-186807b9c732", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.0']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15e660f6-f23b-496f-8c13-ff890c1ffb49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.1']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b09b4cba-be41-4928-b53a-63bcdd47bf2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.10']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3bc7dbc-a08c-4993-a4ee-b7bd17faaf39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.100']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f63b89be-01a0-44d2-ba2b-f219a110db89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.101']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9a04b20-6b3a-4b82-b1db-2fad27b61e61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.102']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37346658-9257-4b04-b245-8d8ddd701c53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.103']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94a21903-894e-419b-9270-7e3eeba87366", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.104']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4deb6ecf-3a17-4b76-9bfe-8559081d6d6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.105']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70b25b4f-23e6-40a4-a0a8-b23dadb329b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.106']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b62ccbfb-bf8e-4eaa-a2b1-a2c63fda3f7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.107']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4de4e510-7248-45bc-96bc-183a659f32e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.108']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12359b63-0d77-445f-a27f-f656fbd1ba7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.11']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff7be909-a360-4d44-8fd8-127885eeb285", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.110']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17965daf-d72d-42f6-82f6-6c031a99afac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.111']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d38435c-5706-45df-9293-804f13764767", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.112']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a949806-160c-444b-9008-693234985396", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.113']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7feca234-6462-4431-af17-3b7c7c96e27d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.114']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d60ae1f-8427-43f6-9768-f8ba041713a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.116']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01a6b791-eac6-4ace-a58f-e014a6477c82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.117']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2597b2b0-180d-4c27-b913-b7b05151f4c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.118']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a3b2905-70e0-4c85-8c48-1f73c88ab8bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.119']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c8e87d6-073b-45db-9f65-f16d313444dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.120']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfafb5a4-d53e-42ce-81c8-4109589aa2fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.121']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a4d72b4-6a97-406d-baae-8278e445ed07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.122']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74446175-4568-4038-b6be-805506bf610c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.123']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9f66ec7-1ea7-4628-a7af-8944bd852895", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.124']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9554ce7f-8759-483c-bcc4-53f0c6b038a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.126']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cefffdb7-e874-4301-84e0-d37068f0dd2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.127']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a146107-8563-4e6d-aa88-504258bb4aa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.128']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65568d77-4350-48a5-a3d7-6aebce28c726", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.13']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c3dced1-3c3d-46b3-bf86-b6d495117a50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.130']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9f35dc1-57ee-4cba-8756-5d74ee6a313f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.131']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d22ecc85-e2e5-477d-9cc3-3685a0fbf461", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.132']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85653e95-138d-406f-be57-9e585a05ecc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.133']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d228e21a-4f88-4374-9305-fa7e44c33518", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.134']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89b64b82-616c-446f-976a-127ae7613d94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.135']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3ca1a7e-e024-46a9-b28b-2c9766629129", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.136']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4211fdc8-b8f0-4fa1-84a0-57259053163c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.137']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b7a8417-c902-4495-845c-6ee1dab58f88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.14']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--546015e9-d81a-419a-90a0-e2a69905f06a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.140']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--267f27a4-d125-4fe9-91d2-fe47e4a9a7b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.141']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15dfcb43-50bd-4fdf-b8f4-b10a9fafced7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.143']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed74361d-9c4b-48dd-a152-892bb71d6c3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.145']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d60a6ddf-4fd7-4542-9182-a87064700233", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.147']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff009a39-2308-490f-ba20-91d8f76bf0fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.148']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aea8cad6-51b1-48f1-be7a-51dfc28f0aa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.149']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf99084d-a4c8-43af-a1b5-b8fa9423ae8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.15']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f035f251-a4c4-4fd2-8245-db8e82cfdb2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.150']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77551d01-5f8a-4135-a7b0-e59f9bd18ad4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.151']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24789a88-a45c-4bd1-8c65-0b0654d2e765", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.153']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c1fda80-ea72-4637-b362-7eccef17b6c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.154']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcdea594-2f06-49a7-8b3d-901dfe116b74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.155']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe4f07b7-5aa0-4570-bddb-f1f6e2ea48a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.156']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa592c37-b60a-4ceb-83f3-37bd0e170e23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.157']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c116448e-4faf-4318-a8fc-8d829f3435f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.158']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1063875e-7d19-4b81-96f5-f48dc6122b84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.159']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccf32af3-3109-4242-97f6-6edc075fb3d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.16']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4ccf1c8-3450-452b-93c4-ff9239f3c484", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.160']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--730d5b11-13d4-482c-8763-edaf9b31c396", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.161']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5718f8c8-79d1-4bd9-920d-b18d8000480d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.162']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73fcc05d-fe78-4b2a-aa91-b2291965f967", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.163']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5347db02-ef75-43a9-ac44-5583bc6e4e33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.165']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73dc8c53-ecbd-4750-8c0f-5977a97674d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.167']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acac78cb-1ae8-4d40-a067-29065c7384b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.168']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02aebd54-2f82-423f-99ae-65f9d4079d2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.169']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af20e8eb-1130-4dc8-ad5e-0734788f98d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.17']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46706848-4545-4941-89cb-4aca6f911ee3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.170']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--725e05af-1d34-4b38-836a-d007d4d178d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.171']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8dc14ee-b245-4142-bf42-540051b6a75e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.172']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df297fdf-cea6-457f-a470-706c7cfb8b01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.174']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0929c2f9-0e57-4c6e-867a-26bcf5a3cdc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.175']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b14b1210-23eb-42dd-8137-b0ab84d01ea6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.176']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f696bb6-ef14-4abb-b60d-604842ab5db9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.178']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a065252-f5bf-491e-9605-981617dd0e69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.179']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6c9f4c3-31b7-4307-8ccd-aaaa347df7f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.18']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf5682cc-31c9-4411-8af4-aeb507549df9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.180']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19618ce9-1a2d-4948-b211-06ca358749fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.181']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--623467d9-f2b1-4c9a-9f94-258e4f419beb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.182']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b289c942-ebae-427a-a028-838e583bc685", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.183']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fac1f1d6-e61f-46eb-a0ce-45ed2cca891f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.184']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bb41f8c-24f7-4175-a67b-f36008ff6477", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.185']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec8f641e-ce27-4f0e-96b1-c5cd569fc135", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.186']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf95fb57-bb4d-4bc4-8a64-3f1699427a96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.187']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87a99a0e-b7e3-4ca6-adbb-800fabae9300", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.188']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6741c7a7-1610-4378-b60c-071d26bec778", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.189']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36af69a3-20d3-4581-9eea-bffc7fa81aee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.19']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c757ff11-3a0e-4249-a109-6281cd6adbbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.190']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10dc6a36-cf13-4fc2-b219-205282890daf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.191']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37b54451-df61-497f-962c-02c77aa86004", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.192']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afac5e55-00fc-4c7c-8265-cfb07abfdcdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.193']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10c9dfef-5b00-4045-8c47-95bace99749a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.194']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c818d03e-0085-43e1-a113-0927b0217c85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.195']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3da57221-dc54-4863-af14-77e50d22ada5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.196']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5362be8-2cbf-4d49-ae9d-e9c1e24fb901", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.197']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dce8196-9318-4f2a-8db8-952f964c7552", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.198']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91fb364f-9d66-4096-9337-bfe8df01c022", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.2']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eec75de5-dc4f-4550-88ba-523d58c5e454", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.20']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--137fee6c-e084-4d60-82e0-a3796df394c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.200']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dfe9bd7-e930-4872-86d6-97c8c2ea496e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.201']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1be5b08c-5925-452f-af98-562e798ed17b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.202']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7158e53-4606-453c-a2dc-32adbf509d46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.203']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b2f18e9-b67f-4ecc-9768-925b432739db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.204']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6afbe84-3a9a-40a1-a563-9b37d34b17c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.205']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cbfd4ea-7213-43cc-ae60-d69574d86758", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.206']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6dd9a08-457e-40a2-94bc-1a3c078fc075", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.207']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63ebaa65-63a0-4b6d-838f-de86672448cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.208']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d8f0e1d-bc74-41dd-95ba-fc791fd867ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.209']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a2f30dc-948e-4cfa-9091-340424d14453", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.21']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b26fcee5-9110-424e-a448-67035c5d32a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.210']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba102eae-4cab-4552-95a4-4a695a887bd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.211']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbf8d80c-8670-45c3-b370-a10df6e81eef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.212']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--746edcaf-8a06-45ed-aea7-844e95ec56da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.213']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d822a188-089e-4549-ae3e-8c76099e78aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.214']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e464a8d-8d40-4674-afcc-20998349dcf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.215']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--992bf0d6-ba84-45c9-8179-c802ebf05437", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.216']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40299da2-dcbd-4d0d-a110-bed93e81ba68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.217']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e79c37ca-4fd0-4402-a007-bcdbabaad202", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.218']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bccd019-1387-45b1-b56a-b77ed417a3a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.219']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--770ca77f-5fb1-47f6-8395-0898daca26a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.22']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2b4eed5-b0a0-428b-8d8b-0f688dd390d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.220']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73bb4295-be93-4286-ae92-76dd929ab443", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.221']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0de2c59-e0ff-462e-9a33-5d38d5cdb14f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.222']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45442142-e212-4ad3-9f9c-99126bcfb711", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.223']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77f5ad60-2c29-493b-909a-b89757f36513", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.224']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8011cd9-1c1b-4032-80d8-708c27bf397e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.225']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b1199bb-15d1-41be-90e9-3c867734f53f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.226']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1e35270-be47-4b12-98ea-d4da929ea869", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.227']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--528bac50-9f81-45cb-ad3a-2ba815b1e4a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.228']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d231b4b8-71c9-4687-98b3-f59df3741478", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.229']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66a18dd2-6413-45f8-9a22-f84d4bac2511", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.23']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc097403-6af7-458f-93a1-fd7518fe7fe6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.231']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d19755ac-2cda-44c6-9ff8-01454f8be880", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.232']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcd39b4c-f364-4961-8fd0-72013fd20522", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.233']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99b79b45-2de4-4cab-8276-a35a65a65481", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.234']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ae3bd57-3263-4d22-b544-1698be7d5bdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.235']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7e48b0f-373b-4d43-9c41-e1c913af6ab9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.236']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6d6d708-7d15-4632-aad3-2e3b6d908359", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.237']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--850c2164-b8a1-4f46-9943-8c1e3116b74a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.238']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2084b9a0-f317-4ae9-b347-97b069d22729", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.239']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab62320a-0aa4-4075-bf7e-49fc4f28cbc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.24']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--966072f5-cc3d-4281-97c6-6caed926418d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.241']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19759c7b-be03-4083-b9e7-004e7093d07a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.242']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95d695e3-a794-437a-935f-d23d8498b980", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.243']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de0a3b36-8bdd-46fc-a1c1-4e062a457d9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.245']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d484154-a2bb-4676-85c9-d2f0e1ef9fde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.246']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7865301-3930-40a0-a287-7eb5284db363", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.247']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64ecd5d7-8d20-4fea-b9b7-06c3e83e8259", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.249']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b35f60ef-d446-45af-bc8a-8299a2b96eda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.25']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6012be34-f976-46bc-a562-5960cf7fa726", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.250']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--136998cb-3ba1-4f5f-8375-580ecccd3984", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.251']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d733b757-b1a8-499f-87cf-211c9f49c6a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.252']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9992582-c55d-49a4-86c0-1da3a07113c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.253']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bec1730-5ad6-4928-96ed-ab0d2ccf035b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.254']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6322d4a-5b26-47f9-9f7a-d3641257c59f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.255']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25aa376b-cca4-4981-9215-a59316a8dd0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.27']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a3d16a3-c529-4e6e-a972-59555cd6cd21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.28']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--410114fd-a70d-4a75-9c45-c48f1bb99153", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.29']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dfed9e6-ae83-4076-8dcc-f9eaec331f4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.3']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--524a05e4-723f-412c-919e-cd2685fec1c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.31']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd59ae5f-95c9-4682-a9dd-c53bb0c14fd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.32']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf2ef17c-7c7f-4fd5-ab44-5578f07bc052", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.33']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19645508-ee95-497e-8a2f-a2a4ba4cff2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.34']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09599555-dd77-4c12-b5eb-8563efa899b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.35']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5242326-a2f6-43b3-aa4a-8e33a6b7e57b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.36']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79ef5d74-8554-4069-8ee0-737e354a75d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.37']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29b51ba5-5097-4060-ad5d-cecdef341c20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.38']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12cd5a4b-e313-44cc-84af-504550f063de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.4']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a362fde-adf6-4672-ba55-bbb894eb70b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.40']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0a81753-8466-4bf7-b635-3d89484cf00c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.41']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4294c552-02b8-4cb2-82bb-74c2435dfe5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.42']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e8902ae-6a1c-4c8b-b3f9-3626a70f56de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.43']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0a8b18a-3b07-4b44-9658-be8716613de7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.44']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc8c5fd0-6e19-448a-93a1-07cba141a124", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.45']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d941386c-19a9-4e2b-861b-d014fe57e10a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.46']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a108f945-e445-4178-b278-66502b8376e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.47']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b08c3ef6-05cf-4f18-9c7c-eed3bea753f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.48']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14723785-d5bb-4595-a238-fa6540d9f10d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.49']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30a638da-9b2b-42fc-b8c9-083c29f05471", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.5']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a90f0a6-c856-4872-967f-449484ed2cc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.50']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40b1965b-bde1-4886-8af7-4bf1c5493350", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.51']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd8b18bd-f63e-4aa3-8199-fde85e26171b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.52']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--234df3c6-212d-41ed-a588-490b254bf4bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.53']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8703011f-4758-42f3-9e53-d7a507a74046", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.54']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c48545ce-9ded-4434-b04b-5f5869a20ea4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.56']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c16d3e34-b533-4f0a-b4b9-8869980842e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.57']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d08766e-9029-4436-b4ea-349103ca6813", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.59']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10a091f5-4e56-4e4a-9146-cac9a26fbf80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.60']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03424c79-a002-47b1-8093-d1fe608abcae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.61']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29d24d35-e93b-40b8-a708-4aac7126ed1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.62']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14bebf11-24d3-447e-8a16-8ae2a7758ea2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.63']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b942147-7e4a-46a1-88b7-d43d2e8570c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.64']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f66f7bfd-d7cf-4262-87b3-1fd8cb23a685", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.65']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f66c0c34-6f87-4362-baa5-039e10a32628", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.66']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d357153f-daaa-4e6f-ae64-823b457ac9a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.67']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcfc0c2e-aed6-4046-908c-3baae0ef74d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.68']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76aff7bf-9eec-4386-862c-806d2d560ae2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.69']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c647b7ba-1ac6-4e0f-90bd-a4d58fc3efc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.7']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58b0cd70-738a-4052-83e6-ca53c61e6572", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.70']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0d32a19-55f3-4c83-8343-952feadc15a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.71']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9037261-fad3-46f6-bec5-7b39b780777d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.72']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bca8f329-a410-41f5-8512-ad45ca595fd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.73']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90b059ba-4aa8-46d3-8768-d384115f7ab2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.74']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ea92e05-f7da-4336-973a-eb5b40ff9637", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.75']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--199ba19e-84ff-4b2d-8735-c49ab114c8c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.76']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ef5a739-9829-451e-b72a-75c5f6cb721a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.77']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f5bb736-a3ac-49df-b6d8-e3800fe78c0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.78']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af532f7b-8c40-40a5-a043-412477291d24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.79']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08614cd0-fcad-474b-96bf-7ee216d5ca57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.8']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2625f273-ea2e-4893-88a6-6d5adf3d9cb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.80']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85a0f324-f742-463f-8aeb-fba0d63bf0b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.81']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d33b2e13-8ef9-42d9-9a22-72acb5d6c7f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.82']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--778d29d4-1c1d-43d9-86d5-93d589325684", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.83']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f5b37f1-2b7f-4d04-8ec4-1bbbb5034858", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.84']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d720a960-8c4d-41f5-b11c-a1e773e9461f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.85']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ca7c581-b508-4b30-a532-b3e85f0d18b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.86']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12b55be0-a837-42ef-930d-5077e7a6fe03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.87']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c828f16c-4257-4537-80b2-c80fa713b735", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.88']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76402e5b-d8b5-4110-bcba-ba6b1b9388b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.89']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a225097d-ce91-468e-9ece-3fb45a100d65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.90']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5370f917-c98c-4625-81ed-d39d3ea0729a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.91']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--509d345f-2b46-4296-9cfb-e02f71956a76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.92']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f53d6a6e-4802-411e-94c8-2f1635622e5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.93']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8d8fa72-7cac-41ed-b3c5-e4213919eaa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.94']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--373de089-7f4a-48d5-8994-6d55770461c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.95']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63230f53-00c4-4dbf-99ac-0193bb7f9e82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.96']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--849ff639-6b40-418d-9725-81b4d35c7302", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.97']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd81030c-a444-4242-90eb-e029839b0c52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.82.195.98']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--549083af-952e-42de-b2cf-d6f9be7f483b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.87.175.110']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--588f171b-d946-414b-b115-eda1b6719f6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.88.232.57']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3e5ee01-d7c3-41b0-97a6-c552aa7e22fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.144']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ca9a0e2-b943-4203-bc16-6391d14a9867", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.206']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--240c9f34-6de9-4f86-97bd-a975db7f8ae4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.209']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9dde8c4-08b8-46c4-8359-d66a99cea59d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.212']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cc649ff-22cb-4764-9811-30dd3b0dc34c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.35']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57e8c80e-a0ee-4ed3-8088-6df10da5f8e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.47']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fd70c8b-a6e9-4199-a6ff-48fafe9ffd26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.51']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4065d8e7-4e0a-4297-9ff2-ecac0aaffab6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.204.84']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9528c853-e480-45da-a8fe-92eab57ca451", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.205.204']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53cdcf34-22ba-4e68-8e40-95763a999e09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.9.77.247']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--385418f9-f7f0-4b3a-ae4d-c6b32f464ebb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '103.92.26.202']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--787a6857-a153-43c2-86ef-e67431a81298", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.103']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9f4a295-304c-4f93-b9ff-978c90408487", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.109']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--315e86e6-4b1d-4410-9155-fbe5afa5ab6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.152.52.210']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74194248-7ff4-4d56-b618-3042471e11ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.155.18.148']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d6d4555-b081-4d98-8236-db174dfa64ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.193.37.82']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9030b5c-e290-4cdb-a1b6-a547adbc34f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.194.144.185']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1b0bf23-8e86-4080-b5ba-12db17e044e6", "name": "Malicious Host", "description": "Web exploits: wordpress-wlwmanifest-scan. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '104.196.118.153']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2406bef2-a185-448e-8fa3-ee4d82db2ab6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.199.2.114']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1254269-6ae2-4a94-9fc2-7326dbcfc75c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.199.3.63']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c2caac2-a8e8-4220-98f7-519c2aba72de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.218.145.107']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26b6e69c-40d8-4072-b10b-9a87ef6d5d29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.223.85.26']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad020732-869f-4a6b-a0e9-75cda59a476e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.232.79.58']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e7a19e9-3786-4103-8854-f13f95eea12d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.234.6.169']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8fe6ca1-56ab-4d3d-a2ac-4c7c4ff08f45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.234.94.23']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3a99d48-0c30-4ea7-b5cf-15b45234fb86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.236.19.165']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a30afac-248a-4c2b-8998-28d44d0d52d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.237.156.209']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52f74ddc-a496-41a3-9a60-efd129bb6a3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.244.79.113']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeec2840-b0be-4203-ba0c-bbcf8fdfa2ec", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.124.98']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7841a7fa-89c1-4474-886d-9cbb59ea55e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.132.71']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36fb560a-3e83-414b-b2a1-e85d71937360", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.248.184.152']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac743315-77b7-4ced-9c30-d231ba779f59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.250.236.190']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4197a62-74d8-49e6-820e-be847641fb6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.28.162.134']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de97d800-5fd9-4d5a-9847-aa17dde23b59", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.28.201.80']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a274f7a1-5bbc-4824-935f-87b6e2f8a05c", "name": "Malicious Host", "description": "Web exploits: aws-credentials. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '104.28.222.43']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--aea85418-e477-45a1-a3a2-7a77a4cdbc37", "relationship_type": "indicates", "source_ref": "indicator--a274f7a1-5bbc-4824-935f-87b6e2f8a05c", "target_ref": "attack-pattern--95634810-4d5c-4cb2-8998-8afc1f8d05a9", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3a74877-07f2-45eb-9cfb-dbec4b8a3ade", "name": "Malicious Host", "description": "Observed: OPENCLAW, WEB activity. Sensors: cfglobal, openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '104.30.167.164']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:openclawglobal", "protocol:openclaw", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ac4eb60-b636-4c0c-aea2-e9b07d96580d", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.12.147.182']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bdbbe03-872d-4630-82f6-988613917774", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.15.238.36']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08711871-c1d1-481e-a776-adba2aafc183", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.52.216.13']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a46d5f5b-5dbc-49df-8d60-67f5cf4d0746", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.54.62.156']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b78e6120-3f68-4cad-8141-b897d1cd6761", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.132.16']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0609f33-0da2-47d2-ae28-ffdca558c247", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.169.100']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7f2dae0-6d71-4a95-9693-7be0a2507ed6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.169.157']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48ce8b4b-470c-43ff-a673-399756d6093c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.173.242']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00be3cbf-f449-4522-908e-b8fd34a73a24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.175.50']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f57fb3a7-e34a-430b-94cc-e3fc5e0f3f0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.175.67']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7c1ed0b-8e38-47b0-ac40-6b636c25ec29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.176.32']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--374e555f-0f68-4006-973e-5b35136938cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '106.75.177.147']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71cdf1f1-7d42-48bf-81ae-9f84117c7a23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.105.5']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c7e6212-541d-4a40-bfcd-b197343d65e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.59.235']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff953193-d124-4314-98b9-f7999e39b3b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.59.237']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2a5e978-3afe-4fb8-87f1-ca6bbcdfc7f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.150.59.238']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b9b03a4-8f2e-4dd3-aeda-f556f62fadbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.172.168.194']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16e3a249-a47a-46c6-8080-fb1e83f92efc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.175.155.203']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--356e4b90-37d2-466d-af02-355f1888d5d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.180.102.1']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f04b06fe-87a8-4270-9194-7b45b7c9c824", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.21.72.84']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1536945f-5501-4a1b-924c-db582013ded9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '107.22.152.216']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de73faf7-4816-4e91-afdc-8ad8e4266938", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.165.147.60']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--260e5aa7-60c9-4544-8a37-b1ad48216d09", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.165.164.23']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d85c45f6-bf87-474d-8990-90bb9530253d", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '108.178.17.26']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a689ff1-d34d-4884-83d7-39232c547f7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.209.4']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b5421b1-73b7-4831-975e-e61db9c3f740", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.103']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68e91188-e709-46d9-86ed-14168b3ee270", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.105']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0b780e6-dcd6-485f-ac4a-19d94124d0eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.58']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b3070d0-d517-42ee-9d82-d099ddfc584d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.62']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec0dcc00-e2da-4e8d-8bc6-181997c990c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.105.210.78']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--050651ab-c1c4-4c8a-8b0c-ca7a70c9cf03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.123.237.213']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ad034c0-3565-488f-a39b-d9bccd339674", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.123.238.248']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a2ac185-3dce-4a84-86fb-cd55a3baef88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.160.32.110']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e40ffa6-8ed9-4940-b8d2-83b76c14e5fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.160.32.31']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a40a76dd-ae17-456b-bbd0-a92dec660e99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.160.32.33']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--780b7bb8-5141-4647-8174-06de984a7882", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.160.32.34']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea89d77b-fecc-4a2d-bfcd-58a278f62ac1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.160.32.36']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--877e25e0-525a-49d5-9b2c-39c273093b35", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.160.32.37']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e45fa76-e782-4e3a-a8c9-f6123aaea276", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.160.32.38']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf7ca62c-30db-45d8-8fbf-6c93f0c9b359", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.160.32.39']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6419681c-d317-4ef3-931d-b92555d36a34", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.160.32.41']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e53becbe-4d5f-4acd-a0cf-946627a9de5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.160.32.43']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d577ace-2a9a-4104-ba4b-4b2588cb12dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.160.32.44']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ced50bd7-0092-42b2-858f-1b5ac1250ae3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.160.32.46']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de898ee8-6908-4c6e-b453-bf8ca27dc6cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.160.32.48']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--251e75bd-46f9-4e84-95fd-8034c357f917", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.160.32.49']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--730ecbc6-93c0-4f33-9eba-17e808ae8871", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.160.32.96']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecf0714e-27a0-481a-a388-c1d4554d8257", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.168.243.35']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c404d95f-b358-453e-86c4-91e6ac51c790", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.199.106.34']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33598cc6-b5ee-404f-9576-8f94d531524b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.205.180.231']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bebfa10c-ed71-40a8-a04f-cd85f3ab2350", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.227.71.38']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25ec016a-ff72-4231-889a-5e2b015bc6c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.74.74.201']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11a05801-1d10-435d-a9aa-1f67a7fe5b47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.94.173.183']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b51c1088-1fe9-4b62-a96a-458d193dc5a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '109.94.87.173']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ece2e4c-cb26-46ef-b930-27e5f1ecda13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.179.81.206']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a51bec27-2cd4-485c-9096-13372b792f92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '110.242.159.60']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc7fb715-8cd2-4edf-82bc-bf549eaa7f01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.113.88.202']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e2f7a22-dddc-4f3f-8f36-dfa6d4cd40b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.127.234.125']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e16fb36-2056-4201-b0b5-06f6bd79a501", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.127.235.234']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--320d1d2d-16a9-430c-be03-48499512195a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.15.218.102']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f3356e7-57f4-4432-81f3-096eef1e4d2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.165.8.133']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7518d74-5198-4227-8df8-2cc6356f42b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.178.90.191']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00803fbb-18b8-491c-828c-24961a0351fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.59.112.125']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcff956a-83aa-4fbd-a04e-5e7a45c4094d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.61.116.195']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73a3ea9d-3607-48ed-843b-e7564dd6b269", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.91.148.248']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54990b34-9f54-4638-80f2-8d95d399b5e2", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.92.157.246']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19aaa86c-b54d-485b-befe-148d7a263cc6", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '111.93.63.254']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2916271a-6edf-4f50-a072-98c8a0d2fc05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.102.169.8']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7e2b8c6-0451-461e-a271-8bbcb1bf671c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.103.204.241']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e08663c1-66a3-4324-a8a9-961e30dcc30d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.103.94.8']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad73f9af-7da9-425c-8014-999a9a5f675b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.124.66.28']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d898cd81-7eee-40ce-be10-8d400750ba0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.140.251.157']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a84e1cb6-8d4f-4e32-867e-177c93212975", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.167.230.128']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--687803e1-c62e-406c-aa1d-54b2bf8cd690", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.185.230.208']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5c349ec-15b4-4e56-9b52-a9cf3181009c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.207.179.129']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a689d148-3cc1-44db-9a7f-93f8d95d9461", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.216.120.67']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ab0a1ea-a8ae-4d2f-9435-5c1076655a52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.242.222.168']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1807826-3ef5-4245-bae4-4529f80f1814", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.242.66.134']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88214b46-3f77-4cb4-88e7-345a7baccade", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.251.15.93']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c907418-1936-48ef-bea9-1c4fce083609", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.3.44.6']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7675ae79-98dd-4454-be21-fc1b865ba78c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '112.32.172.240']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f6090ec-4b54-4a1f-abd2-49032aafcdc2", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.11.100.109']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff8dbaec-181d-4169-84ad-9f0aef06bea9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.124.64.4']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d417c530-c521-44d4-bad7-029bb272dca4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.140.176.36']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--031f9d58-e95c-402a-b804-4c9ab0d732e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.200.72.206']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3430adbf-1291-4aa5-8eb5-efd9fa6e8078", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.52.192.17']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb04de00-6b32-40c5-b7da-76084ec13b2e", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.73.234.143']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b940e79f-5310-47f9-ac7a-becd46d54ca0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '113.75.77.232']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa810c7d-2682-40e7-92e7-b8cc922332a2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.130.13']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7788f207-9dcf-4fd9-a1c3-a4e38fada498", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.130.183']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a7cc225-9f4d-4768-89d7-973d72218569", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.130.60']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d9a7ffc-2c76-4d03-bc52-e97b30d0f3ce", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.131.231']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b41ffc6-67c5-47cf-9742-abed999629bd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.132.171']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9e59185-5f1d-4a75-9b55-bb70f94a038f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.133.234']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ee35b81-3b31-45f0-ad8c-cc94ff6a476b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.133.98']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--048df853-e2bf-4109-804c-824158f1e595", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.134.121']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0c83d89-79e5-4ac5-b844-3679b4f39297", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.136.205']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b38dca6b-dd37-4bf6-a105-74e15ca445e0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.137.204']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33c78ecc-b7c2-4034-ade1-dbb46078c8ae", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.137.232']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b42251a-ad2d-4966-a934-6084b430cb53", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.137.54']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01c7ccbe-3357-47d9-b63d-a72e6640f87a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.140.206']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dcdfa50-5e53-4f1d-90e8-312c78c6cfee", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.142.84']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22a031fd-35e4-4176-b73b-e8c89e819e7b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.143.225']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e26e1d3-7601-4ecf-9a45-24361d59edce", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.145.237']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd6c3099-dc3a-40d6-b74e-0140b540e7fb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.146.141']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4697acf-5615-49be-8e5e-f826fbe88166", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.146.219']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--469e1fac-a053-4504-a6da-a5333f5908fe", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.151.126']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9384e1ea-b984-4f76-b661-85ef92b3e8e8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.151.9']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8660317c-c703-49e5-8bc9-666bc0e53289", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.152.69']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d7d5020-2d1c-4b56-8536-5ac4c82f4f2a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.153.112']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--189950e7-91af-44c0-84d9-5494c5bb5bae", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.153.188']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51d52da6-223a-4ba3-ad66-b973fd059bf7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.153.246']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a5b4a2b-1109-4157-b39d-db9ff624c509", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.155.210']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3f162f3-2067-497f-ac7b-5b219e9da8ad", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.155.58']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d2ea282-dcbf-4c7f-997c-942efb51b5a2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.156.124']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--155afb5e-790f-4e2f-b76d-cd1f9c2a3884", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.156.165']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3324393c-6e05-4063-a72f-fa64c2cba805", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.156.209']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59e38881-d886-42c8-a90c-3b5dd9a00837", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.119.159.8']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e53a970-88f7-4b44-b49f-97262f4600b2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.217.150.129']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f41cada-b83f-4612-b559-988d9576d3ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.220.238.21']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db924b02-6024-4fb8-8e33-572933dc07b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.32.168.119']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7056458c-fa6f-4015-bf3b-0236dc8e0bf0", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.35.114.164']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--def80a3f-84f5-4fe0-b8ac-fdf09bcc211c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '114.46.179.22']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84cf4919-e119-460f-a36d-5ac3c94069ab", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.160.67.73']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb4a339a-263f-4c16-afc3-1e4d6e7dbc8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.179.102.180']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fa3a341-ceee-407a-93bf-52d6817b5784", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.181.18']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec93a53e-988a-407a-a424-b77715688c91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.188.79']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa287125-0fe5-4651-b5ff-b1ab5fdfc74e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.190.244.156']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0b55017-a32b-44c5-b984-6ad4d13da417", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.197.249.56']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9f0e8eb-2f68-4c95-860d-7b4a17d854e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.235.30.180']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fb6174a-ff3a-4496-9de3-c759005f2433", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.49.92.74']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc5624fb-8ddc-4588-81b2-8145eceac343", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.51.231.214']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32095769-1bce-4c7d-98fd-c5b1ad7048dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.68.193.243']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9442009-8a84-43dd-9564-2513e9d62ea5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '115.73.220.226']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55d85ded-9a25-47fc-857d-25d89d7acfec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.108.101.105']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ce3f862-25c9-4226-8b79-d103faf4f908", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.109.76.145']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d69c5b2-ffde-4e91-8ce8-28e01cd0d4aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.110.41.7']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b32eb86a-3994-460f-a390-83fb682a9aa7", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.147.35.224']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15d1a48e-c8f0-4d2d-94a9-f525d6ed2c47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.168.104.84']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18a7002c-3761-4eef-9d05-c109963c3407", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.224']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ed05c79-81ad-4ae0-80c7-f863177f3f05", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.27']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fef5001c-0b26-4ab2-b120-10d4ef91ccc8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.34']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73120aaa-21ef-4055-b2f4-ef2e4cc29cd3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.51']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c31df822-01bb-405c-8230-997f2d5f9a08", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.179.32.81']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--389c2991-8ee7-430c-9bec-55e64b58a4cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.207.93.213']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af444c51-0fc1-44bf-b966-d48227db4162", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '116.248.81.69']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6f5a5fe-97b7-454c-be81-cd31e5f7536d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.156.86.145']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bd8c05b-277c-45f4-876d-a1ccdc0bc7c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.18.20.143']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df10bb13-1d16-430f-94f6-7ccc11e8c2eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.33.242.50']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66f21591-b7af-4e98-8c57-27b77c180d3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.50.174.134']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6461062-1605-45c9-b11b-101bff279940", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.50.51.198']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c89e6da1-4369-477d-8035-ac889e81d54c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '117.52.18.109']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edb75ec3-8d00-4cad-8053-7f0a29eef627", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.131.11.28']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73ba18c6-8ceb-4c70-8329-5792ae02333b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.145.228.55']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73eeaac4-70f6-49fb-b43b-4525f7443652", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.32.92']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--561476dc-a6b1-43f9-b721-7271dfc2375c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.36.63']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17f3eaea-d84e-4958-949a-adc9e2063865", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.38.134']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1b95584-d415-4ef6-aae8-098f1bdf2301", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.40.191']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bcd5f52-7006-4114-97ec-44b1b4b3d719", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.45.235']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07e469ca-ab58-41a3-ac87-ac0b08ba7a8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.47.212']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efa23b87-a609-43ab-83e5-4bb2380aa956", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.121']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4464f94-7829-4638-96ba-5bacde4c977c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.185']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--035fb447-fcdf-41af-a7b1-904b6c9c75d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.57.62']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d032a303-de25-45cb-a921-ad44346445ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.10']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20c084fa-e776-4ed7-b2dd-2d37b9d8d106", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.15']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f9db759-3623-4b58-9a4e-8b7ccd4f3912", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.59.41']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--082bce3f-3de3-4865-ae32-ddcf4a10f1eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.64.15']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b1be23c-b0b4-4f26-8d3e-72253545b272", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.65.209']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cce8b4a-e693-4ecf-8cdc-3743dcf7572a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.65.212']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83b4521a-3467-464c-b327-c711995d8b6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.65.234']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58dc6b2d-2fb8-4b5e-9c19-bab909144ecb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.69.177']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1313f3a4-74e4-4169-affd-07f046557ca5", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.193.73.8']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fa39170-8e6f-44f4-bcd5-b9908e3341d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.228.167']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8104ca11-2385-4987-87d3-dc2a3b3e5ad3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.233.182']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02e0e326-8905-4c33-a945-3882a96707da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.236.118']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d0b0533-7bac-4b3d-8930-0d3031dc677f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.236.134']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc178515-04a6-4050-8965-93caa9ea60bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.236.142']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--904e4539-7437-4998-ae90-8c010eba207a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.238.196']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5492591-c511-44fb-ac20-70a6fd93f706", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.127']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dc5826b-f493-451d-b045-6e744dbb8ba0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.245']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7b93bec-faa3-47a5-a577-4f83cd98783a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.31']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c077c11-5651-40d8-89e6-e67c8af113e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.250.95']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbdf48c8-6930-44b0-b050-b4ded5d65d5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.144']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6b8e75a-63d8-4181-9ef1-546e952cceb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.17']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7806c499-6526-4013-a0f5-06de730b7264", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.194.251.58']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9757a1d-543e-458b-bb88-b2341dd28d66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.248.199.78']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3af7f74-71da-4577-8627-c549205d6c34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.251.42.161']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7b8ef2c-ef0c-4c61-96d5-564185ca4d85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.104.212']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b1dae8d-02ea-438f-aad2-b0106169d324", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.111.63']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93cd5f37-d685-4865-845f-9cec2c188023", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '118.26.36.18']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--402e1204-6dd6-4f46-b0fe-0527e78fdf12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.102.91.225']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b30f8468-6729-40b8-bdf6-a25ba8e85e36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.113.134.61']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--635c7979-d902-43f6-8249-b0325c3734bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.119.6.53']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fff11545-5fb4-4283-87d2-2a7ef6a81b0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.133.93.89']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c3f1e8e-9921-4c5a-9ad9-da1ea419c612", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.191.233.166']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a72eb429-8b91-432e-a3a8-d745356e31f6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.246.153.114']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d440681-1633-450a-ba7e-ae1d325b66d5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.45.7.86']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e305340f-4360-45de-9911-a850d9f04289", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.6.232.40']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89b7b399-ea58-4b76-98ac-bcece3d36924", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '119.99.166.12']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fafa9bdb-4a7f-4576-91ab-9341e289698f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '12.138.125.82']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7664c0d6-13e5-44c6-8019-b28054b2634f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.219.168.59']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41cd32bd-97fe-4f72-9bcb-e81305e2a891", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.230.191.133']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c751ede-232b-4133-a48f-0c7c7fc50e2e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.233.71.93']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4c220e9-6e57-44b5-bd31-667cedbcc313", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.13.21']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3298bfa5-243f-4d58-81cb-5bb6f1e73ef1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.170.74']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bd51ce7-ac60-4bd2-b386-d206e23fa3db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.48.20.147']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f86b2eb4-4b21-4716-a9d5-3f4645be5102", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.79.178.220']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8a73dad-e02c-4d1d-aa47-e2758d20cd13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '120.85.182.219']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33423faf-508e-4998-8fb2-276d8f4319af", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.134.151.223']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71d9e1a1-58ba-4831-8765-1ac47a485143", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.14.34.219']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--275f644c-9e21-43a4-8970-f1507ad279ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.205.253.118']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56c70f14-8550-468d-83a6-f75e1d63e994", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.29.84.4']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--354389b1-58fd-49e3-825b-1a97658bc747", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '121.63.106.247']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caaa3db6-2887-4547-98a4-e6ec612774ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.116.134.171']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--584d4dad-829e-455d-86cc-19214444702c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.116.21.91']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09003a12-88bc-4f70-8e8c-fc64158b18be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.136.201.85']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7007907-d917-4838-b32c-fcda82ebbcec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.188.9.218']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5779bf7e-4ce8-4ed1-b13a-5c507a724b0b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.51.236.174']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc68151c-1131-4577-bf17-d42edad080b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.96.28.141']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00155a5f-d64b-4259-bab9-0ab996f98a2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.96.28.234']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--344f8b77-e2ee-47be-a1df-c5390e806d6c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.96.48.150']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43c43695-7f21-40e1-abe3-35b3c91f99f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.96.48.156']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a5ff503-ff79-4005-94ed-eb2e1d314f76", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.96.50.212']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fae4f53-5c3c-496b-860e-51f2d08ef129", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.96.50.216']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9d8eda7-0d53-421c-8a50-eed6adbae493", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.97.137.152']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56dd65ae-f39c-4f87-8c99-fc72d6778350", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.97.137.67']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--480128ff-0b0b-4fd1-939d-04136e0c1324", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '122.97.212.99']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b40665e-9d56-4d50-bf2b-3db3c42e084f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.123.207.104']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--386f7a37-3a50-40f5-af17-05e595993a73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.138.72.196']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e292f96-88f0-4d4f-9126-52a33c1a1b99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.139.181.234']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--927942ab-3b97-43b3-8704-3177ccf44063", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.16.178.214']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2ed036d-d1e3-4d72-8766-a41a73ca157f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.160.175.153']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87dc8bfc-60fb-408e-b604-235a3ef9dcd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.160.175.239']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8cd4125-fa77-42c3-bedb-f3581e49d1bb", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.165.84.123']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15525a66-9f61-484a-a3a4-a93aa61833b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.169.72.44']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5f4f69f-a51e-4146-a588-3037bac2fc94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.178.210.147']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa88f1c6-9022-4604-9507-d1f33c579b9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.233.233.222']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8982ba99-d2b6-4139-8c56-1544c3a3ec2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.245.84.2']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f58ebd03-2198-4a2b-a2bd-4ca7929f7d01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.254.73.56']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16782ffc-9a52-4b87-a161-ce8ac765e9e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.30.106.64']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a2b7667-925b-4543-aa30-5928904c29e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.49.56.54']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7185814e-04a9-425c-9d93-c16222c6bfed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.207.81']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13af4975-afbf-4404-93ea-0be53925db45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '123.58.209.112']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25988bfa-589c-4d97-bb9c-74e23960c761", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.156.112.249']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cd0463b-ac0f-44c7-9d8f-f40b5e60555a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.174.19.195']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3123c04-03f5-4786-a32c-e89400131413", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.29.251.79']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae5a9c00-0337-44dc-8716-dc5a99f7b9bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.31.106.46']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26e69b7a-dbbf-4eb3-a2fb-9d59670b5c6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '124.89.119.2']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--102ed959-9692-4f0e-ac7b-2ba065df44ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.164.234.245']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80b6bf33-f6fd-4ba0-9215-fb37925abeab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.167.122.40']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43497d60-a138-45d3-bade-dbdefd27b27f", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.208.16.117']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6aee1fe6-8768-4949-9477-5e850673d757", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.228.198.247']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--544e8e3c-8b10-4852-95d2-14f0a483a5d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.229.145.119']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8988670b-a501-4f1c-abeb-cc04f3aec243", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.27.98.160']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d09ffc1-969f-43a6-aef6-c8f0a90ff563", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '125.77.129.193']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1834e81e-a9c4-4a27-bc5e-2c33ba21fea3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '127.0.0.1']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45a6aa5d-f065-4bda-9c95-3baafa88c4d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.227.37']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--023a52d8-d5db-4c4a-ae95-9fc4c394eb8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.236.30']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9645f2eb-1860-4712-a099-8dc256172606", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '128.14.237.130']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4eeaa5d3-e840-4e5f-b610-a3d89da31d3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.159.158.45']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7722a97-69c9-4a40-9f5c-f3d1e12f0f23", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.159.8.251']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82aec5d7-e310-4b09-88e8-502439ce19b7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '129.211.229.121']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86d633f8-a8c5-4d03-95d2-eb7624bba7a9", "name": "Malicious Host", "description": "Web exploits: mitre-t1190. CVEs: CVE-2026-9198. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '13.113.121.187']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-9198", "external_id": "CVE-2026-9198"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b1790f11-ae29-4501-a430-8f302346d404", "relationship_type": "indicates", "source_ref": "indicator--86d633f8-a8c5-4d03-95d2-eb7624bba7a9", "target_ref": "vulnerability--85ee6c0b-63a7-4b7a-b655-2209db1298db", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc6968b8-bfff-4bd1-adb5-4233d3900d05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.218.123.190']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85cea1a7-da65-4f84-ba18-0c8093772835", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.221.111.100']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2c4eeb5-34af-4bd5-896d-f509fba13702", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.221.242.173']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aff26858-f6bb-4416-95d4-4ad1faa610fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.221.67.44']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57a58a10-b2aa-4691-9e63-a0b9b4c51993", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.86.114.47']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc8dce2c-52b3-4c14-a587-dbe68f015278", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.120.84']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab18a72d-750f-4cf8-95fe-27a21bae4bbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '13.89.125.229']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6c9f1cf-3b0d-4892-9848-5541f9f7072e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.121']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6ff78bc-1c38-47c0-b112-48193c2012fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.174']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bb49cea-1e32-44c2-9a32-0988013df9e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.194']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44021069-2705-4069-a484-4afb45559ce4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.36']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c988c00c-ab5c-4811-96e9-09034a530916", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.48']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15ba198e-2f36-45e9-9a92-183817876dc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.57']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--774eb9fc-883b-4068-a1f8-24639ddc4b3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.65']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83ad34fc-365c-464f-9ae8-f70af2490de5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.180.89']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e3b8610-f528-4790-af74-7f645e039174", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.182.107']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6e35008-a15d-4586-b4de-98a6758339fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.182.193']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0f3495f-0f0f-4ba8-886d-77b9883006d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.182.225']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ab93b61-47a1-4928-8bc1-114a21710379", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.12.182.93']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e2572c4-c888-4292-90ec-b4c003ef7e95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '130.162.192.232']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63b4f4e2-ca8e-41ca-b484-fdf099878b85", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '131.0.196.33']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12773d8d-f93d-42d1-89f5-f40761a24bb8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '131.100.136.234']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3740d1a5-4465-47d1-a012-6b89b5844713", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '131.196.161.246']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d93d05d0-479a-4680-9169-1af8a8d6295d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '131.255.152.2']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--318c54e0-0718-4c98-9cf2-c4f1f16e3213", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.148.148.91']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92f54175-39ee-4828-af14-19982de25882", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.148.22.172']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bf8d7c0-0f2b-4915-b751-b279bc4da2ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.243.196.116']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--263c0edd-f5f6-4a3a-9004-d2370a54ef0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.243.196.117']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e54a442f-77e4-48ba-8626-3f6aa5107827", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.243.196.118']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7d2ff97-643e-4478-9774-138637afcb94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.243.196.119']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97854a4f-3582-4bec-a8de-3b4a29ee3d9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.243.196.124']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8ab27cd-86b2-44df-8f75-0cfb0fca2da4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.243.196.125']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d66d86a0-0be8-4d29-9cde-5a1821f00024", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.243.196.126']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--293c8256-9c84-4743-9178-d2c7d81d1728", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.243.196.127']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95bcb95f-4306-4384-b373-d2ea89510d4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.243.196.148']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4929bb2-75eb-4b73-baf0-376448f556eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.243.196.149']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1431a9ad-6440-4fc6-a73c-8bdfcb51f680", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.243.196.150']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43f12356-9709-4fb3-8d05-23bcf925b169", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.243.196.151']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--382270f1-b5b3-4832-a298-44ccc7e7c092", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.243.196.156']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1f5e720-8c49-439e-8429-1e84b7b0d7ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.243.196.157']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18ac00fc-354e-4218-a503-a04b489fd1f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.243.196.158']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf641c2e-f340-45c7-b094-65de417d6dfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.243.196.159']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--135f733e-6e0e-4ff8-855c-dddee5a42969", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.243.196.180']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5080372-68b6-4a2d-9291-9aa2e0cf93cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.243.196.181']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4523150-3f53-4d5e-88a5-5af532f63e14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.243.196.182']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--960b10a5-e49e-4545-9048-e58ed5233f97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.243.196.183']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f5ef9a9-37c5-4082-8cb7-28b0c25f0ebb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.243.196.188']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82fb2950-cf7d-46e6-bdda-1eac1451b9d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.243.196.189']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85ae32dc-df23-4524-b56a-55d7f3521dd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.243.196.191']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5c1539d-39ec-48d6-b35a-b81aa765eb66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.243.196.20']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74de85ab-36ab-4ef0-9f84-74a8af6a8a75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.243.196.21']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b755ffa-d370-4fa6-9862-972a1f98b24d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.243.196.212']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97c405ba-010b-4183-8103-12eb16bba6f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.243.196.213']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9279a5c-67fe-486d-8e29-b8c8b8213d26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.243.196.214']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fcf145d-1112-4395-97f4-f4e186070e41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.243.196.220']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1a137af-d1ad-48a7-a15c-58b6cb021f5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.243.196.222']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a74cc576-919c-4fd9-a2a0-14ded5694c99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.243.196.223']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33a8d2c8-8d69-4a41-bc6d-c9dc6e4ece0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.243.196.23']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--627cd178-ec18-4b18-9bec-3e126414e0e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.243.196.244']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c8cbc10-47f6-4416-97f3-684c8b8dc03f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.243.196.245']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43160561-9a15-4eea-9813-0d00292c32aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.243.196.246']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7965774f-62d9-4952-b85d-9ec2d2f49e16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.243.196.247']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ec32c73-f8bd-4bdb-9c38-7a18ec4f2f4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.243.196.252']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd7584ac-d56c-4b88-a414-8e8bcdfc9fea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.243.196.253']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f586c8ae-f2b9-4fae-ab2b-a0e1e3176404", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.243.196.254']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bf9bf3a-caa1-4f6d-a58f-8a2720a066d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.243.196.255']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8a96158-92cb-404c-9146-a2f1c24dd02b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.243.196.29']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c9e2a16-b67f-43df-9140-11c0a569ff28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.243.196.30']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d02cee04-b8e5-4556-b092-acbffccf46a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.243.196.31']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd5f079c-dbbd-4ea8-a223-9821438af1b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.243.196.53']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f886b2c-78f4-4f15-a668-0bf245c1f535", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.243.196.54']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb518ba0-66a0-4323-b1b9-5da1ca04722c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.243.196.55']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86224b5a-29d8-425c-81f7-93bbcc9c8746", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.243.196.60']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--219bec3f-4848-42db-8f72-42374935e54a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.243.196.61']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70107184-4cea-4f58-9da4-2d1c70e5fb91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.243.196.62']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef9b8b12-296e-493d-8b03-e3ac2f5893a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.243.196.63']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ee3f6ba-6b9b-466a-b4b0-6f83d2a30a8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.243.196.84']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0158d656-12d0-40c1-b065-aee886f59134", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.243.196.85']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--041ffb64-2542-4e52-9988-d3acc30880c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.243.196.86']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--604af7c7-6bf6-467a-8b01-b36c4574cbf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.243.196.87']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec25d864-c844-4e7b-818e-7802d0a4d465", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.243.196.92']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0b32405-1010-418c-a5a9-6375e992f8f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.243.196.93']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a0ca42f-3682-4783-8776-d6b3bf2ab083", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.247.187.249']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acae8f64-82aa-4ca1-a099-a6a5af0c45d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '132.255.230.42']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28e1692d-e1d3-4469-9fed-f9766dda2037", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.122.21.107']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b37ae63-6aef-427b-9aa1-d4951df3b853", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.185.85.61']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb01a06b-c859-4f87-9d26-15ca112a6014", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.165.97']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43ad2384-d463-4fb2-aec4-0a6921ce274b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.171.253']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aadce70d-3d1e-4d01-a730-98bdef3a7075", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.174.55']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcabf447-82dd-4c1a-8220-78813673006f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.175.41']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1972254-af86-4cbe-b4a3-f227f7ae6900", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.215.130']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62ec8559-60e0-40d5-807f-c32dafb6ff9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.237.95']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d814177d-6ec5-44df-9dbd-a12626c33047", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.199.238.38']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e5aeb24-1a68-4ad2-8384-5959a5079ede", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.118.105']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8699865-d092-451f-9785-c8d0aa509a59", "name": "Malicious Host", "description": "Web exploits: exchange-ecp-proxyshell, spring-boot-actuator. CVEs: CVE-2021-26855. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.25.199']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "initial-access"}, {"kill_chain_name": "mitre-attack", "phase_name": "discovery"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-26855", "external_id": "CVE-2021-26855"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-34473", "external_id": "CVE-2021-34473"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22947", "external_id": "CVE-2022-22947"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--330636c1-2c74-4d3b-bbc8-1365ae4536b9", "relationship_type": "indicates", "source_ref": "indicator--a8699865-d092-451f-9785-c8d0aa509a59", "target_ref": "attack-pattern--70763895-ef5a-42ed-a5bb-49eaddeeb4ed", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1b28a286-4651-4363-af32-387042abd113", "relationship_type": "indicates", "source_ref": "indicator--a8699865-d092-451f-9785-c8d0aa509a59", "target_ref": "attack-pattern--dac02ec7-9fab-40e8-ab91-f7aa9152bf58", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0a9ef101-8264-42c4-a869-42aca74a8ccf", "relationship_type": "indicates", "source_ref": "indicator--a8699865-d092-451f-9785-c8d0aa509a59", "target_ref": "vulnerability--af124007-9bf3-4a17-87d5-a9b52e563fa7", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--712566fe-9ff0-4081-ada0-fbacb8f075a9", "relationship_type": "indicates", "source_ref": "indicator--a8699865-d092-451f-9785-c8d0aa509a59", "target_ref": "vulnerability--b5147848-022b-4261-a578-bf3291614d40", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6cddf096-d488-479c-8a19-90410ebb9074", "relationship_type": "indicates", "source_ref": "indicator--a8699865-d092-451f-9785-c8d0aa509a59", "target_ref": "vulnerability--a28b04e8-ad85-462c-b923-9158a7008803", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16517a6f-e508-415b-8786-fe66c5ea911c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.209.95.237']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8389e46e-cf9e-4e9a-9493-193363dae45a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.33.67.38']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee70db8e-55f9-4fa0-9583-bc5c4127059e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '134.33.67.57']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c118c9e6-824e-4a83-ac1b-0f5013f58132", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.119.91.185']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--293e01f6-9bab-4105-9444-d220ae16d08a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.125.188.65']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dc1a944-ab9c-462d-a7d1-250e2d7ace11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.125.244.100']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fc71770-f00d-4aed-9468-b5dcecbd3f42", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.129.120.35']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9b36189-2474-4604-8c2b-51866f100c62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.222.41.206']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f8a0856-5f5b-4b8d-9ec8-fe005b44eb03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '135.237.97.153']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84e84087-533f-4839-a686-341bfe145ee5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.111.226.174']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85fb97f6-28ee-43bb-8616-32a48af9a0c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.158.11.254']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9116ab65-7668-4c9b-8e5d-cef1e4f7aeba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.243.150.244']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcf76090-1414-4dd9-9cfc-6bbe09c16023", "name": "Malicious Host", "description": "Web exploits: wordpress-wlwmanifest-scan. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '136.66.215.236']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c16af89e-b2cf-4a10-83cd-c77dff565a5f", "name": "Malicious Host", "description": "Web exploits: mitre-t1190. CVEs: CVE-2002-1149, CVE-2022-22274, CVE-2023-0656. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '136.70.141.172']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22274", "external_id": "CVE-2022-22274"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-0656", "external_id": "CVE-2023-0656"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--373adda9-43e4-4465-b512-6e3e64de3391", "relationship_type": "indicates", "source_ref": "indicator--c16af89e-b2cf-4a10-83cd-c77dff565a5f", "target_ref": "vulnerability--9f6b4a40-b312-4d6c-8962-53e248873558", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bec37dad-8ad6-4b2d-b632-2f7999810dc0", "relationship_type": "indicates", "source_ref": "indicator--c16af89e-b2cf-4a10-83cd-c77dff565a5f", "target_ref": "vulnerability--7981112b-110c-4ce1-bd6d-9361a9d00747", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0061aa35-3cca-4a84-a94f-2c167d5367d9", "relationship_type": "indicates", "source_ref": "indicator--c16af89e-b2cf-4a10-83cd-c77dff565a5f", "target_ref": "vulnerability--611e800c-c845-478a-b4bc-40f780f1b283", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60efc94f-6aad-4831-a6ad-a957637eb973", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '136.85.11.232']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de94b722-6d44-4aeb-8f18-c8671937360d", "name": "Malicious Host", "description": "Web exploits: wordpress-wlwmanifest-scan. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '137.131.43.163']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c96c4df-ea7e-4c5a-b3b2-08bfb3e66351", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.131.6.32']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27aa797d-031b-4633-8e8b-65bd0951c8cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.112.103']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78911ee8-3951-4776-8958-083be748df02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.112.192']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ce5c348-aac8-4fc7-9609-be9eedcf632d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.13.100']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b559cce9-d3a0-4cb5-a183-f728f57ec6c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.16.18']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--830a714e-737b-4289-ba16-b4a425ad19e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.185.42']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad6dc8a6-f2f3-414b-b9a1-981ffba53cc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.190.194']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--122e07be-43cc-4542-954a-7d63d3b9412f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.190.205']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9d63365-91e4-4160-bdda-2578806be329", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.190.246']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e44cc495-52b5-44b8-b98b-aa66d0708d37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.32.56']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff9f0791-ba73-4a6a-bf98-63a0094bff0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.92.250']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a4a2677-f1b8-4df6-b93a-cae0eb07722d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '137.184.95.216']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd0390cf-9763-4cbe-98f1-508dd58a969a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.197.16.14']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9267048-52e8-4808-b712-d5ae57d8caf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.10']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52bed67d-7a5a-40b1-89ad-2489e14d2b69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.11']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da4957b6-5d57-4ed9-8756-2f02341cf10e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.12']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d24a687-9318-49f8-b915-1eb666cbff5b", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.233']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b70110f-9d68-4137-a1dc-3732d7d21261", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.234']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79d55e37-5edc-451e-b0a1-d7649d4e7978", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.226.239.34']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63040676-76b6-4bc5-ba77-6afdd6770ff8", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.246.253.24']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c9787db-dacf-4691-a31b-52143ffc040a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.36.82.91']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d16a4ba-930f-4c2c-94e1-7b7914811209", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.143.68']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fed7dd3-1202-4824-adfb-6797b8b5cfe7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.238.81']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--310ea9da-5187-4bfc-906d-344e14b18000", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '138.68.93.37']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59973be7-6365-4584-ba9f-77364237c163", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.105.36.167']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdebaf87-6dc4-420d-bff3-4368468e287b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.135.60.148']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6b6f583-e2ef-46d7-8165-b1bcdeebc1bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.235.132']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acd827b6-92e9-4e6a-ba42-a4dc73825698", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.239.185']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f64e492c-859b-44df-95dc-a2b964305bb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.239.72']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae09ef57-6078-4ba8-96c8-998de2e4da25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.239.74']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80e518ce-5773-4c24-9fe9-3bcb6419c783", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.239.78']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--228a2430-342d-4843-ba38-5e3428dcd1fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.144.239.98']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--207c57ae-73d1-499f-b316-890b438bcc4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.113.212']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9480b21-d268-43b6-9976-75d6042d9397", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.117.40']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fcb85cd-6035-4431-9aad-abb2b076d96e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.124.178']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e55e43dd-16db-43bf-a83a-452dd67b7538", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.162.70.53']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7908cd75-0563-47e9-a881-24911f14f8ca", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.19.117.131']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84f6b1b2-5411-4d8f-a9ba-c0b48c137597", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.212.69.209']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07cce374-bf10-408d-bd87-4f377d5cd610", "name": "Malicious Host", "description": "Web exploits: apache-solr-admin. CVEs: CVE-2019-0193. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.147.177']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "initial-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-0193", "external_id": "CVE-2019-0193"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f0826d29-118d-485f-8b38-fa86219e0a56", "relationship_type": "indicates", "source_ref": "indicator--07cce374-bf10-408d-bd87-4f377d5cd610", "target_ref": "attack-pattern--70763895-ef5a-42ed-a5bb-49eaddeeb4ed", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--06aa207a-ecc0-41bc-8265-40bfc023a92f", "relationship_type": "indicates", "source_ref": "indicator--07cce374-bf10-408d-bd87-4f377d5cd610", "target_ref": "vulnerability--3045e6f6-ddbe-4766-a0f4-ade41e3bfe58", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae428275-62b9-40ef-b80f-03739b340581", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.17.178']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7b4a250-06ff-419e-96ea-91bd442474d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.170.85']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75e48f8a-d8d4-4517-b861-ad5b9b175ae9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.173.98']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--097ec03d-3dc8-4615-be30-222945a575e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.59.183.53']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b08f842-7961-45a2-b796-45ed4031909c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.99.33.184']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--171a7f58-0942-4d73-9d91-71b1f2aadb73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '139.99.82.102']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9fe0964-613f-4c5a-b57f-e884cb7245e7", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.103.116.87']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2443d1f-6bbf-4da8-9ca9-e2cc94a41bff", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.191.182.248']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83565f34-c09a-4a02-ab42-e5d68bce739a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.224.238.73']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16b405e5-e238-4a86-ad65-adde97d4d070", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.41.116.243']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70b6657c-1c8c-4f15-a98a-ff4a4f2410eb", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.46.10.48']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66a8c3d5-caaf-4729-b092-1ddac036b984", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '14.96.237.189']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5142f0cf-9e02-48ec-9eb0-fcf4e03d46bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '140.207.205.59']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3890460-c77a-4349-b946-19d565288a59", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.101.9.226']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08d0395d-35e9-4b4d-a9b0-4bb572c06545", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.11.104.108']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--968faed3-115c-4659-b010-3c6ab3e2e803", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. CVEs: CVE-2019-5418, CVE-2021-41773, CVE-2021-42013. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.11.5.18']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5418", "external_id": "CVE-2019-5418"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-41773", "external_id": "CVE-2021-41773"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-42013", "external_id": "CVE-2021-42013"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--cdda7d2d-c34c-41d0-80e7-a09bcdd9bf3b", "relationship_type": "indicates", "source_ref": "indicator--968faed3-115c-4659-b010-3c6ab3e2e803", "target_ref": "vulnerability--53f2ce60-c955-4767-b602-d139545467b2", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3807e229-753f-43ff-94c0-483712a7b5c4", "relationship_type": "indicates", "source_ref": "indicator--968faed3-115c-4659-b010-3c6ab3e2e803", "target_ref": "vulnerability--89ba54c8-32ee-4c29-8d36-1bdeaa7ced46", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--9278a7af-9efa-43d3-8933-76016254f367", "relationship_type": "indicates", "source_ref": "indicator--968faed3-115c-4659-b010-3c6ab3e2e803", "target_ref": "vulnerability--05684841-0870-4611-b7fb-21478ee0dc72", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8df4dbd-9ffc-4947-809d-b1421e0c262c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.255.165.66']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4a8d614-8a6a-48fa-8663-548f5cddcf54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.10.205']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e17e3234-301f-4644-9404-cc83ddaf26fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.50.7']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2359a72-b70d-439b-aa6f-86692f6d3b1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '141.98.83.48']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dc3d66c-b22b-4bd2-bd9f-316b71873ba2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.111.152.177']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--737e66ed-651f-47f9-9753-b2af0916c7d3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.111.152.38']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3218323e-2eb2-4239-ade7-d16a394f7925", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.170.62.32']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14d84b06-665f-454e-9e1b-81fb44550614", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.91.102.186']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69c2e6d0-3545-425e-af60-0798a38edfac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.91.102.187']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1da73df7-b387-4308-b969-276e7583ca14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.136.140']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--209cc8dd-3578-4151-a35a-ee8201e058d2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.196.139']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5eb9af0-7c65-449e-bdca-53d292af4b26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.224.178']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbe5d835-1658-4ff2-bd99-a728b74801ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.30.34']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8049b16-d458-4167-9453-b7759525742d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '142.93.65.94']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25b7c3d4-55de-4d63-9f38-4667be9f8ef7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.154.118']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7137f3f5-e8e6-4cc5-a8ed-a73e927e565a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.210.212']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c65375d-a859-4b8c-a0bb-e1807922fc12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.233.229']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0e7d218-d5f8-4747-8cf9-ff4f823d423b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.110.239.2']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7e04c4d-0fb8-41d1-bfb8-553dae3d0fd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.102.173']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0a917a3-3b4e-4ed0-abde-21d4f795327c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.141.183']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac2deab5-1765-4583-8ddb-265a572e9510", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.150.150']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a62bb97-91fb-4e12-b038-cd007ed06125", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.173.159']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c12394f-afd2-466b-ac34-d20aa7d63d42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.177.219']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7d231d5-b2b0-4e0d-8e44-0b09e36b1ddf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.225.197']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a7d312b-d332-421b-9199-07a8240d25a2", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.198.238.87']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--880fce0a-9b5c-49e5-8e68-c0066159c5bb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.244.152.27']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c2bdedb-6ebd-4aef-b677-bbe989cd066d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.244.57.82']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7de4e59-32f6-49cc-b3be-ce320cccdd51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.0.20']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e774b83d-af96-4715-8826-8c5fc196052f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.0.97']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb18bb93-096a-4893-b8f4-fa37657431b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.128']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65dbca08-14f3-40b4-b531-183a2662bd99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.185']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c29913e-f5d3-4d30-890f-ef5eb8535959", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.189']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a0b94cd-aaf2-42d9-a974-41705655220d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.191']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19bc23de-652e-463a-abbb-bcc9b7ae31ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.201']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77086f69-c633-42e4-a293-51f2596112db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.213']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ad0cad5-b76f-4db7-b67b-26d73183fc94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.34']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e075b839-9d36-40af-9a6b-b149f9779835", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.44']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2901c0d2-de99-4531-8eba-2d95eb38f6b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.52']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2bff8a8-7310-4fc9-82a6-65befcd5d677", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.53']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fd303c5-4e3b-47b1-8b4d-b19cec087801", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.71']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffb647fd-ad06-4f43-8f1f-99148f5a5479", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.1.84']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d64df024-5ac8-4992-9396-32ffb1ded0bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.127']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c974999-4a66-4807-bc63-9ba9474417e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.182']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41a944b9-e67d-4fed-be43-52a03d4cf9b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.204']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77d46e72-3053-4dce-81a6-17157c8a3b07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.34']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6023c5eb-8ab4-4e48-82ec-99b24e92c232", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.164.97']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70827f84-6080-45c5-a83b-aaecb0f083d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.173.101']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5584cc5-4058-4fa7-95bc-82f5510664f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '143.42.173.60']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7af06699-2cc0-4105-a046-6a74126dbe54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.123.77.75']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62275789-188b-4856-bf12-47385b8a24f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.124.196.56']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15c6730f-fd96-4639-9c8b-7c226ba45c1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.172.104.147']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9a26502-bc6e-4498-9637-9d858390de8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.172.111.210']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ded76e38-335b-417f-bb06-d90d778d8cba", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.172.97.51']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--429ed722-6cbf-4bd8-9e12-07eff4cd4811", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.202.82.88']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03d12f6b-3d5e-4d38-8fb9-9d30c64e50f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.24.159.248']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd15932e-5eb9-425f-911d-3c1a705e9f07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.48.227.74']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f7c0ed2-dc40-4eb1-afdf-d6fb1efe28d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.52.158.133']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36a3cf25-1be6-4c22-9b60-473e861a2f28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.6.131.198']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f97ab067-8d27-4268-ab74-1ef0911262ef", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.76.32.236']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--357632a6-118f-4b66-920d-c357e44d3c56", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '144.76.68.17']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4c4abbd-35c4-4ae0-9ea6-c80b4a519934", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '145.220.91.19']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a964834-88d5-4743-8b1c-b93bc3b8114a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '145.249.125.36']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c350950-8557-48a7-8b12-8ae41e75029b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.103.24.116']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9de03eff-ddeb-4865-a85b-0050745caffc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.103.24.118']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f711d9b1-fa25-49cc-aff0-71d67c3ac18b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.103.24.119']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff33c5fd-9a38-438e-98bc-3955f2e5cb24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.103.24.124']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14a2a710-7e86-4a4d-a4a6-ec27d934a7cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.103.24.126']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8fc3595-79db-4f92-9e03-159786357a2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.103.24.149']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96bff6c4-facd-40cc-a5cc-7bc9b8386593", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.103.24.150']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa6631b8-11fb-47f6-bcf7-f08c4b272d24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.103.24.151']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05e016a4-d1d5-4dc3-a247-3a25aa018009", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.103.24.156']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c932e9c4-2217-40d0-abef-1b8c00b7608a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.103.24.157']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afa0679e-324c-4b9b-a19b-86f6e0c8fc38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.103.24.158']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--864c7c63-9e48-49a0-988f-b434af08797c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.103.24.159']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eeccc3e-c0d8-45f6-8ddc-5bd9beba30bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.103.24.180']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17c7d5fa-6873-47c7-9e6c-4c4c1efd3483", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.103.24.182']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5657a64f-b953-47ae-94d0-fc874cd34ac7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.103.24.188']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54b40c29-c185-4bb8-abbc-2683fdf5c00a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.103.24.20']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c432f40d-13dc-48a4-801a-e4dd3c28e027", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.103.24.213']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1f63960-7ed6-4cc4-938a-c2d3879417a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.103.24.22']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73d7856d-4c44-4d77-9f76-2ba8f7391a20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.103.24.221']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d08dc057-8401-4116-ae01-c5214247b8ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.103.24.222']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cd19118-c26d-4863-a0fe-ced252af4ea7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.103.24.223']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d33321c1-15fe-423f-8a9c-ac2d5189d797", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.103.24.23']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bab670b0-7cc1-4789-ba1f-e689880dcbca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.103.24.244']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47f67024-5267-410a-8648-b75673372234", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.103.24.245']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80d06a89-e94a-4ce6-b3b1-1fb081b1248b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.103.24.247']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3898ed26-cabe-4f06-be2a-a35efbf7fcef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.103.24.252']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c648cb2a-72c6-4c0f-bfca-5dc2b8d26aa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.103.24.253']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0baa7b8-4f24-4454-aead-c1cbc4ad8050", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.103.24.255']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8daa0bf6-2372-4d80-b6f1-112953a5d791", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.103.24.28']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--575f1e83-b625-48e2-bf2c-df5ad8e72e34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.103.24.29']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38406183-a372-44a7-bd1b-aec3db12eb3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.103.24.30']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ab561ed-d667-4360-8757-fbe43361b9db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.103.24.31']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fad439b6-12e9-4a47-b8dc-d8ccde664265", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.103.24.53']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af531c74-1b8a-4391-ac16-b1e13c944aae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.103.24.54']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1d63f6e-ca7d-4adc-8453-55734a3e559e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.103.24.55']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3e48b4c-e394-4d46-9f13-fe818c0ce3fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.103.24.61']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90c7314e-2f94-4c6d-b529-124c391a9360", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.103.24.62']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cf48821-71d7-4f99-a176-364c19373f84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.103.24.63']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--978e99f2-4006-46ad-ad87-73f21c5e5ee5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.103.24.84']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aa26387-edda-4880-8ee7-969b78d9eef7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.103.24.85']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9663084e-a038-45c6-9481-aa3f495f21f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.103.24.86']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a949f49f-e6df-4234-8065-8421d92029e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.134.221']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56b9987e-7895-4a8e-a60c-b3ffe52938e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.149.252']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ddced4c-e458-49b3-b3db-7c6c5768617f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.153.30']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05003739-1c78-47ae-bd54-fa46695fffb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.32.131']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d265706-65d7-4e8f-a022-fecafb2f8453", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.190.84.217']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59c49ec7-4cd2-4013-bd6d-8ed4e6cc15df", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.247.123.100']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2716adc7-5691-41fd-90ff-7d61a481d355", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.59.52.63']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c964c89a-3b21-4be7-8e5d-1bd1477d8f3f", "name": "Malicious Host", "description": "Web exploits: wordpress-wlwmanifest-scan. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '146.70.40.70']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2128a935-cf32-4010-a9da-7cbdcde66718", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.40']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c03115d-2db5-4278-a054-24701eac8dfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.47']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--437f9be2-dd3b-40e6-afa2-44c8eb149f19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.55']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a91b696c-7c3d-4759-b708-9e6bda0a74fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '146.88.240.59']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91b7f9b2-0eaf-47a6-8864-24b09805d1f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.135.31.113']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7950255-714d-4dfb-9eb6-d7d22dccdfc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.202.179']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--036c1fd5-d734-4c84-abad-b77250735546", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.225.86']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daa3f389-8403-4ad3-8cac-1d9d8e1d110e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.241.81']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11123120-0914-4a20-9b02-74386ee734ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.247.10']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--134a34a1-1239-40f6-b1bb-bcb0703e4c89", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.182.248.205']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d663086-3ca3-43a8-94fb-0c4cdbbb8030", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.10']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4edd9c2e-1b11-42bf-bd7d-f14bc3f930a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.103']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dc26acc-2e5f-4189-8118-7a2435663def", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.105']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a71fc09-fc67-4b90-ac33-a28445a7b057", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.106']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c15e16f5-f8a2-42b0-b19b-f8a0025545a3", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.108']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e75fd86-7651-415a-8fd9-8ba7e8d0badb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.109']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32f77d29-6be2-407f-a86b-45dbb2e5c0a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.110']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f843f456-df57-4131-9a4e-1e1646dc2546", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.111']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6fbe0a0-72b8-498c-865e-9a81b95e777f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.112']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--199cda95-0572-47b0-afcd-58d1d132cd1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.114']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75f41533-e03d-412c-a269-888c6a54ca3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.115']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4df2f772-99a3-4244-98f7-3bf6a766d9ce", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.118']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f44e801-6c9b-40de-9bf6-c8eb6f9e0b87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.12']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a202d91-6c93-4d28-80a9-0bb4e08d939b", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.120']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eef58084-a66f-4a0a-bc48-8abbf9793b30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.123']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b88963db-49a2-48b4-990b-97413428e937", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.128']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e79fca4-c253-4b75-bd4e-8f635e5ad7dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.13']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b482e2c8-a766-447d-8256-1b3b868ba799", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.132']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--815dfb87-2612-4cbf-8714-18358ff88b1a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.135']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c0d77dd-ffbd-4b74-a9e6-dd482b2ee960", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.137']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c939d339-c3d8-41e4-b926-1d5d22ecb16e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.138']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dc5d7a2-30e8-4cfe-834f-a52b3558c05e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.139']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b9c3d56-a636-4270-9b07-0dc524c03598", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.144']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--978d9eb1-e2ef-4a68-87d2-3dbccef82764", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.147']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcd305b2-c106-43b3-9754-5c0eb05f3c3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.15']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b74c7207-d840-4ea9-bb5a-775b5989b784", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.150']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--949e955d-5a23-44a7-a673-37289c85da0f", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.162']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65072161-12ec-4d31-ab3f-0138a034bfb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.163']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e826dd1-d019-4143-9e35-52e8cf94329d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.166']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32bf2842-d1ac-49b8-8609-655c23b83c74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.167']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc7fe3d8-b99a-413d-a017-c80462b731db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.174']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49ea164c-ee68-4abc-bcce-f430d7f65519", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.177']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2abdf40f-8497-45b0-b019-78e477d2bc28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.18']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3747ee6c-0925-4157-b622-2dccd0b6be7d", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.183']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6bda4c7-1bea-43ca-ab15-5d83007295be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.189']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d2d6f40-a00e-46e2-9aae-1337b6359e2f", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.19']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d96ef9a8-a1e8-4b34-b16c-1427b5247b53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.192']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3def754-bc14-4da3-950e-5228f26c3eab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.197']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0564d86-9ccc-4c45-98ae-7b6d6e69639c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.198']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04fe8bfa-80b6-4e37-9547-b5f5005584a0", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.201']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fc6d0b7-5d16-47f7-8388-db64c5f3390f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.202']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49c90fe1-721c-4de4-b4dc-47c9a265aae8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.206']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27104501-04c1-4c81-aba7-08ad9b110927", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.207']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a40ae0f-7230-4547-9946-d6cd480d1e30", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.21']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4f95496-06b6-4bc6-9627-c29e6602b3d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.210']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54fc9d7e-6b65-481c-97a0-3919e52e0cb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.211']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7213f42c-395d-4b13-ae82-ce935c32cb81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.213']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edcc3ce5-7ef2-487c-bea7-eff1038f6ede", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.217']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e43fdc05-4772-4363-bd87-d81b13436705", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.219']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0665b28c-a2f2-4856-89e7-ef1a660426fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.22']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e0d164f-1b21-4b74-b83a-70aa8a23aee4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.220']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22a63e28-e794-49c2-b6cf-fb2a39f62a1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.221']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--215c71c2-89be-4ba8-9891-d4b560909dc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.222']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d027e94-1b7e-41a1-9b24-03f76c5d6388", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.223']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58470233-a73c-49b3-9855-a2fd4c67e857", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.224']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a19a855-107b-49f5-88c5-7d3167231ca2", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.225']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a7e7124-803f-4647-91a2-cb8f94704718", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.227']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a863886f-01c8-48fb-9f3d-9f51ef87f46a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.229']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a779a04-81f1-47c5-8feb-9f52ede27653", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.230']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09581033-b716-4cc7-90fc-84ce96b0ad30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.234']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea5d36bb-0dcb-4dc3-af65-c2c2d32e0e17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.24']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07252e98-cfc0-491e-9522-c3ffcb33ae1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.243']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5c1fb66-9ad6-4dd6-94ae-a848ec51bc22", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP, WEB activity. Sensors: cfglobal, vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.249']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:sip", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89402272-4805-4f55-ae8e-ec39096a21c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.25']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--090c6663-1f1f-4717-8e83-71e360deceba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.251']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01235d2e-2387-4934-b537-de0377477d53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.253']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb211051-82bd-4a68-a417-27cd74d82902", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.255']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e360ac3e-5fcd-46d8-ac5d-83c030a32c8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.27']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98f41858-449b-4753-84cb-750de23c9dd7", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.28']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3f78b69-bf62-4fe2-b603-4aa5df5d7ad1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.31']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0972954c-ab61-4f79-87a1-65d5fbe0a48e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.33']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed9865a5-6fb6-4a86-962e-5fef29b3be51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.36']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af2c7c46-0036-49dc-bf53-2ff473322768", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.37']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc876b2e-073c-45c2-b4f0-4d600362b096", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.41']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63cf8c5c-d28f-437f-b775-20c9e014636d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.43']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12409b51-6cd6-4069-9688-04f9e0cc8209", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.44']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dea989e-5809-42f7-b203-55ec7a2dda39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.45']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3649a46-3947-4117-b424-f1d741a7a828", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.48']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b54d0870-7ee5-491c-bea8-3480f13edf98", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.49']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d205fea-bb29-4518-ae43-9741be20c370", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.51']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27dd3ccb-ae7d-414d-93af-b00a660ebc1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.52']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8a48450-6998-4190-9537-f0afadc7072a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.55']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f0e9117-05e1-4781-bb59-94857b5404f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.58']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7146e94b-1ef5-4e6b-9db1-6897b05fcb9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.60']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2255b919-39fd-413a-b04a-62890fff2c26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.65']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec87ea31-c07f-42d8-9d74-e3bc04711ddd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.66']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2482c56-c409-4677-b6d2-8fe34dd55bf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.67']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8e000e7-a890-4764-971d-f9c5467bc236", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.69']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5fecb6e-b6fc-4b0f-b03e-936f217049e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.70']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f6b624f-0d3f-4a59-99e4-412c79576628", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.72']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba5fcc16-4f0c-4cae-877b-d747fbed365a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.73']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23b8e50c-5ecb-4e59-9336-c463fe4d286e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.75']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c063059-f470-41bd-b931-b8a796d30bfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.79']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d637df1e-beee-4122-9f95-638ecf3c8e14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.82']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46542c88-e007-45bc-a129-93d628299991", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.85']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23c36c78-9f7c-463b-9cd7-f6be3bd49031", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.88']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2e1c492-ee6b-4c62-824b-d458f22930f9", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.9']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75d3478c-0903-4772-af11-35b451d0d882", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.94']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7d37d8c-55c6-4572-9f5b-479006bb3bf9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.97']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bba1313-63d6-441c-9e9c-920015ea4baf", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.132.99']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abffcb72-47ac-410e-8cf7-b5c0e7eab6b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.10']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27d9cce8-7e3c-4612-9e86-c95a180e9271", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.102']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72fe006d-06f9-454d-85c9-06f2b4a86af4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.104']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6da652e0-955e-4b13-a861-88f884a4658a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.106']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50760d1c-b864-4df1-a78a-0d025f902d61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.116']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b19185a-5e59-4579-8c4a-5643b7f7aa72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.12']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea1de168-e9c3-45a8-85b6-c3bba9efc8ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.126']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4ce4000-2b33-427e-9a66-0d7f2edbcf96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.135']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db8bec33-18bb-4862-9d5d-c13ecc0a2fb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.153']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29cecca6-e1e3-4b53-be06-b9f96152701b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.154']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7365e48a-317f-4e15-a137-52fa6c8e1ed7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.16']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecbe1f6d-7ce1-4d24-9285-2f8258cb00bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.161']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5103ef40-9377-475d-ac6e-56992a247c08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.162']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a00da079-e673-4baa-becd-0100fb5e485c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.168']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e4a16c7-9007-4a3b-a8a7-44904879372e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.169']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--778c2255-02cc-4d1c-a623-5ee3ac023c7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.170']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e02a034-f8cc-4067-b1a4-75f819d77633", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.171']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd3098cb-8ec3-4fee-b038-3eaf91a6c5d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.179']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09143398-c6ff-4cdd-a717-f7c15d998998", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.188']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--262f9c93-d84e-4506-b120-018dea50328c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.192']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cac99b15-e9d0-4b4c-a6a3-076a641c8de2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.193']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14e46302-2f3a-4c19-9d49-c2f63af05b74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.199']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96e27a86-1995-4466-81ab-07e2991efe25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.201']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45538e17-207e-437a-b1a5-9c7326a27b63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.203']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fa021de-6a73-4fed-a2f1-2eeff4b5b859", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.207']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55ac98c3-8ae6-4ed3-a40c-96b04dd092d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.209']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bad13dbc-06e7-4ea8-81c5-fd30fca79edd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.220']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3cf423f-7321-4ada-bee0-1db95086bca3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.226']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad3ef79d-e1e9-4049-8d8d-5f130e527b59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.227']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a62b4f61-cb51-4919-bf9f-2161643c70fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.230']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd7f80ab-df84-4a21-86bf-82d723e6383a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.240']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b685d0f6-4ad5-48e5-8429-8a4218e84f29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.241']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6f9f94b-8e33-4956-8d81-a792e398fbcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.247']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--162eeb5f-8687-4bea-b298-d540c81892c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.251']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e9f2ac2-8bb8-4c4d-8dee-482a532b3a14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.254']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3ad6abf-b771-40d8-a6db-2cf4c85c613f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.37']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--386d4eea-8ef0-4e40-8705-2d249222cec4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.44']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6527e4bb-7be7-45b3-89d4-273cc9496f19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.46']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--583a5a4f-cb64-4a41-b4ff-5469423ac80b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.58']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15c54e1b-5cf7-41f4-a423-80f8e00203b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.62']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ff85184-fae1-4190-9a4d-64b19eaff6d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.65']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d092bbda-4e7a-43d5-be36-1dfd2b973fb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.73']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--650b37f1-d6da-46a8-ba34-b5724e488460", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.77']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--377b832c-e237-4537-acb9-ad3c3e4667ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.87']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aa261db-c112-42e7-8eb6-b5e02c61f175", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.88']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9323872f-ef37-4b3a-ab56-a70201f98eb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.9']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57c78575-3d20-49c2-9773-1551e4babd5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.185.133.99']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a771d914-9a2f-45de-a2b9-2c76dab9417a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '147.93.144.116']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06c2984f-aec7-4b59-91c6-032e5fdec9bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.188.254']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5042d5b8-af36-4da6-bf6c-ef60e3db9f63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.56.170']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c722474-5f37-4da0-bdc9-f9a812006d58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.56.174']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ededa579-9f59-403b-8ff8-113a97af8d77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.153.56.62']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1fadd20-14a2-4e6b-8577-7ed2df54f066", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '148.243.170.66']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f4c916b-5c1a-4291-b556-e6e3b0ccf736", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.46.5.53']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d144e003-644d-4537-8259-a40f477d01a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.50.115.15']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--825715ea-fb1c-409a-889b-0e73686a0aad", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.50.208.196']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--480cec9a-9723-482b-881f-d78126ff77b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '149.78.37.133']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4e221cf-8e60-4718-92c9-14564ea2f5d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.235.119.56']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af2a1637-f9c7-40f0-a7ea-ae1f3238795d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '15.235.162.23']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c454d27d-3b60-4e3b-9810-dd4bc7371f93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.107.38.251']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db1de61f-65bd-4ffa-a36a-e7f02faaa8b9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.109.21.31']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ce14fec-0ccd-4a38-b9c2-12a7a0e6eb74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.255.101.37']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1aed024-8267-4d76-92f6-7fa767c2c5af", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.4']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4b0dcc6-6e38-4b4e-93ce-64537f2056cc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.64']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2fa5789-c209-4022-9c17-8d46e95ee395", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '150.5.132.93']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2b2b02e-abd5-40d6-929f-1f883b101cbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.145.197.35']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b59761a8-6aa3-4a24-bb68-5fa481e360fc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.242.201.112']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f79dfff9-33f9-41e0-a298-9fbe031e0240", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.150']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df98f5a8-8304-4073-8263-760e83bf1e89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.151']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c7af3a1-27c7-46d0-816a-d60f5fcb0c96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.152']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80377602-e8a5-48a2-ab99-f06ed6fe3cf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.153']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7973305a-f14b-418b-9ec9-c863945146e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.154']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47691f5d-b9c4-4206-94dd-bc74076fafcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.155']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d97388f-6eb9-409a-9c8d-b8d8515d3362", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.156']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01be04db-acd9-42aa-b8e2-84f5771845e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.157']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f02f260d-6b78-453e-a63d-42e5da142cb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.158']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb46402a-f654-43a4-ac40-f0a0aec00dd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.159']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7998eee2-2fa3-483d-af57-945ce17bb560", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.160']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c896424-a8d7-4fe7-aabd-480c0f9b9bd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.161']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d620a324-d4b4-4288-ad05-b6e5faf46326", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.162']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ccca45c-cc40-4d56-be38-b2e29c2ba9a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.163']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d81c10f-e0bd-4267-ab55-ab072571a279", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.164']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce2f7769-c13b-4ff6-9025-d166c4ef4d36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.165']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d899df2c-1723-45b4-8948-ef563ccf7eda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.166']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cae90e6d-e08c-4ac0-92d7-d43a98c060df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.167']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20df6a31-536a-463d-850a-4ce731914729", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.168']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e5a4c10-e1db-4416-a71a-e3d0431b11d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.169']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d5acd14-a44f-4efe-a35f-e9d7544ecf61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.243.11.208']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1117661a-5371-4443-a7d1-cc19132ea792", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.244.155.88']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a727ef6-092b-4f18-b262-2e3a9aa90464", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.244.159.82']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d37b6cd-2797-4986-82f0-adb3abb53bbf", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.245.151.114']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10d28625-1aca-4c9d-bf2c-eeb0232fa86c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.245.151.12']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8248f6cf-6c81-4c93-beb3-f03bfcd3c275", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.245.151.128']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d726f28-ce07-499d-91ef-a86f1a8b2ffa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.245.151.139']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cacdda26-6d7c-4bb7-a6c2-8855ffd0b2a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.245.151.14']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85950b3f-aeba-424f-a632-1492472e07a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.245.151.140']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b847853-9350-4afc-97be-f86f85e5ea95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.245.151.153']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--073b5d5f-a93e-4552-98d9-295aef3b1a8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.245.151.169']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5251a0ea-9538-418b-af81-67f5ae6c4cd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.245.151.236']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12ca021c-6868-4ddc-8bdc-ce8fac4c0aa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.245.151.34']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8577847-806f-44ec-a8d5-6789885d0639", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.245.151.76']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9f93d1b-d5c3-4a60-be8e-c2ba8866aa6a", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.64.203.59']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53677223-380d-4fad-a768-347880271c1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '151.80.234.64']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4324bc60-63c4-4bb0-bf71-aaf970d00906", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.114.207.125']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b052fc5a-6943-40ea-9c9c-54c8d83f7d12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.114.207.189']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1b1c153-37c9-4b00-9729-bf3c2066b463", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.169.164.2']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6efed168-1050-4aa1-9a5f-84c298cc1929", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.128.214']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--579e89e7-4aa7-4726-8f46-0114a5f8dfe2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.128.85']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1d7029e-d650-44ab-b02a-4cd782a492e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.129.154']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a92140b2-4661-4838-b02a-c322fc1e0302", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.130.155']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccbf43a2-68c5-4590-a00a-5df1758ee414", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.130.191']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4344bcd6-43a8-41f5-babe-599a20f812a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.133.103']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54d127f6-3441-4f23-a36c-c26c52e2f7f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.135.214']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--365dd2b3-842b-4033-86ba-9cfab3eb226b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.135.81']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acc8516d-fc5c-4ef3-96bc-959ebf6cba54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.138.230']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--469642d0-a8d6-4404-9e33-c2f0df8729bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.139.9']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e98e2659-3579-4c67-a6c7-8dbb6a7189fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.140.12']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34d73682-7b3e-4836-b276-ba168d81d37a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.217']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e402b97-4fff-4105-bd9d-65f878253d04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.141.40']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8942152-48cf-4fd6-a88b-c6a95e828bcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.143.189']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8c51e19-f504-4290-9bfb-35bc66ed4ead", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.148.140']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6d8df12-10cc-4edc-a8d2-2220b28acd65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.149.118']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--328f1682-928c-41e1-9666-2f8593183c44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.149.35']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f9fee4e-d4bb-4ae4-a67d-dfc95956300d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.150.117']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf471c5c-1038-45b3-96af-f8d8434acc24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.151.121']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c55710a5-7f02-478e-9691-835212a3f6e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.151.128']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ae982f2-586b-4e09-b3da-ef26e0606139", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.153.53']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--152ca983-c260-4562-b9f9-34890d6b7124", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.117']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0072d540-45c1-4fa7-abb7-607f49bb0e52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.156.95']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37da378e-b5b1-4b41-8162-9480a2d5b7f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.157.173']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70ec7713-30c1-45f9-9c8c-764392a8cf31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.157.92']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b08f3312-dc5f-42d2-8460-fd579d4afdb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.159.180']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0aaa196a-dfee-400c-94ba-57d27e3e8ac2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.160.252']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2089dbba-57c4-4473-bd6d-2f5adc6d7e55", "name": "Malicious Host", "description": "Web exploits: mitre-t1190. CVEs: CVE-2022-22274, CVE-2023-0656. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.172.65']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22274", "external_id": "CVE-2022-22274"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-0656", "external_id": "CVE-2023-0656"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5d4602ba-30dc-48f2-99b8-e47eb0c24c95", "relationship_type": "indicates", "source_ref": "indicator--2089dbba-57c4-4473-bd6d-2f5adc6d7e55", "target_ref": "vulnerability--7981112b-110c-4ce1-bd6d-9361a9d00747", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6b6be544-9ae4-4a12-97ca-93143ed9735a", "relationship_type": "indicates", "source_ref": "indicator--2089dbba-57c4-4473-bd6d-2f5adc6d7e55", "target_ref": "vulnerability--611e800c-c845-478a-b4bc-40f780f1b283", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af137565-549a-4191-b54c-0c2fc99b38ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.180.86']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--434fe1c1-f800-4122-b7e8-9638f492a296", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.181.210']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f260ed7-98c0-4b28-b2e3-809bedae12fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.182.165']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--976928b2-4743-4847-99fd-52435f5b633d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.163']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--586a45ab-1c21-4a35-981f-73635077fbeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.22']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b122bce-ab84-4a0c-8c7e-80e517f97a12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.231']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3deb3ace-bb66-4571-bdd1-a8cd89d8918b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.183.27']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1389650c-46f7-4bfd-900b-5a5d1912debc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.185.141']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3abfdc1-109f-40bf-9c05-5ae31f64d171", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.188.207']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc8b5d6b-11bb-4af2-8916-9ac24ec1d849", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.197.12']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3af1af8d-e5a4-4050-9fe1-9919f879270a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.197.121']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfd22410-c81c-4783-a2b7-cf02ad7584b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.193']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--867034c4-ab1c-4305-89bf-891e0724a329", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.205.228']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a8e055a-a6c7-444d-87df-a8a235558409", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.246']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0d49c93-0129-47a8-8c6e-d583b6074707", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.38']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2165143-cb67-415f-9345-f75737c4a894", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.49']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b80b9938-4cfe-4d3a-b22a-0463fa982194", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.83']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b403797-5679-4abb-be40-cb537e9f0abd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.206.87']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e84ed63-e97d-421b-9d66-c663cd391485", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.172']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5338538b-831f-4af8-9b64-21597bb2c4a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.207.229']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99b415c4-a3b0-4d1b-a5b5-b084c4455a32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.208.169']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f71cf083-76cf-45c5-b1aa-3d63085dda0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.209.62']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa40040f-e88c-4533-a47f-41e71b5124b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.213.86']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bac524c-3327-49da-8938-ff8b3c9320c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.216.28']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba818bf7-a6a8-42d9-878c-14ec3d788141", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.225.11']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39b0660e-03c3-4f16-9fb0-e4ae183d0f41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.225.99']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67a55c6e-70dc-4e51-a4e2-da80717cb8bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.233.95']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a9db144-2855-478b-8687-72851ff6874d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.180']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f362cbf-241e-4ef6-b314-7576578af922", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.36']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c277f28f-3fb3-4520-acff-142723fd6db6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.6']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aaeb49e-ee9e-4237-9d44-b801afdc6f52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.235.90']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70b29448-8746-4ba1-a5ce-8501903ffc73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.239.15']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5979edc5-2ec5-4960-b728-3aa6f6b563e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.243.245']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ee43ba0-15ad-4772-bec5-c463be448587", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.243.98']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad11e8d3-fb03-4ca3-abbc-d1390fb897c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.245.196']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12065d04-b39e-4834-88df-d842b5ce95f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.245.27']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33a75244-0cb1-40d5-a69a-87743ee77a9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.247.23']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a56a572f-0f7b-465e-bf1e-2aff758e252f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.247.54']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--837a17ba-d8d4-4c30-93d8-2f68212fcd2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.249.95']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31392abb-d639-4ebf-a48c-5e4f4a9881a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.250.36']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63b89c0f-ec7d-4b79-9a4b-8cd999b1262e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.32.251.44']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af862ef2-f863-4f3c-b998-1512796c940e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.101.249']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a71391e-60cc-42a7-86e5-704ba26f29b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.169.213']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--827bb8f5-fa61-49dc-9ac2-948d51b0c36e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.241.94']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ac7bdd6-c549-4992-bfd3-394c28c9dc6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.53.3.237']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2297c3ca-bf22-45bd-b820-500b396fc5e7", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.59.119.255']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c872b48-0864-43ac-af28-f1e15fc8dac1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '152.89.199.113']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc3f2580-19c7-4035-b532-7bf3079c8b90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.117.127.52']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e96b3508-3a5c-4e58-a519-51479d5ef50d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.117.13.163']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8adf642-a51c-4e3d-b217-6562bff5bb14", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.117.13.206']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f98844e5-9411-4d21-bf0d-7188c3622361", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.117.24.69']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a07e0d52-756a-425a-807d-b6137e250ae4", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.117.33.173']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93b8e8c3-964c-4841-9ac3-f29934abec51", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.117.33.231']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3c1d44b-80e7-48d1-a759-789f8892917a", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.117.37.208']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--224e257d-7134-4e21-bc84-90567d10be67", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.117.48.96']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33aa9ce4-662e-4ec2-be29-0a2777647529", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.117.68.47']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--204a3219-49ef-4a5a-b38e-c593c5c89c67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.120.37.210']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a6b4686-59f7-4f21-8472-1599dfad918c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.151.220.86']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6513cd8-a486-4374-a294-4ef76b0311e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '153.99.92.11']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5a89f69-00c4-47ec-9ea6-39a6559882c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.197.56.163']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09938acf-4c3e-41e1-a4aa-af51d337b640", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.201.0.69']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5ded76c-62ee-4bff-a516-545c99f4ef83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '154.92.133.141']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--608b5f52-a690-4bc8-a662-b5d63b9321d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '155.133.26.49']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20fa0a79-7d86-4168-9f82-3b358452d0c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '155.248.229.150']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32be140a-e188-45a5-8ef8-4d599fc3a219", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.146.23.114']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90dfd771-e627-49d7-a939-1f273e41515f", "name": "Malicious Host", "description": "Web exploits: wordpress-wlwmanifest-scan. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '156.146.33.74']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0131609e-6593-4f10-a27a-c71b533b8c3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.225.1.10']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0724b649-a4f6-4268-a7ea-aa359f12836d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.225.1.31']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--341099f9-be68-47d3-9cb0-3abba542f8f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.225.1.33']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f44745f-c579-40ff-a9ad-b10e8334565f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.225.1.86']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0883a817-7e09-4070-a3f4-9033bae28814", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.225.1.87']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb32a72d-db68-466d-a609-6a644c56977a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.225.1.98']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fe5d014-a780-4bf0-a349-e6adf17665f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.225.1.99']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b98d8df0-3591-4c81-91bb-86f82e655364", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '156.67.31.88']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed44f27a-dd64-4ca3-8cef-f68db5a408e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.10.45.192']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7d07d56-2469-4cac-b347-9e9066f779ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.20.144.241']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cab535b-1990-4d2d-aade-61ac3bffc4e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.180.149']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53505450-5bd4-497a-b69e-6ba6877c72eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.21.162']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f83c727-5a2d-447f-90d0-bd5cfdb388b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.229.99']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--627f6f4c-525a-403d-939d-63799030ebf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.57.251']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14848ebe-d19d-4195-9736-02982963a684", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.230.88.252']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3a3edbb-7386-41d7-95f6-4e630064b1d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.222.108']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc0b6c17-3110-448b-9655-9ed531c4eb5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '157.245.239.90']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--264ee053-8224-4eb1-ac18-959bca972a26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.178.224.239']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20d512c2-1020-4e09-aa81-31f369c00549", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '158.220.86.73']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8ca9361-41d7-459b-9c35-67e19d8f7289", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.40.210']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77ebabfb-a0a4-43c7-8d8b-a5241da2eb6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.203.45.74']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39f9017a-2651-4e64-b86e-2ff86ed772d5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.144.34']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6752d9f1-1c6d-4207-8311-5ada1d52805e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.149.179']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--636ff874-62b3-41cd-8fef-69f18703d392", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.223.211.255']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3682c87f-8bce-48a0-b348-55e862826896", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.65.168.103']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd9f2e02-926d-4875-bb88-97f21f2ea524", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.124.112']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e0c38a5-d8b3-48b5-a51c-fa363f42010f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '159.89.23.251']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2a54510-0cf2-4a23-9f4c-3ab4d90cd61a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '16.176.125.156']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcb18285-91e5-415d-95e3-ad64c6648e9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '16.176.125.246']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1753b5d3-2c97-493f-8dab-2eb754e47024", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '16.5.0.236']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30f86c80-5fbd-4420-a942-f3f9ecc13fe9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '16.5.0.244']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc59fa8a-37b3-42a2-911b-94b64250c493", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '16.5.0.245']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53bedcaf-e44d-40a2-b05e-546cc0d1d7a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.66.49']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f55613f7-602e-43c8-9489-018034934d43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.69.16']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a3d9cb1-b073-4410-892d-184cbb3fc6ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.71.92']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--281e0c29-8f93-4a28-8867-7beec1fa160c", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.76.119']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd1b312e-17ec-42aa-ab45-1cfafdb69cfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.76.210']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--259e94a7-5c2f-4201-b658-0f32d242a0f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.76.24']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f434678a-57e5-4096-8b07-99d8307ef535", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.119.76.54']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da6cdd1e-4b95-452d-b6c5-e6cbd3d34806", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.179.75.70']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73cc2b63-801c-4627-8c16-29f529088e6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.187.141.76']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecb0ac51-0777-412b-a4aa-5fcae5720d26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.250.131.238']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af7db436-96a1-4de1-98d9-402c8ea1f86a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.250.181.123']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a336a8c1-1c90-4514-9ed1-db596c6f251f", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '160.251.202.248']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2418d8f0-060b-48d4-a1ae-af7a4eb6780f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.132.52.57']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3388023-24ef-44f0-bd49-e007d679dae7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.248.14.39']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c831c76-285d-47ac-aa4f-059158bd2b8e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.103.199']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2a34816-ef88-4bac-9140-18cf43658ad3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.11.10']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93005ac4-906e-46be-b4ae-6d3948dbc64b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.155.10']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e1d2c77-e0d2-43f5-93c3-b66089aa9c7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.190.246']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d21dc03d-d330-4652-82c0-13c72324e7ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.204.138']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8db58c0a-adda-4d2f-a634-359eebeb2b49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '161.35.78.110']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad80250e-6f7c-471e-8524-87340a80b0cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.17.163.226']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0d3e831-43b8-49a3-9177-8de79f6ba827", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.19.128.94']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a32f19ee-dca3-4631-8b99-df7c2b46faf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.19.181.177']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdc7f319-9f29-41a3-98a0-675ded9e2789", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.19.19.234']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8fedcdb-a1c7-4450-ad38-38e704275cba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.10']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9095835b-a0b8-4af9-a6ac-df1643095d54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.101']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5136395-0581-4cdf-9b8a-15852a4b380f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.104']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--677f156a-043c-40d5-935f-343ac1a494bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.112']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e675dcaf-643a-4275-af7a-72396c686674", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.124']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a53dcce6-3885-405d-ac17-c33fef21c278", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.127']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08325066-9e8d-4a25-8a08-7b7cd5bd3ddb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.13']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dea46e9-b55a-4e0c-a139-63bb1b58a5b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.135']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69f0f15d-252f-4de9-909d-2317fbb6e3ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.138']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--819a17f1-ad9b-474f-8b8a-258f5e15fa8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.139']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b0fdbb3-bab0-4f88-a7af-de2fff3aa09a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.14']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6695533-24e5-423f-9839-4871f2f233bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.148']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd650e86-0c7c-4baf-a394-73a240c2a423", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.152']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7de2751e-1b75-48d9-9afe-5422a196cc85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.158']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2acb6f8d-0ada-4d70-9d56-c54d79db5f06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.16']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d8f1793-10ab-4ed5-8244-ffb5bdd3b4f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.167']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30fe5092-2270-4411-b7a0-750ba0cd097c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.175']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bed177bb-4739-437a-b090-1527670a960b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.181']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e56f3344-8409-42e0-8cf1-da6ded249a89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.185']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a22175c-49ff-4518-a932-79d360e1f7a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.196']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a71513f-9ea2-4e67-be99-0657aa1c100c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.199']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a9f634d-2754-4b5d-8007-25db793886ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.203']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f551b5b-5549-4fa9-acdd-2a89e2d5fe3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.209']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51acadb2-16fa-4a4e-b6a4-7692e2a3cec8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.215']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1e444d2-798c-4358-b4f9-32b72993a2e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.229']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f6245a2-5357-4629-bebd-bedffa7231b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.230']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3685fb03-123d-4453-8f91-176f223e3a86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.233']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dc6fd36-20fe-471b-be12-c9d15fdc6c88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.24']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5249692-a43b-4706-833a-f9fc4ff87158", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.242']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fde523de-afb9-4156-be0e-977c300f8de4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.245']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a81b284-612a-46cd-8044-6314853ba024", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.26']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef8ac7b4-72d9-49a3-9c06-130506a48fe5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.27']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63420af1-cae0-40c9-ae26-7148e8b97373", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.29']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5b0897c-93d1-429e-b7c5-535a55c36c84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.30']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67141a42-47c5-49e5-b190-c3595cb06d50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.33']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69ae33eb-ee74-4498-90f2-94f375dc77d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.41']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f1dc238-852d-4bb9-8e3a-647b30098bd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.51']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fd112e6-3350-46d4-a389-3e379fbcd355", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.52']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dfe3697-cd1a-4668-974c-7fb7081758bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.53']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b24bab59-6105-4a51-af56-7e561dba4c64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.57']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40f2c13c-10b7-4ec2-9bb1-5d8a09b15e6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.66']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d77bc04d-26a6-4ca6-ad72-4d7b3e2785ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.72']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25f8304f-e67e-41f4-a20b-46c1395edbce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.76']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f147402-73e1-4366-8e92-9ab0b43dc554", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.9']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9795c5e5-6be1-4a7f-acd3-0148dff22c6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.94']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69bdb019-78cc-4df1-aa39-5058bb72bdb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.95']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94b2aeef-a5ac-41ed-9678-efcc868a9c5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.149.97']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--141ea6bd-1c8c-4559-9603-1590a1cc1520", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.101']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d58b958a-ea48-4454-8123-ed726367053c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.113']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5987085f-e133-4273-9f66-50fad862741e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.121']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4b16842-ae8d-404a-8bd1-5bc8cb8f620f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.123']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62585118-6598-4f64-9a50-5d8f05699801", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.126']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c08cf55-28d3-4df4-ae9a-5e33b8bf9895", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.13']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5184835-e841-4d5a-85ac-6a89ba3bf90c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.135']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1f6d843-93d5-4a20-a1f3-4d59ed07f1a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.146']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--676584e7-c3c3-4043-8a8e-89d6997f3eb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.148']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62388d71-ec30-4da4-a609-6fe61c477580", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.151']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34d7f5e3-36c9-442b-9ceb-795062ebc20b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.163']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--973673c4-34cc-4249-88a1-2763ead659f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.164']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2a316eb-3c17-4982-9569-44a411bd558b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.178']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed174a80-8968-474d-8494-097cc0f5cfe5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.179']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a2f550c-409d-487e-8686-3a54959b092e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.18']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceabd657-aa88-4c0a-825b-d714a5bb56da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.181']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2abceade-b48c-4c63-841d-870594e4708f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.183']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59c499f6-e60d-4b20-adb1-314aa2b97018", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.193']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4706753-496b-42d9-a586-e22658c6960c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.194']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66a03e2e-da20-461f-a0e2-7b0a84e9d0f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.195']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6a71cfe-4523-4320-8289-97632e2709dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.20']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21618037-ee69-459c-bc2d-e63386f1dd2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.203']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b15eaccc-63e7-4a57-8f6f-03e3a0fddaf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.204']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c09dbe13-5a0b-41ec-bd11-7d93075b1d5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.210']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be494e39-5b73-4c07-ac3e-eff8dcfbbca1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.212']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0f09c1e-d86b-482a-abbe-c7475d9c8a71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.238']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5a98401-ca69-48d9-ac7a-3b2046abf092", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.242']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08884bff-5d40-4702-9b65-13d0cb4f9cce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.248']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--157a47dc-8e5e-4853-af5b-043552323fc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.25']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75effd03-271d-402a-ae3a-8a6986f06f70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.37']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f84cc501-e4c0-4c34-941f-043cf96618f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.46']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3dc08ea-e320-4bc4-9e44-9c053bfe4dde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.47']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de5592b1-d8b6-41ee-b1ce-26be07b242ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.5']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf45ed65-057d-4265-9a72-f18925a9fd1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.53']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c588f1a-3939-42b5-a891-a072bd528b09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.59']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dafe01b7-c952-4a5e-a25c-7063269c15c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.62']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d14ba35a-7988-4539-8cdf-80919a5c8247", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.63']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d502a4d-a025-45d5-b0b6-c823515ee6a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.74']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ab66c97-c7c8-4ab8-8672-b048b067a527", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.87']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b418941d-df1f-40f8-a3a7-ea3b990b34ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.89']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--319c4b57-ecc8-41fb-9da2-7790cdaadfc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.97']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59ad3e72-94d9-40cb-a9bf-740a8e6233d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.150.98']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--333af4b0-c014-4c16-a34c-538abc110517", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.216.18.113']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e8235ad-4ab1-431a-a09c-80d06b5f5553", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.217.103.70']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f27e849-bd23-4869-8f2c-91e0bb5713d6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.243.147.237']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3fa163b-49bc-4c15-aeb4-5bde9dbf0738", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.243.6.224']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9db7a702-0ae7-44fc-a0f6-ae306b955474", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '162.62.213.165']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c71df0c8-1a0e-4332-bdf8-fdfcddfdd020", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.172.214.79']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e44375f-7697-4733-be8c-7c0576eb4b98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.176.48.196']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--280a16b7-3688-46d2-991c-b7e781b826e9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.14.140']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--785e096a-9b76-4ed7-b752-9c2fcc1333a2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.15.108']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b0a1277-42f0-4922-894f-373db8e3b22a", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '163.7.3.154']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4de962ed-23d4-4bc4-9ead-475b9821f17c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.52.24.184']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89ea6fdd-eb4a-4595-86b2-e86c7fe73153", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.52.24.190']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b1db35c-6d2e-4701-a188-09589db2c3a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.90.169.183']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cca8a813-ddc3-4bf3-8d5c-e663e798e7c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.90.202.72']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45ad9965-0d41-43f8-82bd-c75f04bfa331", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.106.15']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1886c8d6-d25d-4253-bd39-a78858fa2992", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.114.247']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86014c9b-35c6-40e2-a7bd-5c19e61f3c70", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.221.186']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b4ad513-55ce-4538-b43f-6ede618e2afe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.82.91']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29bb405a-da80-4b52-b31f-93e7b151ed1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '164.92.85.245']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77165593-162e-4125-bbf4-5b539bc962c6", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.101.40.180']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56089fa0-182f-4cc1-b061-86b5c537d1e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.100.42']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2852189-db3d-43ac-9afa-b6c777068148", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.100.56']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0bb6281-3ae4-4a3c-a58e-b4e6b379be2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.100.58']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab7f7d6b-16f0-4a16-8bd1-da8756894ed2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.225']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9384833c-6fcb-41f0-81d2-c5f4cac974a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.11.48']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b95a1dd-da1f-4e87-b044-59afb038e5fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.119.158']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--363b0183-fcc8-4e48-ac8a-dae1d9a2628a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.119.217']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--106bf5fa-0b42-4336-b2a6-39e1fbec8cbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.211']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7c09d55-a4bd-4faf-b275-b0b2d1361211", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.223']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fec6c09-676b-4d66-85c9-4b84dc8d3dfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.226']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--723c11a8-114b-42a6-a23a-d88063e27629", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.29']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--350e93f1-0a5c-4255-a15d-cd5e7da65d03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.30']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--373a955c-58d6-4a18-a2c5-dd9c4cc5d28d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.120.89']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa6f6c33-d221-4f5b-a137-6f9861c466eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.128.17']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdb7ae56-995d-4a03-8db3-de92cb68b202", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.151']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b8a8710-a2f1-4467-bf8f-06c12e06635a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.188']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--514ff097-73f0-49b3-895e-dbcba3af0806", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.129.201']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34ede16d-fdb5-49a6-b871-74946f409b69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.19']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db06e91c-a6e8-44c7-8a54-507266d18261", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.134.22']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d60f670-bc87-4afe-a490-55553dba1ca4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.210']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--711f022c-808d-4689-b2ea-11148ba20754", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.135.215']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a51b4b0-2de7-4c34-890a-632d2058d2be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.136.52']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58e9ed23-ce39-4ff0-bed6-81a5feb2ad86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.138.3']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d78c5b3-afe8-447e-949f-4f1435c37ba5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.162.212']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3648bd81-7cc6-4fec-867b-3850cffa9acc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.10']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f07f1a2-1a93-41a3-8a68-e5162099c93d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.163.199']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8868f46-5251-4337-bad8-2ffe2d46bee9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.164.112']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6424bd8-8084-4343-ad8d-c8b007b6bc6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.164.114']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb3fb54f-ebb6-48e1-b04b-deef798d93ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.164.79']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73034a89-8b86-4528-b5c1-3a15ebef8bca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.111']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a0964ee-33d0-45a6-b5fe-3d282f9a367a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.200']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86cb783e-ac6d-4a88-be65-1ee30e8c38d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.87']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9824a62f-14db-45ce-bbf6-c5874a57df3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.172.88']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b210a017-c1ce-4013-bebb-1eff92929b42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.104']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53ad1c25-66f8-4c1b-a377-66c1e35cb86c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.120']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b752027d-e78f-4fb1-bb6b-b243309b5257", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.211']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cdb73aa-1abc-4b02-9ac6-2629bd1737b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.226']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d146b55-2c46-4ff4-9824-58e68e331d11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.173.35']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc362052-a514-446d-8bbd-d0b029a5abb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.174.206']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8addabde-624e-4005-a772-8c39f5c48e92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.154']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d7dd4e1-d106-42c6-835f-5971634c5c29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.174']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee8db7b8-2934-4faf-95d2-f37a0dac84af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.219']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cce275c2-2c8b-49a5-8ce9-cc0d095eb6d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.223']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aea233a8-6f35-4dc0-8676-d9801bdd8b8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.53']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb1e261d-b919-4797-8204-8fbb4a895d43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.182.72']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f2a228c-668a-45a1-8103-f7075c5ae69a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.206.223']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68344871-55de-4fc6-9c45-8b2df25fdd1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.225.20']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8a021e2-3eef-49f2-8f1f-b483bc9d608a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.32.235']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4b706a2-0717-482d-99d2-fbff22b758cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.33.91']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06a194f2-61c4-4f9c-baf5-48193bbe0919", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.102']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39a04853-99b8-4403-bd06-2caf5449b9fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.177']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24e903b3-777c-4341-8c93-3085a90a0b07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.218']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02cfc7bb-bb1d-4153-80fb-7351ae0d9ff7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.36.243']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--076a7b3d-fd04-4394-b854-36c7df2755a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.244']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a80a7934-6182-4d27-a55c-503150f05676", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.40.42']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--166b0b81-cabf-4575-9981-59eb89faecfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.182']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d265872-4875-49e0-b0e3-ff2278a68af1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.201']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--141f6eae-51c4-4ff8-bcde-b4d037e474f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.205']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21dc76b6-ed8d-41fb-8f83-95555815205f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.47']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5416c12c-2eed-4f1b-b507-362db82fb2c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.50']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24b49508-97e0-4787-a742-3466bfe032e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.41.6']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38eed770-e46f-4e08-b5cd-0490e1b5a966", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.49.137']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aab1bebf-2489-4be8-8f2a-72e84f565d9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.225']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17949ba9-f8a2-43fb-8c02-4133a7387a00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.51.90']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3062aac-c9a4-471b-93c8-3ba4c19b3a3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.154.58.251']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--911946da-bcc3-4100-9896-b4b3045d8a2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.169.161.242']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fa1c983-8b88-464c-b0b4-2c7084ae7f22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.16.79']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02e4f5c2-c0e3-4b77-acde-a5d69b649dde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.22.5.240']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--205c8b3d-cf0c-4b11-b429-57dc522926a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.110.45']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2fbe025-2a71-4174-9930-17b912f13ed5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.172.206']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a191ac07-869c-4839-b354-819b190ee9e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.188.42']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c409f7e1-43a2-4f3d-86e5-c1b172cb6009", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.227.199.115']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ee9429a-a52c-47b7-aaa5-7051b47923d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.232.49.67']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c06c246-dd87-449f-a15d-2cce3bab3d62", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.50.59.106']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f6f249b-db6f-4bc4-af23-b222e6480bab", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '165.99.16.135']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc921b3f-c09e-4040-bf74-aed7bfea6d44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.0']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d654f2fd-8388-4c19-b0cb-82bc368b59b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.1']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8880a4d-c216-462f-8b6d-4938611f2255", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.100']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f979bc67-bf95-45b6-ba39-ecd350b5bd09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.102']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e05ea380-a726-43ad-82ef-771b642eecea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.103']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99ea2f72-c475-4c51-828f-f371b0ca4c64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.105']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6576362f-d4be-4687-bdf4-00f144ffbf6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.106']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee3ac251-e765-4a5c-b17f-b40d6b042e3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.107']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95c83e24-d13d-4d9e-b75a-33bea673b0be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.108']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab3ea1bf-daf0-47b7-9120-ed3cae2ebd41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.109']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad0f9a89-7b32-4ab2-89bb-07ef84966d39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.11']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e524cef1-a9a5-4f31-8f6c-58af6147d28d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.110']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edba8f20-7847-4ec3-b68a-dac04a93edbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.111']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f95122e-5d3b-4edb-b29d-46785c9a6684", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.112']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54e7deda-74bf-4881-8dc2-ead4aea2c040", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.113']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc4cd197-9d37-4e9c-91cc-e1fe140a5edf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.114']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25ff6795-d5cf-4bf8-a8a3-2c91f84e151f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.115']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae5b356b-7f87-4e9b-9830-888ee6d79841", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.116']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--750cf3e9-ccbb-4bc0-9b00-76c765e28561", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.117']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8937cdc9-7328-4c37-a652-be0142c9334f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.118']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2af629ce-d1e5-42ab-8e18-dd7e70a9f68f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.12']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6511e667-961f-4e52-902f-2b10d936be34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.120']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1799c98b-4b21-4705-bce9-9d2a13ec2186", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.121']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4324014-5cae-4a06-86a5-8b183a6d5ccb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.122']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50fa6364-d7c4-4f25-bf3c-64c97c74816e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.123']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c868ca91-4b4b-41bc-b898-b094dda7017a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.124']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59d5c289-8f4d-479d-b401-20b132f56c52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.125']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--969af3cf-cede-4360-864a-89df3385c3de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.126']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f61f3cc2-d6ac-45ec-bc87-a4ae3e5184c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.129']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9506710-8a0a-4636-ab72-df7d7c9d5acc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.13']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24d094ec-7132-4fbc-994f-8f237929806c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.130']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c903cc8-7205-4fa5-91d6-db7be17e2328", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.131']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89768306-eb79-4eed-b021-d331f3fc2de1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.132']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--295fa1f7-7ea7-41c4-bf5a-671824274b23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.133']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19502bac-f653-4c3a-b970-4cca905cf926", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.134']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9f05b40-3eb8-49ae-8171-d2e3fb532859", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.135']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e429d402-0296-46af-9faa-92fe05bfa8ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.136']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d38dc0e-a048-46b3-b2fd-072e521c549e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.137']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4994a994-addb-4e13-adf6-a7c17b431f7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.138']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6eb4cb7-c29f-42eb-9ffa-6a7834060764", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.139']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62cd2b26-ffe6-49a9-8388-d1ed7070ba31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.14']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a1a5fb9-c1d5-4161-b9ea-b59d845937be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.141']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--101e62b8-2aea-4fde-bb1a-5d873eecdceb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.142']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43586933-325b-4dc6-aa18-5dbc31fb0322", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.144']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93e60bf3-e319-4ff0-89a2-6150a0b73cf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.145']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2e491a6-8d51-4daf-befe-48eda861b54c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.146']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--715b4ee6-6059-476d-b902-e0804a8c4ca4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.147']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a068dad-4657-4cb1-818f-de49810ad195", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.148']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbd56617-d4b9-4538-bff9-0299bd22155a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.149']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5926b77c-5ce8-43be-9673-4e2d4c6e7304", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.15']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90a99771-51a4-4947-8039-8d4f1d5127eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.151']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54ddfdd6-82da-49bd-a3e5-ddc5a0f1cc89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.152']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68eba7ae-3901-4cfd-a043-4a2901924e26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.153']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4214424-1a2a-4f65-bf4c-22c336033f59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.154']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e2107ec-41aa-472c-aedc-5bc6590e464f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.155']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dcf8529-a6a3-4808-a5ee-938cfb5ea3d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.156']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30dd54d0-260f-4d76-b725-4f7566dfa43e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.157']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af2fe98a-8f51-4cbc-a815-ff3ca7a1f6da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.158']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b57c57d0-fb5e-4ac7-8c42-ccd7f8faea9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.159']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6686681-ee32-46d4-a384-5e31a143fbcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.16']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1318af2-68bb-4f68-936a-c9ffb36a2445", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.160']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba82e2ac-36bb-4580-b7a0-5f7dfd737f5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.161']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81bffc9e-3fdf-4305-83d6-c45dafa89270", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.162']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52316299-8a01-44c9-b1d2-9a68fdb5752f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.163']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--351f9a39-04c1-4bd4-9d09-8c3aba5cd007", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.164']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8679c99d-2166-4a27-9bf5-c0c3bdee7562", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.165']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbeb4b16-7e2a-482b-84a4-c8e2b3c835e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.167']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe2c4a01-b7a0-4700-902f-f7678c84b4be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.168']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--425ab5bc-931f-4da4-bbd9-216c62ad9e11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.169']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--987958f4-39f3-4601-80f3-3f34d4599f83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.17']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6be73638-1eb0-4bd7-9bab-92877d2f4191", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.170']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4aa073f4-718c-4ed2-b3f0-d79c38c43efd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.171']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8324c77-a9f0-419d-b27c-b6200b8bcc84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.172']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--593d2a1c-5365-43f7-b871-9ba387bbdd99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.173']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06169441-5f44-4ab4-af92-7883a30142dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.174']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ead91dc4-50fe-4f83-9991-36940fcf7bda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.175']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad6cfb50-5dae-480d-98f5-4ed0bdb117e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.176']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39e898f0-b74f-45a1-903d-620a472a5dcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.177']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db1c4d86-0164-46cd-be1f-69d2a073dbe5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.178']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b44b7d5d-866d-4972-abd1-f3af7605b882", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.179']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c276abd-d5a4-49b8-b58e-a932a76d35ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.18']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9780f31f-6c73-4e70-bcf0-87326ea2fe26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.180']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acd3a023-99e5-4ead-ab35-056ba03370ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.182']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56dffb63-0cbc-4c3d-b4a6-35d2e59bf89f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.183']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd326cf9-3153-40a1-8cfd-64a3630e6942", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.185']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b00001c1-7101-40e5-abce-5a47eed949cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.187']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d90a50a-8948-4af7-8fa0-7d26c732bb55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.188']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--addb4235-9601-4080-86a8-fa57d1ae219f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.189']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92a175d9-966b-44c0-ad7b-d2f84c45fbaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.19']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dd73879-249c-4161-ad9f-9b57bcc14e1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.190']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--799a3b18-ce92-4f3b-b796-cc08b01bc6c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.191']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--853e3b17-b252-44df-b8ed-bd5fd5f4a697", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.192']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd27d12a-cf4b-44d1-a0c5-64a669365b52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.193']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9e02f12-9b3c-4d2d-9e0c-2b9f0389cb9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.195']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83a05743-476b-4f26-ad10-e611cc61eaac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.196']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fe271e3-cecb-408b-ae7e-40de2ab85a6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.197']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2960ffb-ca6f-4d48-b012-da59a7ec0774", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.199']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66a04b58-a6f1-4807-91bc-b3ad794f48eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.2']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e00448e3-3b1c-4973-a3e9-e2418968a6c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.20']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac4d2fd0-b5e6-4115-8eb5-48f74e2371e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.200']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f179019-1821-4578-a2c3-67fbc70fc71c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.201']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfe75c03-7797-4452-9525-ef750d71836a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.202']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc1e10c0-4aac-4d9b-b0a6-3357e0ab0e2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.204']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a253a494-784e-406a-b25e-f5dceaa96ae3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.205']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb4be809-6081-4faa-9c73-e1a8d9cb94ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.206']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--697003d7-8562-488d-896e-cddc3c07561b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.207']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--439dd39f-120c-483b-8e46-8a15fcc13c0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.208']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ff735cd-3820-4398-97c7-8f253cbc793b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.21']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37035992-7af3-4870-aa96-c65e74c42f8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.210']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c420ec9-84f8-47ca-a2ee-ccff35f896d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.211']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f964cf6-b9b6-445b-a371-b9b617b60509", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.212']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f058d5d-2146-47d2-8e24-999098330411", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.213']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c97f83d-6592-401b-848f-93437b0f4f41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.214']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b11bdb20-dad7-4138-99dd-fd02acf74e9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.215']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7539d660-b3c2-4f74-815d-347c8c89f42e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.218']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93ccf7ed-1d95-4c3b-9309-d71165d011b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.22']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac5a77a0-dad0-4a0f-8a88-0f18374ddbd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.220']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8223327f-8f60-446c-bc45-046eebc58bca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.221']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f14f020d-8f84-44a1-a3a0-ef96f28983e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.222']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0bc9eb0-051c-458e-881c-57e8b3fb681f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.223']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db3396e5-94d7-4cf4-9af8-3ca394d20d32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.224']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed4f2e3d-b9c5-4bb5-b765-b6dc76771489", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.225']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55523b50-c9ec-46ca-94cf-764de8237b1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.226']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d742e3c6-da27-4366-9128-fcf62d2719d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.227']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e24d73e-6472-4256-a953-0c218324fa8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.228']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f05f329a-a921-498f-9037-6b6dfc21883a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.23']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08cba809-a248-4ddb-a93d-8e94384a1b0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.230']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0008132e-1012-450d-940e-b9d9ec77336a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.231']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a0f00f0-2c6b-4bed-8f7e-461178eab10b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.232']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c108c93f-3921-44cb-b258-2b1ff1a81fe6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.233']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--263364b1-62ec-4de5-a82a-c66ce4c2e132", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.234']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c713eb4-7fc6-48ea-9faa-e764743fe413", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.235']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--313e7184-0a4c-4b78-9807-a6df84008eac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.236']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fcd4457-4d65-4025-8e23-a332f55a0476", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.237']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c797618-d58c-40a3-a029-080447ed2331", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.238']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1af08553-fe89-4d06-bf5d-c6ff92c290c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.239']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d38aa218-2937-4dd7-9d3b-537765bec2f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.24']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--588fecd6-700e-4900-aa8c-5096b083776a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.240']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c8aa941-22f4-49bc-ae94-579931ef709c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.241']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8755958-cc83-45e2-b195-af23ee0829a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.242']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f72b2c7d-6844-4f58-bd89-e651f0e80219", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.244']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31db2d18-d65d-440c-ae93-777e364ed26d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.245']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdf05383-046d-434f-a8b1-c45c93a0e68e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.246']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c4e0441-6844-423b-a5c4-ac498aff1366", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.247']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7d2ce05-6990-42ea-90e0-5a23b63a8d1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.248']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3dd3415-add0-477f-aee8-6ca430f8c744", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.25']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44e4cf8f-962f-4eaa-9a7d-05bd0789ec61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.250']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3b2b3b1-f66e-4053-9eb1-c9c906201433", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.251']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b11c7eaf-2123-4251-b3e6-3a10a7d60031", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.252']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--060d9071-483f-4ed9-b966-95539959643f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.253']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e365230d-155c-445c-a004-ccadf6f27695", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.254']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ca80cb7-93d0-429f-b530-c839dee42d7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.255']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6616d599-fc4e-4a5d-b53c-e2ff9360bc49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.26']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76125703-aad5-4a84-8e29-ee113c89def9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.27']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d593f19a-2256-4331-9d77-e7b59800971f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.3']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5202801-bdea-471e-9c50-9a387e5710c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.31']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9770d508-cfd1-485f-88fc-13d85dd5d193", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.33']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a686164a-cc58-4b1f-aa66-13268398c907", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.34']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6251fff2-588e-4f7c-8ab2-9be853a35c1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.35']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91dec1fe-5371-4bdc-8f13-83886cad34ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.36']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09d6f628-5f84-42e9-943e-9a2769447c78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.37']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be8802c9-d42a-49b7-a093-e04cf7a2d958", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.38']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3222e62-e6ad-48ee-96a8-5dcd1ad847fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.39']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4f082e3-50d5-4535-9290-e34886a2aa11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.40']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--629e9be9-ce71-4e98-82ec-7ccb3941b459", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.41']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd6129ca-91de-4192-8838-656d3511f40b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.42']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdbc0562-ee4e-4bd2-b139-531affb46954", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.43']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d749059-4612-450b-a6a0-5f0e5964c4e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.44']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f80519d-55cd-4dc8-839b-5e339d6a2ba3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.45']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a491fc75-c438-42aa-ace7-ff52d18e0579", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.46']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c909094-ed0b-4201-bd26-c131f46a189a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.47']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b085e8c8-ce94-4c27-b788-9f8200e30b3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.49']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--185bb718-1b4c-466b-8fcd-91911015975f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.5']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9490cbc0-7f54-43b1-9603-5242a9953446", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.50']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--619cd57f-0dd5-443d-9f58-29eabfbc79b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.52']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c31a268-f864-494d-aa13-10954edd4f0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.55']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d85a0ae2-9a7d-4237-b99e-a316124bc8e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.56']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef5174fc-318d-4a32-933f-384d67b41684", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.57']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abf7e752-9b98-41bf-bd5f-78d90f605be6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.58']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50977fd7-7117-48d5-83e2-2d05c9a0e340", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.6']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c64e24e8-3bf7-4161-9361-a411eadc2e3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.62']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55f3d57f-1b00-4f29-bd67-1bec8ac97a70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.63']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--566b6f66-ecd9-4095-ad31-e93461387636", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.65']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeb0cb7f-e766-45a1-9b3a-451aaa0328ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.67']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2099361-ad88-4744-904d-e226a4f79cd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.68']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dc3671f-4fa0-414a-a760-aa012c69c9eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.69']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a12f8db-1077-49fa-b31f-f22bdca51044", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.7']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fefc0ff-a23c-45e1-93d7-c0ece7b820c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.71']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbd0a3de-c9ab-4a99-9989-165483287497", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.72']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c67742d-af8a-44b0-b723-eb934ae67cee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.73']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0a349a9-572b-44ae-9250-c88d6ba4397e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.75']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5dfd2a7-80e6-479b-ab23-223a40d601f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.76']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee6a3512-6807-46b2-adfd-4e9c01ed230c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.77']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6cf4cfa-cd46-4acb-a8d9-61e547219ecc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.78']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8fcaf0b-c63a-416c-a58c-3a3bb37f3847", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.79']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dad2eb07-0432-497e-8f35-a730c6f76d73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.80']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--871d961c-504a-4c65-9837-f1a2e04f8761", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.81']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b2843ad-4806-4c07-a365-073a6b84244e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.82']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5417d8a0-1cc2-40e1-b482-222e66626cd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.83']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef1ecfe9-2104-423e-9f21-717f218ae880", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.85']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a73c7d12-1654-43d6-950b-1430ad281364", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.86']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7d0bc65-8f42-44c5-ac89-1917def7e576", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.87']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23218ba4-c233-4229-af6b-28ba64f92de9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.88']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c260cf06-f1b3-4a11-8a74-38510f9b50fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.89']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30253f7d-8dff-44c5-821b-42739af90018", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.9']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a011554-4f02-4e96-ba98-9444d5aade79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.90']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f9c956d-c8f1-48c0-8427-097840d21825", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.91']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba2afc74-83f3-46a2-9ae9-a9c4bfb6a5fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.92']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2fbd675-e9f1-40c1-bbfa-b42fdbe74c1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.94']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e05577b-beb7-4328-b600-320dfee24df4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.95']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a409f506-b141-4841-83f8-1655d3b8f0dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.96']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6ee3031-75b0-459f-8858-9214f3751929", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.91.98']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f2bfbae-3649-440b-8940-b74c7037daf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.1']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dd1cfb1-ba7a-400e-ba05-8d8260ed13a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.10']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1402305-9f64-4568-81dd-6f92c6e421fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.100']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94d0e364-7048-4efc-bbc7-5114c8bffb91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.101']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df798ec2-83ef-43c6-8a2e-a6f7faaafdec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.102']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aba7a9f4-7297-4fd9-9099-6527274c5b19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.103']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db7af443-47b1-4ebf-9c42-250f47877b57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.104']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--947e7359-e0ef-4d95-81cb-5b73f5f0ab00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.105']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74a909c4-3302-4ba8-bfa8-f2a6e3095250", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.106']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7165993e-6707-4b3f-912e-5ac18b596801", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.108']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--425cc185-3211-495b-92a3-d2276cc13a4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.109']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0f44ddd-2856-4e87-9a2a-510e84a3123d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.11']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17b68d47-c145-4e3d-832a-e545c511bbae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.110']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7982b6c5-08ff-436b-869d-be97cb0f8cd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.111']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d1e479e-f66e-4791-b80e-88da2b1ca4ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.112']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35634f60-fb89-4b55-89e7-869fada9270d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.113']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1b936c9-d4f7-4551-9f0d-db090000621f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.114']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbb8967d-d639-4ce6-bc33-ae3da80594e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.115']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--179e06dd-91a4-4608-9102-517211bf9b28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.117']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e38bb5c9-f039-4874-b9cc-14df166070a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.118']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d14158a-57a0-4789-84b2-02efcbfa7d03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.119']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd12dd84-c074-450c-ad2a-123c961ece12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.12']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b26afe2e-25d7-435c-a827-cac30e721a58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.121']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4445e8f7-a1fa-4a17-a27c-8b6ffdeaa48c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.122']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--587d2bbe-f338-4924-ac90-ed9eb114b2d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.123']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--102845cd-c8f4-48d9-8689-ceba6a4c96f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.124']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33189a35-4cf6-4b58-b237-6d66c7ef26a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.125']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--062e9fdc-2db1-4c77-8b3b-7f6a288295e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.126']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9667461-acf2-4d9a-8741-3b6ce082e43b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.128']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--811b1b5b-1a9c-4d3f-ae5a-5edbdfd395ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.130']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc317082-c210-4c00-8e83-04036390bd67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.131']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28039ca5-d803-45a7-b645-c52455fcc245", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.132']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e841aa46-65a0-4dc4-a8dc-d66547345881", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.133']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4417ed5-e084-49e5-9c08-0cd59730063a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.134']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21985d0d-3896-47b1-81d9-ffa390eb0b45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.135']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63d448b2-e817-44ec-86c7-86c8a9fd5bf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.136']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4f65a7b-a896-42aa-9390-e475057207e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.137']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ee4fb6f-9ed7-4dc6-ba3d-f97bccdbfd1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.139']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35073cfe-649b-462c-a57b-e6e4c3a3cd6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.14']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f1000a8-8ed4-4605-b795-5de27bc4bb5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.141']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b1591ac-5dae-4fb0-9e26-9df5558032e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.143']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af7a62a9-d473-44e1-9b84-5a973b837918", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.144']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7f971be-5c56-4e32-9331-3265a6b8b379", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.145']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3b40bfc-2ba1-4fa0-8dbe-86fb3fc6ea28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.147']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80f7ccbf-a941-4cfe-84ea-2b1dca09e11c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.148']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8dc8f4e-7521-478b-a7ca-61053e8941d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.149']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--923c9b26-3612-457e-aefd-657be37e8b16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.15']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d01c034-dff8-4c84-83ca-eddb0bacec49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.150']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--223ab007-ae97-43e1-b624-2c2b10dd653c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.151']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa4b6c7a-6c38-4a90-b120-858bc6c32cce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.152']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--290d2b28-471b-4783-bc48-1e5ab60e1559", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.153']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6afe3a6d-2a61-4909-aea5-9932e96aa8ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.154']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1919149-3f3a-4d99-8cd4-f96758fe1e8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.155']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca109584-2e13-4527-aabb-6ef48e580cc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.159']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbd06da2-7f48-499c-b4bf-00cebbc75908", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.16']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb67fbdf-628f-4a2f-b97a-7c0f8b076edf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.160']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e09e504e-e7f9-450f-b41c-585ee6306d44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.161']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdc66de8-2819-4e0b-81de-86acf24f7ea9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.163']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ba656e3-802a-4053-9de4-829230533b79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.164']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04217500-d084-4221-b573-df1a32149c34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.165']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ea1d49f-768d-4b4a-8765-536f0ed43ce7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.167']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f75bfaa2-a97e-4794-bcb4-22fbddf8adef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.170']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8f74c53-b2ca-494d-8740-86a05cd0302d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.171']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b078ffd3-e33a-4444-ba84-f0ca05480824", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.172']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cbe11e2-c13f-4775-9a23-4d580ebc3109", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.173']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf05dec5-b6f8-4a4d-b09c-4ac366b6c24b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.174']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7011cbf3-4623-443e-8aa5-9f4a243f76d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.175']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13186aff-6e38-4f22-9eb5-d28b94b8e5a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.176']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67a3339a-fec9-498a-872d-9138b4c13350", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.177']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5fc1791-611b-4ca5-8e96-2deacd000aaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.178']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--098859fa-82af-4834-807d-0d03fe665e32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.179']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--838523e3-4c78-4f17-809f-7b7888b22b5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.18']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--478602d9-c4e4-4f08-ac56-eebe2c72128f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.180']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe576e51-5433-4571-ba03-34074915f4a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.181']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1782815b-bc69-49c8-8e3c-91ea59712fda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.182']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fb0985c-e432-4f91-9624-385f1e96c3f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.183']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7b6d708-1ca1-433c-81a6-984bc085cd5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.184']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb9fa1b0-5b55-413f-a1b4-0cb12724247a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.185']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96c9db34-0f13-4904-a848-5fc68ce04eec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.186']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad940f90-551f-438f-a045-2da2644f6b71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.188']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f66a5ecd-1f64-429a-9ce2-77c04c3e4499", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.189']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89d93a1f-d0bb-4372-b13d-7980be314a57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.19']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f64c052b-1e60-4f32-9277-2bd03c0c1f5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.190']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9f1cbea-7d3a-4fb4-a3fd-99ad1d695740", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.191']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac46fa53-24de-4af6-8ec2-df10e22c6ac5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.192']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ff39432-1d61-478a-babe-8232c913564b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.194']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20df93bc-3b6f-4cdf-b03d-e720bdff9aa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.195']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c45c5725-8d95-4611-840d-e17c31fa01b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.196']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--720dbd85-1bb9-453b-8f52-da0e699a603b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.197']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad2e326d-5333-4c25-b508-46e7fb06e908", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.198']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8efecaba-4f4e-4eb4-b18b-be7d9a06290c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.199']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bc4b9d5-3cc2-492a-9a6c-a33b7dd82853", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.20']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bd72b13-f252-4146-a112-e23d8d549d83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.202']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf6a7eb8-46d4-4645-aa9d-897cbff4fed9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.203']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d3f53c1-30a5-4f93-a224-21c6a26f7521", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.204']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2d8b8cc-ba8e-4ee2-a998-f7e083302834", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.205']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fc1754b-7af7-4bc9-b80c-c8cb81cf9ead", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.206']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0168faa-f9f5-4c28-b399-2044fbf9cd13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.207']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3eff6c5-4d80-4250-aea1-83156515644d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.208']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe167564-2aaf-47b0-95c9-e809f4448fb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.209']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e55cb278-6fef-4181-bcde-a22ee04728e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.21']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e596e5e-2d62-462e-a66b-7789eebb318a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.210']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8248f850-15f9-494b-8139-d2c8c6c5b3d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.211']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f0ac88a-dea4-4b00-9459-bf217b5921b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.212']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--197ef5ed-4de3-4003-b84f-720bb71b3380", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.213']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dbf779c-5724-4811-aa45-ad308ff3a93c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.214']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--104d563c-82e5-42c7-8e49-f74a8d6418cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.216']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7eca756-8c71-4754-814f-76d731cd8b1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.217']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c13c1841-8882-4dd1-b669-6bd56f01af5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.218']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fe12eeb-ca64-4fab-872c-7fb76b89905d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.219']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a640b8db-1423-4ad6-96f8-3dbb3ea16417", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.22']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--322d824d-e176-4857-ad9d-7418b07b6cbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.220']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b4cc5c3-edbc-4897-b10d-d092dfff07a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.221']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3baed8a1-ccba-48fe-9005-12282b0259e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.222']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2d8afe2-f598-4439-a5b1-84cf7e83c036", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.225']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a8ef7de-b256-4197-b1ac-3c2c94be6c54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.227']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f0019df-5d41-4cfc-9173-8e6ec4a739d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.228']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eaa32fb4-b0cd-4291-b117-dbef6b23bbcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.229']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d22e9a38-e1b7-4d93-a102-24d1688d068f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.23']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30c02b6b-6e88-4f5c-80a1-85e1d462c886", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.230']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1daee4bd-cf1b-446f-98c4-e1630c899c9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.231']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9fa4ce5-6c15-4f5f-8b94-4ccdf2bcbcfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.232']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b78da36-7d1d-4734-ad1d-4cbdedbec644", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.233']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--334b47cb-5650-4bbe-8279-7baed2b55e4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.234']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0da3a03e-ef0b-4199-ac29-e0f2170bc331", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.235']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6112022d-9312-4f6c-a54f-a9fde12268b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.237']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7f2d36c-c142-4caf-9bf0-4e8bed3d6a1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.238']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87fea6a5-3c31-461a-8fd9-87af0409409f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.239']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fe66ba0-27dd-4fda-9048-c15c87633b5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.24']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81dd58ba-84b0-4557-908b-4eba7cc4b9eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.240']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61ec0e60-b3ac-4766-8c64-3ff42cbf8d83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.241']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5c3ef56-aa33-45f6-8886-0a5c6d25efa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.243']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab29a155-355f-45e7-b55e-02e54ae9e35b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.244']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccd072c1-5b1c-4b55-8ab2-73a23660375b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.246']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f34aca5a-b7db-44f3-b94e-d9a7e0f80b71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.248']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eb57d15-4429-445b-9341-e03bd2439dc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.249']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1295feb5-44b8-4915-89f0-e2991a08a310", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.25']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--803fb9d2-0e12-40e8-849d-7770a0df8dbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.250']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7bd0c4e-914a-49d0-9ea6-8d2b0e8c1bf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.251']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a056197-53ff-4bc7-a690-fbda50396b63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.252']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a18a725d-3c28-498b-93b0-fb0959d0f644", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.253']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b75cd1b0-0af0-4e42-a509-74d4d2999f92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.254']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a07975e3-f950-4733-b5fa-816031358ef9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.26']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a49fcc6-a495-460b-a22e-8c95886b8002", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.27']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c15b75c3-ae7f-4f00-8f24-fa2604cd972a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.28']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1467197-f086-4a6e-af98-08ee4a78c4f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.29']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72820e5c-5be8-4a6c-a9b0-bedf1240c204", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.3']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dd3311d-f563-4279-9b2f-9ccd60d7a48f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.30']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e88df09b-3eab-4e90-9fa0-89bc4a3cceab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.31']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23cd77f7-c340-44ae-820e-9eff7151fa8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.33']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1feff941-70e9-486d-9c91-12916c3c1e9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.34']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6ad9a22-3be4-47c0-82da-f2296b0b30d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.35']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21f39a53-9983-404d-932d-9716a3a43f11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.36']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02bb8c1e-12b7-4f79-9f83-1bb085653c26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.37']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d9a3b09-e5f6-4693-a784-c6f63db20924", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.40']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9697fbc5-e06c-4bc1-97c3-17ea912ccc51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.41']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1ea19f1-d181-4e99-9f8f-ac1a40ce7b5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.42']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--791ef747-c3d7-4a11-b02d-79a133edb184", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.43']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94e74beb-d04a-41fa-8b3f-aedc32b56d6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.44']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f24905ec-a274-4e51-96d0-6244913babd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.45']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4e83cd3-deb4-40f1-bfd1-466d010c046f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.46']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13602e21-5187-4468-9502-ce28892e4d56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.48']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4f9257b-2678-482b-8d8c-fe9bde855f42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.49']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8392a708-731a-4a5c-994b-df947ce5e29b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.5']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcb44480-c5c3-4322-aca4-b5924a38b0a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.50']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fd06c76-9886-46e2-a50d-1522018e36a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.51']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1a51c44-43c4-4eda-86c0-9052275bab65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.52']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b78b049-3d68-404c-b0c2-9689d7439272", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.53']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32032470-d576-435e-a7ca-5e8a53d367f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.54']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--373bc4ee-1b65-4afa-91a8-b59f88232c0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.55']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--853b99c4-e8fe-4f25-ae91-65572c291601", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.56']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92fd2475-dc4c-410d-b52b-688071ef76f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.57']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--926a4c0d-de3b-4e7c-8460-5b5b430093fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.58']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d637f08b-949c-4c92-8fb8-bab288fdbca1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.59']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75f9c886-3430-4af3-9cf8-112420421b52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.6']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acb0c454-2a9b-4bf2-b27c-a3e0d5f60943", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.60']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eca16d6f-b662-4947-926a-4c15d74c81ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.61']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9eca8e2-7c55-462d-a220-6d1738bcfdff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.62']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ce8df7a-6c68-4c1a-b1a1-ea75b9788696", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.63']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab0df928-73cf-49c1-8490-5d02d8aa5013", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.64']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf0436b7-acd6-400f-8cd0-fc45435ed536", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.65']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ead0ec9-4edf-4873-b8ac-5023b5b8887a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.66']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c8198ab-ea5a-42e8-8544-ba4226051426", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.67']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80b8e1e5-a182-4690-b291-2b0cb0b2d064", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.69']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1034f77-61db-4464-9a3d-e1a44ef163dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.7']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b24bd063-aa45-4484-b458-3a9bdef5bc6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.70']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67bed9bf-14eb-431d-aa44-c9f0ddda2f5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.71']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aabe2814-96e5-4df8-b86c-469ffcdf28fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.72']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc42e895-fb6e-44df-8acd-5150a42dc7fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.73']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c964fac-5807-4ff8-ba55-af4d2c9758fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.74']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a175d00-5709-4c84-9d47-2e2d8e5a7e4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.77']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fca32ab-2ac2-46df-9505-299efd22e6b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.78']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83503b6c-c6f4-4abb-a03c-a6e4e54719ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.79']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b12baea4-c1fd-421b-91e4-9cac9b325bf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.8']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb582316-d261-474c-8a98-4cd0c0ceecae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.80']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02091891-6cad-40a4-b7b4-0a040d091c99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.81']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10c15673-1be4-421f-9968-cda90fd47dd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.82']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26db6f4e-481b-4c05-a646-ec5fde72c599", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.83']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41a28eda-5f67-4bcf-80d7-7cfb86affe40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.84']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b13f325a-b2eb-4d6a-8148-c2df23aaa878", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.85']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c26cd157-7ede-4557-8911-24efe34c6353", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.86']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8e69c6b-f732-4e6b-a147-72e33f44ce08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.88']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54c44e5c-fa9f-4de4-943a-8aa9aaba22d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.89']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ea468dc-ea14-47b9-9a59-fe2441460847", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.9']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7dee493-a9a7-4351-aa96-49fd1c08ce48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.90']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd812f8e-ae35-4462-890d-673d14209b7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.91']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c65ab07-6bc8-4df1-8146-6c8e0db788da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.92']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa1ad1b4-f95d-465d-8111-e4eaeacb17f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.93']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3f1856c-b23c-413c-8810-e6ae64fb665c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.94']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1b2d2cc-6e80-4953-8e46-f8c0fdc4feae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.95']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45d69fe7-f4a7-467e-8c57-f3bdb5f3c467", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.97']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7826ada4-70dc-419e-9cda-a183a9877a68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.1.94.98']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--466c8281-e81e-49bf-866f-97987310df71", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '166.88.33.139']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b32d6f4-5b52-4ec3-af65-44862b5536e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.148.33.235']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcda3a5d-ebaf-46b2-aba4-c34f9b83d0e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.146.103']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f19afced-03b7-4f0a-b908-a51897c4565a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.172.213.54']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d44d124-b130-442a-93c0-23dcce62922c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.233.243.21']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ff7fb52-14b9-4817-95a4-4d0717ea4de2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.235.95.95']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f31c538-037c-477e-ac73-1f770e51240d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.56.109.169']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b97271e7-7f78-4da8-9b5f-fd36d933764e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.173.4']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9c73229-6233-4393-8e4b-e3065bd808cc", "name": "Malicious Host", "description": "Web exploits: exchange-ecp-proxyshell, spring-boot-actuator. CVEs: CVE-2021-26855. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '167.71.175.236']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "initial-access"}, {"kill_chain_name": "mitre-attack", "phase_name": "discovery"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-26855", "external_id": "CVE-2021-26855"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-34473", "external_id": "CVE-2021-34473"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22947", "external_id": "CVE-2022-22947"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--790a89ac-b95e-4ed0-8a6c-1de6971da293", "relationship_type": "indicates", "source_ref": "indicator--e9c73229-6233-4393-8e4b-e3065bd808cc", "target_ref": "attack-pattern--70763895-ef5a-42ed-a5bb-49eaddeeb4ed", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e17ff644-b843-4d78-ad4f-29976a33c0f7", "relationship_type": "indicates", "source_ref": "indicator--e9c73229-6233-4393-8e4b-e3065bd808cc", "target_ref": "attack-pattern--dac02ec7-9fab-40e8-ab91-f7aa9152bf58", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--19984997-20d0-42c5-9496-0fcfdae8dd42", "relationship_type": "indicates", "source_ref": "indicator--e9c73229-6233-4393-8e4b-e3065bd808cc", "target_ref": "vulnerability--af124007-9bf3-4a17-87d5-a9b52e563fa7", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7b47f2b6-ea64-426b-ac71-8fb4feb71601", "relationship_type": "indicates", "source_ref": "indicator--e9c73229-6233-4393-8e4b-e3065bd808cc", "target_ref": "vulnerability--b5147848-022b-4261-a578-bf3291614d40", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--30fd54bc-485d-49b0-b749-0e3c491b83f0", "relationship_type": "indicates", "source_ref": "indicator--e9c73229-6233-4393-8e4b-e3065bd808cc", "target_ref": "vulnerability--a28b04e8-ad85-462c-b923-9158a7008803", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--157b1875-871d-4fba-afca-096c76c581bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.16']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68c57a84-37e6-4b93-961b-b0082b555af3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.17']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f44ffd37-c6ca-44d2-bfa5-0a20120d7257", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.18']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abacc809-94df-42a6-9538-7addf2a378a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.19']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f25d8b03-4a3a-4aa0-91b6-73ab7bbaa05d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.20']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9611b65-4647-46d3-83e8-72a1478d99db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.21']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84468d5c-8d77-44a9-bd32-dcb67b1b4dc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.23']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--482e4ab2-4bcd-46b9-b3a0-38bf528d63d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.24']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--099da05a-0578-4602-b56c-649e7cb72841", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.25']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37732e98-591f-4229-a5aa-1bb31f45c670", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.26']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4a39c01-307e-4fe9-abb7-4cc0b5e9045a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.27']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--849e4f20-fced-44b8-b826-3c2a854e4069", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.28']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d912374-2a9b-4193-8691-99dd481ce26f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.29']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29bfebe1-1433-4f29-8b94-adba00f83465", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.30']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af262124-6f44-4876-9a45-a7fb157cad31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.145.31']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00ac4659-6019-4b1a-b788-7ad185eaa97c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.52']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d2e870e-1bf5-48c9-9894-9a688b5dc9ee", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.56']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--333fe4c0-d759-4bd2-a064-0af560cea5c6", "name": "Malicious Host", "description": "Observed: OPENCLAW, PORTSCAN activity. Sensors: openclawglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.58']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "sensor:vultrtokyo", "protocol:openclaw", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb3dc6f1-64c5-454d-83d8-0b607a2b1d2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.61']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d33450c-197a-4c22-a491-3036f3f24862", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.62']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7df897de-56e6-404b-88d8-5343ceebc4ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.65']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bee32ebc-092f-43a8-a3eb-241a6360b87d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.66']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f14f13de-4b8d-4372-8a16-1d1e0a106906", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.67']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27b1110e-e8db-47bd-86fa-3a02ddec01c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.68']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15a2da3f-c229-42ea-be05-228098de2c54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.69']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a3df7f0-c30b-4ac7-a5bf-6f0038aa346b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.70']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf482533-6573-4681-88b5-c594e8ceb221", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.72']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43d9887c-ffcd-4434-a8a3-70f13eccee6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.75']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9d2f069-9d96-4f3e-860f-62d6b9c11487", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.94.146.78']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a49d981-83a0-4189-8411-9d7cbc850e0a", "name": "Malicious Host", "description": "Web exploits: exchange-ecp-proxyshell, spring-boot-actuator. CVEs: CVE-2021-26855. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.181.249']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "initial-access"}, {"kill_chain_name": "mitre-attack", "phase_name": "discovery"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-26855", "external_id": "CVE-2021-26855"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-34473", "external_id": "CVE-2021-34473"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22947", "external_id": "CVE-2022-22947"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--bd37b320-0f35-4e1c-a75d-1367757a28e4", "relationship_type": "indicates", "source_ref": "indicator--2a49d981-83a0-4189-8411-9d7cbc850e0a", "target_ref": "attack-pattern--70763895-ef5a-42ed-a5bb-49eaddeeb4ed", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1df40849-799f-489a-8f17-a257d0bed14d", "relationship_type": "indicates", "source_ref": "indicator--2a49d981-83a0-4189-8411-9d7cbc850e0a", "target_ref": "attack-pattern--dac02ec7-9fab-40e8-ab91-f7aa9152bf58", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--066f0b55-9e0a-4f75-9d15-1b21be707b7c", "relationship_type": "indicates", "source_ref": "indicator--2a49d981-83a0-4189-8411-9d7cbc850e0a", "target_ref": "vulnerability--af124007-9bf3-4a17-87d5-a9b52e563fa7", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--677e48c3-a4f3-4932-95a9-01034dc161df", "relationship_type": "indicates", "source_ref": "indicator--2a49d981-83a0-4189-8411-9d7cbc850e0a", "target_ref": "vulnerability--b5147848-022b-4261-a578-bf3291614d40", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--24f8dbe3-08ae-4822-ad97-2dfa07766314", "relationship_type": "indicates", "source_ref": "indicator--2a49d981-83a0-4189-8411-9d7cbc850e0a", "target_ref": "vulnerability--a28b04e8-ad85-462c-b923-9158a7008803", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba26908c-adb7-4dde-8cb9-9d8bb4fc74e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.225.143']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--461f2faf-cbc5-4452-a094-42a1be1f103d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '167.99.238.110']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea68646d-dd6f-45e8-9473-593315e8a7ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.110.195.99']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34f95cc1-41c0-443a-9c79-72b6bebfb921", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.166.248']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec6bd907-7f02-4334-b350-5ece04e456d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.166.42']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d863306-b6a6-465c-a9e9-1d156dd14fe2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.167.99']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f89d6e4-9497-43aa-bf91-e02a8d5c969e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.168.231']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cae73b5-19d4-4d57-a871-59ee15df4e5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.169.16']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6325463-ca05-4bbe-a8e4-a0116061d711", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.189.140']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4438160b-694e-428f-be42-8470e5275f1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.24.111']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--518d5161-d500-49b6-9b1b-b7f87a8480ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.45.217']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--710c84aa-cb8c-4375-b29b-b41be023dc8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.144.65.188']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5533d9f-0691-4622-8263-26362a8479ce", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.195.171.243']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6d29f3c-3c09-4910-b820-2a9ea4a8bbf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.196.206.14']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ebed609-cb31-48e0-b481-a382ba2e4dee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.227.224.197']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40db187e-d1cc-497c-b9c3-cb37cbfc95a8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.232.163.108']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8ee8e03-d476-4b9f-b4e1-aa150c2e558b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '168.62.199.219']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6152e4f-4352-4e41-bbec-549be1b5bab0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '169.58.124.39']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9820a57-d8d3-4433-a011-8d5a7e47d137", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '169.58.247.137']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d5a14aa-bfb8-45a6-883b-df9ab2600232", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '169.58.96.145']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6658abc9-5b35-489b-a5d4-af71a6f2a02f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.101.96.35']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3bfbe89-f26f-4b0c-b1d9-cf97f793525f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.101.96.94']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--026d97d7-3c5f-465a-bbd9-acf41c6ce4cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.140.110']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63b60f4e-30f7-4fbd-960b-bbeedd9288ec", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.163.48']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ef287d7-662e-4c43-a284-f36384568f39", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.106.180.246']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ba2fd49-4bbd-4765-91bb-1a76e6aa7acb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.163.117']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d78a775-e16e-495b-9f23-3117d0a76760", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.163.133']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae7369d4-9f94-498f-9d22-77ed37a3f32b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.130']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d68b8631-5ed1-4863-b4de-d1437a13c3a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.134']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32031c65-7d2b-4eb9-bd4a-dfcc9aab3d5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.139']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f3cca60-ccbb-4b29-a5d3-21f9cbee6cf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.218']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85e239d7-627a-4960-83bd-19437ab6eef1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.219']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbeb3130-49e9-4a20-a830-b278183dea8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.187.165.242']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7b949e1-6278-456f-9852-2a016c081a4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.199.135.106']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a2b9666-9510-46d4-9240-6d2e5e734ec6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.199.135.150']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cf896bf-6a05-4a37-b930-1f8c5eb12742", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.39.184.167']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02bba528-aded-4fc9-ac4a-84788bde57f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.136.167']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea7d83a8-d295-4eab-9f50-98ac023087ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.139.167']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ced02a32-f1dc-4b00-8de3-89289a24efc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.139.178']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a112e09-091e-4bc5-9565-b214cb82d300", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.146.149']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcb0a390-c359-4221-8dd0-17f6a99acb73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.150.166']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb51b66f-3a5c-4205-b3f1-71133d5f11aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.154.53']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96a9a6b5-a2f6-4989-977f-ce7b8373b472", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.155.151']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b504d841-e729-42c2-8cda-16c6f4620abe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.160.191']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd1ce07b-6c3e-44dc-ae56-02e6d46bc0ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.162.198']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2b83179-d78a-4f09-bb8d-1210d735d31c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.169.241']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5a3f4a4-5822-4578-a215-52c178dee8b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.175.112']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34bcc7aa-c90f-4c0e-81a4-b8acfb57500c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.205.253']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--055723fe-3ba3-46c1-a202-b0cf840913f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.222.101']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38342e98-8140-4156-b24e-2cda209b8c62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.231.60']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20f6f22d-2c29-4055-80ac-9e7d4d04be93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.64.239.120']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9016922-6790-4918-a4df-4b132b5c2ee5", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.78.119.234']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00e8231c-cdc7-4681-b5f0-24a077e2d0ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '170.83.209.139']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e73ed18-0c59-475a-84a3-37758280729d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.104.83.153']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b94ae50e-4e06-4383-9dc6-56765c0f9f97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.114.225.142']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b3375a7-48a0-4107-bbb0-5d3657c3e124", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.231.180.136']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b1d5a00-68aa-4eb4-a270-0944f3c75857", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.232.191.170']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffd8ac6b-773c-4ff8-9eff-2adafcb03d3a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.244.201.102']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f79962f5-c295-4a91-a5e9-c8492a9befc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.250.190.98']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9de73d91-322f-4fa4-8c86-09fedce65171", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.40.97.121']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53a34583-06cc-415e-949e-3a345d4c0da5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.44.230.250']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0578f92a-d9a6-4c33-a972-e03c3d121975", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.83.188.138']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a934d59c-2d51-47a2-a876-914b5cfd8fe7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.83.25.252']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddf0d965-deef-44f0-b643-b5b623346909", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '171.83.29.58']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28a4a0e0-cf5f-47f2-a624-60719a65c5b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.11.46']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48650825-cb29-4c64-9f6c-57b447aeac92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.104.19.160']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d7ad4e4-6e3a-4fba-a2ef-16a12f3c1135", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.105.208.132']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcc9a5c0-8f83-45a2-ac38-4d3aad0e4c52", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.156']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c21acaf-baab-448c-9ab6-5629052fe90d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.173']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35b2dd26-fd34-4d27-b3e0-871bcda7832c", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.179']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bc8c5a1-c2ad-40c5-81a3-1b1680d8501d", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.243']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--803d6418-09d0-4e66-b286-185c9da32b3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.252']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c28e289a-43d7-49d8-bfc1-30cd1f1bf2b2", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.110.223.84']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cd7eae5-e4c8-4aeb-9a68-ca24a07b3866", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.169.234.118']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f026bd37-9890-46cb-93e5-af3204cefdf8", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.169.235.89']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cbf3407-a14e-4103-bf94-621a40f50909", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.172.196.131']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a48e076-b0a5-466a-a162-6c0a1f76ad9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.172.30.6']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c485469-2f1e-4abf-9cf5-01f5bb26791c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.108.58']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce5ad88e-0eca-4b84-a26b-ae9d3df7bebb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.201.12']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ce905ab-7834-4d35-a387-1cf1139634a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.201.47']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7b65ded-c7fd-4096-b7fb-399e8a00241e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.212.25']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d96ab74-6816-449c-b8d8-8175e7659828", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.236.184']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14acc0c7-d8fc-449e-829f-8baa151f8b37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.237.12']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45c62e0a-a989-4500-9745-4a52d456af90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.174.245.176']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4250822e-f58a-49b4-b0e5-18ee6e4c6c36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.178.126.3']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--917e1255-f9e1-42e6-ac11-a825b4e4aa95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.180.64.80']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46fc71b2-64ab-4104-a322-aeaf80055d55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.180.64.84']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2629f020-a87c-4172-ab8b-f66cb900f638", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.190.118.21']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bf0fae6-947a-41b7-b533-c7901f8bb02c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.190.99.176']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77ecfc2d-fde5-4321-8545-1213032f570a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.115.10']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8f7184f-a212-4f6e-9529-0d5b26a987f6", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.202.118.29']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5045a812-22e4-4c2e-9aad-7126efcb24da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.133.182']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a334d94e-d8f5-42fc-881f-89303d19dd1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.203.212.166']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--014f9666-e477-4822-9080-c262158269f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.208.64.76']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71fe661c-b258-4c86-9f67-7593156d8aeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.221.184.47']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c68ae0ec-b8b3-4e2c-8447-4619c0783aff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.108.36']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8791a30c-3057-419e-8d2b-f8380808b8b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.15.250']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3aca009-7bfe-4e12-981b-1d396c94c54d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.240.139']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3abb877e-45bb-4c88-8b59-fdaf6b135deb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.3.17']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b5f4e02-f9f7-478b-945f-52498e9686d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.232.8.247']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--becb7f8a-acf2-424e-be5f-f8d7e65bdc2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.233.219.44']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f487517-f609-408c-83cc-fd14d85e639f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.233.221.115']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7b23b83-c3eb-48b8-9bcf-60912db34424", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.182.4']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--300cd89b-7571-4246-b111-91fefe3545e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.192.12']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2bba776-c455-4300-9e63-c7cdb6569a86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.192.95']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5633b88d-2276-4231-b4ce-f0e151ce198f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.134']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5828dd6b-5d77-4afd-9b01-acd049afa59f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.190']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e8c2544-4795-484d-95e5-0892d742ccf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.75']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a458747-406e-4245-bdc8-4164ff4ed5ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.8']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6052475-8e2a-4bf5-a3e8-9d4e6ec4786a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.199.93']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a08af1c0-aab2-4096-b9e7-0c951a32bd6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.21.101']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b686b7e-fc36-4282-8d23-b4e2fc3e5f3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.210']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae191c18-721d-40bd-99d7-a043cea8a16c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.22']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--529b6b3e-1356-47c1-b89e-b8e12ac7dc21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.245']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be313eef-99e6-4ffd-887a-e5ba20f67456", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.34']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e4039fe-ed89-4a09-b104-99f91e79831b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.218.87']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50d0e51c-075f-4efa-bebd-23cdf1ae3d60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.221.84']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c868f937-dc18-49fb-8139-ff295997782f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.222.168']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aedb8708-b0fd-4da8-b9d0-a9332e3c2e19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.222.225']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--200bfc07-7dc6-4510-872e-5a4610b80a77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.222.249']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--668fe7fa-e530-42f4-b1d7-843fab08f46e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.150']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--437c2bb4-d010-49fb-8098-bd93e85cf597", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.187']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0361dee7-8ace-48eb-8ac5-ea4078a2f390", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.243']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6241817-9777-4ed7-9cbd-89c83c797f72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.234.25.61']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc2ad909-0a59-4b21-aaf3-aca47cf7e9a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.235.40.131']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5af2276-d813-42c9-942c-d626097cecc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.102.190']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2684aec2-5499-4aaf-a598-7cf5352dce8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.102.195']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bf51c6f-7b4a-488d-b109-95eb0faa9280", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.102.250']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a200271b-4ce0-4597-9e3f-2daea838b25f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.102.48']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df9c02b1-f96f-49bd-8d73-4f7784bcf785", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.103.8']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a68a4a7d-6412-4a43-af6d-11575da2ad71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.106.113']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5422085-8048-4680-ac38-96e2a0df7836", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.128']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cdc7ccb-ffa3-4498-948c-2368bba88851", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.197']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e674aff1-2012-4af8-8759-1a7e1ca08700", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.111.98']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e9b09fa-f355-4a41-96e9-53faa346cdb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.112.125']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1daade0-efef-4bd2-acdf-44b691e164f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.112.131']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3e69fea-6aaa-498a-8cf0-a9048a9d1dc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.112.138']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e59fcf53-cd0a-4a8e-8272-47c9bd9c5fcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.112.145']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09d50879-6fd1-46e1-9dca-410f48f84e4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.117.243']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--703fa3db-8262-4316-8202-a89251c3612e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.123.208']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9748173-430b-4515-a80f-9b323d4ccf9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.126.127']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ae83e43-82d6-4ca8-b061-c104ba5b8114", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.126.175']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--139baa4e-7197-4973-aa9a-1a44d3b0d8a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.111']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff67ade9-f169-4252-bbed-703460a1db63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.222']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--647d32ca-71a9-49cd-95c0-5cba2717a97b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.228.229']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--250dbd70-1f7a-4dcf-a79a-5cbc8890430d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.234.144']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe9e9ce7-5f50-460b-9f75-cf53616b5896", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.96.130']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fc63b62-bde1-4b08-8b47-7fe7bc257698", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.236.96.75']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2da9e232-00c1-489f-a29d-f8846bb3e709", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.136.213']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48e0d525-b852-4c39-ae6b-938c2e9f7588", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.136.85']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a76dc01a-12c0-416b-ba02-2c23db46730f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.137.136']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3c240ca-c403-47d7-beb2-817cf72e7e88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.137.146']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6aff9eca-8196-4224-b9f1-43616aff07dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.137.166']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--529412a8-adc2-4c54-8b22-170261e36565", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.137.89']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73de3605-10a8-4bd8-88ce-6614e7eb9a63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.150.127']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--166e68ba-b32b-448c-a740-4ad4f5fb3cc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.150.22']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08c62662-808b-43c1-8885-4a610f8841d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.155.240']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd6bbd1e-e814-438c-a5d2-d162027b8fb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.155.29']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b910bf2-3338-49c4-bfbd-ed5295dd8ba4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.156.201']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b54d2daa-e7a9-4017-8e18-b44c55c5e774", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.237.156.206']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edc5e126-8892-47e4-87ec-fa2718690885", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.160.104']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32f45365-9012-4707-a90c-aec7564ac56a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.171.10']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba05e70a-3c20-45b9-b328-af0545635605", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.238.188.122']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--475d00e8-cc76-4bfe-a00f-f5e5ba0a175a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.51.96']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a24d41be-eb12-4f55-b8fd-3036f21ccabd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.239.62.109']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8ebd5db-1dd8-41cf-a0b5-4cde79772f7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.245.112.205']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b73f2c9-a193-4639-97de-24fbd47fa41c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.82.67.187']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8699739-c3d8-4671-8030-89cf9ba65ed6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '172.94.9.56']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75e8da9f-68d4-4985-8b60-d69fefa43bba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.199.117.55']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5dcc987-f363-4f26-bed6-35fb2ef95b96", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.207.212.223']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cec82fbe-8cbe-443d-9aa1-f18cf9067c77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.212.217.75']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9857e140-8748-46e7-956d-6df8d687e2c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.230.135.46']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dc3ed55-863f-4c8e-b6ab-79167114b74d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.230.142.199']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56dccc4a-4480-4a75-8711-202fdb751f6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.230.145.110']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--258a155e-6df5-4406-a4ba-c32b20646269", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.230.150.73']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8398b2a7-600b-4224-b23e-b86225917687", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.210.89']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7eec2ae-a390-48f9-8fec-165542a8c18b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.221.22']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f85c47e2-5274-4a94-aeed-02dd5ec85bdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.103']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e66678a2-1a55-4dd0-8b72-c9cfe5b01a1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.115']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d129fe2-86d8-4a40-ae54-858c4c867977", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.124']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9a5e619-66c1-4533-862a-b544136e2a64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.143']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aab3a970-16bf-4c0f-9e67-be7dcca32fe7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.149']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21b5158f-e71d-4e3e-b81d-8c21e4b37021", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.32']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa57f423-f2d6-4dfc-a0f1-9c190ae49ab2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.49']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--230609fe-3a66-4ded-bdfb-9ef596435c25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.62']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c373612e-59c5-4de6-9f4e-182a78c1350c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.73']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c34097b5-36d0-41ca-84d9-b983afc87109", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.223.89']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--951f7393-cdf9-4bae-95ec-2d16e3621a18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.231.93']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5312ba25-46cc-4f62-936c-7839481976a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.242.196']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd1e31ae-bc67-4b44-8ffb-cc3e6d807fff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.243.63']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2018981b-f0ed-4f88-8241-950021b593f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.247.22']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50c73dc4-8a60-424f-b56c-afad799337a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '173.255.249.14']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa0ad62d-61f5-44dc-b080-4be670a61e0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.129.48.110']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c8b6080-c658-42bf-acfe-39286434f84d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '174.138.87.36']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17a4708b-1d5a-44ba-9795-dddd86b7717a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.0.36.85']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9609a223-d95a-4ac0-abaf-f3d9207d2776", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.10.220.71']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5470d316-87c3-499d-a802-d15c90c4fd62", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.107.216.212']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cbf3e6a-1b11-44bb-8bda-313df7623c0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.107.216.5']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b42f892e-e1e4-4b44-b129-9890da2348bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.11.135.84']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55a0ec13-7f7b-419c-b6d6-6794573d9a73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.148.158.86']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa5d6e49-0dd7-4c00-9fbe-1102874c1923", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.215.63.27']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a111a350-e98c-4606-a96f-f73ad655ac49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '175.30.48.11']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb4b3462-c797-4cc8-9683-83e8da8bf187", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.112.111.1']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0ada46f-7eda-40df-b79e-78bfbd7261fe", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.120.22.110']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60700b6d-b891-4202-aeaf-5f09c5bae540", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.120.22.36']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--729ab5e5-61db-4dac-b135-6a3380938d37", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.120.22.61']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f986ecac-9d5f-4708-a916-69df04eb275c", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.120.22.92']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bec903c-c3f7-4626-bff3-a02d58745689", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.120.22.97']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a35c0fe3-3026-4850-b5ce-95d5342ff73c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.196.176.122']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58616058-20a8-42dd-8265-a2bc94fb59cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.32.193.16']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1283d372-f9ac-428e-873d-a2ba477d2a5c", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.39.57.48']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92781467-f933-47e2-8484-bd456b02f1e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.0.183']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b56b2ec-9a49-4d97-879e-891cfe1af67f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.0.95']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0013893f-c8c1-4d57-a772-b0942d75cc9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.1.181']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44d23729-7b5f-4131-bd5d-ae07694e005e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.10.23']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--241b36b5-fc05-4872-9cd0-31ada83c47da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.11.157']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45d6af1e-76e7-4295-874b-7e489b32cc63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.8.182']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b56698e-e740-4c54-99df-3bac6ce1b759", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.53.9.189']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e6379cc-b885-4f29-b5a7-ee3e51111722", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.61.54.22']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7104f1c-bb82-483a-b3f5-051299c6d27d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.132.107']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53e556a1-44ad-4f7a-a4cd-ec5144b19e61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.134.52']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a38401a-c8e2-4fe5-a2bc-f8f317ce32b8", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.139.235']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b7a3097-6488-45f4-9522-3d3c620b64ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.144.159']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b41fa045-299f-4b88-8313-d0b8af7e5be5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.2']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70b4ea7e-10d8-4130-90aa-1a1ed8bc8f21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.216']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d1cf623-3b70-4a82-89f7-e584ba2a681a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.29']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--938d7315-f6eb-499c-aa67-e7473e1da257", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.71']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a2a5a5c-ef7c-4cfd-9374-6e8b6b14ddf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.78']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a9941fc-d3bc-4b8f-9f43-2af0b42104d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.93']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a02c77d0-9c6f-484c-895f-bde2be33467f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.148.94']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ac968a4-0e45-4167-bfb9-11d8c15f271d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.182']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a463533e-425d-4cb6-9f1b-504a4fea9f73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.188']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1362bc89-ce4f-4c59-9480-5dfa3525418d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.193']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16181f24-0d82-47da-9028-7ec993773625", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.212']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2040e8f4-93cf-4b6c-8f35-0d642d360da3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.220']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63b0961c-e70e-43bc-b2c8-4b7b34ba777c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.224']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63ca7b84-98d1-4066-aeac-65bcdc96c56c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.230']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38520a1d-756e-488a-bf73-341b2ef5d44d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.233']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--febea1b9-898e-43b4-9fac-ff2063c64d25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.236']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7198c52-a266-4893-abe0-f653d7dc49f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.27']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e56e38f7-4e8b-4b0f-9ac2-f0d7ad49840c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.30']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5448c0a-3fdb-404b-bf36-c1397a95f96f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.31']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--247bfe22-5726-4822-9b7b-151d4cf35135", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.55']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06efdbc6-824f-4155-b2b8-c1ba337ce4ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.64']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3126648d-18a3-4102-b329-cc95c3834173", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.65.149.67']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--394baf08-12e5-44e3-8f09-ccc0160bfe04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.0']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95592e3d-c9a0-423a-ab43-a4ba37150b8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.1']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4d18545-359e-4998-bd9c-2e19b378b85e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.10']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5042abc-c997-444e-8c9c-acf23a5646d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.100']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aae0add4-e07d-47a7-955d-7b8e2cc068b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.101']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c10dab6-9291-425d-bf2b-a314057d0b67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.102']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65d82294-088b-4b22-aefd-e6991fc67703", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.103']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8913b13f-a1a4-4c1a-9775-43b24319c98d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.104']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2610c425-4f21-425f-ac06-58fa1034e184", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.105']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a480c694-589c-4f2d-8ad1-f314195fb592", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.106']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27d68145-5a02-42d4-9086-148fc36e7814", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.107']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--018dff66-be67-46e1-a19b-539e00d8ee54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.109']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e444c147-7c75-46b9-8f61-2fda37f20d9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.11']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa70f69b-46a7-485f-9043-5c9456561883", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.110']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d52bdca5-eaf4-4d8b-b26c-1a848c564ee7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.111']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ecabd58-01c3-4fd2-a369-e9467ae953fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.112']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--251a9242-29d9-4ae5-be02-2cda7a8da8b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.114']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17c0d97f-b674-478e-9844-5179ced73c6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.116']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--395ba569-cb6f-4277-83f3-095f0f36e3ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.117']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--353fa3b6-55b7-41c0-bd02-f813f044a0fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.12']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--172878d8-1a4e-4037-a434-361ab0b7a5b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.122']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--276b87eb-b582-47bf-901c-74be1fa13545", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.123']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d4e8b25-632f-4a9b-b891-161ab0a4ad9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.124']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bff7cbd-a4d2-4c99-a2df-5f1c33b61706", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.125']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33f69ca8-4306-4e91-aa94-af95dd40d0ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.126']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd77dcba-6c79-44ba-995c-cbf5a22a0735", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.127']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ced26a8-0475-47f8-a572-72c7395f1afc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.128']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf6628ce-f643-46fd-b2b7-dde1ab21eb7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.129']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91c279c9-6682-420c-a4a7-6f6b0b77cd94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.13']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ff613df-1501-461a-b0ff-e1da98f68618", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.131']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f93b9722-0b3f-4297-b333-3e124af06957", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.134']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bf6808f-1de7-45e4-a046-310c4d4f641b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.135']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6719844-e2bd-42d4-991f-32688cce9db4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.136']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20b955e5-8720-43b8-8f15-46ed1809b904", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.137']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceb77166-8792-47fd-a1f6-390e1ab6da9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.138']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84ec472d-ae33-4d47-b783-9ab992b9a1b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.139']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb34cf43-1abd-47bd-a580-15b482426a83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.14']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60536246-3913-4f6f-8504-cdbbb177eb3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.140']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6648f0f3-1a61-49b6-9525-1c070db77207", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.142']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--197231bf-38ea-4af2-9d4b-d40fbc6fdffe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.143']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34dd005a-4ca5-4f51-8c9f-0add25c77c8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.145']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8af628e-9270-4f70-95a1-9207f16ca07d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.149']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53e6aa8c-8b0f-4d53-9937-deb13140a2fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.15']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3e8bee4-7925-4a52-9c3e-e6b37c0feb96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.150']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39bca7b6-c105-4796-b93a-83f773e60ddd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.151']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab3b302c-f9e8-4812-829d-4c58e860791b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.152']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cebba87f-8d74-40ac-9563-c01b7950f4dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.153']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1ad6e03-319f-42b4-bb10-f49222a76332", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.154']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06fe5b76-07a9-40d2-baf8-b26af8378847", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.155']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bbef51b-988f-4595-8b32-787260d18b44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.156']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9ebdd48-c421-48ba-b5f6-598ff67dc910", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.158']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71a095ef-d3f7-480b-aaea-38666e4dde11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.159']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36808d0a-e8fd-4ed6-9a13-4c2fda1fce36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.16']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ef02ff7-3f8a-4f5e-986d-135751d573f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.160']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cbf58f6-c239-4697-946c-15a7e46a80cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.161']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84c485df-f887-40ba-a78c-43a3276b2ad9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.163']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1108d63-9a84-49a2-9b41-ac71e41c5a6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.164']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7ab68cb-4393-4596-a221-81dd0461c77b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.166']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41672f96-86e1-4b38-a6c0-6f97ea940ff7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.168']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b9081f8-47ee-4ab7-be26-a730341bb3ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.169']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--136e9cd1-af54-4278-95e8-b921702ea9b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.17']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a9dd986-e490-4173-b84e-e479344ddcd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.170']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2285ca9f-836e-4947-88e4-9854fcde15b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.171']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9512a732-ed46-428d-9f9b-33b8be683878", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.172']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63980191-90a5-4d07-b7ac-797eb5773775", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.174']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cd495b6-d05b-4514-9470-6d3149a7aa97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.175']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b45861f8-fb7d-4b66-804d-69220dac7523", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.176']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--788b6fe1-e0fc-44df-9885-4434684fed15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.177']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db573a1c-3db4-4790-b881-0da0c73596db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.178']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce04e6bf-5e75-41b9-8806-3bbd13705365", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.179']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--313ac70a-cae9-4d1d-adcd-39d3499bca92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.18']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4c36089-2873-459e-a0f6-3031adcff1d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.180']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caeed7bc-ce1b-41e4-8d39-85ed0a9f4fb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.183']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a9d7415-26bb-4329-a11f-6059acafce16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.184']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6e3ac48-dff0-49d9-b181-c9825c080b5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.185']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bbe3429-9118-4a58-aeb8-1d24ec0d20ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.187']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c6cc66f-3e3d-4bcf-924b-5dd989f01cc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.188']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4895e2f2-5fbb-4db1-8074-97581bb605ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.19']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5ed3aeb-acc8-46c0-bb42-642ec2494632", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.190']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c2d1fea-aa86-4aad-b0d4-4f6f0a59e831", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.191']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5190eb6-e72d-402e-b589-5156428ab196", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.192']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--830d6ed8-65c5-4ab1-a9e6-b434f652f825", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.193']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38e3df1e-40c7-461a-957c-1788bcbe9be1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.195']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b682bb09-59e4-4da1-94ef-ed1a66a2eff6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.196']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--107ad5ca-8f83-445d-b0a1-3900cfb2567b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.197']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d3ef80d-295e-4ae5-8e0c-bae09e9d0df0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.198']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1a34c63-1e69-4127-87b9-432def313c74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.199']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45944557-0b93-464e-8ea2-f3344114c035", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.2']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b4da418-b9e7-42b8-82f3-0e76b69088a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.20']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebf47701-6f93-4dc6-a7e5-7a6fa42935bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.200']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4020272-139c-46e6-8ef0-b8ea198db877", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.201']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0a72b19-d851-4306-b1ae-09eb31473709", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.202']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce776eff-8aab-4ddd-8ce4-70e9420f31b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.203']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2063a457-7e6d-4c72-b812-36ff78ce14c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.205']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cd2722b-5496-4cd6-9eed-ce2256d570bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.206']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a960be9-5adc-42a5-8a6e-26fd9807bdff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.208']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fab9a1e-ee71-4296-bd30-df8f141807b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.209']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15982919-795c-4493-a53a-bf262c39b340", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.21']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8560f95-b1a6-49ad-99a7-e3dc199bf5fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.210']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbd03032-cea2-4b47-8b36-c539abbe00e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.211']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fef54122-bd6c-407d-b199-47b23af372a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.212']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--075d1b6d-31c2-449c-9f8a-ab6729caef29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.214']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6246c945-d18e-4297-ae70-7568b98b6d60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.215']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c639882-efa0-43a1-83b8-0c2025bbaa89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.216']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da731ec9-799a-46c4-a5d2-5b127fa3759e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.217']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5af8b1cb-18bd-41dd-955b-82a0bee9e006", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.218']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64ed9e6e-5199-445d-a5a8-c9c1b8d67cd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.22']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c2d3d75-6357-4de8-8dce-ad52d1072aa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.220']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eccb5d8d-5609-46a3-8d23-253ce704f973", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.221']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f3f59fc-2076-4f65-af65-d49c23ac9c9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.222']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a069638c-af59-4087-a7f0-8b051ccd25c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.223']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a67472d6-2f47-4691-b894-3cbc4c869cd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.225']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36d736f8-c2d4-42f2-89c8-e076144a6600", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.227']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9175e071-a944-4605-b523-6f29cd3dac38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.228']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4feb69e-99ef-498f-9530-52ec066a0b9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.230']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a1fe137-dfb0-4501-a91e-1dc423cf020d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.231']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--848483f3-595d-45c9-b5e4-969a6bbfb54d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.232']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6799d670-6634-410f-b381-219c8e249ce7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.233']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e585273a-05b1-4df0-a15f-cbff4dfe10bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.236']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff9aa9a5-6189-453d-b9a5-161056642a39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.237']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d51a0b8-ff0b-4a46-82ab-9d94c24ec60c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.239']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f447b216-4d60-400a-abc1-3cb6955984e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.24']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41fdf71c-a04d-48cf-9d99-b026f371197b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.240']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0301c7ef-38ec-4885-b9f3-194d9a6101d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.241']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88dc44b7-11ee-4500-9d0c-5a40d7b83d9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.243']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c078d168-265b-4d51-b066-5241839ac930", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.244']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9e56aa1-86f8-42c5-a22f-0fe450d8378b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.246']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4eec87c9-8650-4c82-97d4-3a71ced04470", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.247']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aa81b1f-91ff-4eb8-b824-1cb67f0dc239", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.248']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9185485e-3bfe-4faf-98a6-ae160ce8b5af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.249']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42b6a2f8-3cbe-456d-82b3-380d1842e84f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.25']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24940d18-cb97-45af-8ad2-1230af31a7b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.250']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ffaea8e-ed29-4145-9196-1e91638fee19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.251']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2cd993f-7cc8-497e-ae86-86d8deba7d1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.252']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86734ce2-4ce5-4a90-9cd6-c4f1e3d5841f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.253']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55b49cf2-bd55-4b6b-b7de-4289ea0234ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.254']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a072e3f8-bf97-4d8a-94bd-751568b83842", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.255']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--918d4720-bbc8-443c-9dbd-a9b8bec8d0a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.26']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6fd5b27-1609-49af-b140-50a98cfe405c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.27']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bdd3af5-7e3c-4449-b24d-91f853601f9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.28']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad98778c-3af6-4f1c-89ab-8ebf7e781d28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.29']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcc76559-4f2b-481e-9723-f5cf53b83459", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.3']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d99fb1b-f916-4add-815e-cb29686f46b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.30']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--616e8d79-e66d-4279-b579-6a5a1db87bcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.31']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c0fadb6-50d9-4a8d-b61c-fbf783ca1d79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.32']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37dae69a-00ff-4ab0-b055-0b73b8e7c4ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.34']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff5a42a0-c4d1-4230-99fa-d191efcc352d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.35']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5244965-97ab-4ded-b84b-d5bbf978ebb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.36']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86aa7e46-e193-40ff-8852-5c7d0185a8a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.38']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23b984cf-44c4-4e1b-9479-644d7d1a89fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.39']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8203954d-e6fd-45ee-a592-b57dedf55e7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.4']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86a368b4-b9ba-4a18-9758-004093f4906d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.40']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a08af5f1-e3fa-4f70-9628-aa36d50431a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.41']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee40b86c-0599-4ca4-a7ce-923c3c0eece9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.42']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--244e9754-6a62-4793-a9f2-ccbf182c1a4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.43']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c371271-d638-4df8-bca7-19b5acb62daa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.45']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69dab458-7b88-4f15-bb37-e57d8f02a829", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.46']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01b65d42-35a1-417f-a11c-3638b336f73b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.47']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18de1d14-0346-4c36-98fb-fd2ce9ceb7ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.48']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb347043-e357-4631-88ac-53ecb128886e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.49']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b956712-6304-4acf-88af-4e51e8862eb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.5']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2abefd09-2a98-47d7-9172-feeeb54ffc1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.50']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6250eedf-46b3-4dfa-8a75-4701f7fcc15d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.51']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--723bdc76-4c27-4ade-af2b-0ee7cf52328e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.54']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0ec7817-b13e-4e1e-8aac-f5a014dc21db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.55']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ebbc790-bb89-4e1d-8731-ece0d7f14bcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.56']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38776839-ebd9-4ff6-bb91-e406a5e260ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.57']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26be51e0-5c2f-483b-822e-2715d1b1eb23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.58']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35d4df38-cfd1-4a4d-90f8-4511dd5ba700", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.59']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85a49143-509d-4d64-8360-00c46c20312b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.6']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3136f3c-e7e7-4269-b0e4-42af2f09288b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.60']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2d847dd-ea2c-4557-a9cd-82aea76b02ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.61']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72b05159-1b21-4928-b370-d1d014423393", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.62']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ad0d17c-1501-4336-aa49-9f27019d038a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.63']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c43c2be-cef9-4b34-843d-70a51ae4ee60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.64']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20ed8d33-408e-414d-8a90-3469cbec6e88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.66']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c840627-c7b4-49c0-9657-f4897a7ed37a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.67']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9a49fe7-a6e5-4be5-abde-c7243ea2a90a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.68']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c99c5fc9-0822-4d04-9134-9917f3800db7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.7']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--972fa531-17e0-4843-b16f-7988fae377ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.70']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40b37be7-1149-45e3-a584-b6c017a3bccc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.71']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd54809d-9dda-47d2-b1aa-476ac6ee1b3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.72']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd7e4b89-6a23-408b-ad7d-900deb292c51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.74']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f58db459-f68e-42b2-b3ee-5c88593c31b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.75']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1c65775-3522-49d1-bbbe-f7c4986ac80e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.76']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd6569ba-3ece-4e7c-a9dc-4b404acb03a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.77']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--853ffcb1-eaa4-4cd4-9317-a8e38c1168f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.78']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c76cd830-3431-473c-ac3f-40a73b83064e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.79']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3344ea5c-1b5a-4ae5-a896-cc085c190313", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.8']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c8cd951-873c-4b59-a84b-96585b08dc1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.80']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ca281db-2622-46b9-a57a-efac102d6d70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.81']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b49f1df5-26a0-4758-a7ba-552b4cd8ec67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.83']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a3da9f5-0b4b-4474-ba63-3ed213b19829", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.84']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37fed903-ae0b-4170-b686-3f4adb126441", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.85']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eaa7de0-8555-488e-843a-f1bde7b82b88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.86']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9bd8785-1e1b-4afe-90d6-cbc893318957", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.87']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30699804-d458-4903-bde5-21afe551126c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.88']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7aedb351-6db4-40f0-98fc-778d292eebf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.89']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c27e75e-b25c-420a-961a-dfde335fc99a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.9']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c93e3bc-901e-411e-8556-b7a47c965559", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.90']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15f55957-e16c-4fa4-bf81-6f4447d95e89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.91']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47e2f1ed-34d9-430d-a856-f35a670d219e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.92']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdf6e60e-4d2b-4523-ba76-8e9de03afb07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.93']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8747e269-1847-41ea-b278-0892a012f15c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.94']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26d8d62f-3c54-43dc-93db-abf7af36ac93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.96']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e485581b-f632-4c5e-9e65-f55654df1008", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.97']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--146cf5b1-8963-481e-8126-1098f063e4c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.98']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3c3f670-ea97-40c2-b95f-b998b29d9359", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.88.160.99']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fba9408-067d-4c6d-9cd9-539db46f8b81", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '176.98.8.158']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de93bf10-04f8-433c-8d8b-036d43087b85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.126.81.56']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--871155eb-73dd-4296-be68-d379b3f32703", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.130.80.99']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d43ed8b0-9fe3-4969-bfcc-1e6fca07207b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.148.199.181']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--675fb4c4-d183-479e-bf02-d69291e5bc15", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.152.82.55']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--956d9c1f-f7f9-4076-8ed7-c61b4c1e8c04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.70.118.116']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20404cba-2a1a-4756-8602-6bbda8f3ee87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '177.87.110.18']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e2b5a07-37fa-4c41-b46c-d4c973c2623b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.105.200.202']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc0732f7-b88e-4104-bc32-5fb9ee269147", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.105.255.208']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5fbd8c4-b95b-4cd7-843b-96ec9bf784fc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.121.11.156']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1356c0b9-90ae-48e4-97bc-84b1988402bb", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.106.254']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85bffdac-ceaa-4f6a-bc00-48e9aa588e6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.158.73']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32675894-a7d7-4ce9-a9ad-0ff26f073038", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.128.32.203']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1821235-82a8-41c1-a74c-0706b6be6c7e", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.151.100.77']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfb85f02-9e6b-4e7d-960b-37e65558fa69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.159.219.150']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5d05c17-9053-4348-b2bf-934cc8695fcc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.159.37.53']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57e31ee0-d1f4-4c7b-9391-6b3015bafb8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.20.210.151']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2714fcc0-88d9-44cc-97db-b4d40e504950", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.20.210.152']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c92fc62f-e4f6-4dc0-ad8b-580c852b3606", "name": "Malicious Host", "description": "Observed: WEB activity. Web exploits: aws-credentials. Sensors: cfglobal, revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '178.239.173.50']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:revproxy", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--22b51b7d-731f-4fec-a5c2-ea37b61742b6", "relationship_type": "indicates", "source_ref": "indicator--c92fc62f-e4f6-4dc0-ad8b-580c852b3606", "target_ref": "attack-pattern--95634810-4d5c-4cb2-8998-8afc1f8d05a9", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d25c0fb4-16cc-465c-a0b2-ae21fd3a9ef8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.249.214.24']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4cfe658-fcda-492c-8892-782f5b11bec2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.38.210.236']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b376ae3-b1e0-455c-82fa-12b4ec253786", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.49.14.104']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea6d076e-1f18-4e9a-a5c0-09b919306c30", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.74.109.143']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63df313c-8a4b-4e56-9f8f-e570e67e2b72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '178.80.26.213']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bd4d3a5-3077-4d75-8b0f-3fb77506a48e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.108.35.3']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0127ab89-6f07-4a3c-a703-d25651251c9b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.125.94.9']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f03ff57-0291-4802-a7bd-286bcb852824", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.189.72.2']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c11ba5dc-e235-441b-8b3d-8681d2b3b5c5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.43.29.22']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a0351e2-92fc-4223-b64b-6533f9ff4799", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.51.168.104']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5ad25d7-e57e-4426-be83-c21cde1e48a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.51.168.99']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2282c5fd-b6d5-43e5-b3df-8d9babcf8125", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.6.7.36']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40fd8cd4-dc3b-4384-b9e5-b7b3ac7c9074", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.0']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6007cc83-e7e9-4689-acfe-eaa50af3f597", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.1']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--febc69cc-78a2-43cf-a527-7ca76be99ec6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.10']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ab634cc-f53e-421b-ab00-2d2ab8afdb58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.101']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2cc6c30-dda1-472f-bcae-1b8d458215a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.103']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da1d0b88-f040-494a-bbb6-5a8eceb83b15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.104']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2085b63e-750a-4524-be8b-4ad7e77f97e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.106']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90fbee6d-a4bf-4bd1-bf95-59e0f20afb25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.11']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59a3af6b-34a3-47ee-b22b-6b506974b88f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.110']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4140c3ed-4592-469e-a6e6-bc9e734a2f49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.111']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cbfb4a4-8f44-42f5-8bba-c66a49942f3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.112']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f8c78a9-9031-440b-93f8-6ee2f2ec873c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.113']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d49a1d9-da4f-4b05-850e-00dab542c5e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.115']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2adcd80-235e-4608-b667-d3a8242b4770", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.116']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0210134-79e9-41d9-84d9-33c00f60d90c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.117']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf3cbff5-08b9-496e-80d1-ce3c8ff38734", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.119']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fd2ce85-bc97-4848-b1cd-91a542f9c608", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.12']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0d645e3-4fe9-4d94-b4bd-6f3017fdc859", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.121']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6041c779-ad09-43fb-a994-166aeaee4971", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.122']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2fbf770-5488-4a94-9d7b-95df9b1023b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.125']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4418708c-6656-4041-8afa-2713a47ebeb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.126']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a250fe18-6fdf-4d79-8a2b-3465309962d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.127']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3efee105-049e-46d9-acfa-c8f3e35c2ed4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.130']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--697f4bb5-ee0d-41fa-aecc-49173c60b8a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.131']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85688abe-657c-43a2-847a-763b7d5f9e12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.132']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21762c2e-862e-42e8-b0f4-d5ab0acf2156", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.135']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a32cd43-5324-4d12-82f0-a33954aaa94c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.136']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3773259-1bee-49e9-b409-03ae6eb04538", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.137']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--528f4179-a31d-4fbd-8b08-80f511999d13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.138']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bbc2687-08dc-4cdd-8b95-a15d657abc7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.139']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f00617c-81a9-4e36-9b4e-19990e8fe19e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.14']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2587be25-6dcd-4b15-9250-193914878bd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.142']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71381a5c-232a-4513-834c-35bd8b8947c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.143']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec6523d6-8f19-46a5-bcb3-cc2268851139", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.145']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3ac53ae-61b9-4d25-bc95-30351059056b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.148']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12842cd8-7f21-44b3-ab9f-be279a0795a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.149']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e982578a-581c-4900-8e4f-95f2d3460e6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.15']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6632cdb5-cc50-4900-b1d0-0a841c1a6fe5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.150']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98529675-f5f0-40e3-bd89-9856168167b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.152']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a106b6a-14c7-4bdc-9473-8ef139e3b88c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.153']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ec520c7-8d96-4160-9e80-67559874a7a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.154']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65b8b985-dc9d-4b81-9b8a-4447852afc6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.157']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa79d1b2-936c-4eee-942e-bc12d6475d39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.158']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32e97bf7-e963-41f2-91fb-5b2c13ff0f5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.159']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83b5cfba-8afb-4838-b78b-a51b20846114", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.160']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1792602f-d5fe-4230-9e55-9005e26eee12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.161']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd051ec4-1ce0-424d-9029-d42dcee88238", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.163']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52168217-8c96-408c-bda3-c12a22f74a62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.164']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5b2abd9-92fb-4cc7-8ead-1412121d71cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.165']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90622859-134a-4b7d-8c22-0ec34badaac7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.168']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f883032c-3fe6-433d-b055-dc6bf34f2945", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.169']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbaa4500-ea33-43e2-a419-921c4cf4c089", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.17']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5891a45b-9466-40d1-8b26-6dcf801f39c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.171']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5bb39e5-ea28-47a4-bb74-1c6429b2f360", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.172']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97e5345b-7789-40dc-8368-52894eb9b0b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.174']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--922cc7b1-6e20-4df6-a379-58461bc446b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.175']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4d59e6d-7723-42ce-9675-d58bf3a44df0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.177']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39b59614-2dd8-4c91-90c4-3c84c7d2b70c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.178']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e1897e2-6c7a-43fb-8328-62ccce3ed2a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.179']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cfc059d-4934-4b5c-b4cc-7b3d62a1d731", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.18']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce0a1c70-01c7-4ffe-84ea-997376d3db92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.180']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec71d7f8-0e8d-4cf0-938b-a0c5fb6e1c60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.181']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c422fdb-98c8-41d2-92e8-03bef8bea13a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.183']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2774fd65-1fd3-412e-aa76-03edd07bd211", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.184']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad50117d-2332-4ccd-a941-a785c7b31e5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.187']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1198ea9e-35b6-4a40-8e8e-a2ad9ec55815", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.188']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7da97325-aeb5-4bb5-88d1-36546ff166b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.189']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f24411ff-be8f-407f-b9d5-e9278034a273", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.19']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e31a16f1-4d9f-40dd-af81-d70d1d634f33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.190']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2998e03b-1669-42e4-8bd4-c139311f05d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.192']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4670d6b2-d600-4110-aa4c-9ec17569ca2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.194']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d5d92c9-ba5a-4141-ba44-18072bc655e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.196']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59d77f30-75ef-4db1-8bd5-dbcc65bb1342", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.197']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c1f941a-b52f-4ee0-87d7-b9c5824cca3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.198']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bffd405-01d2-4c77-a672-09aa250e754c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.2']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a69a9307-a941-4f8f-86ed-7e530d61de53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.20']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a46edd7e-0534-4d8a-9de7-cdc063c63847", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.201']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79902eb1-044b-4998-aada-c277e5fc9ebf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.202']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d46f0a77-f57e-4f4f-8e84-2d936f11a40f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.203']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--140893a1-daa9-4d97-8fd1-332ebe8099ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.206']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32e15927-0d82-4ff3-9948-8546a4c66b98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.207']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93d7671f-af8d-45c3-8beb-480d67fa36e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.208']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70de6b41-56a1-4ceb-8257-32fa1f15196c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.209']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c907d413-ccb0-4ee0-ac41-7a0833354ec1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.21']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f527a6b-8cc8-41c8-98e3-7074157c0f24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.210']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3ad143a-b5da-48de-a714-05fe20dee8e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.211']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f801b7e7-94be-44ed-a0e9-34c6afb004fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.212']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccb4895b-b337-4790-a34a-9af62d717b40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.213']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4daa36eb-da1b-499c-9f7c-cbe4bbf6b319", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.214']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1714c13-da78-4af9-8bce-6977f2738dc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.216']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0faf81d0-0aff-407a-823f-3f895724b91a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.217']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f83b3c8a-adbb-49af-bd81-cd5d3983f8a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.218']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78fcc04d-ad2b-432d-aba4-7ced518f9561", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.220']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e36bf03e-a459-417e-9896-8fc0dd3e26e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.222']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d06a726-8811-4e6d-8906-c4f24c927885", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.224']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e2d172c-1b79-4478-b093-850c5baef563", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.225']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e802d9bd-c044-4ac7-b4c6-4c1f286a0504", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.227']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--609abb51-82d2-450c-986e-a96cd7db5219", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.228']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7aa111ba-7365-4c26-b743-32b4556f10b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.23']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34ab57e1-36c4-4ef4-b93c-0c017a9a232f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.230']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f7d5deb-fb6b-4faf-9b20-f96884feffa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.232']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82454038-0cca-4758-998c-25c6ed1a3af8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.233']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2d5d66e-f5d9-4904-8a88-0bba5f694b10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.237']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10bef290-76b3-4017-8cda-c202a61b5613", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.238']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4acf4c01-4873-4c30-be48-1707e4b2f70e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.24']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--303fab61-b3fd-4872-a909-b1f9fb5c8ccf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.240']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16c90a56-ed90-414f-be08-3dd560f664c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.242']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31de46d4-760b-492e-8f97-fec1be0e3b68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.243']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19e41cce-335d-4ea6-b3dc-2f1f1583de2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.244']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62a7fb74-693e-45c2-85aa-af5556215fcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.245']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b619927-389c-471c-8608-96187f31eecb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.249']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fb3a457-7ce7-463f-aa1d-949d6cfabedf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.250']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ae6294a-32e3-4a43-bc39-4221f2c103cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.251']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5266718-53af-4fc1-9b16-c298803d6091", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.252']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9239d1ca-13f2-4d00-87d3-fb6b8530ac8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.254']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b22f83d-ada0-49c1-bb91-0740bc89b008", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.26']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--603f64eb-64be-458a-bee8-a809cd13dfc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.27']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--431ad302-7b8e-45a1-94b6-1fa555028569", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.29']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--623d9481-4147-4783-9265-a89bfbce180e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.30']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f43f41f5-a619-4307-803c-b6516e383563", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.32']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62a98c63-21d7-4b35-9ade-88fce50228ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.33']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28ce986f-6f70-4b27-920d-d06276c211f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.35']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34c50818-c4d2-496a-b78d-98a2eb45581f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.36']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66fe705a-0b7d-4934-9126-33d1807cd7f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.37']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77c13935-b748-4da7-a793-9ab35d4bbd95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.38']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17bac95f-6a62-4e98-b7f8-a8c30cdc0405", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.39']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c350f49-5609-4579-bdf3-8d431b55cd2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.4']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5624243-9312-4c4e-9dc2-82b12c2b814d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.40']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b50c9c9-d628-4eec-ae1e-a071bed2fc65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.42']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c6aa6da-103b-4199-b9c5-fb9a51f0fc98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.43']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3323b8f-6fc0-4c64-8ced-7b83c19531b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.44']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4350f321-746a-43d4-99ad-d1a75d962780", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.45']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--593641a0-6970-46e2-a806-568e29e54ddd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.47']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e4e4419-6807-4947-bf1b-ef6bac8e8e38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.48']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7694002d-d728-487d-9aa1-da9991c66ad5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.49']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8048b72c-fb36-4b0f-a351-807d70d746c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.50']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c57d41e-790d-4705-b048-a3151f4c8e80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.51']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75982780-22c7-4ecf-95d0-e40758904b82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.52']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f38658d1-4928-42e4-85cf-9bd8d281c42b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.53']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fbb8b2f-dfaf-4b55-ae20-182f9daec5d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.56']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60949663-7499-4789-be82-1e53e375f368", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.58']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--225bbe50-bd3c-45d4-9947-6d17d73b2acf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.63']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c872532-e9a3-4531-8931-a23563cea633", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.64']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67d240aa-0da2-4ec2-96c1-24f239de74ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.65']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--091017c5-4aa6-40c3-a4c6-bb63e06c6997", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.66']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c718db5-192d-4f6e-a33d-a9579a57d327", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.67']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8237b337-4296-4cd2-9ad5-f99cee8e12df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.69']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76270173-d3a8-4e51-bf21-017ed20f4c33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.7']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dce76917-c024-44ef-8c39-e01f1997b38f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.70']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17a0ce64-f9a5-4208-a840-dd7cef7f5623", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.71']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c74aef4-ed10-4cfe-8627-657a881061b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.73']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--455e76a1-f74b-4398-92e0-2a938f01e46f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.75']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b39257f-1cad-441f-b21d-14fdcd3ec522", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.78']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0afcc1a-5c10-4f67-8243-c929b6c71eb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.79']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81b678bc-d11a-4822-8b5d-957e103a4ad9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.8']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39d1c3c5-3e11-4481-b807-469bf8403e80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.80']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21ba94b9-56e2-4d74-8096-ee89f575552c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.81']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d03e1b12-ef6f-4564-90c1-06002b9f2f2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.82']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb70eb63-2e13-4508-bbbf-48b687413d27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.83']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2320324b-ce9a-455b-8cae-01a04c41e047", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.86']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fd551fe-4413-439a-8da3-b793f63e2bbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.87']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bce9f90-fb96-4d90-b63e-7d113f8a4047", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.88']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61f549c5-ea72-4e13-87be-4c8e70499986", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.9']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96ed1699-e6c5-4144-ae88-9425aa519be7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.90']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9f98937-4310-4d0d-a5da-5cb3e4f7c79d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.95']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d2d44a3-7038-4f8a-a8a4-398560f5b296", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.96']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acc83fce-d8db-4667-bc03-f81fbfca435d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.98']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--723f35a4-dae2-4290-a194-9ce0fec773c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.138.99']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fcd6b31-93fe-4ea4-862a-7ec6768cd795", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.1']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07b55fce-bbf0-44e0-8ff6-9d7278681776", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.10']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dde42693-13b6-4876-92e7-6e529e17e9c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.101']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faf94c23-974c-47ed-ba54-4bf3398d10c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.102']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f370a5ca-8ddd-4c4a-bf56-33e55c6b573d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.103']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1cf4302-0c5b-46f4-aa6d-619fd7184db8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.104']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9801f39d-1721-4ddd-969f-4911ae115cb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.105']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6712ceaa-4d51-4443-8e86-3beeb092f734", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.106']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34bdb7bd-054e-4cc7-8552-ea6d1d43c993", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.107']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c47a1f1a-714e-4185-9e97-0cfbc8179ab8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.108']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61ade74b-e30d-4c82-b4cd-c7282bfa2b24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.109']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8f86cbf-8144-42bd-af4f-eb0f25805f4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.11']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--add6480d-d87e-4e96-9c16-5593b757150a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.111']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82c1bec4-577f-465d-8ed1-a81ad18add43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.112']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9479e92-fa87-42e0-b4b2-e777d14e1e59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.113']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d67b4631-ded1-4d6c-8571-03524159dcc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.114']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e95d57aa-2cef-4c98-b1d5-9aa2583adc00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.115']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0278486a-c128-4440-89d7-e05565a50143", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.116']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb76d847-16e9-44f4-b899-ec2adfcecd62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.117']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--929091f2-505f-4952-8723-b0c506841110", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.118']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47f0f533-7159-4a7a-86d0-f4551713fa9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.119']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d0e2a53-865c-4540-a09b-ec7dd1d873d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.12']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfd65b38-623a-48cf-ab35-8c3da172e21c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.120']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c63cf89-6a1b-46cb-be89-8f39c83b9ab8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.122']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--013b7e7f-46af-4613-832b-b650276c6df0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.123']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--126cdab0-ce92-421c-a7b5-d54b99dd2ec4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.124']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33b7e24a-3075-47c9-9dd7-8989e602c0e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.125']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d40bd296-8b52-499c-be18-31099a02bb66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.126']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6c59f64-15d3-42d8-993e-a7d83c2d68a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.127']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42e4d4a0-6311-41f6-90d1-1f20cdb4c2b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.128']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee49284c-bfd3-4392-8926-da29a8f45889", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.129']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b5a57a5-6ec3-4c0a-8109-7ef90f3873e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.13']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--572ff74e-4d0c-40bb-935e-e8949135064d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.130']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27babd70-9a0e-4c7a-8add-32235550d6e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.131']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4f6eaf6-6b8b-490f-8668-7a966cc1818b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.133']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29f91648-4ef8-4c97-8dd0-3b4a749521e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.134']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cfdc01d-ccd2-4e78-bda2-052595c79ea2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.135']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cceb3a8f-1f90-4524-b759-4b141bd6aab4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.137']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4b7e995-7c6b-4ff0-8b1f-c5a306cac466", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.138']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c40ae3e5-1b88-46f9-bf6e-8ff02238393d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.139']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--316674b6-8283-4144-a736-e57c1abd5fa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.14']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbbacde2-34ae-49e0-8565-b5d87a9753ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.140']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--481e7cda-f72c-41db-80d5-46c57cf8c5da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.141']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2195ddc4-2803-42b4-8d8e-fb1746aa9b21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.142']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--703217f8-9189-44f3-8f0b-3f5c1ea267fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.143']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab801ab1-82c1-44ea-a796-e88dea95cbe2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.144']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc4ced70-698c-45e2-a321-c0f8a37949e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.145']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--534dd097-94b1-4722-917a-993653a474eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.147']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf4f5097-0e3b-4bd5-9139-81aaeeee7c6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.148']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aac2320a-d9e9-4929-8e8a-818feb6a2616", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.15']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d28923c-1497-4187-b424-5db3e46d1c28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.150']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--477ed209-51c2-405c-9e13-f074f729c4cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.151']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c98e04ac-b7d1-4074-867e-5d5fb15c0a42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.152']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f86bd960-12f7-4764-8fa0-55a104f9a815", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.153']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd9eb74d-6b65-49ca-875f-d825f852a2b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.154']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b50cdf53-beb2-460e-b33f-35d2fdf1c5d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.156']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87ea1694-4207-4ac7-a352-ae591f2e03d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.157']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b31b3523-e42a-43c3-9aa5-ca068c1dfff3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.158']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69d1328a-1ad8-4dbf-a7b1-67ae2538b74a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.159']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2855bc0-0575-44b1-8b14-00401bc54465", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.16']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c70f39d9-251b-4117-b194-61af467df07a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.161']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99f970fc-ad9e-480e-a0ae-911984f317ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.163']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38928d3e-d321-4ab9-913d-30ab389987a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.164']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--082b5774-99c8-4638-b1ef-86cc5d65782e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.165']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c6b284d-fd5b-41bc-a4fe-f1b623c11255", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.167']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--531f0168-3819-4ad0-8ed0-6d92a3561bbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.168']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--561d5b98-f16e-4000-9984-215230b54a5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.17']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4390b180-919a-42ee-bc91-3ac445682a69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.170']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f63dc2f-17fa-4439-b39d-6fe05cfb2d38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.171']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf9cb9ba-5a65-4d83-bebc-9c154dbbd0ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.172']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--116883b3-a602-4e3c-9199-2077e17806aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.173']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b40a0f6-fb98-41c5-a780-497d0692f45d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.174']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74eefeee-fd6f-41e0-b6ef-4ad6549260e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.176']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2eb4a43d-b1d4-46b2-8ef8-f5c24fdedb82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.178']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5b3746b-d887-4411-bdfc-2d263ee90057", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.179']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59afce73-8cd0-4541-8f56-09514fd135d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.18']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a0a36cf-3d25-4762-9aae-49c9b2cc3633", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.180']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a6efc6c-c491-4461-b70d-2dc94728dda2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.181']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--231c9ffe-b2e7-4e3d-ae9e-4201530cf3d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.182']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3d8a48e-cc93-493e-816e-3c98cb2bba09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.183']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47574cf8-c134-4e46-99b0-48def23afc35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.184']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4df6966-22e2-4be8-b5c6-f103042f0238", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.185']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ef2a756-9148-4b07-b83b-098c3c50e0f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.186']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48a608a5-a8c7-4862-bd47-3394dd2b2aa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.187']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bf277f3-24ed-4bcb-a66c-129cf4c178d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.188']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdea1b06-35f6-49c9-ad47-9b49aba1934d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.189']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e1bdc1d-45e1-4f3f-bd69-9a8913feb789", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.19']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46e0047c-0a55-44f0-b390-e7cd245bb61f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.190']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee6d209e-9850-4cf4-b798-e29cb8b112d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.191']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e44e47a-35d1-485c-a00e-bb1bdf5e3747", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.192']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ce321b9-6e2a-4fa9-a617-580516f9fa31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.194']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9cca989-191e-4530-8d4f-0309faf99b15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.195']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f28ddbc-3a87-486d-9df9-1601d9994367", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.196']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--609ae44e-78bd-463a-9d64-7a3117863f5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.197']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb34cc9a-8feb-40ce-bec1-df5b6964fe3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.198']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c0352c2-84ae-4ffa-89b8-82f286602121", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.199']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cee12bc-306f-4db8-b153-41d2df760f95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.2']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d2ee952-47af-41cb-8f13-bbac54cb0db8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.20']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67a52bae-8ba3-4310-998f-eb77a51a8c8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.200']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8212197-1435-4f0b-bff1-900de539a2fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.202']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61c97a93-a085-4e75-94d5-4b2e872b9d50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.204']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68864a1d-16e8-4ad8-9d62-a54d07f836fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.205']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85540160-ba77-4728-877c-d519065ec243", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.206']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d99647bf-34ef-4279-8ed4-2d332925c687", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.207']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d31e8bf9-aa0b-4c23-84f3-b4dad5f50ed2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.208']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3eb6663e-bb24-43bb-b2eb-a8137dc5e2c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.209']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--456dcf04-b0a1-4b8d-8f27-a7593dafb361", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.21']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--730be393-8002-4533-b688-aa27f4eaadd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.211']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff026247-d5f0-4477-962f-1abae0a16675", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.212']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40047341-67a6-488d-8e21-9123d4e6def4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.213']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87c41e8d-df30-42da-8460-7e3f49bf9d90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.214']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4cd2496-45db-400d-89e5-1727a525e956", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.215']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bcf4e1e-bd3b-4158-ae4d-9205c29a25bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.216']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9df585d-b11f-4518-a58f-c88850c41bae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.217']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5711744f-d814-41ba-9fe6-e9490648ab02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.218']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--345886af-8991-4103-abfe-bfc07c4632a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.219']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--498f7c0c-b6f6-4295-91f8-4449064dd57c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.22']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afdbc97e-636c-4fe8-805c-bcf9abfcf8a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.220']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fd9064e-7deb-4455-869e-e1b5ef7b0408", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.221']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b06cc403-9210-47ff-99a5-b7dec1055668", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.222']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d77033c8-8c6f-49de-8053-a468deb0f66d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.223']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4df0b057-a8da-43a3-ad2a-87c7ddc8033d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.224']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18c475be-b0ff-4759-8710-4beae062e600", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.226']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--457e7299-6009-48cf-a2f7-b9b313eeb515", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.227']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60234a5e-429a-4bda-a1c7-187e2e6c4d80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.228']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a2a7c9e-f9af-4ebb-85be-5ccfe0004ccd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.23']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12d33f46-a1b4-4185-927c-1c4c4d383dd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.230']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27d9afae-0a6d-4f75-bdf3-2087116f6b13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.231']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f1f6ada-2166-4f8f-a5c5-5d831a97027b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.232']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff5fe299-8133-40ab-84a7-72f50ce741f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.233']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfa35ad2-e52c-4582-be30-00ea5040abd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.234']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46c4cd07-806e-4a23-ada7-a67cd1e94c94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.235']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fce759e8-fb92-4ef8-b649-5e0212fced55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.236']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72d1aea0-9de1-4df5-8064-64d10d13db02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.238']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a57eaf52-a7e9-4240-a570-809268f940c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.239']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37b9a8f7-7a76-41c8-b343-76fbb5fad87b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.24']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--485e6b26-8aab-4ecc-a56c-a3c8b80f4cfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.240']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a35208b-0dd0-4794-a870-a47ae68a4fc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.241']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee21f453-5006-44d6-b5ca-31418f890f2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.242']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cf66324-adc6-4270-a390-7676ca6d4d7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.243']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3d59701-3a44-464c-9fe1-d331717cbf96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.244']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07cb1b6c-f1b3-476c-9a45-536e14aa6b7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.245']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c48d1b9a-5034-4aba-92ca-aaf0e94c07dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.246']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--509b5c4e-685e-4d57-b6b8-566c699a7954", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.247']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b994f2d3-294a-418a-8a44-c7c7179a48fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.248']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3afed1c-6500-4818-a3e8-461c4355e41c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.249']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c492e396-4965-4e3a-b7e4-b6f3c269725d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.25']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e0918a5-7a19-47d2-8def-3c3386405820", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.250']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--661cc5b4-5c68-46e6-aecc-3b33682249d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.252']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09285f24-6275-43bc-8d6f-83bb6c9f0816", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.253']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f891fcef-1fcc-4d94-9006-4ef1c72f0f84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.254']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76410e15-b9ae-4008-b836-84a355f92943", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.255']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8713f5d4-65ed-4e5b-bcda-b1a40f1bed9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.26']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f03102b-0a35-4066-9696-4bf8f2d2a697", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.28']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5988ab3-e98a-46e6-b4f4-29fb6fe6dc2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.29']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1356d4b-3a7e-44c8-8e5d-41002137171b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.3']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--213660d8-abb3-4b59-bb81-f9685cd64c47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.30']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da8b322a-9d95-4ac7-9376-26d760610f8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.31']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c692553-9e42-4be8-a36c-b0b86e8e5274", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.32']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41d96e4d-0f58-4acf-83ac-fdc9d05de1ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.33']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--036fc574-d5a8-47d4-9957-088dfaae460f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.34']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebe26479-fa6e-4d14-bc22-417beec07450", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.35']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e598a22-9c54-4c6c-bf95-418a4e43a44d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.39']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b425524d-264c-45e9-9de8-b88401ec1b51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.4']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5261e40-2490-4bcf-961a-11e412e9828c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.40']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99605515-a32c-48ad-83ab-a141862b9d65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.41']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e3197db-7678-4aee-87d3-e2389efc6fee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.42']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f46229b-02bd-4a2f-834a-54519a14ce16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.44']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe8c073b-88ca-44e5-8ae3-6f9cd2029765", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.46']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19dcfb0f-5ab1-45f2-8a23-a25c2c8d23af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.47']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d3bb5c4-98cd-4fdb-a605-9b379c102229", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.48']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1ccc9bd-3705-40f4-8841-bdb382768260", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.49']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--559e6670-e518-4a31-b9cb-606cae6d1f7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.5']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3fcec1b-cf02-42e1-b05d-5486e08fb03d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.51']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bd4095b-7ecf-480d-a52d-f70b66f477c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.52']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--127a5e3e-4f29-4307-ae0e-dd689de3bfdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.53']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa515c7a-de99-4bd2-aa17-f733a47e671f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.54']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b72d4c0-cf80-4598-8da9-4d1f7c51df5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.55']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--405a5ae9-3b68-4d1a-872b-e5c4ee5b8425", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.56']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec7cf36b-9039-4570-a4da-2daf3da7f674", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.58']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90e63b7f-a47d-4279-b27c-3e4cf49d1822", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.59']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c01aff3-05a2-44a8-9785-ab6db508fee2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.6']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d8657ae-44ef-4adc-9c1a-f4e6766933d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.60']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09a740b8-f0fd-431f-9aae-6333da23c881", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.62']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bafc1b1-6369-458d-80ab-8944921c4197", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.63']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d7b4e87-0218-47f9-b609-ac9608abb160", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.64']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30e6a6ea-57c5-46dd-9889-9f9852dfb43e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.65']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4956508b-c3bb-40b1-bb31-74da0650e2d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.66']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db3948be-3ed1-4e15-a4e3-904b1c57d1e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.67']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34fcfb49-bd9a-4d75-9eaa-c13111e693c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.68']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fa57821-28c4-4263-9b26-7a991de50444", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.69']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f14d73f3-f237-4c88-b63c-ed211900da8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.7']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efa9d7a9-2766-4bc4-ad56-857164449ff4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.70']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--085b9689-7e4b-447c-92cc-4afab5a5bc22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.71']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9ef18b0-df8b-4b7a-8652-0523d562c39b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.72']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48cecda2-b0ed-4c98-936e-249aaffd3b7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.74']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ea2a943-a80c-4d83-acd5-285d632756ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.75']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4729028-2ba5-4cbb-894c-80bef507ae98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.76']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e5ecd3f-792e-4792-ae59-4c57a782d707", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.77']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d3ad60d-1caf-4fb6-a378-6fc8aebdfa65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.78']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d70c24b8-bf22-4d8f-a19e-7f9a21288acb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.79']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9afbc5ce-b53f-41fe-a26c-ddf27d557661", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.80']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--884c1cf4-e998-4531-8225-6f90df820894", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.82']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0da27c3-2081-4dee-8eba-2565b735daa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.84']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a24fce82-1196-4d88-8fa6-85cf7af0fdb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.85']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7856eff3-ea23-439a-a915-4f68e64b186e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.86']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96c4e7f0-2910-4a44-b073-618d63df5993", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.88']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--315ad397-78b2-478b-9317-31e9774e79fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.89']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50105a12-67cb-4848-832d-4dc2c444af1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.9']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4120ff10-6ab0-460d-a5fb-44af476ab471", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.90']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdbb9dfb-81aa-4021-b0b5-f77644c31765", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.91']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7572c51-0cdd-429e-91fa-d0b3b3dda8bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.92']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37a3aed0-26f5-41e0-9a72-4fadd4daafba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.93']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee3a664e-40ea-411f-9c87-17a3db4e8b3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.94']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e410a64d-8151-463d-a041-f5ecb06dfa76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.96']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ac78678-4352-4908-bcf0-bbe0867e7471", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.98']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec4d8505-0c92-4a00-bc34-b7e990b824ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '179.61.251.99']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24a7931c-f5f6-4d88-b304-5a41b30471b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.116.101.220']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--337ff601-45a6-456f-8547-8d4385c48f61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.119.209.50']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2c405b9-fa32-45fb-83ca-e54284fd6293", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.133.199.181']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5885b51-283b-48e6-aa59-737eb7298d8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.135.247.138']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78dcef4f-f585-422c-8460-74e025662bb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.140.44.23']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54e1f41e-4453-4e9a-a84f-674acf480a84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.190.15.50']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ed0504b-a3de-4371-8118-94aa4f13aeac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.209.46.148']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--392745fb-6c01-44ec-801b-8256c1c896e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.215.153.3']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdf758d3-0f9d-4326-96fa-4278a4aebdcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.215.162.47']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31c8a081-377a-48be-8dd5-0a1c99013999", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.217.208.51']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3898495-81f4-4316-8c19-cbe23eb96d78", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.218.118.203']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ca2b87d-08a8-4599-b192-cfab017a918a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '18.221.179.104']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d54f29b-0532-4a7e-8a01-b317f182110b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.111.30.217']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--540bdd76-588f-4407-b124-7d722aa48c97", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.112.153.214']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--312fe454-448d-44be-8a89-ec1ab079f20c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.149.219.10']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c740f86-b0ea-4120-b4a6-5c0e4086a453", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.172.152.17']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da05772e-def4-4c65-b173-cb456ea73d32", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.188.173.216']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b8d8177-5e36-49fc-b76d-fa8e6c55b2b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.199.227.131']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e852f449-0802-4658-9d2a-a16f59b534ba", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.251.183.19']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4b0763b-3755-47ce-9c3b-eabf54cef19d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.66.173.220']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bac9b1b-5183-4d11-8b1f-ef8c85c02c63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.141.121']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67d8ecae-5871-474e-a4b1-c830bcbbf60f", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '180.76.236.214']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4d7c1d2-ed7a-4ab5-b113-0649c1d8dd2a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.124.22.215']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6bd40a3-272f-4baa-aab7-7e141204a43a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.0']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bab9da8-4396-4ae8-8f68-050cc7eec198", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.1']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24871239-7faf-4d15-a5eb-a48ae3f148a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.102']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7b5e1ac-c3c6-4c2f-8904-ca6a64ff1016", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.103']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6af32aa-426f-492d-8d41-17b939edcc77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.104']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--463b9f23-1e5e-48fc-b804-41b08a5c02d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.105']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b39f50bc-d8f3-43de-baca-61fe482cdf89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.106']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3986109e-4600-4563-9804-77767581a0d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.107']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b008166-17f0-4cc5-87c6-8c1b8ddcb5bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.108']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94f21ad3-172f-40c6-b45a-cd316fb808de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.109']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbc88502-508f-4d80-acf0-11bc7a200953", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.11']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a9215af-4f91-455d-87ba-0fea985b2bac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.110']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc110135-68da-4a7e-83ba-a6c5b2329c44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.111']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee024aac-e261-45ea-aacb-3a1a353b2c65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.112']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--296fb473-9980-48a7-9372-103957a9c787", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.113']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a6ab920-5237-4a9f-872d-2d826f0fb5fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.114']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f18581d-c1f3-4371-a17a-05712bcbe1e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.115']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--846c926a-7532-4302-840e-cf1e2673eee2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.117']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c69b50f8-8525-405c-bf73-2c60a1966596", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.118']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39e1e265-6aa8-4fff-8192-38e6f7c02da9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.119']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37291fcd-fa4b-4553-8bbb-92a88aec6516", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.12']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f463bfc3-f2af-4c49-8f6e-afa1ef232cc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.120']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea3bef73-13c6-410f-be61-a2e6680d7e3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.121']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a15cd74-bb59-4f39-bd30-2bfe46e46b9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.122']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c7c990d-3d67-4706-9206-fc7d4367b48c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.123']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--697b5265-a554-4471-b6f1-be30b23c95d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.124']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e22fe27e-28c6-4b70-94c0-b8fc84524118", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.125']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ce7b029-675a-45d7-9099-3e1aca61bfd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.127']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--978073da-1441-467a-b30e-5ee154dd4f46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.128']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a800f23e-0a8b-479b-b06d-108d96d70ea6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.129']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc70d3b2-e234-4a9c-b2cc-9b97d64b7e33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.13']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d89271e8-c7bc-479a-9017-bfa0671122a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.130']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec3ee33c-d823-49e1-847a-99de5b5b2f87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.131']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7acaf4d9-d0fb-411e-8406-954dbcfa7b5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.132']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20014738-ef98-4874-a7d0-120086eaf915", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.133']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ba01bbc-d742-46e9-9a06-4b16e0a8efe6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.134']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81cff66b-6a82-41f6-bd59-bbd219f6ea85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.135']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c04b1f3b-90df-485c-99dd-2a235a93fde2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.136']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3c5b122-4827-4af1-b426-c83abb916308", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.137']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6d8738f-57e2-41ed-a4aa-f0e875c78f2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.138']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da735515-dd79-4a6f-93ea-12b8dd3d6b52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.139']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bd7e9bf-3783-46ee-9e37-25a4c7ee4c1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.140']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--624858d9-ba25-4bb6-8bd5-e54b7b398101", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.141']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e519c0eb-fccb-4fed-a7a2-4b98ac18720e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.143']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5da49382-7019-4cdc-9d68-2bb11f261f93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.144']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7210f2a-cfa0-4d32-906e-ab4f22ca5d19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.146']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7924d50a-9ecc-4fa2-986b-74df42610e48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.147']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecf2fbeb-2b3b-4476-8fa6-637f36bb69ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.149']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc1fca04-20aa-429e-a2f3-4d37b85c6d64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.15']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98485438-e350-4e26-97a3-643d5d16fc1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.150']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af6aa94f-be74-475f-8c18-63106ba15503", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.151']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--112c6904-0732-46c9-b9ca-4049f92f4e01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.153']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cf97ba1-0e0c-4205-98c3-5ad0f89c2ca3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.155']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ad50223-e892-4866-a4e6-5a7e356876b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.157']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a5b9138-b2a3-4f47-9c03-aaf247279e07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.158']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f5ff407-e55b-4388-8325-94e506cb88f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.159']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24172c03-12ed-4bac-bbf4-dbfcfcb2d565", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.16']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4f24eb2-7601-4ca5-8269-b2e03e0815c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.160']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--873da975-8dfc-438f-910d-ad895a5554e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.161']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e73b529-8087-4fc9-9aac-0c6ab9249b97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.162']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed102e7b-8767-4959-b56a-7d191a211e9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.163']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d89d8f1e-b448-4c02-bcc7-c58c42ae09bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.164']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60bbea21-3d9c-49a1-920e-f788a98f6c3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.165']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--435822b9-51d9-4d5f-9e1c-8af0ac2ba218", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.166']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2ec9a67-ca53-475b-9f05-916d4dfff827", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.167']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--320bba23-ca92-4840-9dbe-1b71c807e5f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.168']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ad9b40b-849a-4bd9-b981-71dab3a875e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.169']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--762c4977-5562-4790-bdd4-f4b9f1495fee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.17']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a31a9e0-a58d-4853-b5ad-7c795f462b63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.170']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8d5a11c-d85b-4168-8654-2112c643280f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.173']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a4f17b3-1735-4c88-ae5b-fac5f2f79bf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.174']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf321e3d-a53c-46b0-b3af-a8c502b91097", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.176']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54221eb4-8d9c-42bd-bb1a-89b1e4d5cdab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.178']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfd3373d-32bb-4c20-a4fc-fcd59bc40118", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.18']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29ae3698-67d4-4592-93ba-91fcbdb44a66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.180']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--409d948d-0598-447c-aeba-c1d50cb379a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.181']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5fd4372-4ef7-43d8-9df1-a65884b4c097", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.182']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--355e8850-93da-4330-b29e-b5df4510f9d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.183']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--766a2ffc-deac-4cd9-8fee-ba9c1fcf6c21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.184']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3353edd-7e5f-448a-9c2c-208758e32c72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.185']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfa68c11-0f12-402e-8090-6142d7e3ca25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.186']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--517e8d65-e108-49ef-97c3-9a327cbe4ab3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.187']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7e00176-c820-4088-8494-e2aff05a5c2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.188']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dce27b5c-c86b-424f-86f3-0637aacf30eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.19']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b3d992e-e6c6-43a4-ba15-c841ab2a4358", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.190']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66bdc270-ee31-4819-896d-e2594d640dc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.191']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95cb1417-82ec-4c57-aaf8-2da084ecd682", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.192']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2c82a78-dd89-424c-8375-901de073aa7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.194']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b5d34f8-7eb4-4719-a740-6a5a2accd543", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.195']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b13c031f-f118-47a3-a0f4-4ca84cd2a9c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.196']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--029139b3-417e-4086-b2aa-e64b2929210e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.197']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5654f833-d76c-406c-9f3f-d9dc93b326c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.198']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03d6c44a-0ed4-41df-a5cb-ffbb855dced6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.2']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b45c45c-4280-48b6-b217-ac45cc1936ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.20']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afd77b75-186c-46da-98ab-aaa2770e8f8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.200']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a7f64ac-c242-4a96-a800-cb02e020e400", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.201']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71fc2983-8403-43c1-b583-d54eefce7691", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.202']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01d32aa6-28f0-436a-aaa4-33785652d68c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.203']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e309c21-f830-4f7b-b00c-9d2cd9d679e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.204']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45477154-d7d3-4e33-9d5d-0b3990e70a2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.205']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90dfdc70-e0ae-4957-99ea-0ca31d7bac75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.206']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c37c4ace-ad7e-44bd-a935-bac42454e329", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.207']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0722bb8e-c83d-4c63-81b0-f40cd632f2b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.208']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--157d8207-f490-4850-88ea-6777dd73e129", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.209']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ee7540d-47f5-43aa-bdc3-0e17386e5147", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.21']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02976477-72ca-496b-8725-44e63e955299", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.210']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbeebf4a-c98c-4b46-97d0-67ad39ed9b02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.211']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88ca8402-38cc-470a-b560-a46f69c6842d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.212']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84effded-1fc5-4d66-b5c0-d55f8b9e3e04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.213']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e883591-e79f-42d4-94b9-f75095775278", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.214']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b296ebbd-d1ab-4ebf-a6e1-d880eff0e235", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.215']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb62af2f-90fd-476e-91c3-f309a8cfacdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.216']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed684a55-0dfa-4ece-a0aa-9535cfc05075", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.217']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c125cf18-7c17-4b16-a4d0-daf89fd2bf8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.218']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a829b7e2-ab2c-4f7e-84cf-29385c2b49bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.219']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b18547e-48ed-4d47-ba10-c1f85a576ee4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.22']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85820486-81e1-4ecc-87c4-0630a5ba84dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.220']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cee5d92-0196-4a54-806a-fd111cf5fd27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.221']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ff981a3-aa93-48fe-ab09-0d5d627bda05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.222']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36b54dca-acc2-4eeb-a70d-31dbcbf41439", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.223']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76e4c3ff-db3e-44a3-9360-142d085ec525", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.224']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10a7d6ea-ff65-4eb0-8fd5-c28b452ba267", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.225']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91a0814a-002e-4c86-b8e9-7a9da2fbe594", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.226']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca00948d-6b10-4fde-94e1-9862bed2bec0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.227']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca92014e-bb7f-4497-a325-3bab4d0ac144", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.228']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5661217e-6e8a-4c2a-b331-ea7d6b427e5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.23']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4d820f3-3e64-4681-af5e-229088d0f816", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.231']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73fbe193-afb5-4783-83d6-17fe6923e761", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.232']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7156eaa4-1dba-48c2-8f24-9cad8adc9e74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.233']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e18198da-b9a6-4414-b685-e47fbe8b917d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.234']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a2aca07-cb8b-485a-a1fa-27431086569c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.235']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49642e3e-9e49-479e-a5b3-1555be947f6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.236']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--728a137b-1ca3-41f5-bf2a-fd5f536e7737", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.238']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2480022-53d0-47d8-a36b-4ec3f3e50a34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.239']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a53b3f54-0dcb-453b-af13-6cfad8ad5b31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.24']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c459792-d4ac-4746-9a5a-e059cc6aa241", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.241']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--481467ba-99f6-42ab-9dfe-700907bf3b32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.242']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26cee328-fc47-4b96-99bd-e44f0d333450", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.244']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49392713-c2f0-4970-abfe-90a73fb05b5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.245']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f22cb0f-d111-4c06-aba8-50c8c7bb9f2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.246']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6783773b-68b1-4df0-a6b8-e3891aeade14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.247']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4d4bdbf-ebe7-40cc-976e-08563f833723", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.249']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23fcfc66-01d3-42fc-8917-847e921aa63b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.25']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c92f9900-ad8a-47ca-afb4-e9e88447968c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.250']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5039ca2e-e0a6-4595-b63b-718f615e6326", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.252']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b20b8bf9-519d-4a35-96c7-18412ce0a142", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.254']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ff1ed46-3177-4012-9210-b3d61cada078", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.26']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8523307f-7b71-4acd-b010-b090d83662d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.27']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f63f1a9-3e99-42e0-9952-ade2e26c2bb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.28']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d777b88b-a281-4aaf-90f6-49ecf6552862", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.29']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2452913d-e164-487a-973d-050799624489", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.3']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdd879e8-d571-485c-94d9-663be7029c88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.30']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aca6cd8e-07e4-4144-97e8-cc6d3e5cd635", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.32']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7118a7fe-1793-471b-b8c1-ba438cc9f12d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.33']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d017eec-9b52-427d-87e6-466938a7b1c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.34']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--625374bb-460d-4af8-8384-cc0e7fd40bab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.35']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b729b88-1795-46ba-9f40-cb63695dae1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.37']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87bac75f-d275-4aca-bad2-2b73739576cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.39']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25d564a9-7e55-4558-83bf-3bf53d6e8377", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.42']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e4dcfd7-fc5c-47ea-a3b1-33fd9528a61d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.43']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a20c684-3c48-4105-bf56-5c7502bce1ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.44']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c90e0c17-9a25-44bb-b9f7-353ff236678c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.45']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adfcd1f5-fa2e-425e-81be-049f62c6426b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.46']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07782092-7f6a-46e2-9989-ca1b396ef532", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.48']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96af4de4-ec95-4528-a2d1-66ee68900866", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.49']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--174b2287-4c4c-4800-a38d-fc742ec5191b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.5']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3210ba04-8151-4a01-a097-cb39fb9688b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.50']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--071bc225-c5e2-4132-863c-37ea6a3c167b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.51']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f06c1e6-6974-4bc2-8c1f-dd8ac8dc4e77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.53']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a226034-2077-45d3-88ae-908574d87fb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.54']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28dffd77-c634-428d-b17d-4c485d1e8c85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.56']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86cf385b-ac13-4d05-a3ce-a6a52779553f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.57']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a3dfb8c-e7a9-48a0-aa3c-b634c315df31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.58']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--972ba109-a828-4865-bfd6-e120909be28e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.59']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48a95778-67ab-4c30-9fb8-647b333cec05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.6']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b58ab276-7f09-4272-8179-95f817a83459", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.61']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2b85ad6-560f-4a19-847b-e39fb9bb513d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.62']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08ffbfb2-945c-459b-a131-35c05fb70743", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.63']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4130d9de-6267-48f1-a5d1-e628b82f1c42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.65']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d7aec7f-3f7f-4eb2-bd67-c62196192f81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.66']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68549a74-6e10-4dd2-b973-5e0eee79a9d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.67']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b89d1bf-37ec-402e-a75f-84ae474251d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.68']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f739c1e-235d-44cc-a6c0-ed9626754cba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.69']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ca84998-0a3b-48a2-8d9e-64d746b6d53a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.7']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d47855c4-2310-4235-92e6-f197b469c211", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.70']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a0d287c-488c-4364-81a8-7235021089d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.72']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54c1d918-6f3c-4088-aa39-e51df79198ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.74']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7765664d-43c8-40c0-b051-bd2c8dcd8576", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.77']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be8a6982-ffda-4ac1-b3c5-a8509c972af7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.78']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e7b6672-5a2f-4b4f-909e-89ad8ced831c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.80']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eeb5450-b283-443a-962d-9c08c010621b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.82']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95ac4c1e-e2a9-4e39-98fb-f651d7deb849", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.83']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a222c672-d7fe-4493-9bc7-2b3b96d3ca5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.84']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9309993d-53ee-40f3-a042-3f68358cfacd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.85']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3455aa7-6e65-44bc-bdd6-b721ff3eb08f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.86']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e2800f3-296c-4c74-bd4c-550f22ab3c44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.87']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--898a46e5-8410-45dc-b4bb-7f50a8f9d01b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.88']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3788aed4-bd5e-406f-8df2-08a6ea532917", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.89']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--704ddeb6-1991-47cd-9aed-8daa49500f7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.9']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69acd1eb-a57f-4ab2-b159-b919a5c6606b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.90']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd818157-e0fd-4263-bf49-6b1cf5e01ed3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.92']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba3742f9-1132-498f-8d88-adef7d6ef2fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.93']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e95a7c60-5260-4e12-9194-be20cd25c384", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.94']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20a4ba6a-6e28-4762-a2a9-2b2ae237fdc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.96']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0578672a-0a74-44f2-bb1c-237fdc8be05f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.97']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eda6222d-87e8-4b7e-a588-93a4f7219733", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.231.99']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0fdff59-f49a-4d10-ac07-5cc95b4663b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.0']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2001339-eb41-4195-b3dd-9857930152a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.1']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c26695c-7512-4658-a8f0-ce3e9d5c0a27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.10']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c0cb67b-67d5-41c5-b681-dfa49b6431c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.101']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f724e491-02c8-4789-9f5b-b7c37656dd14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.102']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cee2ff7-19b5-42fd-8a7b-d9147eb12c97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.103']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c050f06b-a7be-462a-8ef5-d8f785b633c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.104']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68896f5c-41dc-4265-83e7-8296522ca2d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.105']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e7de653-5ef7-4e69-bd8e-b32d685f76c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.106']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa2a5790-9f50-45dc-abdb-ddb0c4b07598", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.107']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87f51bdd-e2cb-49e5-a84b-6ad737ffe282", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.108']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5df6dbc2-cca3-4281-ac7c-066c9c93eb73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.109']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f58c269-4e4c-4845-bb6e-0feb71a10261", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.11']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6df5c5a3-22cf-4bd8-9abd-f2847182c71a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.110']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ed9cf02-3d9c-4ac5-90de-9b4ed17ef068", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.111']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8238d6c1-07ad-4196-a66f-42a21c97db8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.112']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e82d18c-cd30-407d-b522-6c7399b4d01a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.113']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bd073f9-b425-4e45-b3fa-bd03184a3272", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.114']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4445c94-0cf6-45a3-bad1-990e2bb8d82e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.115']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5293196f-a557-4f77-b5cd-1d6b74d0ddfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.116']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--286d64a1-f907-477a-83d3-d09681c64571", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.117']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bf22f67-e997-4d1b-b483-a39800a08c9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.118']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58a7337a-0f1b-48e8-b5c0-db220d3adef7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.119']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9f5c7e3-63a2-4470-bd9c-a58462f6b49e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.12']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d22ef924-6cf8-47c1-8181-5cafe7055cd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.120']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cea11d5a-5c37-455f-876c-e87b2a58765f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.121']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57fec38f-3c4b-471c-bf9f-3b88f7d0de7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.122']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3acaafa6-69a7-45fa-b690-ff1cdda05d57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.123']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f50ff59-051f-451b-8a0f-dc97f1e52032", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.124']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e751357b-e6f1-43e7-871c-c8dfc9dd0797", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.125']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b213fcfd-b87f-4aab-a08e-713c7c702f1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.126']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8d56128-8a4a-4f83-aec0-e1bac3c76942", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.127']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5764457-cff5-4384-b079-640c0adda64e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.128']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b367665-50f3-4b89-9e3a-23d300ecb268", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.129']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e61a0b5-58d4-49c4-96ce-aa2735458617", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.13']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa9eb86d-0de6-45f9-a1a4-a19ca5ba8c56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.130']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f9fdc91-b7ab-4400-9b78-b1a817a81608", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.131']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6da025f-45bd-4fc4-ac35-3d8337792c92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.132']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bc803e3-b0f0-44ad-9a22-8eee7c64aa28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.133']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a5ffaec-8b49-4748-acbd-bc2af9ca98c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.134']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c84dc64-7a5a-4803-900d-583ef25c2a0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.135']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dce9a385-e4b5-4560-82a2-dbd9757522de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.136']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51081745-d969-4662-8bd0-616de401f4e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.138']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--650d564b-5b9f-4893-b194-35217f06c5a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.139']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8d83bbe-cbc0-48eb-bbb2-e7fa3d1cfac3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.14']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22d21610-2a4b-4d7e-9000-9acdd3d034e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.140']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83943d03-0896-4272-ab42-1a43720a972b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.141']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--835f0aaa-f427-4e52-8a8a-b6883ea1bbb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.142']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f284ab5c-8fde-4d38-ac1b-60d1c652a6c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.143']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09fb04fd-17fd-4490-b668-59d318138232", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.144']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23bc586f-4b8c-484a-97b3-9df732d8aaf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.145']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--034cdfe8-f4d0-4d28-832c-120832d22285", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.146']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e8fffe4-bcf8-4af3-b874-ec579e9d41e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.147']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb83edf2-ead5-4448-917f-eb4304a76aa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.148']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--117f6fa0-5a6b-4c48-9316-b6950d00e9e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.149']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b3cd375-0179-400f-b631-3ea365513259", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.15']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33e6d9eb-00f6-42a7-8798-e44eeedbdfc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.150']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2b923b0-801b-4f6f-94b8-f9c09e6c9ab6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.151']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7aeab968-e85d-4bae-8d10-ebcf5a082f13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.152']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5e2b44c-920e-44c0-a1fa-df4452923d1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.153']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c4f0010-2da1-4814-b2ff-ef2047c93514", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.154']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9a3b94a-9df5-4ad9-86df-229a4b135caf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.155']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40327512-49ea-420a-b941-864489de949c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.156']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ec8e46a-ac34-4f8a-8cf5-70885dceb2d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.157']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3511412-68f5-48e7-b0b6-c44fb7ec20ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.158']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fe5dfbc-1243-4b58-91c3-ed1b64662ecd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.159']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69a5e777-417a-44f5-8995-6323a2b0da9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.16']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb474ba7-745d-4f5f-bfb2-9baffac6ecb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.162']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bdb0b8d-f203-4896-be4f-21d289d97016", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.165']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3394203-6685-4327-9b89-edd805705bc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.166']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db9e437e-6e1c-4db5-9f9c-afabe2808c1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.167']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07170c70-a805-4975-83e5-2d6fd6c101c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.169']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--175a3c65-6200-4f93-aab4-cf6566466493", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.17']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3659641b-fb40-4586-bf2c-40c36fb99927", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.170']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceafc421-1ef8-46d5-90a2-4c4176cfc26e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.171']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71677832-fc4b-45dd-9451-e9fd960d4757", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.172']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd1426d1-d7b9-4435-90dc-4cc165718aae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.173']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b830eca-659f-4c02-8fe1-d32456921bab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.174']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5db41ad9-52d4-4d13-ac0a-19efcfabef82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.175']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b5b13ee-8152-4606-bcb4-45e0810ea14f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.176']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--315b8092-5107-412a-9204-85e834394271", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.178']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f73edf0-06b4-4755-9531-154487e55d0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.179']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c13becfe-2972-4d2b-b768-cdc9380e7575", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.18']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--423105ba-0b22-401d-b97b-76965bfb7035", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.180']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--366caf35-6a2a-4c38-b070-cad9fb39a7ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.181']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00dd4083-f04d-42b3-a03b-83ebf8a3883b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.182']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f16ffd71-afb8-4f8b-a4ce-51a25ba6070d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.183']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd9c7377-96c7-4571-a225-b19f61b1114c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.185']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2052544-8f74-4f44-9b7a-524d6ac1a61a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.186']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21def164-eb15-4aaa-b57a-6fdbe0d8e73e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.187']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b49527ea-b70c-45c5-b493-0150d69da09a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.188']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab5d9171-d4b6-4436-a937-b947cfb12669", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.189']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d63314be-0079-4cb7-9274-3d19256cf7b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.19']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1df780ac-97c2-4bd8-960f-241394711d6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.190']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4f5b8b6-9181-4d53-b799-788b84826713", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.191']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bf669c9-624f-4f14-813c-28d256712b97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.192']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06163b45-c567-4aa1-968d-2739eaa9ccd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.193']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--381e58cc-2d34-40eb-825f-db69271e796d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.194']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e9af744-6c04-4d60-a611-e6e31f31a41c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.195']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eb8e333-3145-41b0-a61c-a998e1663c20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.197']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09641137-8f24-4fbb-ad75-88a96eb62491", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.198']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--266e493f-6f30-4992-94ac-52545d8dc78c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.2']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16d4c075-905e-490e-a762-bb57323c5d34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.20']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33710f3d-e8a4-4ad1-9a01-6fb7647af821", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.200']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb2d33c5-07a2-4288-9497-6baa6ee4011c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.201']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f9e8148-5177-4795-8f37-db0a3ea8c005", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.202']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2048791-35a0-4513-a7a1-aa415ee33487", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.203']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dad0ed0c-9bfa-4141-9545-1444945f6b7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.204']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53b5751e-88a3-474f-8b3b-9f3e4aba7caa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.205']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40450904-23d3-454f-9562-0b8f0ef9417d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.206']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0a94afd-8a50-448e-8662-390591639660", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.207']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6917899a-c414-4951-ada9-6643b76ea4e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.208']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ed7ab78-46d3-42b5-a1d2-f10b1ca68833", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.209']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--709e7e6d-a749-49f4-8fb5-f23a6e2d8fc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.21']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--342c1b9f-d87c-4a6b-95ac-61c9f1de4241", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.210']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef81c7e4-454c-40b7-a5ad-8ca95eada4d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.212']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37a6b5ff-17db-45bf-9c95-be9cd7937e1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.213']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4df130ad-ecde-4725-bf54-8011e4de69b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.214']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27897fc0-0052-482d-a2c2-ebd58548beee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.215']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be365c17-b8a7-4f93-be25-447f79d356ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.216']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83443f6c-9a42-47f5-96dc-6d79bc19e4ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.217']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5470bbbb-ee24-432e-bb47-d94db2dec880", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.218']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41231c48-da5e-4870-96aa-9acd97be2b35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.219']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77a21da8-873d-4301-993b-722fe7b4c06d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.22']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4de8905a-7df5-4b42-a8a4-9a1a4c074ee5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.220']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b2876ab-1c17-4a1e-9857-1327fc26605b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.221']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfe2c592-d142-4b81-aef2-56a0ca9d71d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.222']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73dfab46-df7b-4f94-aa62-0d0f4db5a1da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.223']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03cf21a0-3273-41be-8861-de3c8f89bd94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.225']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6fb6ba5-3bdb-4a43-b5b7-35825c21cf48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.226']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--092ac6c8-13f8-4747-a3c6-d12708dafd17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.227']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87dad723-58b1-4fad-b222-0040e701be24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.229']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d52c4bf-b695-403d-972a-47882655b22d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.23']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c50e129b-a209-4968-ab91-bb5c1c557552", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.230']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75870d58-f930-4dde-883e-dac4f67b0d61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.231']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--928e5ba2-07ba-4d00-9b3d-52e311fa783b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.232']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eadda889-7601-4192-88c9-2133d487bee6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.233']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e2d026e-79ad-43b4-9d01-6648bd3ca8fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.234']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0411abaa-18ed-476a-a92d-0a5ace19adb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.235']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae110ede-d003-4839-bd0e-e081485f55f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.236']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cf48fe2-b2ca-4891-94d4-d211d176f8d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.237']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acf0f16d-5f9b-4b89-a5a2-59dc60c0a70d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.238']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a47088b-cfbd-44a4-84b9-9db9783e08e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.239']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8757d89f-752f-475a-af93-bbe709213186", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.24']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95c3c3d7-20a5-45ad-8215-05db1871d079", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.241']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e90e5a78-5680-456d-9e13-c7f451e45140", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.242']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb27f822-1a9c-4836-91f2-edb70e04b9dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.243']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52939bfc-1014-4d25-a9f1-3a20cbf3319b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.244']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0f52fc3-94d5-4707-820e-4cb12dd73f29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.246']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd4ee7af-5ff3-4c9a-aab0-1fa789e53a4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.247']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55836a28-9721-48c1-ba7e-d3a73e79549f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.248']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a269dac6-0e9a-4375-bb57-c4868df6a16d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.249']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--add64785-33d9-4ec6-bcd6-ec7ece3b2612", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.25']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d9bc025-381e-44f0-baf6-b7672fc4228e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.250']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae70286d-468b-4dd9-b08b-4b65b9484556", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.251']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b34adee-c89c-4e25-baf3-b41db7d9bdbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.252']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a167c6ae-2d63-4b5d-b479-de2bded15859", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.253']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c93c60dd-3f27-4901-8d7c-ab78b334c444", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.254']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--057d4af0-36a6-466a-9772-82ccc9faeb4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.255']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48ac988f-f803-4a82-9e12-01d87dc8e6f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.26']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f645f4a-631f-43c9-9862-71963b346e1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.27']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7117be62-08f5-4ac0-91cc-90a688a44e5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.28']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--767a9798-c469-4ae9-9e3b-b63c6e06c0a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.29']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00fcec61-005f-46b8-bffd-ec1627f0da49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.3']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7def69ee-9ca4-4534-a99a-1e0b87bbe099", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.30']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71f1038a-0667-47f0-bff1-8ff02c15e664", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.31']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b38b980-f9c8-4b54-9464-141102fba602", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.32']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--570ee161-5272-49a2-a215-1b5d2e0703f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.33']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--507b310a-df65-41bd-b222-7c6828ed3338", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.34']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62af4dd7-25b6-4cb8-ab05-7316caec3efd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.35']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--971d9c6f-c1f1-43df-94a5-f0436a762b21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.36']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb5feaea-769a-4992-8f3b-b56350f91035", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.37']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c4e9ba6-efa4-48a6-9aab-2d04b8ea1589", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.38']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46f3b90d-b8fb-4a83-b06e-550ffe4aab63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.39']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba8c3b61-dfc7-4935-b9d6-c17ab424303d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.4']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--719f2b2e-c552-4506-98c8-4441a743c69b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.40']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e86a16ea-3814-4f5d-9a97-68c842c71b9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.41']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a50a0c0-54a0-4bbf-9a45-78556f2799dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.42']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1e9bf1a-596b-47aa-821b-5c4680de9e85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.43']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--736a1909-fbbd-4d3d-bbff-6b5ae38d39af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.44']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--886e31f4-b692-4fe2-b772-7233f6e20377", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.45']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6e8d7bf-abde-4e6a-a26d-880104032659", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.46']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--453b4e00-5b28-44a9-a0d8-65e7e0079c07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.47']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--135de850-39fb-4bef-8b1b-2ffe02d04eaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.48']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2f82dde-f39f-4ef6-b4c9-c9fe04e6483f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.49']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f337a7a7-1cc2-4949-bbbc-fa4d58814dc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.5']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6e977d8-8e4b-4d01-ab6a-b6d93c6f3534", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.50']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18bff12b-bcba-45bb-b96a-dababae9facc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.51']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27f965ff-b901-4a4d-a795-0de08f2a64fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.52']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95dba9a5-f2f9-4bc3-9a9f-95a41e5db92b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.53']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d207af8b-080e-4080-8057-44a562d12798", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.54']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cab43efc-668a-4a6e-9d28-a00e339715ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.55']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbdc969a-b338-4a95-bffb-ef8e18416ab6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.56']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d8cbddb-6b70-4f4c-b186-fe3baaed683b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.57']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2e79384-a7a5-4098-b79a-750050205276", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.58']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23c33873-5992-4cc4-babb-793a1ba879c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.59']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3759a41f-6143-4271-a686-e2cc266339ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.6']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1ccab67-2bd9-438a-b7ab-4033ae4f75e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.60']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32a8aadd-ad31-4f84-88d2-61e997025a09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.61']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65380d18-070b-4d2e-9e41-afd7cb9530de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.62']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab1e787b-5eb2-427a-be8f-7018d23eef26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.63']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9accc84e-228c-40d4-9449-d135aedceb8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.64']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--229809aa-db4a-48a3-a384-ad060ee5f65f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.65']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3b47f4d-922a-4732-9cc9-a2e4edc23489", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.66']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07c5bbfe-1add-4ddf-9161-0f0d52279614", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.67']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65f25aad-049b-4c69-9a6c-7c24ff639cdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.68']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdafa492-ee2c-47a6-afea-9cf1888e60b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.69']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5d33487-3c69-40c2-96d1-a6e72e46bd5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.7']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adf5c4c0-6060-424b-b2c7-aea3d90086b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.70']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7fa722c-8812-4a63-837c-17df5065d702", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.71']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20f49489-2bc4-44a2-92de-494db4301748", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.72']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04e6182a-fa10-40ac-8146-26d02479fce9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.73']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c837830c-7a6a-4c1f-9720-462226fa46e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.75']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d35f40c-94f8-47bb-809b-2ffbdbb9cf97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.76']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--542ff1a2-204c-4c57-8fc2-9537a27c3962", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.77']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f502294b-60d3-48c1-8d86-7f26d38f0281", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.78']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--442a37a5-6543-4907-87db-fa2d42413746", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.79']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da5083ea-909f-4ccd-aaa4-f056c541cea5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.8']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2017a0b-b62f-4314-85ad-bb369df6f639", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.81']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76092451-c0b2-4fb3-87eb-6b5c8dfb6ea3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.82']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd1c607d-6831-4627-98cb-d99bb0d09b84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.83']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e4269e0-9fa4-4ee3-832b-9e9e40640627", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.84']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b320ed72-c112-4e07-bdd9-99e06426f86d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.85']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d79863cc-0633-48f9-ba97-9ec9f14b2491", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.87']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19088a7c-99e6-482d-9b27-c20fee8cdeae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.88']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f61418e-8f33-434e-8205-fd5f42ce7d5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.89']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6226f77b-feb9-4edd-b738-4fbf7482f39f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.9']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bbdfbb0-c423-4db5-8cc3-93a17f793359", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.90']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96633fc5-1503-4450-92c4-fb620be4791d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.93']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62704517-9324-4c57-a60f-72a42758b21b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.94']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38f2e3d7-06d1-46fa-86ea-481ec00d44ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.96']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7d1e214-f4db-4d43-8454-e37de6436869", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.97']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ff4c10f-d159-45b4-8a8e-214a4b001f3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.98']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a5771bb-bace-43e9-8a82-396196058f88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.214.99.99']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1a43643-4757-4fea-b8cc-ddafaa3865c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.46.66.73']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d6be815-4648-4aef-a855-01e5cca29021", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.46.9.40']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--952c8351-ba4c-49e3-abe5-51bc65ce5185", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '181.97.204.242']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8fe36c7-fe74-40d2-a9d4-0f8737488f53", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.118.123.193']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b0757c6-875e-408c-aa64-0138cb838a5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.138.158.179']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fcc1115-a87f-4857-9892-dad44c4e195c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.138.158.211']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0e0eb7e-d61e-469f-a059-30983603df0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.204.158.223']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--283961fa-ed39-4723-bd2d-99fd3f227606", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.213.110.23']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9edd37a-019b-4ce1-aebd-c16fe643a8bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.242.168.186']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e9c654c-d793-4d79-8fb1-e723e661e982", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.242.168.194']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5231e15-7fdf-4356-8794-7b184e7a40f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.242.169.78']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--058f4ded-7535-412a-8166-8076a1437ba8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.34.230.198']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6930d53-4fa4-4092-8f3d-d19f0803c911", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '182.48.80.240']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbe4d285-c53e-4d1a-9416-297d0df0fcef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.128.145.222']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a626a90d-d46f-42a9-bcfe-44edb7a5d540", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.146.216.95']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c5b8cb5-514c-467a-97d1-01044c5f444f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.162.126.234']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--961fba46-01c7-4d7e-b687-978f5b578a3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.189.157.176']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--016fcb8e-ec06-4099-b94b-3d419b715904", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.191.225.140']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fc9edd9-f557-4bbe-a0b3-7580a73b7aa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.6.50.31']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f429fe6c-8301-423a-8eb8-345f219a40b7", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '183.92.114.36']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--227437bd-cd4a-439a-8baf-0c554d7d75a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.100']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c404391a-22ed-4d58-8d03-667d28ca7095", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.108']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4f0faf9-cd6e-46f8-8a0e-402c3a491a87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.110']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e87c7a1-3f22-4b82-880e-db2cc536f3e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.111']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3527442f-a588-434e-bef8-562ed06f6ba4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.113']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77842176-5921-4f6d-8a79-1dab4ff3fd90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.121']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01d99d56-722f-4531-8886-7104b15682b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.122']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--431a0fe5-7948-4f0c-8f14-170ed4b8d17c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.126']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62e8e9ce-9b87-4624-b862-cbf5fc1a21d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.68']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e655d8f7-7caa-45c9-96b7-9fc20e5533d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.71']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba177f2e-e800-4625-a09d-7abe336ee6cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.73']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb5eb9c3-38f3-4643-9435-8de2475a3c87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.139.93']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5385399b-883f-4c6f-a393-159d07cf291c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.196']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa78fded-ae48-4468-9132-76783e74b87a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.203']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e316eddf-7751-42ca-b9e4-8e2ff0c889a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.204']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf8da66f-3638-412f-bf66-52d5947832e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.207']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fe462c2-a6fa-43fd-b8ba-28a83425ec78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.211']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5c0baae-e611-4731-b1b3-67dd50abe587", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.214']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b0e0f7b-ed9e-4054-895f-8535e3d5fcca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.218']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdcbd677-d504-4ea7-97de-676b7f17d163", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.220']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2047abd-8087-4487-b464-b1571efd8ed1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.224']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfa3f137-14c3-44c3-babe-ade5e2d3bbf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.226']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa14051f-fac6-42c1-b42d-57070c53fdde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.228']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f907e7fd-f1ea-4ab5-97e2-89938ce54937", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.230']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e73972dd-ad8f-4289-ae1c-6c348273a98a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.232']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55da3792-5414-4eef-9fec-3f64812cc810", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.235']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0d650e4-ac50-4137-b1c2-004d27eddbee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.238']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86d1d91b-5c43-4e18-81f8-dada1837760b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.239']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edf683c0-cf5b-4f1e-8f8f-a43288e8b94a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.243']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eecd92dc-c6ac-456e-b658-fd74f660951a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.244']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--767d2fb4-7840-4898-a245-8d70546a66da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.247']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dc6d48e-4568-44e3-826f-c79a6397f573", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.105.247.250']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51c5d945-d46d-4e4d-82e1-18b5de9163c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.176.35.145']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ba16ed9-38e7-4f44-929b-1fe97c6f4b95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.72.120.145']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f56af92b-23f5-483c-84f3-b0df85af3b4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '184.73.20.227']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--797e0f4a-0bc1-488b-8c57-978d4b2ca71c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.100.87.136']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--089c9bfc-d801-4516-9042-4b147c135416", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.11.145.5']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efe3d999-8a9b-41ae-9a98-1edd57ca621d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.116.238.94']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7b0bd59-d75d-4758-bfb7-a8576b9da3f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.12.59.117']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--733978d6-3688-4c24-bfc0-0a028392a2d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.12.59.118']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58ab9076-6f61-41c2-be94-9ee82b59581a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.148.45']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e66a1bd-bae4-454e-ba20-6cc83b24a3dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.10']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--263075fb-2831-41e6-9dfd-8193ef8dde6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.11']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a835b20-5a4e-4fe0-9eab-50508e9d5c19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.12']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3560138-3e22-460b-b32e-47b11ea52cb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.13']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1d97a43-f176-46ef-a443-c2636648ecd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.15.90']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4be9e9b-a136-4ed1-bdd5-5b528355b806", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.0']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32e2efbf-04b4-4e4a-b72e-1636ae587230", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.1']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9921f0c-9251-4901-8b35-d9ceb6c35c07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.10']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--802bd7b1-2b43-4871-9eb2-3f81581db87b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.100']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c68ecce9-3c8c-413b-a4da-f5f691c996ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.101']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa1218cf-c939-4b0c-84cd-2e5f8c01f9a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.102']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32ac4bd2-7fa8-4f15-86d1-0777ca9d70e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.103']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce72ecaf-ddae-4ea4-84b5-179f9997e8e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.104']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2560863-e104-4589-b1bc-e68ec40b0f72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.105']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a713e309-2d26-4e49-8326-9954199ecc3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.106']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96256cbb-4f32-4d28-a4fd-1a9771ea5574", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.107']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1a2cb7d-dd6b-40dd-8e85-41857fe9a712", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.109']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18764305-27fb-4348-815d-daebf8fc671c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.11']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d464be3b-8b85-4962-8854-30d77dbb8de7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.111']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f08ca75-d9c8-44f9-954d-3e4bb243ecc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.112']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--687ed6bf-f475-4d39-a121-932bed22edae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.113']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d945dbd-64b0-4a39-9578-195b8d65b4e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.114']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd577acf-d8a5-4244-b744-09496c2773ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.115']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ff7425a-0d00-4f54-b958-7fcbc48a867f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.117']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85b33116-419c-43ab-93a4-e0fc0794514b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.118']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5a01cdc-580b-4f03-abd4-edfa25f9b66d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.119']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--235559a3-988b-4254-bfb7-829fdf6cbb1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.12']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d231d2e6-90de-458e-9e72-1665e1b17720", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.120']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d10090b-daec-447d-9a69-5e58315f324a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.121']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c76cd3e-adea-45ab-ac1d-bda3be2366cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.122']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6627cc75-7cbc-4c8d-bb92-6bcb63dde2d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.123']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72efa2f3-0d5e-492d-80f9-ee67d8b65fd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.124']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11becb28-4ffd-4985-85e5-8347369d4511", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.125']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9ce5d9f-500d-41b6-9801-4146f407b985", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.126']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a8e3b82-ad8f-4bde-904d-417a9dd30056", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.127']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abf0db20-d71d-4d0e-8c35-f4c92b3c5482", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.128']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1d340cd-0c3a-4c2f-8797-4aca738b2e09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.129']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3de6003-3444-4a88-9c66-fd4f9823188d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.13']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1d9fbcf-0b86-467f-8112-6f66a1017a9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.130']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cad79db2-80e5-4e8d-a33e-958e91294288", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.131']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de3ce5bb-3b78-4be4-b595-2e2878c9be8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.133']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c01b791c-57f5-444d-8a4d-e5b92ee53e78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.134']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7e978e6-8a7f-41e3-9c85-e6cc1a98a139", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.135']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d45a25c4-fbe3-44bc-bf9d-6d91eeb3de67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.136']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33a956c4-6f50-41bc-8137-6d5732e03145", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.137']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7633fdb-be12-4c80-b23b-0217b401d5d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.138']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02b41fde-f118-495b-ab73-78f417106ea4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.139']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eab2408e-5932-46ad-99eb-52f6e213c8d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.14']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66f50e26-0dea-4069-8501-b37f9da28e14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.140']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef6ac9fa-52bd-4b45-8992-e1a8631d615f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.141']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b08802e-40ab-4693-9604-3d7756859461", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.142']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1b990e6-3b43-4657-9e1a-2bee149436a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.143']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d40d83fc-76a7-4ae3-b216-e3755bb538b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.144']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f062d2d9-2516-4048-b8df-24f5307a9aa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.145']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ce89cae-65c5-4a16-bd12-03448d3c1f4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.146']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--330658ce-87a7-41ef-9c03-41b71a27d3ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.147']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfe7d290-68da-4327-86a8-ab4085107448", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.148']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ceac6e4-b595-4123-b253-690898237da9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.149']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--086836be-da0f-4184-9af3-710599df330a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.15']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45fcf173-c4a8-4064-b9ad-a998a90b16c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.150']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aff8079-17e2-4007-a67c-1af33ad8b484", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.151']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fe0e33e-3ac3-4f4b-be5f-d83934115013", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.152']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78daf49f-a794-4f3a-9e2e-abea78c7565e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.153']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8c0a8db-1dab-49a7-93b8-784070c3a2f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.154']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18d07cb0-568f-4abd-8789-725667f45900", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.155']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdcf08b2-1f72-4d35-93eb-6f88b00a6414", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.156']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8909b9c5-d505-477c-9e5a-f824c62564e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.157']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--958911d2-607f-4273-975d-04e03fbd85bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.158']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c248d255-b90a-46dc-8154-42345191d5b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.159']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f0092f7-8ee5-4fae-9cc0-b9895836fc16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.16']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c75fd01b-beb2-4716-9387-e3b8a01958b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.160']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62fb135a-b049-407a-81a9-ea22bdba868d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.162']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5eadbd5-c9a7-40a0-8363-76614853c52a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.163']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d2a6955-91ff-444b-8acb-6e22be1144cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.164']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a1be2f2-5bf2-4218-8571-150d3d15ce14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.165']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--172510fa-6e6b-46d3-b72e-0b1d5c947651", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.166']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24ac7949-dcb4-418b-9284-21615ef054fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.167']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15eea3bd-a6b2-42da-a12a-96de1fae89e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.168']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33ed58b2-c1c4-4b43-8190-b4dd689ba47f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.17']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd20ecd1-acb7-4b20-8971-a269e7765048", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.170']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d05578b2-77a5-468e-8754-e78307e70769", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.171']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3222e24b-6339-4cc4-9794-d1c80cd8cf0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.172']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8a92de1-2f7f-439c-a756-eda13a96ed11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.173']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a924f02b-3466-4276-a950-15635ba83a07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.174']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28b6032c-d51a-499a-8b9e-baf41a823114", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.175']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a7c6124-6671-4d0e-a56e-705c6019c537", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.176']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e31ef39b-615c-41e6-8241-bc1b53b200ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.177']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f3d4d5e-5cee-48f3-ac3a-305d27848cf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.178']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1d74cf4-8485-4e6d-8dc0-dd1b161fb7a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.179']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0dfc874-ba15-4839-a5a6-f59e60d0d052", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.18']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cce7db90-660b-4034-aec5-cc5048424274", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.180']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db1473f3-25c8-4dc2-9644-73494c81a563", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.181']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--969b5fcd-511e-4102-89c3-7bc8493b8601", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.182']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4de91b42-ced4-498f-a0c7-0f70e3b5997f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.183']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0c07e8d-cb48-40a2-b408-019cb976e6c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.184']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6040d905-5903-477e-8489-5dcf5360b74e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.185']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee480a90-ef95-406b-94f1-6253d32041cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.186']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77abdf37-9d89-4669-924d-3044ef8fda16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.187']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20028e79-0ed2-4912-989e-a8f6a1c48fee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.188']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e63af2c-88fe-48dd-a8d5-58ef2401c250", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.189']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98143d8d-520d-44a3-a6d7-ebcc4e7306ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.190']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b971cfc4-803a-4215-8b7e-8f903f921995", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.191']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfddd552-e855-42c0-b967-c48109dcbcfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.193']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd120fe3-d448-42fc-8e96-5123856ba485", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.194']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4059913-97de-4bcc-bee6-64852f272540", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.195']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--131105fa-02f8-47e1-805a-15805b7d9475", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.196']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d94d42a9-667f-4d02-b7de-b6c74ffbbd19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.197']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b851136-b007-48c4-8b14-9cef3c78d163", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.198']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3df7cc27-33a8-4cff-9a0c-d8469e5a3efc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.199']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc492225-652f-450b-979c-2cdf58408bfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.2']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ae2e05d-6fac-48c3-ad79-3b7626f02ffb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.20']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a2aeebc-a7a7-467e-bad3-8e9cdf8c070f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.200']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d79f9468-0cd9-4cb0-b696-70b3ba91801f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.201']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d99c1d8-9142-4b3c-98ad-3206ac27aac9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.202']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--193669f9-f38a-4660-b4b1-bf6206969298", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.203']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40bb8ad3-2498-4b59-b031-4b974a588730", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.204']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7f4b7b7-bd77-4b13-9037-c5969420d01f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.205']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bac1039-3ac5-4340-9624-e64041cc74fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.206']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d399182-a9d8-49ed-a1fb-f827feee39b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.207']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb248613-6688-406b-b85c-90c0a30f55cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.208']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e710c26-e000-4438-b969-1bcece964cbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.209']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eb8046d-9d20-4822-8889-8713b41c8a07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.21']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eba2eda-0afc-47c6-9d87-d814a9b1c52f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.210']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72424875-2d70-44c4-b5ec-df85ce9afcbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.212']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a4b6772-69c5-48da-8873-1e54efa965ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.213']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc99cc0d-1f87-42e6-a6e0-a59b2c849fc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.214']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b5ac8e7-075d-409e-adde-f8090e7d80e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.215']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9a999f7-7ed0-4af5-9197-07eed8efdf59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.216']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec57be17-b6a4-47fb-888e-1de7d3b70531", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.217']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--586637b9-e5a2-42f8-810f-3e66e34976d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.218']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b793b7e-07bd-47d5-90fe-62cd2b6d5bd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.219']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d169ccbf-6e39-4ec6-8ca5-dcbfe9cd6cb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.22']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e39da6f1-d091-4d10-835d-0bbe320ba2c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.220']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18824741-4077-4fa3-aeb4-ca6183aa63cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.221']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b68309a6-09e4-41dc-a7b4-2e043366cdbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.222']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adf6ede7-3ce2-4487-8371-7a16dbf2f7bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.223']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cf418a0-e630-469b-9d28-45f58564e4de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.225']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1623c89a-8510-4e9b-9cda-6095baee111e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.226']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b74af885-2b06-4bb6-8b25-6d85142fbe58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.227']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23273232-305c-4c18-8ca5-c49e5f1302a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.228']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb643cb9-2c42-42c0-84df-d0da0a74a8f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.23']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ec4ef0f-7413-4708-b7fe-1da5a7297c2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.230']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66d9f28b-acd7-4d58-838c-0564a5f9414f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.231']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17f0a2db-9947-4e2a-b715-01208ba29430", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.233']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d270c9a8-d531-4dd9-ae12-5fc60370c1aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.234']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc6dcce2-7e3c-4e1a-98df-5ea6fcc3356a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.235']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad4e7520-453b-4085-a634-cb26d6cb20c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.237']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ad9252a-8b6d-4c01-b1b5-795440ca08fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.238']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d3125e9-af53-4365-a6b8-3ad100fdfd6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.239']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff4abef6-aa6d-49c7-a244-6d4304ca232b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.24']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5382940-3948-4927-abba-ec428458d2ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.240']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6a463d7-510b-4a58-9541-970f80ad2813", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.241']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c267881a-495d-4f52-95d5-e7b1c63c5e10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.242']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f38feaef-360a-42ae-b85e-17fdb3c9a714", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.243']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6799b3f5-068b-4bcc-9ad3-61798accfcbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.244']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e36c6d6-9d3a-4075-9559-a7ffb441bbe9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.245']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06f67784-8a17-4a2f-b100-a9d111861fb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.246']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ced27708-c306-412e-87a2-3f4e3d842e98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.248']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9429b29-5450-4d95-9528-03b50696c6ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.249']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adb2d03c-5ed1-4952-8438-c9652ea26815", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.25']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fd66edd-1fee-4a72-a68e-60661cebc77c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.250']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6d5bd03-e634-422b-bf89-2b001ee962ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.251']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea4f5519-9a51-45dc-b084-ec96c3ceec19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.252']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac8bd305-c7be-462e-a587-d72a22ec76ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.253']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adf67efd-d8c8-4f3a-b27e-16d3e4e1326b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.254']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ee2beee-9ca0-494a-9094-290b79736b19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.255']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ada8d25-ba17-405d-ad01-0e3d92d3f22e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.26']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0377002-e400-48c9-8d54-b1a74d5392f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.27']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1e9efb9-ae9c-4f27-8bfe-49f448f7fb23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.28']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b43b214-1b00-44e6-9ed4-ed1d9cdd042a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.29']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--804960e5-6ea2-4feb-98d8-ec063ec83795", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.3']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5433a063-df39-4b9d-8a52-b39d4b10a7ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.30']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43e670e3-edfc-453f-8981-7031f9173c53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.31']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68efec1f-e3c6-48ac-9cfb-aa16f4b8ab91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.32']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76e6cde6-d5d1-462d-9e7c-21519d4c2e62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.33']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50865290-a726-4d47-b1b5-7262e3694e73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.34']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1248a15-4db1-4bf2-acfb-e24806a5a11f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.35']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8065a71e-ef0e-48e9-a451-2783f1f736f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.36']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46d4c6db-f64a-402e-be78-d63c6713cb54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.37']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4acb3405-4684-4f97-81ed-bfce19ee71ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.38']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4ebc276-64e9-4bcf-acc6-a0824d6f06f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.39']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c0f7c23-8c24-4392-beda-fecd45dc9cd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.4']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e212040f-867f-482b-9e2c-98cb24e202c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.40']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1738d870-00f7-45b0-8732-85c88c0273d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.41']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8847dfed-2443-4583-91b2-6b7f46e0301b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.43']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c065d028-687b-476b-a990-811f55d5e2a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.44']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a6e6a6a-785a-4553-aaa4-620c80aadd93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.45']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4f4ac65-a5b5-4c68-99c8-120af7bcdfe1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.46']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3816a9a-8de6-49b7-b2c7-81d003924bf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.48']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fe15979-635c-4b02-8687-e965277d0693", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.49']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a2bfbeb-4e7f-47a8-86a4-04a9b06ccb88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.5']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b05b2727-b904-4f76-acd7-3160104d5ede", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.50']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--128cf7a3-3a9d-48b1-b3b5-78266e386403", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.51']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce57c9ff-0ef2-48e9-8336-483ab6f77d68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.52']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f69f06e9-d431-43bc-ad0f-fde9fd178d44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.53']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dd53aaa-e82a-4b78-99d2-6025e092a73c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.54']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df30018b-5f0a-43ae-b405-4eef8cc60ebb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.55']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6180c7ff-7514-4022-9e3b-83f1f3f8789c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.56']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a63642b6-a321-46ca-9701-c100a01821e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.57']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84a25f17-db92-4f59-aff0-81eabbe8d24f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.58']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1baff49-f182-43ea-b5c3-1fade3f05947", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.59']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31f8843d-1971-40f8-bef2-4b26e68a70a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.6']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1a6029b-25e5-45d4-bbda-8855f0eb96a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.60']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--231ed77c-ed84-4299-bb2a-168903eb5a67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.61']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3597cad-6b9b-4413-96c7-f6c4357811b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.62']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbce2858-5426-4438-9a20-5c58bc0b9470", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.63']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02c40713-3366-4c4b-ab7f-263ebd847416", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.64']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3b995ac-44c8-4e3a-931b-ae8164d4834e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.65']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5626becf-2f9c-4066-8cc5-83940f5d1165", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.66']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f11af65-676a-4db8-8e4f-be7e2f5fb3c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.67']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1e91278-0a44-422e-81f5-cc135aad0e19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.68']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2603ffdf-92e3-4a3d-bf04-b602e867654d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.69']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb2ea525-fc54-4a0f-b62c-7c7279b60347", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.7']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f013f865-5ca6-4a6d-9abe-279a58a52280", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.70']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6565a327-a880-421d-a332-2c4410ea464f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.71']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4acbbb1b-fb91-492e-82cf-1b8a70df3a19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.72']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2697ae9f-931a-4ac2-ba51-62490b47c8db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.73']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--044354e5-f5e9-473c-b4a0-33e70f208917", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.74']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da418ca1-7cde-4b09-9376-eb7797d00f5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.75']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59a5a9dd-3a56-46a1-80f5-00aa1b04d38c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.76']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecb8c8bb-3ce2-429b-a4b2-a01363fdaaf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.77']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9be5c6a-c9dc-4210-950d-7be9d1480726", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.78']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--531a25d2-3f42-4a0d-af4c-efcf1d186a29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.8']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f93f5dc1-9a6a-4ce2-a323-b84e761b9bcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.80']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--163ed71e-bc88-4c7e-8eb6-c90e98a5af9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.81']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3c52dd2-3133-44f3-8ca7-625518d79fc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.82']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b8fe8d4-e8fa-4415-a9cd-6c2c957f9555", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.83']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebf5e22f-4c72-4821-b6ec-7d4284b925d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.84']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--314fb28f-91dd-4dc9-8092-93f02eab035d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.85']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdbeca48-9b7b-4f15-8f84-b6fa52acfc2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.86']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86841688-80f4-4052-9e55-34204acf55a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.87']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a3f4584-672a-4726-a919-281566730782", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.88']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61b1cb6f-1973-47c0-972a-55cfd6892d1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.89']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acb34ace-c627-43f9-abc8-791365c728b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.9']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7adc235-6890-41b4-b07b-8ee6a678ff34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.90']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e4ae61f-d6d3-4ed7-8d86-5796ea32baa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.92']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c3443c7-be71-4583-b5a2-d585b95695dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.93']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b15bb76c-0a2b-42d2-b646-cb219de2d2c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.94']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62e66cf8-5ad9-45a8-8541-8c51f8df99cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.95']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd2ce9c8-e907-43fe-a8bd-92b044d91de2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.96']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1d9a3b4-e38c-4a76-a5a2-1e9c314e0370", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.97']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bab74021-6aa6-494f-89ca-6dcecb456bfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.98']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cb54c1b-0012-40cd-a3cb-b0c0bf27639a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.136.206.99']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18ce43b3-8dd8-4dd0-8b9e-b31935eadc66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.165.170.59']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c7f7f0c-4ce4-4a25-8fb3-cbb707710b9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.169.4.236']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d570db5c-d376-4494-8eb4-453f620c4eb1", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.12']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02fa772c-c058-4548-9aea-22fdae149608", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.13']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdaefb32-d622-4518-9e5e-f3c2e30e5bcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.14']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fb43679-5c72-4b95-9cc1-02a62920761c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.180.141.55']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97359d05-6dc2-423f-829b-7994c3065d32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.184.71.30']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11702baf-03c5-429c-905e-7f7615bd70c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.187.169.232']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e424620-900e-4990-be1e-5b297625f0a3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.187.205.244']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb53b4fe-0d2a-451e-8ea7-6ebc177ca94e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.189.182.234']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92087343-0ed0-4ea9-9252-ec3df64939ea", "name": "Malicious Host", "description": "Web exploits: wordpress-wlwmanifest-scan. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '185.19.40.39']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe802ce0-d8f7-46f2-b24f-d3d3d42b758d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.1']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afa6a1cb-7fad-4500-83f0-472aa80d2603", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.10']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a80a4385-da2b-4409-a1a4-959f58f3780f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.11']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b6f86bb-a546-4509-88d7-716c5fd316a6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.12']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ea1298f-86db-4308-93ed-5c9a5f980f84", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.13']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba20ffdc-020c-43b9-8164-24a433d7d966", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.14']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cbbbaf0-18d8-4be4-bb24-f1759dfb9f86", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.15']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--503b0f2b-6bf6-45b5-b710-a1a89d1c1980", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.16']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5f020a8-5ebe-45ee-bdd1-757c4d043320", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.17']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b39d80af-7f03-44bb-88d2-23985e04c05f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.18']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87591c4d-53ad-45b9-a017-2d827d6ee5b5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.19']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2104e6f-4a0c-4a5f-a92a-e401faf9dc95", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.2']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--354803b4-8b8b-40d4-b133-7d2e70e95ca0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.3']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d657cba3-2b91-4c05-872e-b5ed3d4f1950", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.4']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ff47163-b60d-42c8-bb1d-0961506b2643", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.5']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27d335bd-9827-4311-99ea-381d4a8e8ffa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.6']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2104b5da-b348-4072-a3f8-56249041bbc1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.7']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9adf1457-4d0a-44ac-a50d-d680bad1f271", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.8']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37645473-ebbe-4ef8-bd71-de0208adcab1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.191.171.9']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ba59c2d-eba7-491d-a268-55ec4d92278e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.2.80.252']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42f5d289-f1b8-42a9-9135-974d4ec0569a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.2.80.253']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e0b023b-74d0-400c-b6c1-4458e2d1928e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.2.80.8']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df7b2491-6786-4ad9-b654-bcb6da074f3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.36']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fc5a9af-f10e-44d5-81a9-4291a68b5d69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.40']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61f26f7d-662a-4e99-8176-03bec9d8d335", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.42']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb92ec1f-a610-46f9-ba7e-88dd57c18f78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.52']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9dba184c-41f0-4421-b995-af661ee9cdbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.75']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4060f0c6-c3dc-4417-aa4a-84a2cc3978d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.77']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ad28063-e8cb-4146-9fbe-561071be3ed4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.79']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--933b06da-c93a-4b3d-83fb-10c39d60bbe5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.200.116.86']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e70504e1-678b-4dc3-9cae-ed42b9593cbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.204.170.81']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d0a91fa-2153-40c6-bc76-58f0de63f584", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.217.0.181']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95867010-ce12-4172-9906-7879c8f94bd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.218.195.61']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da12c891-4005-433f-b8de-3160781905df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.218.86.25']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c511372e-ef63-40bf-b8fe-9fed3141e592", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.221.237.98']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d58f5999-c490-4870-b833-76ae11c9604f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.224.128.16']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00879db2-e9a9-4c0c-8074-94619846c53e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.225.42.44']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f6331e1-b1f7-4e2b-a464-bc1c6de5d9b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.104']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1efd20ae-cbef-4282-a6cf-33b0948cea51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.32']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d5e6163-e015-498f-91f2-ac85e1d5f989", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.33']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d0ee093-93a9-42c6-956c-903f2b0c634f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.45']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--672e5ec2-46aa-40bd-b874-32d2cb1a935b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.57']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a0730b8-e37f-49e1-81d5-4c1ff9d3f51e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.58']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e45cee71-4258-4668-a64a-388e1465fd36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.59']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67cfff68-a7c7-4afd-8da4-d02f9e62b60a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.60']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a24e9ec-22df-4f71-967b-88f5d591b9fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.62']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2dde642-b0f8-429c-bacd-d59c4bd873ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.72']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb43835b-e017-4ad3-8392-dbdcff5f1050", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.74']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba86d807-7f3b-4838-99fd-6203ab0c948e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.75']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb45bcd8-7b09-479e-a024-63256f79bdf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.8']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f02148b-464b-4372-8fb9-6f5a6e49fd3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.9']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ed59e10-0c76-4efb-bf34-4412743a0235", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.226.197.97']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--303df562-04f6-49d2-a08a-711b6609cd56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.231.33.46']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e107530-a8ea-4e8c-a9ca-01c7f0c2a8c5", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.233.247.245']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e06d8166-ed86-4f7c-815e-209a85047cfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.0']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a3231a3-8960-4dd8-a280-37f624602708", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.100']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dc26275-9f44-4799-a966-a51290b7499c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.101']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcddde5c-bcfc-4b81-9403-f53fe6a62781", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.103']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83858863-0b8a-47dc-b9da-a3803f050d42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.104']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3779aa27-bbdd-4afe-b3c9-4b95a72e42c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.105']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bf14139-f427-4554-9036-40a51f78c598", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.106']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ad39999-b24d-4ba8-bec4-607250ddce64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.107']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1121d6c-38c3-4da7-bc92-9e75148422c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.108']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf936e06-0c7d-41bb-82f9-6f48cf9b5883", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.109']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06f8ea0f-d703-45de-a268-351f77fadbdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.11']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b5c4888-d54c-45b2-8737-b6f30a39fdae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.110']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5c36baf-ddb1-46c1-8e45-d56d077598dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.111']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c942d205-dc49-4d39-8d50-5d0a253b1aa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.112']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f3c3d2f-ac8e-4475-9bc6-228872fd6d26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.113']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32524843-f517-4576-9b12-94a6c49a87bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.114']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2ccd949-b6e0-43c0-ae3e-78160e092509", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.115']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0465251-30c1-454a-a9bd-1d00b39d04f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.116']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13b89fe3-7da3-42a8-9436-17c835f62f21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.117']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d060c0de-62fe-4d1e-a254-856fb9426c50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.118']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dc12af0-d2f3-4794-ae1d-c806e0ce448e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.119']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20fe95f4-5a6c-4007-9de6-046f21f590f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.12']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c27b543-550f-4a2a-9b6f-36f5151a6f01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.120']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd9ff294-c107-4ec5-8176-66e5761bfcb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.121']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcd42898-16ab-40f0-bf4e-a5377f8f0c0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.122']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6afa68ae-1e63-42d8-b911-7013002f1463", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.123']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--916b16d5-5feb-4873-b923-bda5e06f9f6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.124']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--060dd98c-73cd-48b6-9528-cd476bfafaa2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.125']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8b5129c-6bec-4b05-957d-890da1dd5574", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.126']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4967441-59dc-4b55-85a7-711601b95f51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.127']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f1dda83-216c-4a89-abf1-f183389712e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.128']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b9a0d9c-537e-46c2-8737-99701e739e2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.13']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0413c2e2-3dd1-4706-baa2-727ab43753c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.130']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3003f229-9432-45d1-ac73-49c1b5531819", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.131']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58ad9cca-60ab-4c49-a487-eb09cd8743f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.132']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3576e55e-05ae-40dc-a05a-636bbd5ea65c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.134']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09397ff0-e281-47a0-bbd3-13d5752d4413", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.135']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8bd3bcb-48e5-475b-99f2-009fc4c0413d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.136']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73a22f2c-57ca-47ad-b58c-ccb726f8f92d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.137']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38d07fbf-093b-44d8-bb2c-8ed7757c3560", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.138']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac0a1a84-77e5-43e4-8285-ba39c1e650ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.139']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d101e408-1ba0-4632-9886-24f13abd2ddc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.14']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6653b0d3-9b09-40e6-a9c4-136d6e35e62f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.140']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b9343f4-26a8-45e5-a363-4b887d9dc5bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.141']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33791220-2a60-472c-b573-1647d9a6adaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.144']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef1fcc74-05c8-4cb7-876b-0f5d7974ead4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.145']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac321677-3f9d-4e38-aaf6-6038caaaeef5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.146']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30a12686-4e33-40d3-8d52-eb448d0b265b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.147']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbd5fa46-df8f-46a8-90bd-fd5b45ee061b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.148']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ec36d2a-77ac-4aec-a1ce-5c3d9ff925d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.149']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12db6df5-44ef-42a8-9e30-8309bf170807", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.15']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d634a7bb-8f5c-4a0a-9280-f24d7fb971da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.150']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bd7c355-7af9-40d0-922f-81ecdd35c15b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.151']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbdfaeac-9ed9-424c-b73c-bdca6e5f747a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.152']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac647ce6-e205-486d-b284-edde11496885", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.153']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6762fe7a-b641-4192-9c71-ba5ba5ef6637", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.154']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06ef0719-df31-4503-ad46-7f68af05130e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.155']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fef507e-f91e-468f-abcb-bc1218690a44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.156']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecbcdc31-545e-4404-991a-d1fdfe636270", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.157']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52f519c9-6df0-4fd1-8148-136f0de7c977", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.158']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cecf9c7-1a42-48dd-b750-571accb04405", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.159']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0ab5684-f8b3-4e59-bb20-60702c357942", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.16']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4454f772-e617-450c-b9f7-599d27991340", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.160']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39153e21-64fb-4c87-9860-dc692f6c81aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.161']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59a7fc36-aef9-419b-b226-764aed99e7dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.162']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dd6c473-dd75-4d25-b2e3-724f676d219d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.163']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a2026c2-698d-49a1-93e7-849fcecb104d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.164']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--830d60e6-a48a-4a85-a4c0-1b507c08e69a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.165']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--088baa4b-47ff-4372-aac5-247a80616916", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.166']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31027d83-cba3-4706-93ee-2636065361b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.167']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7db4d35e-6df6-49c8-93dc-a4fdae87f765", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.168']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1275e6f-71e9-4c07-88f5-868f56bf406c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.169']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--754f10e4-12a4-474f-953f-e971374cb1f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.17']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33b0f160-8061-4e8e-8501-a2c0ad0568b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.170']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31d4166f-42c2-4507-bd5d-10f1046140c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.171']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adf687f6-b801-4fd5-bf76-0c3cf586922c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.172']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17fdbc52-6c9c-408b-9688-c97d3c537004", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.173']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dfd9918-de6c-4ba8-9704-914b4fb29aed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.175']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab515669-c061-4ea0-ab83-9e6fff850eb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.176']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d20b1820-9f56-4dea-9af8-88c2712863fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.177']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffa8722a-0042-4b4a-8ecc-69169e147e88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.178']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--712804e9-7740-4bca-8808-7edc7c6a235e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.179']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa149a56-f7b6-4ef6-b17c-d868f8c847a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.18']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9fa659c-7d9e-4fd7-8be7-94c4648319a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.180']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4a6dbe8-00eb-473e-9c70-17cf96b0a736", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.181']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f50a4fc5-e3eb-41f1-921b-86e0ae732587", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.182']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--186f537c-79f4-4c00-a788-2953e06254d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.183']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1088fe4-272e-49e1-a82d-bb3339939d1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.185']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8892d6f6-bc6b-4e36-87f4-9833884a288c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.186']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c02d93f-b6af-4b81-8590-ec0bb54c436d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.187']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d18f1849-3a60-442a-a66d-ee88458e6397", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.188']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f760c16-5f54-40a8-9e04-457c5f0647fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.189']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--564b524c-a7d8-4a47-8edd-4510cd1b7c3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.19']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9b84067-d4c1-4e90-80f4-34389fdb57f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.190']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dece5be-08c6-4f9c-9ce4-4541d08515e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.191']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0311372-bffe-4248-9327-417671982a1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.192']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4d4c7f5-034d-41e2-b9a5-7fbf2d62303e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.193']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8331612c-7fbd-4b4e-8aff-d890502f99d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.194']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d6bf31d-f610-4e1f-99db-76e046915981", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.195']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c9c7893-c4ff-4fa6-9aa9-2b11c18e8482", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.196']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--367db017-b2b9-44a6-949d-9ab1a0f41e5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.197']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30f1364e-e6f3-42cf-8a47-72b147df1349", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.198']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0938adbe-eebf-4abf-8d8b-fa5eddbf8d6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.199']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5478e41-3037-4553-9a1e-6a8f6e654213", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.2']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a468a78-2b63-43db-9709-83f079f3c8dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.20']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--042faf41-d28c-4fcb-91f7-00af69199b72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.200']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5240849-cadc-4573-80df-808635a15d2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.201']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bc33322-5df1-4763-951c-ce42254d0033", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.202']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b5e0d5a-2624-4125-9468-12fee23a9d49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.203']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42d64c1a-2d11-4e8a-80c1-c096156a195e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.204']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09832689-c3d0-4df7-84b7-f8f70484c131", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.206']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--555adb4d-87fd-4dbb-8719-fc298fea216e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.207']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58da3e63-d78e-4567-b54b-605b768cf434", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.209']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca380b05-564a-4c46-abda-c4e1e4fb4ae9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.21']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a99752ea-20b0-4272-a3ff-c83d3e78e39e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.210']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96a3a155-6f10-497f-91b8-0a2c047d39b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.211']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eea50303-01b8-49de-802e-2d32e31aab33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.212']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac4432d1-9a20-4b49-b10b-ec9eee2bcdd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.213']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4800b8df-8abd-4ddb-bf84-f2f46b8e75b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.214']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9976af73-fe61-43a0-8b0c-fad30abb36f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.215']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87ecea77-f209-46c6-8c20-05ddc509a8b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.216']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94cf64d2-3b09-41fb-a579-f167160733bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.217']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6a6666c-8419-485f-abbb-443b1a36feb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.218']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--697a8121-621c-49b6-b530-9a5bfacb2524", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.219']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60d8a450-07b7-4557-9bd5-28251f732b70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.22']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06a15625-70a4-48fd-a162-ab50237ef1cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.220']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a28b1f49-1339-4015-9a61-1b1c75aedef5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.221']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d12b4c6-53a3-4b73-99b9-64b09397ae70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.222']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4783dfb8-12b6-4f45-9828-ff26556e2612", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.223']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d77d668a-8b49-4306-86a8-49c79021e1f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.224']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5049fe2c-71b1-48e5-9aae-14efc98bc834", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.225']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0219f352-0692-47cf-bf34-ecc935834ed4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.226']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b606d30a-9141-4b22-a2c2-dfebfd6f33e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.227']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa8b2459-2b64-496f-b5cf-43de24e54702", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.228']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7aae9c0-44ad-4da2-9e6e-0a59b6e1cf6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.229']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--039681ae-fced-4ceb-9a89-ede92ab0a20d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.23']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b83a2b7b-f367-461d-b79d-fde56222283b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.230']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d54bf8c2-3749-4041-9290-f8a2bbc22074", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.231']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f85e00d-286c-419b-8d74-4d1312c6fcfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.232']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06014870-8929-4394-b16f-85c4f1ba85de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.233']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee894a00-b6f0-4c90-b56c-94720099616b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.234']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba2b066f-26f5-4a4d-813e-918757f632a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.235']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19225ab7-8775-4bde-8792-4ccde5e204fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.237']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2a9d572-117d-476e-9b8e-cd85ade0b103", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.239']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d292043-8972-4f25-9696-f9b60f41a025", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.24']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d15a2dfd-0595-4dc4-be7f-e2275d9df6e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.240']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--682c636c-df89-4098-9f30-1893d32e46fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.241']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45f496e7-7a75-4995-8fb4-e2427d3076b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.242']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a70d85d-46aa-44c1-a0f8-1c4572518439", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.243']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14efb3d6-037b-4aa2-abcb-943b2c08c87d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.245']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e0bf5fe-0485-4aa4-ad31-dd2bb24fe361", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.246']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bbfa078-9664-48e6-b45d-fe2db2235624", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.247']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19443232-0632-43f5-aa55-6b44a1e72e9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.248']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f957e02-20c6-4054-90a9-44648067e3b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.249']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6635d9a6-e3a2-4b8f-99cb-f669b29bceb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.25']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f223e0b-f7dd-4dde-94d0-180befcbc4a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.250']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd403e5f-8481-428f-9943-5f447da9e9ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.251']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b074cf9d-2b3a-4c8b-b9c7-67d7db3da253", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.252']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebf93e29-5453-471d-bb00-69c29b21b8e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.253']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02fa04e2-42e7-4865-98e9-a4d980d43896", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.254']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78dae085-2f31-4417-bffa-b20ddc307b20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.255']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80ca1f87-e7eb-4347-befa-3d838e369d6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.26']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05e6c69b-14df-48f8-9f6d-714c2ee0f90a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.27']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--633b7ffa-250e-412d-96a3-9d94c67993bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.28']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3f0a8fe-66a0-4419-97ec-7a7e4cbd35a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.29']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5fdfa16-0259-4e33-8fa4-a17ed3d8e3b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.3']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0dc9340-e4df-4b2c-b56c-2dad131f1782", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.30']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d3db202-1c18-44c1-b4ae-6dcfc31ef07f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.31']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--066ba7a7-25e9-4244-bff7-236db86b26fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.32']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d07a6b32-0a5a-4ccf-a55b-0ee6a4bfa330", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.33']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4b9d4c9-eb43-4e52-800f-fd83adf696b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.35']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1461660f-abb2-4b36-885b-6e015378dd18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.37']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b63c4cf2-09c2-4c6d-abc8-145934074a54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.39']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4c62850-93c2-45da-9546-392256df1844", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.4']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c29a35c2-5b1d-4a80-a81a-bc137c1f9049", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.40']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--149ac039-97f9-443e-a960-f67cb225a86d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.41']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7054678-f09e-44f8-aa7b-2b286db12a25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.42']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d496002-8481-4630-93dd-bb5e33b3aaca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.43']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c714b5d1-a9bd-4f70-9ddf-3ea1c8ee2446", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.44']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c374af41-4ab4-4233-b8bd-8f2a28f2307a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.45']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf96436c-5997-4a72-9f56-31b7bcdd4a4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.46']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7397d1d-1a79-46e1-a7d9-0bcb4a8e8d08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.47']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--095d2d71-379b-4cc3-b135-f6eb7246fd26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.48']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--107e8afd-3f61-435b-a023-2ac02c71f069", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.49']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eb71108-3c33-4879-ab60-04de3559b51a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.5']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3735843d-2a5f-4ec3-9f25-f6e334e19e7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.50']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b291a03-505a-432e-a2d6-dfc50cc9ae16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.51']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7755800-bbf0-45f2-a3b2-e3f7d15298eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.52']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e131ae6d-f4ab-42db-be28-648f8e0a747e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.53']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acb0434e-0bdb-41d8-93ac-5f8726f5fcf7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.54']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13c0c35b-c3ba-4d36-983f-d0b6d0e7f345", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.55']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec0bd119-5300-47c8-8ba1-15bb5a73ddcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.56']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ddfb802-6c44-4fc9-8b67-6d58716b1032", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.57']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fd58940-b973-42db-a2dc-1a0af6d1d04e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.58']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c29e7a8-e92f-4a6f-b88b-4cfd15c3cc34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.59']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3461f890-dcba-4a4d-a613-43c3b6899ebb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.6']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5eee2fd-3a0b-47c8-b4b7-5ef7341b8349", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.60']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7bc3572-567d-4796-8e00-70e1e60c796a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.61']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14e6aa73-b863-490c-80eb-cc9edb617a93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.62']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b15c2b04-47a6-442d-a5ce-0df948b17ba8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.63']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3c93bc6-7e12-4feb-818c-1ea902c0e88a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.64']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11cc8fa6-d91c-4742-91ac-ecd48eb4a458", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.65']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72fd3b25-c807-4efd-bd13-0c281a549f78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.66']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--626c7368-8c40-4672-91e7-083543ab78c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.67']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47af51c1-2474-4cee-84e1-b4d8fe319ae4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.68']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e12aabb-37ab-4fcb-b9eb-8ffebd2d690c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.69']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9648952-230c-4e4a-9407-f45728ee9fa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.7']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--861979bb-0737-45fb-8133-b7cdfecf37de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.70']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ace3d890-cb6c-4994-b3ea-e12519cdf412", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.71']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0933fc65-540e-4525-9820-d9e8b3ec2801", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.72']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99a14279-43a0-4427-a1c7-60b97bacabb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.74']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7e092fd-004c-4656-86c2-8783782bc098", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.76']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d475563-da0a-4ac1-ae07-c6f6289ae3ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.77']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c51e7681-c8c8-486e-a348-4247d2d58849", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.78']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5c44eb9-8c10-4a14-a3e5-5d7f28e378f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.79']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c4f5214-1031-4729-a79f-267e10d0dff0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.8']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--843804d4-817c-42a2-ba08-f9634f989a63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.80']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b7ee4cb-c0f2-4f61-9bd8-763b9977fdeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.81']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1d840cf-b933-40c0-aaee-5d82d770af3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.82']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--167b7090-8b86-4be2-9f7d-f992367481fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.84']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d6ef692-c380-42e7-a962-c76f11be61d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.85']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daf80d9c-39f5-44a3-bcb4-c0190f803c7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.86']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92449124-f832-4366-ae9b-613fe23dc1c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.87']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26403dd2-5175-4f8d-8156-8dac40f037ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.88']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bf40288-4440-48da-94b1-81df0fa1c62b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.89']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b921b3f-4f8b-4cab-861a-eaef21b93ede", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.9']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a91c76f5-63cf-4ce0-a531-d06d43634986", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.90']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38fc58ce-4b55-4766-8606-6df216e39474", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.91']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d59aadad-6189-4399-9059-454e8ca1a9b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.92']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7225bc41-4703-4846-8028-6d5d8f2f2687", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.94']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1ecba80-351e-42f2-b5d5-51e75e257542", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.95']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--168f5854-d3d6-43f8-bc6a-2257c4fa46d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.96']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e44b8e05-f03c-4da6-b2f1-e18f73668a59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.97']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b978070c-a561-4fd9-a2ea-528183994755", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.98']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2470d5b-46c4-42d0-b65a-3fda52afd2b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.235.206.99']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5027cafc-b6b9-406a-a9fc-9ab675240059", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.238.231.31']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d4ce3f5-57b0-4179-9717-5203a7a82735", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.240.215.110']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--313f05cd-34a0-4197-bb5f-44ccbdd14e78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.103']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a65a68d-f9f8-4aff-bdb9-25aead15fd0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.104']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9872679-51af-407f-9c96-c3abe08e8cf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.108']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ecac563-68a6-4bd8-8f3e-6425dcffa326", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.11']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e4c7047-278d-42db-963a-c06eb41bd185", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.126']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb6e922c-5113-4eb5-ab44-9e98d7e0201b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.17']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce739a9c-9f9f-4d19-a24b-b2cc0d1736dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.36']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6966fe98-590d-4185-9d42-f0fd9b4257de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.58']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b39b403e-051a-4985-8d50-74c24d3e3903", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.60']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--199aa467-32dc-4e28-ac0e-43355939003b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.71']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--235d00c0-01a3-427e-a41d-889513e114cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.72']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5793a9b-a240-4dd5-b68a-3c0480637559", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.73']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db2a9cdb-c6cc-4a5f-9c9e-ed926aaa17dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.74']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a9b77cb-eca3-443f-b7d1-2f58afe5ff81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.81']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d87c93f-8edc-4c9b-bcb7-23c79a2d0ecc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.85']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--651a99e4-e9ad-48c3-ad30-555e57802766", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.87']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2241b45f-9d20-461a-9c4c-9e748f62c70d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.9']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56b2a937-3608-4e3f-95b8-802d9d54f7f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.226.92']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38a31452-cf63-4b88-aee0-71b50440f0bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.210']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfc880a7-7352-4455-8969-3b4566eb5be4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.242.3.226']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef41c815-3322-4543-9b03-04a250ceeae5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.251.19.28']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9dcd798-8ac5-4694-8eb3-9c4613bf583c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.40.34.115']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b4c4706-12c0-4e09-a4d4-d407b97de58a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.42.21.94']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5885757-a9c5-4980-a04d-dee631557c7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.44.64.174']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73233b62-dc04-4cb9-8aed-b886a6a72f7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.44.66.153']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce198787-d866-4a3c-b8cd-9e40291d8991", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.73.23.133']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92a64b46-dbe1-4091-bde6-074560a52d43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.83.152.229']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57775616-017b-4f46-913b-dbf9934f7be1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.118']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3077590e-1e99-465e-ada8-30148f1bfa80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.142']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--983ca2f2-46ea-4c7b-b4ff-1520bb604f2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.37']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e4ffba7-6460-4c8b-980f-ce1f68a99dea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.39']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf0dea9f-7bd8-494c-aed3-6d94a2add8cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.66']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--068e461d-046b-4193-8227-5c2b4f3af87d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.79']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dd588c0-8b95-40ea-a9cb-e6404739f581", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.93.89.99']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3cbe7e8-cb0a-4cde-86e6-3932c7801c7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.94.111.1']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac3262e1-8e3f-4758-8330-cc7bd0037cc2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '185.95.156.182']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7b47e00-8cb1-40a9-aa2a-c1d9dcc52e10", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.14.112.152']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0e15bc0-df16-45cd-bbcd-656fcc763737", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.151.100.144']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5162514b-0df7-4dc4-9f11-97212800710d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.158.26.160']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ef4a4c7-51b8-4722-bcba-e26cb47ab69d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.189.88.199']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9a25a2c-4094-49bf-8487-0626095f9480", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.19.123.146']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be81cc81-f3c2-4c35-a6ef-dfa8609e6e42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.19.123.152']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce0c2b31-47bd-4238-b328-4116cc70ea26", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.193.29.124']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa2f7513-ca08-4f35-87a6-0337910e068e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.194.58.219']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aaaad2a-0052-46f1-90e3-37dd94391a05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '186.206.9.189']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e81e3e3-be31-4ada-92b5-f5cb92ccae41", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.12.126.0']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b197bc9e-8f27-4882-a3d9-4b918a4521de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.124.138.161']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aa11707-ee0e-420c-979b-0c21fe46e465", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.136.170.137']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03e12deb-8fd4-4ee4-8adc-550922f3739c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.17.228.218']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ea12da4-ce8a-4e91-8f84-a4f29942bc95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.172.205.57']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c6cea12-d7a3-4df9-bc79-ee70e15ac89d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.189.174.168']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bf0bbc8-0f6e-422f-82a8-c114467c7d90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.190.163.120']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30ed7b9d-df02-4902-81f2-1f9fd0292172", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.251.123.104']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eccdb01f-1dea-40fd-8919-91e41f159239", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '187.49.144.147']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eb48f5f-9926-4aff-bf1f-a259f66e2f6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.113.150.16']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a8dbc75-3a1c-4b33-9e5a-085b282d7e1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.163.115.130']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--359b5f53-29e2-4eb3-aa3d-9b9c4b6b3307", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.71.161']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--646b023f-af61-4c40-a32f-33ff816e0c46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.166.8.225']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b6331cd-7a5e-4cba-962c-6758a504d7fe", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.190.95.85']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a9783ee-77a9-4783-b132-75507b5267d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.191.77.43']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9da7176-e8c5-4826-9861-6e495a0fefc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '188.209.138.130']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5145b9a-a5b7-4875-8bf6-8a50a373eaba", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.178.49.253']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4947d371-8358-4183-a083-69368fd67052", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.18.97.61']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0733e614-67d9-418c-b455-f7d27c9a894e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.219.113.7']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80a75ff1-01ec-4f26-b386-d6db6682cc76", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.45.175.253']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61da7ec2-313d-4d1d-bd1a-3514b3feef27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '189.84.251.120']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f11ae4ce-ccdb-4fa1-affb-0ffddc4d6c98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.100.179.168']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--232a7691-5c2d-4489-9a77-32983e2a53ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.112.176.85']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25b8c6af-08df-457d-aa1b-630610b83e3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.153.21.124']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c05169b8-541d-46d7-a9ce-b9b15d13ff70", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.186.84.57']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--815c77fd-e888-42ce-ab41-e4dd85d50a7d", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.2.155.71']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bb273ec-db4c-44d2-b6dc-e52324bcdacb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.245.32.89']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62bc5450-e736-4673-895e-98b6a60044ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.4.214.234']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d01c0ec8-e231-4334-a185-49b25d5568ff", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.5.37.33']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08137356-8aeb-4aff-b8b6-0ad0f20c6857", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '190.6.10.193']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--572a893a-3c59-4352-a582-ace140a339da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.101.96.209']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d60ea80b-8358-44ec-ba5e-5dba0babac0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.13.136.46']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3e6f2a0-2e88-4983-814c-f28955de9dbf", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.17.46.148']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69ada8f5-cb18-4337-bebd-3bef9e3fead1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '191.177.186.104']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61bc8c16-f0d5-4dcf-930f-6093fd2bf970", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.109.228.137']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01526eb5-782c-4d7a-b922-cf6f7bdd9670", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.126.204.248']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f2179b9-2c70-46f8-9f2b-97eaf8e343a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.81.124']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f47ea779-49bd-486e-aeaf-015a922f7d73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.84.194']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6643903f-593d-456e-bd9b-dfe76309c70b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.155.95.206']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a60ec8f-dc45-4193-af58-5ed420cee552", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.159.99.144']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e13be8e7-330f-4799-a6c0-e889da49d98d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.161.49.2']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--876d8171-f784-4cc4-88ee-231653fd8e5f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.169.226.3']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0ec087e-bc63-488e-bb45-b228dcbd42e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.169.233.115']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4fa66ee-b740-48f5-acc1-7cafa66eab3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.227.128.168']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75644503-1dbf-49db-8f47-c9c827d23f2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.241.146.101']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1caa10b7-276c-4154-85d4-5c1c931394f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.241.242.243']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c935dd4-bea6-4233-b840-0eba04bb3738", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.253.248.110']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57fed2a6-3c0c-4200-b376-e5598e9fd80e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.253.248.142']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edf5a346-8161-4e07-9725-da027801f998", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.253.248.145']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edbe3134-a807-4bdc-a8a6-3759050df5c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.34.62.126']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d138764e-046b-471e-9dcc-6dc5cba65d6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '192.81.132.226']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b38e4dc-a9e4-41a6-9dde-67088e2d1c18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.118.52.222']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98c69fe7-eb9f-423e-84e6-863bb54bb99d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.100']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91dd60e0-17d5-4f2c-acd6-5e1bdadf4ecb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.101']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42042a60-54a2-4b2a-8307-e88833494d97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.102']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81c74862-892c-4a96-9db1-2ef2b80da178", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.103']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de1c4429-edf7-47d5-81a1-9ed0444210d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.104']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f62728f-a8c8-482a-9e6f-2de0c8c86feb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.105']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a88dd049-5eb9-40cb-8a36-c61a95f32ff5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.106']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e42482ed-3c60-4f71-aed4-04373bdd974d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.108']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc69b581-995b-469f-8d00-725653cd90c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.109']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed96804b-1baa-4166-86c2-e10a3c5f5a81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.254']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--328d97b2-454b-4f06-bb68-698edb610c57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.74']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2110eb69-9757-4357-8bff-1ef186d36191", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.75']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fa928e4-f049-44d5-8744-512207d13c33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.76']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ee89143-8d75-4d83-85e9-9b20def24042", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.77']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04e591f9-ae24-4568-ae66-6ea4486f6639", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.78']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b7b5051-2316-4fd8-89e7-15af59c51491", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.80']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88a24b0c-0df3-4307-904d-02b0e52e1d02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.81']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3ee0e67-cb7b-4bac-babb-a598e5dca801", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.82']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd82e238-e42c-4eaa-bacd-fc7f0e4b0aa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.83']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21f21bfa-975c-43f7-ae8e-24c784e839dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.84']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--588fb2cc-da36-42bf-86cf-90b300e75a07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.85']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7286683d-a9a2-49d8-873a-9d7554cf6cd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.86']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3c96f48-991c-4860-93ac-8f3385af14f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.87']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcc3585c-622a-485d-8e49-59036dd25e2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.88']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4a7085f-af41-4f68-9867-ba0a616a991d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.89']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cf21055-a049-4a4d-b654-fd78f805a8a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.90']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83023a1c-4a9d-46e9-9112-5ea72aa4eaba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.91']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3202a76e-6d7c-4fb3-9ab0-fcb0d7a5d770", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.92']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82a58fdd-985e-4122-bb98-532c908ef08d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.93']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c87c8c5d-6327-474a-abc9-1bf13f503469", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.94']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45ffd413-bd09-460d-bdbb-ab1dea88f98a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.95']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9227576f-aafc-4ba1-8cab-ea3642ddb3ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.96']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d828ff5-82fc-4f6d-99c5-e8b60fcb0c6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.97']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc9961a1-6a55-411e-be6d-8e08725e2454", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.98']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f863280-fbc8-42a1-9ee9-d1b1ab5ba5ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.163.125.99']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dad140e-6663-489b-959a-7960e334e660", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.23.197.131']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73a9b00f-b4e6-4167-907e-d54528462a8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.239.179.148']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fbf9dd7-f0a1-4515-8d23-b6733ec60751", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.123.123']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82e7698e-25fc-42c0-a749-6445d8b5e81d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.24.211.218']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f12f423-e4a6-4288-a4db-aa1904b2667d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.26.13.125']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2139bfa-a209-4132-be17-90cf2b38b399", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.11']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e737628f-261b-4a55-b4dd-9b54be87289e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.4']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35cfe1ff-b9b1-44af-9d5f-9a437285f07d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.5']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c5732d8-2502-460e-8c7b-2ed539a693cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.3.53.7']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db2fbdc1-1d19-49de-9b95-b4f1b8db8a12", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.162.155']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b1798e4-00b7-49de-a23e-48136be642e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.32.204.199']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c10f0acd-83c8-4faa-afa2-6de6241959f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.34.225.167']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b35afd6c-1d0e-4e32-9b75-2137756493a4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.37.33.243']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0af912f-ef38-4f73-9136-8330a111e305", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.39.12.124']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--917bd5fa-a349-4f7b-a302-52d42f315198", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.46.255.86']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04d508d5-b847-4b1c-9225-24aac59aafdb", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '193.47.62.69']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6f016ae-22b7-4eb8-a5e1-4e3db529b9b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.102.104.178']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edf3737c-6a64-400a-a20a-1e69ebc2588d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.164.107.4']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbb6e653-000f-454e-a201-29750b32c605", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.119']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0455114-42a9-413e-87f1-aae661a1bc23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.121']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac436c0c-e548-481d-a79d-5d2d25e0210b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.126']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f808f816-769d-4e6c-bdff-acdce8959424", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.138']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d66d83e0-44b2-46c8-9241-c936d76e328a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.146']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8211db71-4283-4105-8e15-1d01ec7050ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.157']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcd4c040-66bc-4b9b-a939-c2139b19eb9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.177']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c75d8e63-80e5-4f65-8992-2ebfbddb8848", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.196']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94bfa0e6-b260-403e-9b93-4eec9dbe2ef7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.203']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54a4f506-355f-49ac-b935-25c0600f3298", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.215']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e18f2e7a-99d8-408d-8a03-8bebd4638f37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.223']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa279d83-52b9-4aec-996d-f554f5e67be8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.248']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9da554b-355c-4cbe-abd8-d53cc57df653", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.3']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28c85f2e-2ead-4983-b7ca-9f65543db11c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.46']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--344d72fc-73af-4c5b-aa0a-4669ea7fe70c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.56']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af678c1a-5fe9-4e78-a9c5-b309241c80c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.69']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a372edb-c341-431b-a71a-b926ab78e025", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.83']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a830c92-3cf7-4b1b-ac4d-59dc3b7d53e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.187.176.97']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7107c08-50a5-4b3f-8a76-d7dfbcf0bcb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.24.161.104']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--779a3eac-bdd9-4e64-8b7d-213013816fa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.24.161.172']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4240f11d-9b94-4976-8f2a-8ed8f410359e", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.39.227.77']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d13c4e8-74c8-480a-bf5a-6398b4b5c3eb", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '194.44.46.85']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd54dae4-13ef-4b39-b7b2-96279e04bd46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.10.210.70']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32d807e8-3772-47b4-af97-db31446c4f7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.135.246.246']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea422c91-8767-4994-8f7d-597bdaa2a016", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.108']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a05c5217-ce62-4c4a-92d9-ceb346adb896", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.232']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e7b073c-9b0b-4e4b-a8ff-c1c5b37812bf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.178.110.65']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e1e3e26-e000-4edb-9432-c1668d87d828", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.182.16.23']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--506fab46-4435-4413-94b7-feba087fe980", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.102']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7b1cd50-4fa8-4264-9422-71aed07593ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.112']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edec4323-2955-4240-a434-4d6f29ef9f9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.114']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2d2e45b-59a7-4153-9f53-fea0e291afa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.116']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--392c2350-a5b7-413d-9d87-9b334e180e99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.118']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6f57fc2-584c-4311-957b-da29a428b528", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.128']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31902fd3-5e90-4c85-8d4a-424ec4e8a08d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.130']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eac5f715-e2d3-4ca6-a378-2176c6a53aab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.132']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9813e51f-07f3-41c4-8bd5-1e7d6bb3d703", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.134']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f492b94-92ca-4b8b-aae7-cb6f6a28cb71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.136']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2440964f-cf48-4bf3-afa1-f48d4d249762", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.138']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a03cb366-9d31-4bf6-a1ba-542686367c14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.14']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e57a5517-d5ef-4912-9e74-fc2cc37729cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.140']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--847e1722-a1d8-426c-992e-c949b56cb376", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.142']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f40c6bcf-123f-4a9a-bc20-d62e05f2698c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.16']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b577de1-ca29-4d06-be68-b7eaae5eb579", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.160']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4c72058-4b18-479f-89d6-9f139f674050", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.162']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--149acc66-9dcd-4743-958e-662d41e42c88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.164']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96a5922b-d520-48bc-8311-cc8c29bd975f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.166']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be487fbf-00a7-4524-95da-0817cfa5b234", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.168']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbd4170a-10b0-4e35-a032-29be2b27c942", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.170']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33331d5c-8eb0-4b72-9440-d088fed5f732", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.172']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84458848-3070-41b1-94f1-a6d87402a301", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.174']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24317d16-290f-4717-8ade-b8da23726340", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.176']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ffb4c4b-2754-474d-a69b-df7e30d4d19b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.178']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48a585e5-18c2-4452-9b8f-71929fed1ec1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.18']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f83d688-3601-4694-bd74-15e48064d3a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.180']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12807e49-5097-40e4-bc81-257947af8ccc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.182']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac6b7146-a847-4bc9-9d63-197b6543a920", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.184']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43632e2a-9f1f-40dc-9bd6-dcae70743327", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.186']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a51368c4-b3d1-4fc8-9f6f-590e402dcb51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.188']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f342218-77ef-42f2-a3da-fb23c4a97e8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.190']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f63d794-8884-4fe8-930d-fcbbbdaed0c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.192']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4b10a92-912b-453a-95b1-f68fc2f3a10c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.194']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--682b7196-c037-4f0b-ba69-5616cbdcd19a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.196']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5406152-8163-4304-bdc4-95edc6507a29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.198']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6179736f-79dc-4cee-8bf6-aebb5bea4d92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.20']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bf2c14d-3262-47b9-80b9-413f351d8a58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.200']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0a7cecd-09b0-43f5-9085-f8d8a651f797", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.202']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1bcf1d1-ca8d-4b8e-84f1-84dd612f1b5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.204']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--073335f2-b977-41ae-8eee-1738c3484b08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.206']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22c2bd4f-40b3-43f2-940d-344d78a0808a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.208']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--895ea25f-237c-457e-b65f-3d58fdafe9c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.210']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96b1480a-822b-47ae-93a8-e977b32de0f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.212']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af6b72bc-c97d-4d98-8764-7900f697e887", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.214']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef784552-221c-4359-bfa3-6ddb95d42db8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.216']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eef76703-a633-43cd-9e85-99862d8d0808", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.218']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aed19077-620e-4db3-a78d-cad11df19b7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.22']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--788e7666-810b-4c03-a1bd-a141b049a017", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.220']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b067ef49-9980-4652-a6ea-6812ad06dd9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.222']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0dcf682-9fea-496a-98d3-0fd9305d29d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.238']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--452d35c3-abaa-4650-9854-149ff9482560", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.239']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--083bde47-5998-4cda-aaa2-20e1d77e5105", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.240']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b58a990-237b-4367-8aa9-c82656f1df5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.242']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6d66505-dd8e-4c7b-9e61-7dc67dc933b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.244']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a12ecdc-1e9b-4be3-b1d7-1885ee169c69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.246']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93669a0d-d652-4f86-83a6-d210a73fb634", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.30']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98663ce3-9b4a-409e-8e55-beacff3c70cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.32']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28c5c7f8-98fb-4b35-a447-0afc8319e51d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.34']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b04eab93-8a82-45a2-bf88-5a5d1dc83228", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.36']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e91141d3-bb1f-41c9-8efe-65e1ee7ec416", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.38']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2a0a6da-0076-498d-9dbf-8091aa7be32e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.48']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97c427be-4639-4cef-b344-6f8e89c3c187", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.50']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2255eb93-c40f-435f-9442-6056d8589a51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.52']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9808a9bd-5d5a-4925-a919-9352ec0c28bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.54']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6681600c-2fd4-4d71-9262-54492d1b0cf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.56']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e353f37-d883-482b-8834-f1b501078ff0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.58']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72921d6a-74a5-47ae-ae3e-29ff8bfe6b5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.6']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bba90a2d-8caa-4caa-8134-da7c05efb664", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.60']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27fc6db5-de5c-4b88-beb9-accdbdd1c4c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.62']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92293e56-4b23-4a44-b32f-7ee6e1eb6e9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.64']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4978c0a-8a50-4b96-949e-f8441855de12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.66']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa7bf1da-ed34-4a51-a02b-39e72c5de981", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.68']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d5fb21f-1542-4f3b-af17-8d594d2b69d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.70']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed57bf3b-a101-4e6a-8c2a-a1541b5e5971", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.88']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ad3e0c0-0a32-4ad4-9366-2e056c56eca1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.90']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b66211fb-f395-437c-8a58-2e5ea6ad39ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.92']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e8b2c92-461a-451e-813c-0688ea537411", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.184.76.94']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--678af5f2-d0ad-45bb-8b4f-e53d480149b9", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.191.104.96']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cc1683c-6bf3-475a-8ad8-771a3c7ced28", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.200.28.67']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbf2885a-2a8d-4eba-9271-67f1bc38d1bb", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.218.157.226']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61bb047c-3192-4187-a901-9126ff1ddbc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.222.59.154']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba01f5a9-6f32-4a58-9ef6-1cc0dc2cab09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.243']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cddc179-9a63-4f68-9b5b-8bb5dc01d0a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.244']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--671f342c-bcd3-47d3-8c8c-b2cbf7230888", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.246']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0a419fd-9cbe-4dcb-9b09-7fe85ebbdef6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.247']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd601d3a-b211-40d0-9b48-2190a8bfbbb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.230.103.250']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14e02312-8073-40ff-b931-c44017552062", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.250.79.2']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7709b503-4648-4720-9abc-45b777275a70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.0']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9721a292-64bf-46c8-80ac-3639dad5daff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.1']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aae9aff0-693e-4415-90ad-a824e3248c2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.10']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--938315de-acf2-492b-b1bb-3b6ebca18835", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.100']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bec8660-a3ec-485d-9ebe-8d8b0be3689f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.101']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ccbfb4a-0be6-4e2e-9f8c-d6d570af8e08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.102']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7164e344-23e9-47b1-a2a0-dfa3bc6ac872", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.103']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ceccb30-da3e-47a5-b337-008e8b326f9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.104']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ec397fe-47c4-4e6f-9cb1-300cc22ef74c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.105']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c70166cf-4383-4930-a5f4-a1e65fc6a66c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.107']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e29d294-134f-41ff-bbed-7b27b6ccee9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.108']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a21efa97-11d4-4d7e-b95f-e2437895a273", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.109']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc2efde1-2a6b-4781-bee6-0c04b63c5b31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.110']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92ea539e-d274-40e6-8d28-b210d0890b53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.111']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45b82486-5ac7-4fa4-937f-0f5953b6fbb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.112']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c259d7b1-2074-4783-99f5-ff6417591d03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.114']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a73e86fd-9f1e-443a-a9f0-09010e2c9cbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.115']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92833304-5424-4748-92bf-f28868ba059f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.116']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a02ec566-ed94-4eb3-9f02-fcbe54c327dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.117']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28bc1035-5c91-4960-bb3d-e8691b58bcef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.118']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81fe1d7e-995c-4f90-a673-e042dfd6d65a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.119']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74986ee6-cdae-4b34-b54d-562a2c8ee23d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.12']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0c073ed-855f-4e68-8d5d-208068a61502", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.120']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7adda73-4a69-4756-897c-0e778c9b0474", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.121']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e56d2bb-53a3-4137-8545-399e731a4e38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.122']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b310a3a1-f576-46e7-85f6-54a1e4266ed0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.123']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa057a57-ba9c-4164-83df-dc62a25e852a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.124']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a61c382c-b02a-435e-b96c-be3efa649998", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.125']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bcddf17-3f9a-42ab-9ea6-d5d152b0f3c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.126']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb54acb1-b6a0-4dba-af96-7ef7102bb0f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.127']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06675b49-7f04-43ee-ad33-9a88005b894c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.128']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9606bd87-b607-4765-9f4e-40c3919b5dbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.129']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0701df3-7f84-42b0-b9d6-e8d20beba692", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.13']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b78517ab-f0d5-4a74-ba6d-2b7f348fcde0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.130']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45ab89d1-58da-442b-b8d7-534c941ab989", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.131']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59aa27a4-15d2-4aae-b142-2b9c8d4bce00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.133']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16732505-2c01-4c82-bbd1-42fd4db8889b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.134']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5308d62-9abc-42a4-8b99-dcf65db304a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.136']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49771dfb-f796-49a8-9379-113f4b6d01b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.137']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dad1e79c-24d6-4655-a962-a037c10ace38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.138']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02ba9c2d-731e-4d0c-8999-6d53d9991eb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.139']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caecdc3c-2720-445c-b8c1-784fbbb0cf2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.14']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60346a0b-d899-47ac-905a-5aace1469666", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.140']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6ca4131-5cfd-45ab-a01c-7057838b15e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.141']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ed4d319-573d-40f3-b832-23198b78fb95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.142']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--724b25c2-05e9-4203-979d-aac900837dcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.143']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a0014fb-661a-4c73-9f8e-8bf7c6aec678", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.144']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7be3a85a-a762-43e5-969e-1d472f3cf0c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.145']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9117aa2e-1b94-4266-aeb0-7b8b8e376898", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.146']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55d00288-e073-4c63-b046-1c6cbc178261", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.147']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4836cf88-0a67-4bf7-8c21-8eb62d1d06aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.148']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c6e0197-55f0-4b6a-b8c6-c876128a63fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.149']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--511df891-6887-46b8-8fa4-f57e3bf94d92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.15']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fdbcf2c-9906-460c-885c-33e28b3aee60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.150']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3876d85-1d55-4f75-a849-560b89c77b3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.151']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a68eeb63-08a7-4a15-a53b-db3cfc78bd34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.152']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dedebba2-6f3a-40d3-8a02-579e7b82b58a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.153']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b1976a4-9fed-40f0-b685-bc6edd317284", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.154']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67750a2d-d29e-44da-951d-05a9c24e20cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.155']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71b785ee-bcc7-4b7b-9b80-0a3b2669ec2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.156']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--346c773a-0323-4fe4-a762-c560e0383613", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.157']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6687a63d-e6f8-4fb5-8ca1-e7ee65ad6924", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.158']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6ac5771-fd1a-4192-a59d-ad95b45203ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.159']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d59e4f3b-b58b-4e31-941e-33ed02af3e6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.16']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be5c55de-90d9-4df7-8aef-6a13c3a9efa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.160']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35d1c0d6-4502-4c16-9efe-a5742e81d83a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.161']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3ef8f0f-240f-42ff-8539-e7b8eaffc158", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.162']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27006140-1f04-493e-936f-b393395ffdfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.163']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--098e56bb-98e2-472f-a5e2-dbfeeb8cf212", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.164']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a603c8f2-b81b-4b2c-b991-9d3353b1f3f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.166']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3317342a-2195-4885-a5da-f5de1023bc61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.167']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b31dafce-8082-4570-9588-0f32374b5691", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.168']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--468519ce-23e4-41e7-809a-6603430e1461", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.169']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9e6278f-5a28-4f4b-949c-083ebaaaee7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.17']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7256b0f-2cbe-4968-a0fa-da2ce67d4353", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.170']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78b55ef4-2467-4342-9c88-a641d74cca76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.171']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a813d58e-ba2c-4dc1-a581-51675cd8e2b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.172']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f507130-6752-430d-ab4f-827052e53c51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.173']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d663b805-1af9-450e-be02-d08db83c9efd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.174']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ede54a8-d75f-42d6-9341-7b5b7a5afb82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.175']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27f9f1fc-db31-449c-a6e5-b37d7d4b3518", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.176']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--709a7f66-a565-4518-9de3-b22c90619730", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.177']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22347b34-9075-4540-8a16-522f378f45f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.178']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b9579e8-8ac8-4d3e-9ddc-b3406a6d9a94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.179']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8ec3651-17be-4c33-97bc-afe8aa7c8e16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.18']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91d8206f-be56-4850-bafa-5a06c8dfce53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.180']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a190184-be8a-4358-84b7-98939f1e99c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.181']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--122f1e9e-3f71-4fc4-9dff-976cee862dfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.182']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0684d1b9-3073-4c1b-9563-80efbcedccb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.183']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2acff164-f84a-403b-80c3-955c24391d44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.184']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5974dd43-2164-4e9d-a426-2c8d840790ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.185']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cb77b4f-23f5-44c5-becb-d2b0780ac876", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.186']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6c4c186-2722-4f22-a1e7-a46d96bb000c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.187']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4982e03c-2d84-447d-ad98-bac8721f40ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.188']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fa2849f-d8f8-42a1-ae8f-d65023a532f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.189']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a26c40f-8c4c-49d8-a473-cfa9207ecca1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.19']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9009a78f-0075-44b2-84e2-92e5534392da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.190']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a5876e0-60ca-4a37-aa56-09b515621d60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.191']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c68d3e2-b2e7-4450-92b8-21967d027f7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.192']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b5a8474-56bf-40a4-9cfa-ce17787f7a68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.193']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1639190-8715-4fc1-bf91-ab8ef58a3bcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.194']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcd7eca8-1456-4d99-b17d-05328e7f2912", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.195']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04ea1ff8-3079-4c3c-a2ba-3c338cbcc15e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.196']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9139b59-02b7-4924-97b5-55b8bd640ecf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.197']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0675f77c-85dd-4348-88bb-71037df81205", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.198']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c5c6b96-3db0-489b-bab3-9887d985576f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.199']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75ea4854-aa43-49f0-9ac0-26be283f6560", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.2']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23abff2d-d7ca-4f43-b320-ef57394805cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.20']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ada65f4-d504-4165-8dcd-b96f2f0b83f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.200']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c9516bc-3733-4cf9-ac78-b7ae3991cd3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.201']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1367d32f-ed03-4a08-8795-7a3913a6b5bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.202']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0443fade-52bd-4250-b562-0c5f67215ea7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.203']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dec3ca8c-00f3-4f61-9a0f-3a7ff38a7f3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.204']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40eb10ac-25ed-4076-8ac6-bfcb5c13fc5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.205']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d709dec7-a5d1-446c-a2d4-ad64d1ff3c3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.206']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77cf2154-328d-4577-904a-2346eabecd7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.207']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a486e5dc-2bc7-454c-8dad-b9794db99ea3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.208']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90d8bd24-8ce0-4bf2-9fcc-34e7452a3771", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.209']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2abbaeeb-e656-4a53-8d61-e09a4a9b7543", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.21']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25e3f055-69e6-4b08-8495-0d53ca584d24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.210']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d0b7d89-9ebd-40c4-844c-95e10b2fffa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.211']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ff115a0-dedb-47e9-bcff-ea23e91da896", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.213']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65f2dbf2-b3fb-4e31-9d53-67865e67fa7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.214']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a72c691d-6ab1-45c3-a669-b5a2a3bb5159", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.215']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36cf53e6-9674-4966-8c2d-785f6d837922", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.216']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6543e03-6ee5-4a5a-a5ed-0fdfdfc854f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.217']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6abf381e-e9b7-4358-a340-40be9080c27e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.218']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85f79885-b85a-40d8-a0c6-d27ea48a5e12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.219']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e61fced8-11e2-4156-b869-8988f37a4957", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.22']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb3a2021-8cc2-47cc-a03a-d99126c757bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.220']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0416166d-d478-4276-bd2c-9678ff9faba0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.221']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49c7e619-ad9d-400d-affb-6e9f6ce1fdc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.222']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8fb1a9c-867d-442b-9277-eb0d9b3a8625", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.223']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1abbc272-8e8f-4504-8d99-85d6dcf907c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.224']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d98221b-af20-4fd6-9596-9b98deadc265", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.225']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3c151e9-0ca8-4e9b-8e55-5d9033d8b12d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.226']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54a81567-f4ce-4d12-88c5-fa81f347dc4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.228']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a68b6e07-b7d2-4055-b324-91a93731ae25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.229']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43983d41-c87a-4345-be3d-cb9deb524892", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.23']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9823efab-5de1-4702-bcee-86c68773edc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.230']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dc678d0-16e8-4fcf-897e-cf587e883145", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.231']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c8a7a38-1812-4c61-90da-670f76cad71c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.232']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f68e150-756a-45b3-a38c-adcbca619029", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.233']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf314859-379c-487d-bb2a-a345da2bc0d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.234']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ac64f15-6754-4c1e-b5b7-02c8e2f700f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.235']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--780a3892-dee2-4daf-84a1-4f99eca00566", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.236']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5385aea-b21e-4e94-b5a8-d7ec94025147", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.237']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d316a320-2e78-4b75-9583-9787bfd21952", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.238']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c2b081e-1fac-4307-b183-f4f9b89ae1df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.239']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ada2a766-ac24-47a7-a558-e8edbb045786", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.24']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ca874c5-da8a-486b-a956-06dd7356ffc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.240']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49c38bda-2086-4d62-8af0-7c7c2cda143d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.241']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--684308f7-7843-4d33-ba00-80cfdb3122e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.242']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3f870e3-d465-4dbd-954e-520ff703f84d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.243']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b57a4bc-bb6b-43d3-bc79-c9f4f5ec4da9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.244']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da895bae-dc95-4ab0-b051-e3bd536d3e40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.245']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a52674b-0152-4fb1-9e4d-b75407c56b8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.246']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4573dd0a-43d9-4f38-ab58-ac0349484535", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.247']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35840e19-aa2a-4614-9eed-e0abe0bfdc9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.248']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3958c907-ea00-480b-9ca6-9f296d215b93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.249']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6239616d-2839-4015-a8e2-b9059a8e5422", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.25']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff4e9ae7-54fc-4cce-a99e-37fb4fa946c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.252']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--939d0748-2fb9-4f7c-b365-c9dff5130a13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.253']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f00d510-d72b-413e-9a1e-486e9f8e4146", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.254']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c14fa705-f09c-400a-8f2b-cca38e5c5a63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.255']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d3bcfab-c92d-45db-935d-1470cfcaae94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.27']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c998a39-f469-4abb-961a-35ad371e2d89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.28']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1901087-cd68-435c-9a9b-74521a1b3a39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.3']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bec825dd-48c0-49f1-a6e1-0b53c28c33c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.30']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63fde4d5-fcc5-4601-bf54-7ccad69e6f7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.31']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0d19b0f-43c5-4c19-9e5d-3093f77d24d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.32']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afabddf5-b19a-4cad-a84c-b669282c6e8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.33']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d389ec1a-f111-4253-b228-a94d8764fbec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.35']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3efdedd-229d-485d-85d3-3e56b180ba66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.36']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14829963-578b-4a3e-8660-f0a37409fc70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.38']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b2216ed-7381-4ab3-9d39-51985dc8e8fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.4']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29c94b8a-84fc-4786-820b-9345373f9b6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.41']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18464f3d-3f9d-45f4-a90a-6c29d9020d6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.42']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42632897-c48c-4822-81d6-38415c421a12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.43']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6352f9b-c2a0-4a3c-b81f-4e7b148561d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.44']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd1abce5-5814-4b70-bf61-3005ad6d7abd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.45']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b8c10ef-8771-4729-b83d-4162f03335e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.46']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39039aa7-15c3-43ad-bffd-e6da1ed82c1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.47']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc249ee1-8f0e-44fb-a2f5-990206d7c69f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.48']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24135b1e-5192-4bbc-b3dd-e1fd166bc0c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.49']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3e6a6e6-d08b-4927-a140-6a471c09121c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.50']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86b0706d-d449-4510-a06c-6d928c23a6c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.51']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ccf50b4-c35e-49c8-af57-81d2ebc657d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.52']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af84c7e2-7245-434d-be8b-ccabd4014a6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.53']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58e5d0c2-0315-43ff-bb54-6cbbe32d5fac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.54']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1364de08-9965-41b4-ac46-8724a5fbd631", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.55']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73bc592a-2f99-4cb7-bce3-0f03c281dbd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.56']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9901d70-4ff0-4c66-84f6-f07ce31aba1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.57']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17adc778-bc5c-4445-b287-4fd368947acd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.58']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a353675f-f070-46b8-ab53-da0a1bfe30ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.59']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bbe85e9-59ad-416c-8fda-1b2a7eadba3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.6']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7f08378-9c22-4f8f-aa73-5f86979800c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.60']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31081406-35b6-4936-b250-d4802e915723", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.61']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fd399c1-1a9a-42f7-8ccb-8176a03d4b77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.62']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f96946a7-267f-4cdf-92bd-b7fbf7d0f840", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.63']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ceea768-356b-4890-8af0-00eaaa0824e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.65']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b62b3343-95fe-46f8-9372-4d96fbc7df98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.66']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a75fa44b-56f5-4a96-8aeb-522ef1dc7ffc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.67']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2646d17d-5368-4528-9af2-0e442d285d75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.68']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a5db07f-9006-4b49-bf24-9d4d89f65cf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.69']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d0297e6-8de2-43be-a28f-35ad5c11b5ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.7']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7aa5693-50b1-4c73-b90d-beee0a601144", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.70']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a07a117-bb4d-4846-aac4-b7c103379e35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.71']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79b015f5-dc61-4cd0-aa3a-28901ca47b26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.72']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c36cc5c5-e4c5-4c03-b981-7a98ae0a5728", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.73']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00fcf89e-7f31-48e0-a419-62359f2af530", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.74']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c777cc7c-4577-46ff-b018-34b69c738a30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.75']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--301a7a11-4c9e-4c07-b3cb-9cb5842b085d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.76']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cde7e7a0-9dd7-421e-9f62-bcb391a0d977", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.77']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5d90c97-232f-4822-aa1c-69fb340f2979", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.78']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5445461-b4b6-4ebb-8e2f-91fd0fda6543", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.79']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddebd4ec-c83e-4a92-b384-6e90a69f6ebb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.8']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23c7194f-8cea-48a3-af2a-9b27f5492ec8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.80']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a601d914-c896-49dc-8843-9183032c4ec3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.81']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5301aa8a-3d27-43ea-a7db-22618eddb247", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.82']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02ccb755-95ce-4040-bd59-ce5775f6d20c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.83']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba43c540-31bf-497f-b306-e566edc2dfd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.84']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1c09911-3266-46a9-854e-c6cebd8a6023", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.86']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bf76d58-69dc-43c7-b264-1a4a41c0d4c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.87']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97f4fffc-ee1a-4ad0-a54b-3c884b1ad22e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.88']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a51fa559-7bb3-4db7-bb93-39355ab6c19d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.89']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29eb4017-a653-46ac-b3e9-338805a635e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.90']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4a37996-f158-43c5-a407-b3ef19ac85c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.91']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63a73695-9e22-4faf-9ea7-856e1df4899a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.93']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ec0cfeb-30e4-4bad-9a67-165746942d7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.94']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f101ef13-76a1-4d3b-bce9-d8993c0da1a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.95']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6f69647-b503-4715-b6e0-52d59ec3fc4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.96']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--583dac8f-b170-4827-8c15-5f10228350fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.97']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb328a63-512f-48bf-8077-56bccdbccbc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.98']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0ac4c4f-004d-4f6c-8fc8-3d8a5d92a0ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.34.92.99']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39ac1119-dca9-424f-842a-8e09c56240de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.86.147.221']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab089b5c-edb9-40b4-86d9-51f120cbacb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.138.16']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7944146-87ff-411f-8349-e373f966031d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '195.96.139.42']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--549ef47e-b8db-4bd5-89b6-e18f6fbce7dd", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.117.194.17']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--447c0d94-b3cf-494c-8f40-7b72ae6a2a68", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.218.27.131']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a12bd930-9007-43d9-9846-4e301d79e9cd", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.219.72.45']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--860c4ea1-9745-4e38-853e-7d27d95eac78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '196.251.121.108']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55f9dbf4-741a-4948-baea-0809db1e9200", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '197.185.177.170']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a69934a-db76-419d-bb8a-db2ba545b0db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.102']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--467da565-649a-4721-a86e-5334e6650984", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.104']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c95379a-e909-4f6c-8569-ecbc31ac4fda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.105']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9a29124-b54c-48e5-8e1f-4c566494fda6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.107']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24979941-8723-4523-9880-50a6670c239d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.109']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4368a345-d8ba-4d61-a770-888a964d4311", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.110']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--946d880c-53f2-4880-bd46-f3307d60af73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.111']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d848d7f-b55f-4c06-8380-1b4255d57447", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.119']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67e29bc7-7748-446b-9455-e281a2b53732", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.121']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3792f774-77c0-451b-9fee-2145d0465f3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.122']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40f100e5-8d67-476b-bfb5-7ddd993c8f7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.123']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da47c5e0-d310-4625-ad97-8db065db5afe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.124']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cdbf98a-8cf6-4918-a2ee-a34685a3dd9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.126']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33cbff55-6248-40c3-a80b-bb2dad3d471c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.127']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb794e8f-02dc-4af0-bb82-c0100cb0aaa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.13']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d247c3f4-998a-4c74-9aca-ec089cd9c409", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.131']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--492f8db2-8271-4c84-aa8e-785fd0142482", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.138']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1e48b69-6a74-4723-a28f-3ddba1a33a81", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.151']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5702e851-6481-4753-982f-a5c7ef1d5ba8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.152']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c891746-bed8-46ff-ab5a-12459cbe4de2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.156']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--169c325d-b84c-4154-b019-1ec6b8e41842", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.158']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25021948-f0c7-4307-93bb-052f09a97b75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.16']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb995a96-838c-4291-ac53-8de247efd25c", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.162']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cd5c65c-ade8-46ce-9dd8-f7b4a4f9eb71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.164']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40d1c64a-9d1f-4acc-bacf-f8016ece4a86", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.165']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1304d96b-af97-41a3-ba31-dbdf410b8cd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.167']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9a46351-3b17-46f2-9c45-48007a8ccad5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.168']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc62278b-8f70-4587-b5cc-e3be558d52dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.169']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9e54e55-10c6-4b3d-86de-cf9016c830a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.17']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dbf6bc1-631a-4d11-b11f-27f304318175", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.170']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bc96b54-bb88-4763-920f-e80e2bf09462", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.171']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e4e6d17-a871-449b-a8a8-3c8c17a79e4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.172']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b25636e0-10ba-4a19-b5db-9bd36180c9d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.174']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fcee618-95a8-47af-b716-3a979bc9f43f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.177']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d611466-6e81-47af-afd2-aefe5a2e976a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.178']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c68eab0-837d-41d3-9205-2430045cccb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.179']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a523df7d-484b-4476-a582-2bea5a8b8a3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.180']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--003756e4-2b75-4518-afef-88c47d6ff31c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.181']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--993a5e1a-0902-4b7b-bfa9-5b2e37c4af2b", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.182']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba5d779f-a133-49ce-a4e2-3f6fb5e95ccf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.183']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a7ba2a7-5ec8-453d-a4f3-fb6107401d64", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.19']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36043f8c-6270-416e-b837-aca72c550854", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.193']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c839c18-6a2b-44cd-99aa-4034be0817f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.194']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f1d1710-f989-4aeb-8a63-86637fed005d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.20']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d70f6491-6843-4b0f-8662-d80881565621", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.200']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a39c0a17-0ce9-4567-b635-39751abeb667", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.201']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ba79d83-31e6-46e0-8b11-f92d9b9d3207", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.202']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--664d0df8-24f3-4e5f-97ef-871a3e44ed91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.203']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d40989e3-a874-4c98-bd8a-e1ffe547911b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.205']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d19b917d-4c0b-4c37-a341-5d4cbdd8968f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.206']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19dcbe04-1992-4af4-95bd-5d39ca1a106f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.208']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eec25718-dd39-4e38-bcd1-dcb26685389c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.209']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c79e977-5619-4185-a9f9-d4d15eaabc62", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.212']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df8ed965-396b-4141-809d-7320537e35bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.215']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--888297e4-a67e-4a39-8e47-5346c90fc955", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.218']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21e32d8c-154a-48e9-8b49-d706c9b691b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.219']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6174b47-bfd4-4ae7-acbb-0c1d8b43d2d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.220']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d08d71f-548f-44b9-a7fc-95c2e4914568", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.222']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abe557b1-e3de-4fc2-ac7b-d110e44bcff6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.224']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f38add8-925d-4de8-8039-ac05142c21ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.227']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d3db47a-814c-48be-a6ac-034c6973e309", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.229']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb35af9e-5075-49ca-8a5a-c73363d2fe5a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.230']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5bfdb21-fa1e-4957-bfd6-83d782143a0e", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.231']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac799fc8-5513-4c68-b980-a1c248a38846", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.235']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4054d6da-f78d-455e-9008-9808f8a2ee91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.238']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d26aebb-7be6-4e9e-b49f-bdf8e4a38d81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.239']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b88a6e54-e51a-448b-86b2-ec00c4c2063f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.242']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--addd6467-ad63-40c9-9ba0-932dbf88b8d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.243']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--518c8f94-fa97-430e-9f59-3aea457fdab4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.245']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a60905b-3e0c-4d7d-8858-82ec9cc70892", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.246']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55586b6b-2a28-49ae-adf7-7fa313fd1aae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.25']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63e6b12b-b131-4d8c-abd6-5cd4c8bbb138", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.253']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d635c61-f241-40de-a8d5-d8b099f82f7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.254']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c8422d8-4d2e-489a-acc0-3e6def0051f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.26']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58001954-d190-484d-acba-08c37b52514a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.27']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa892267-4b51-4bed-9db7-607eb11c0772", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.3']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f81b5b6-b484-4638-8cd0-c7c481e10029", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.30']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--076fd925-1514-4a33-a47c-c65ed984019d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.31']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c65dc378-c88b-4bf2-b6a5-e8e67c8859b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.36']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28e2d5b4-c3b2-4d25-83a5-7c53220370f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.37']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6be73b05-e66b-4286-8fde-953221437a94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.39']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4af67c6a-5c80-4801-8bd2-f3d293a830c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.40']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12c2d076-7222-4f9f-aa4c-661bef098d7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.41']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06b6ca52-6a4a-4f72-8795-c6eb8224f59a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.42']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7d11438-9467-4c91-b470-23e4016980ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.45']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e04e4cd1-05ca-4491-ba63-f824595fccc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.47']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e86739a3-1da9-4d76-883e-032695f9c17a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.48']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb9946c5-7136-434b-9c0e-3da28417b688", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.49']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0316c5b1-eeb7-48e9-a58a-0252f5d73be4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.53']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48f6579b-68cf-49a5-bba4-391384d5248a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.54']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a78e6d1a-1365-4e03-a9a5-cceb8fd8cb78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.56']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a300b0cd-9133-4845-a083-d3e20cdf984a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.59']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fac45d5-ab40-4b53-8e48-526f4bb47cbc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.65']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9091958-9c06-4d51-ba6f-96bbb6652871", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.66']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54f08310-0540-4c09-88fe-b4cb0a95f39a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.67']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66c8ca1c-f372-4f6a-bd93-8f82a7da6578", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.69']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8651e304-247c-446c-93c5-dc7195e5a827", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.70']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5041d3db-26f9-4723-af2f-945d1b30879d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.71']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ebf4ccf-761f-4586-9442-61ca2fb2334e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.74']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efc1f22d-16cf-42e8-8833-d2ef4051a68a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.77']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--580d22ba-db32-4f9a-bfb1-be68a6f4dfe4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.80']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9afd051f-b776-47ac-8598-718d5862ac92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.81']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bdcbbe8-dfee-45d7-b85d-ccd189daa5b2", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.82']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c254318-0d64-46df-bdd7-161b0626c37f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.84']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b71e57d8-b576-453c-adde-481439b2b410", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.85']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60b2214a-af40-4098-973e-92a4d69ba650", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.86']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f60e356-0289-4c38-b511-2d94bd304c17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.87']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d5e83e6-742d-4128-b6ee-a4dc591aaa5d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.89']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19594647-f4fa-474e-8fdb-1302c3f7c2c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.90']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ce077ab-94b9-472e-b4ba-c991bf3549da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.93']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--456ff76c-e7b8-4ec6-98cf-f326c81ac876", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.94']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8ae3973-136e-400c-addb-a3a594fad865", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.97']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75301d9d-9d52-4496-8c1a-565390be7277", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.235.24.99']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c027b34-bcdd-4cff-b728-972c0cf522b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.27.120.46']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d66e7fb4-5f5e-4af8-9e9d-1be5d4e8a643", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.27.77.9']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90b27cad-bbd8-4fa7-904a-d6755c5d31d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.27.98.188']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faa9ad56-3ed0-4cd1-a799-d70cae61070a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.46.200.132']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5aed5fa-bcfa-40c3-b315-a34fcbebf048", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.50.114']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e09a791-b1de-46ce-8f18-10c7e0bb172b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.111']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f2fff30-8d58-401e-a417-1a98b9edbce8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.130']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26ff04df-6996-4407-9c5d-b8cd79ee7788", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.148']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed2028d5-cf25-4b68-bcd3-88774979d39e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.157']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98ab404f-7d77-414d-aac6-def9b0aa8aa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.192']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea5725e8-8cda-402f-aa31-e254fd8b66b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.201']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9dd3e4b-7a54-46e9-a23d-a07e2dfb703d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.213']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8210d7bb-cbe1-4190-b7a9-1ba70a2a352a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.58.45']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e034748-6a2b-4e00-9dcb-002f903cb3bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.74.59.59']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64b9e802-a487-4302-a5a1-4a51e93e1e06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.98.48.248']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--920b8d05-eb18-404e-b43c-0cca8edf6494", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '198.98.58.74']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74625f7b-62b9-4efc-b4fd-e26a9bc68ab9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.247.19.19']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--973c8843-a953-463a-b62b-c13e563ae2d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.30.231.6']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a05f6fd-2941-45cc-b296-271f8956edd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.176']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22a2ca52-6a00-4cd8-8f4e-fb487c77f496", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.177']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66ba3062-40aa-4677-9a27-13f04139f817", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.179']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18dc92bc-9ad9-482b-bb28-3132baa29b1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.180']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91e68e0e-c6b5-4855-a46f-2c1d30a60efa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.181']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00a7d646-2698-489e-aef4-724c84f1e5e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.182']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d40f94f2-bb38-41c2-bf9c-89e76118a279", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.183']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0338ca67-8e1f-474b-beb1-a9189e0fe824", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.184']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0eed590-1c2b-453f-9a28-1e736826da40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.185']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fb5e9fb-df01-4a39-ae34-43322f70e4ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.186']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d469f78-53d2-4ebe-9ab7-fcba352c8e77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.187']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c47d75b4-87f6-4aa3-b682-2fe0a7c9440a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.189']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf30a095-c57d-4831-b29b-2e9c7cfef120", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.190']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dbef4c6-f749-40ad-8473-7b3725f13e6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.191']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af143a7b-f86e-4510-b192-9ce0ef6e9287", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.51']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ace2fd6-2532-4a3d-a889-4cb3ea63c3f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.58']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70fe766c-1afe-49ab-82ad-562dfec05cfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.64']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e773d081-0361-4aa3-babd-d8630f412a7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.154.70']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60b62ced-e104-4b69-bf9c-28c17fc6dfe1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.30']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45a51497-b857-47d3-85ce-ceefd167f8d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.61']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9594ab98-70bb-4ff7-9f11-37ad559094ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.86']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a91ba92-be0e-4e14-a0bd-a935511c9591", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '199.45.155.89']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1c79307-c4df-450d-83f1-44d228a4407d", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.189.128.6']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db7865ad-52f6-416a-bedf-489658e6a22d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.193.133.200']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bc0c93b-bb38-4d01-a06c-7df45022accb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.26.103.124']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--409746e5-c7d7-4129-942f-c275bc0b7905", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.26.96.139']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e93211b-2754-4e14-a56a-3e75377f0153", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.27.248.149']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0e48152-fdbe-4a47-9c37-f010db80646e", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.29.33.163']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce18c609-3406-453c-a619-059364b4f35d", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.121.112']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--558a2e86-fe80-4e76-b984-2b7a17cb39f7", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: digitaloceanlondon, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.121.25']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b56fcf8-6099-4fd8-a23c-4ab7ad22edef", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.122.150']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4334ff2-a3b9-479b-b107-41e17b3518d5", "name": "Malicious Host", "description": "Web exploits: aws-credentials, php-backup-grab, spring-boot-actuator. CVEs: CVE-2002-1149. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.122.202']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}, {"kill_chain_name": "mitre-attack", "phase_name": "discovery"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22947", "external_id": "CVE-2022-22947"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--87c74341-82bc-4496-9e3e-a3541b811e83", "relationship_type": "indicates", "source_ref": "indicator--e4334ff2-a3b9-479b-b107-41e17b3518d5", "target_ref": "attack-pattern--95634810-4d5c-4cb2-8998-8afc1f8d05a9", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--05327e38-7cde-4b1e-8e35-4ccf43c7ce96", "relationship_type": "indicates", "source_ref": "indicator--e4334ff2-a3b9-479b-b107-41e17b3518d5", "target_ref": "attack-pattern--0e6e4145-cd99-4e68-a56c-3613ee5420af", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3e9a9f47-34f5-4be4-aa1d-828fdacb217e", "relationship_type": "indicates", "source_ref": "indicator--e4334ff2-a3b9-479b-b107-41e17b3518d5", "target_ref": "attack-pattern--dac02ec7-9fab-40e8-ab91-f7aa9152bf58", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6ed5d0f4-d4fd-4192-afbe-5eac180ba4f9", "relationship_type": "indicates", "source_ref": "indicator--e4334ff2-a3b9-479b-b107-41e17b3518d5", "target_ref": "vulnerability--9f6b4a40-b312-4d6c-8962-53e248873558", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--918b90e8-b7f2-4d87-96bb-71b887a2edbf", "relationship_type": "indicates", "source_ref": "indicator--e4334ff2-a3b9-479b-b107-41e17b3518d5", "target_ref": "vulnerability--a28b04e8-ad85-462c-b923-9158a7008803", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e01a6f1-7ff5-4e6f-ab3b-ca01707ad561", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.122.209']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42f54fce-889b-48fa-a639-5bd65585b247", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.57.122.238']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--408afc3d-6512-4b00-898d-6ad40f29b41e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.58.67.58']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--365f67ec-f427-4861-8322-f4b8a191626c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.59.117.188']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c8d0fd0-4df9-43d0-bf14-59628c2d76b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.59.117.191']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f74d23a2-496a-481f-bf5a-323b389fa001", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.59.117.87']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f3d8ad1-27f4-4ee4-80ca-d86a3a1c0c02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.63.203.128']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce947c90-805f-4457-b190-eaf258cddf2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2.63.234.9']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cef7daf2-1094-47c7-8edf-85b6baf7b149", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.187.195']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a2050fa-5373-47c7-8e5d-c37c5520c8ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.19.155']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f39d3b37-3119-45c7-b7b5-2a41237932ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.196.4']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9558b38-ead3-44c2-8322-1a94b0ec3ec3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.206.132']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2049fc13-805b-4eed-aa0c-34830aecd4e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.206.145']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0f01b49-57bc-496f-900c-1303fd1fd37d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.212.228']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7334e6ca-ee6b-4d2d-aa55-b4828b97404b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.22.227']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e45184c5-70fb-46c3-aac8-696f1e1d4c7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.39.12']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8033723-f0ea-4e47-ad58-a2bc7bddbd22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.39.30']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f515e3d-ee70-421d-ae16-7779571f9fa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.48.171']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08a1bd55-daa7-4aa9-aff1-71f586aeccb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.106.59.73']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c305c2d0-d393-438a-af60-e4ea50059138", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.115.64.61']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ded3b134-0f97-46d6-b68d-0ba10565bd8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.204.144']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea1c894b-25c3-4a4b-b69e-734b0da6dd11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.208.202']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c9c8cfe-9cce-4df4-baec-db17f6c0d7b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.227.45']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea6b5f03-ec1e-4bea-a2cc-f1e74833ea83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.228.37']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38eb58e1-65cb-437a-8e73-d6e2eb9a93e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.235.169']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b302e321-d92e-42c3-ae11-1edfcd10815c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.236.29']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d2f230d-471f-47b8-b32e-90cc52523edc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.241.149']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e176b273-0558-485b-bf38-96520f3cb01b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.242.217']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49837956-228d-46ab-a6dd-96e472dc3268", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.249.51']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fdafbea-7258-4800-b107-32cdb1295f44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.25.54']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--002bc2bb-f8e2-4c6b-9f20-55842626e5fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.26.133']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11332c09-0f81-429a-8b05-09ec23e05485", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.27.191']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a3b8aa5-06b9-40b1-913b-ae0686bb3b13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.118.28.41']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd687983-cd2c-4f78-a8c6-140ff3801a44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.119.77.30']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--462f85a7-b69f-4ca7-95d7-4c046253a84d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.12.242.49']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a37553fc-6310-4439-b442-469372b12250", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.120.84.90']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58bb9abe-8620-4c98-9a24-07b5f7b35cc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.121.117.190']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--676b5808-986b-4d85-9856-97db59d91d9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.121.69.108']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f16d62ee-abab-4307-bbc0-e6a163846135", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.124.87.0']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d813c93e-5c5a-4a4e-920a-3c285e1cecdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.194.109']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7183da72-c0e1-4bd0-a329-f8d46d51171a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.207.95']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82eb781c-86e0-46cd-b10f-958ccbaa5aab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.208.107']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb387d53-d8e3-438a-b2ec-9bd4fce929e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.127.220.228']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0832980-4f4f-4c42-a846-cd5a8e3b593c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.73.46']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--242e9c63-de87-4a9b-a086-44e8badc3814", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.74.81']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22868930-9285-43dc-b855-a689b32a15a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.90.113']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47680e97-d863-44c1-ba0b-18712324457c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.14.93.147']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ebd0a54-d8c5-455f-b583-d7d0b9dd7006", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.160.91']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a35b351-d73f-4a7c-b82a-0022d305f917", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.167.28']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f201763-4855-433a-a088-ee2f777f2210", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.15.203.159']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbc4a511-fd20-4539-a15f-80c0c117e8b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.194.248']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec7fbbf3-8450-4ed9-8e5f-80d8e4e96968", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.196.181']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b3522cb-92ae-4729-939a-1281c9350e6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.197.180']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a24a7dbb-c732-48a4-a444-a9fecd5b1e88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.197.199']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7c4d27b-6b98-407f-9b4d-62f23371b60c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.211.197']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3551b8a7-d745-4fb5-9fcc-aa5096709199", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.211.216']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f9b7415-c2a4-47a5-93fc-29f8a638d3c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.211.219']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbdb5fd2-ec68-4999-acdb-50da4a75d3c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.150.211.228']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff8c8422-cb15-43ca-bdc9-ccb9edeebb79", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.153.204.5']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--707c7432-a30b-4a80-b35c-9683acf1607d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.11.168']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6c979f2-6afe-471f-b816-b9c6d7b75c34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.11.215']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d080a1df-526d-49b8-9bf9-34e384d13128", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.2.122']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee8ea6b5-710b-4aa5-9da4-5b3cee4df011", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.3.71']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fca05a96-d1bf-4d1e-97f8-739115e7ee5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.38.153']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc00ba5c-30f5-4837-aa18-c66e491e0d12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.39.79']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66f539df-044e-4292-b056-8e8984f7c341", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.163.9.212']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6d60069-974c-47c1-99f6-9e9531058bb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.10.169']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe6650a2-7477-4537-8d0f-9cb03403f895", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.10.186']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2053fa3-0f97-4b63-8ac1-f479ed1f125b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.11.35']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44681d71-96eb-416c-bdb9-95956787c2b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.115.244']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59098a70-addf-492b-ac9c-ac73b6d6db08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.123.228']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4cd88c4-7d78-40b4-a30d-39750b8abbaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.124.240']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c8a3d79-3695-438e-8125-a007c8aab34d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.168.125.66']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--750f4fd7-d24a-4c61-ac24-eda580264ce3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.50.155']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8d98b12-beb7-4dd1-b9f9-f3b9fa2eebc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.50.176']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--398164de-44d4-45b4-be64-3622815d16ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.54.18']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d876fd12-e083-476b-9779-aed4206a0faf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.169.90.80']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb7a679f-0a09-4412-92b0-2e268591d318", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.10.206']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9605b8ac-463d-4069-9edd-981e57a9c770", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.10.250']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--927be2c3-20c3-4f72-8330-17aade97be94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.11.46']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f30b4fe7-4ca9-4912-9183-6d8521e4ec2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.171.192.184']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7acbb32-c9a0-4b31-b1c2-55f18af83c36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.172.64.45']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9f91383-60a2-4917-9d80-b3e0657314e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.172.67.176']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0445b2ff-730c-4dd3-a94c-1725df087389", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.172.67.197']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adf1031e-af63-4e43-b2bb-49034ad5f4ad", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.194.2.112']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bde0adf-9912-41d5-bd8d-694282fce5b9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.235.109.206']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f092e92-2c30-4491-8df6-d98aaf02f01b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.29.139']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddc56d2e-15da-4008-bbab-53abebbe712a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.29.215']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dae6280-ba83-42f6-aa2a-a4404452b41c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.59.114']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--918372e3-a1e4-4a11-a3b9-e3a93d30c5a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.29.59.138']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ff01f9c-cd38-4116-a86f-52a8dbf3176f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.213.33']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2727f60c-6a94-43a2-bbea-af02bb5be8ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.216.96']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9b14e58-d964-4f49-8ba6-5fc68390a9a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.218.246']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ab3a319-c6c6-4d8d-b21a-2152ad378db0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.233.56']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0888b9c5-dd1f-451c-b917-4550022b3d96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.233.62']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65a4c9c2-f8e9-44ff-ab3e-0bb21815f5e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.40.233.94']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c645e626-d0f6-4001-a64d-c4893e028fef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.42.119.196']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--727674a1-a627-4466-a92a-777b4ae59473", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.42.58.29']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c564b38-929c-42a0-a51c-197d861f3a24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.46.234.243']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40e58887-3269-4290-942b-845dc8b507ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.48.238.59']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49e8a4c0-efc7-4905-a90b-2c197b2a3559", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.51.212.207']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffd6e49e-b27a-45d1-89d8-e9bd57993e8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.51.239.27']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b6ed787-9f8e-4e64-8f7f-24d4fc2b624c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.51.239.86']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43985d45-829b-4f78-b870-7f583b5f7445", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.29.231']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92c1266d-81f5-418b-a3ec-9f570c984855", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.45.23']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7e96ef0-c58f-4403-87ae-f912534587d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.55.86.52']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a31f65b2-9cab-4a21-a2e0-0a2da10a1cdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.98.100']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac723836-18c6-4b5f-a917-ba796b078bcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.98.41']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34efc5d0-be72-44a0-a3e6-80e691f4568f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.98.71']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42b7ff45-49d5-454c-90a7-ca4b6e203b3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.64.98.83']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8a4ce7c-1d68-45dd-a056-29824d9216b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.146.149']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f839ad30-d7fb-4950-83a0-b2749362c569", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.146.229']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de7126f4-fe45-49aa-8c09-a22bc7bab0a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.146.83']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a508e12-a1aa-4a32-8107-a9c27fe3446d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.177.115']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5541b92d-bb35-4faa-87a6-56da1808dc6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.177.172']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--676e4531-3740-403d-846f-e09225830666", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.177.189']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50633c90-6783-49a2-bd58-7ad953f9aec1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.178.45']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c4ee50e-a9be-4e45-8b9a-d2201f421e86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.179.76']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eda6bfc9-ed01-4524-8d9d-43cc3fb1d96c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.201.4']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da6f5336-c919-40bf-9bbf-2fd368fb590e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.217.214']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f35b585b-45c0-4ad7-ba00-99d3ac5897c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.219.122']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b4ca6b2-ca10-4fec-bd18-694ff0cc333c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.219.20']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4227111-9e74-4a29-ba5d-8e43bc221795", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.219.26']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e6b971c-0fb6-42db-88fa-436d08718ae1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.219.47']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff9f8e7d-01ef-4936-bc58-c709d967f8d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.219.49']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d0af783-5070-4d73-9bb6-08e15b317255", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.219.91']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d5e5601-542c-440e-90a2-ed2b6223f7d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.65.219.98']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd9add92-1be5-4769-9bbf-ffacaae15322", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.101.218']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abb10c8d-cefc-4d8d-834a-af2a51f49287", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.80.102.11']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f12c40b-4849-432a-8ce7-598b4a62d615", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.81.45.106']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70cf54c0-35a9-4e69-80ee-22caaaa3bf5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.179.146']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53284660-5b24-4ed9-9197-27880797ca25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.36.83']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec10881c-97ca-4610-a4db-3200494a0dbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.45.74']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4ee5952-b89a-405d-93eb-7693dc604a4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.83.45.90']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76ef84bf-609d-4494-82b2-a8c38b9289be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.124.223']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88424fe4-80d1-4ed4-96a9-e033f1e8e9d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.147.237']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cf0f90d-aaf2-48e9-80ae-8dc246a3064a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.148.89']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--934c5807-ee4d-40d8-a179-71bdc5af488c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.153.7']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a335d3f0-8897-43b5-8d94-2f27248eab50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.155.181']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5877c841-8d8d-41ca-8d8e-3f2d0afea5f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.44.128']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7368cf35-4067-4e38-8b58-41f920e8cf98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.59.27']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1f15299-67cf-4b48-970f-cf8f44749c92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.84.80.53']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01d7a5db-c834-460c-a67a-5e4d1cc5af2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '20.98.131.243']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fb50c3f-6ec0-4e44-862a-39238f6d7e30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.112.142.143']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--820d4ce6-ef41-4ba9-94c2-49d67a12911c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.112.142.216']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c237eca-0a8e-417b-8a47-0ed5ef05d659", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.112.142.68']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--506bf82c-ecd6-4955-9e2d-93e9884e7a2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.112.142.79']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cd1f2e2-4b03-47cb-b278-7e720c0b7b9a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.192.97.160']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27ef2532-a015-402d-95fb-6f3fae0d77e1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.220.163.214']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--072e3dbb-b782-4502-97f1-421cd8b8eca5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.25.16.78']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c67e5a3-b2e4-4cdc-9229-79d8d2f88b56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.54.212.162']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf30e6c4-8a41-4cc5-a206-853a73eb0b35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.59.121.29']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--059fca75-48cb-44ed-84cc-499ffd804417", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.59.122.238']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecb622c3-1932-4f1f-b09f-fe877f73154a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.59.127.168']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--064502d9-c096-4405-a010-ec1e302b6c10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.59.78.137']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c7013fa-8e0c-43e3-899e-0ff8b508a283", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.59.83.83']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65ec203d-a4bd-4818-b46b-bfd9b3ccfc1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.59.88.130']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6f1c5da-c0e4-4813-bb7d-107e62c1af44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.59.88.196']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce08f6e7-7d56-4af3-9ac4-4a087b55968b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.59.88.45']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--832914db-a4f4-4a5f-a138-f4909996d512", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.59.88.57']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5071ca4-58a7-46f7-b50d-7a2e4e26b5f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '200.81.165.92']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3df8bfda-4f7b-40c0-81a0-b6ba87a27dbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.176.75.12']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e691e3c3-5723-4baa-bd89-93a343814820", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '201.213.161.78']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03d65f32-9062-4cf4-8fa9-58280385dd22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.112.47.54']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e54867c5-0148-422b-aebc-7f9e93d2e2cc", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.145.0.61']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e8eecf5-0fca-452c-bf17-eec309c02c6c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.188.12.11']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da4d52b7-c8c9-4274-98cf-151dd13ac995", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '202.70.139.110']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2819fcae-6a96-4f1e-b999-f615e6485779", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.188.11.114']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea0f1e0c-bff2-4c07-ac79-551706861c81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.30.221.70']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15545494-38d1-4686-82f6-1bf6792eaa2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.55.131.3']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e950811-b2cd-4266-8260-ff2b692f3d88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.55.131.4']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da87c2b0-1726-4cba-9630-e5c071e20c22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.55.131.5']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e8bcf1e-f8a4-4f64-b7ee-9b7b2c106deb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '203.57.235.233']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ae1cd5b-6217-43a7-b5d8-a3d2fb14be41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.12']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9a7512b-3a2a-46ab-aa5f-86c37afc01c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.213']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6a87b00-49b8-4a51-ae8b-e4d9e915d900", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.214']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71683bfa-e00b-4988-b5ca-5daefa560291", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.221']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9adf551-53b3-4774-9e9e-ba8443fe404a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.222']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e68c61d-fd7f-4749-bb4c-d0fc408a8a26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.231']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23e5b725-5be4-4820-9fca-5ba75356a38b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.49']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71de27c2-dad0-40c5-b0c8-fb352aebc1e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.50']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--155aaad5-fd63-42ec-8b2f-3a1bf571e598", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.7']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fed583d7-65a4-49ae-9ac6-51bb6e1f5ead", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.8']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94643ba9-1ca1-490d-884f-b14ace2ef2de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '204.76.203.9']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--117cf6fd-13d0-4251-bdd1-9e8f499c4601", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.169.39.20']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb29f656-a448-434c-a56f-639a81b605d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.101']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a0c97cd-e441-46b9-9cd6-8c697d689378", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.102']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef3eede4-138e-480e-9157-56d9eca1f190", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.103']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d393430-044b-47b3-b7fa-8c40f95e601a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.104']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a2c9ebb-1e87-40a6-af98-14c70a6c1846", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.105']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcf45c37-9bb8-48b8-8e0e-c492c946f433", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.106']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee43942e-ac14-44e0-a499-3485e3444aaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.107']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3093b43-e2f4-49e5-a10f-7b33b6f3bf9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.109']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a783ee47-9add-4921-ae34-0b893f33e632", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.11']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--530d1835-39e2-4854-b03e-92f58b69e43b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.110']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc81740f-8cb8-47b6-a2c4-d47cdf8e0843", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.111']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d14b273-0b41-42b5-9722-aa9eabd3b59b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.128']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fb1624f-1ada-4bc3-8642-c10062eba863", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.132']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4e12ea0-29e4-4f6c-ad69-4e8ed4384500", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.139']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f33fe7b-cd4d-4b61-9d26-8756056c6dad", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.142']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4e44423-9ea7-4e67-8f88-9ead7f4aabad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.143']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08a3dda8-8497-4453-9352-eb18a3ecaa8b", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.144']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5081fd8-1388-4c23-8459-a7f908bf8460", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.159']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acb090b4-b2b3-42d8-8886-de0f0b2bd5aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.16']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d770fea5-0e65-4fcf-9efd-54a5d6af0e3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.164']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07757988-f5e5-49b1-8a0f-17fe206dec4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.165']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc44797b-5de1-49ad-8374-6544e4637bb2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.166']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9115f9c6-4b09-4380-8c28-211060d30ebe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.167']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36baf879-af50-4502-938b-1f6cc9f7d429", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.170']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ef363e5-e664-4fea-99eb-29da75fcda79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.171']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62a316c3-cfed-4349-975d-622f28305570", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.175']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6d78263-b0d4-4d77-a90a-2f10d60a4acf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.176']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf4b427a-d606-47a1-a303-b1498bf1718a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.177']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec6f6d0c-d893-4fd5-9631-9a99984fd0fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.178']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee668720-b503-45af-98c4-33c8eb6742dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.18']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cf05a7b-b3c5-4d3f-b5d7-22bddc3b3061", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.182']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5f8805f-830f-40f4-aa45-6be626ccb2de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.185']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88f81a65-c603-4b60-ac00-3595a7eb436b", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.192']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78370a3d-a382-4604-9a4e-5cb053c0e450", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.195']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--307d3132-d1e2-4349-bfe9-127c6278aee4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.198']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b633fc3c-c170-4e8f-83bd-b9730058c3f7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.199']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--046472d9-fb39-49f5-b4bd-126f5f1fa36c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.202']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--086959c6-5f7e-422e-bc4f-cccc0fb5cd3f", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.203']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c79988f3-49ee-4cee-8025-2cf242606619", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.205']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c40a441b-d864-43ae-8d04-cf094ee8b7e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.208']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1893e85c-34a8-4562-bccd-ea422dc07885", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.209']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f03158c-f3f5-4e61-b5f2-af16412bf0fb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.210']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34d80216-3fe9-4075-9f61-07a139e1401b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.211']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43b61439-50a0-4865-bda1-112729761a20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.212']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c67ff6e-6e5e-4c93-a8ed-1c7cacfc240c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.213']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3149aa93-7b0c-4cb1-830f-10566b05e7b6", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.214']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f984aa00-31c1-4055-97bb-477dad6a7cd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.215']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd4581bf-55a6-4791-955a-67be03a447ad", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.217']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53c6e9a2-b0c1-46a0-b443-3c123204c717", "name": "Malicious Host", "description": "Observed: OPENCLAW, PORTSCAN activity. Sensors: openclawglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.219']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "sensor:vultrtokyo", "protocol:openclaw", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b77ad6d9-4d7b-4f0a-8cf5-d2042599a39c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.220']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a9faf82-d8a5-4e61-92dd-5d384feac3d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.223']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f173929f-6d8a-4311-ab28-9edb5dc55a44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.224']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c4624a6-623e-46b4-b238-fdf8a5b86dae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.226']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18b432f1-9a97-44de-b986-ef5de009fab7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.228']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd37a7c3-6c71-4142-9518-10adfe01e224", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.230']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d064a57-fe92-42d9-81a5-055158f97427", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.232']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c347885-3cff-4b80-bdc6-1e46dbd5dd39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.235']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c253b31-eabb-4108-8b9d-8bb7bcf94b98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.236']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1fd7b71-d8d4-4561-9422-68f6ff59db5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.237']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92f8f9e3-b123-4d89-81d4-ffdd4bc9cd7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.238']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3596cd3d-9538-407e-8dd4-1bb7c5dc37d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.239']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2c81cdb-818d-4095-b6bd-12a8b862ae60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.240']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5232b56a-2eec-41f8-b0c3-78a983960751", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.241']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71c9baf6-92b1-42d2-aedd-1baf58262dba", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.244']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee0eddd8-58b1-4491-9a75-7a74e3f31c17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.245']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9c9b1af-79d4-41bb-b240-41ebd4fc15b4", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.246']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1602994c-784b-458a-b0b3-717e884251df", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.248']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--840d441d-db2c-4bf5-bc03-c814d1622ebb", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.250']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--023abdf9-ff1d-49d2-b808-c579ee281824", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.252']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8683c5a-00cd-4efa-ada7-263ce370324b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.253']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2c4bd8d-01d4-4d37-916a-adb05b3f2280", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.254']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a349f89a-ce57-400a-8cd3-6ba1cf146b13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.26']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--142abbe0-708c-48cb-ae1a-50de8e0f9806", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.30']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24607cdd-4ca1-48f8-a6cb-5c16e76ec97a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.36']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ba2cae1-f71a-4646-9fe0-1bfcf70f10ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.37']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c56b6ca4-280b-4fd9-a994-43a76a0a1807", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.38']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9a89a0a-a95e-4db8-bb34-b45ff1a3e9d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.40']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b61d9b7-652e-424b-ab28-9b53df993da5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.41']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9b10b15-b77c-4456-b0f7-354038501580", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.42']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c36f2b3-a143-4ad0-a4b4-55661c0d150d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.43']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9f800ef-e47c-425f-86c9-18047b385902", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.44']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ceca47b-9b0f-44bd-acc7-dd3a22f9e459", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.46']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54584eba-eb11-4bb0-b7c5-345f53b8c724", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.47']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebeffead-2084-401c-863a-bf877483c10f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.49']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d244833-4a37-403d-9eb7-80972eec207b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.50']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42c208b7-60c4-4be4-8b0c-5a39ca78d2b1", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.52']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45f367af-7e49-4232-83f8-56dd959d5640", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.53']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--576bcccf-ce46-4c4b-be8a-9c0f11d4eb6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.54']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32a431c1-812c-4c04-a57e-93f91c1edeea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.56']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1a72ae7-f708-4afb-ab31-c779c1821246", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.58']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e658ab20-158f-4e7e-82f3-79903cc07259", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.64']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85891acd-1556-4b3a-9d14-a46d441e3fc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.65']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cefc6d4b-5057-4068-bdc9-c45349ee0bff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.67']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0657ff02-d6cf-4cd1-a0d7-5379ef66ea6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.68']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--193bbac6-bdc4-4ea6-bfdf-9ba3024c91b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.69']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e94d54f-a86a-4839-8932-cfd430c8d1d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.70']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5060723-0259-4db5-9730-d2467bac1abb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.72']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d36aaec-9506-473e-b797-e3cb2470f020", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.73']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e41b6860-5b37-48de-a9ae-e160cf1fdc53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.75']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0384e440-5af1-481b-b6cb-f6ec9c5b0e9b", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.76']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12fd7a09-2334-476d-acea-16ab693f3661", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.77']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c92bb32-22c6-40ba-a828-1bc09a49d698", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.80']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a136e83-05d8-4ff6-a600-eebaecc3cae1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.81']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--209ccf05-cd31-4400-a0d6-14f17655e2fe", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.82']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b6b5352-67cd-4814-a009-aa4438aa2ac9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.83']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84e0ae34-770a-443b-bf1c-81785e5670d7", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.84']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2ca9b23-18e5-4b55-9118-c3346c4eb7cd", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.87']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--584bb680-3425-4ee4-a51a-21e3a8dbc316", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.89']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee238b0b-a4ae-4f3a-83dd-e8a3a307d384", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.90']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--585344af-ad05-4cbf-bbf7-af0896b045e8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.91']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f360d290-33bb-472d-a08d-3d0c7839938b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.93']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a090f513-cb4b-4aae-8b1e-d8ed6c2e317c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.94']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adaee53a-0f65-45ac-af15-dbbf676a42f4", "name": "Malicious Host", "description": "Observed: PORTSCAN, WEB activity. Sensors: cfglobal, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.95']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "sensor:vultrtokyo", "protocol:portscan", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58548ebf-839a-418a-9f3e-693d1cf10daf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.97']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cec7178f-0082-4d71-a547-ffb2137e26db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.98']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f43dc95-ac70-4a2f-8247-c025a76d340d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '205.210.31.99']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03d45b5a-e5f1-4561-b5a3-a9795c865704", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.135.11.106']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1c4460b-cac2-4d7d-bd9b-766b2b1ba269", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.1.91']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79f01b40-d32d-4993-8984-816c22724d25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.160.117']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb541c06-947f-44ea-a2fd-4ebf48e7f299", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.178.132']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acda592b-036a-43b2-a63e-3d727c5216c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.182.181']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8bb8670-9999-48be-b70a-ae6d7e33e19e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.194.11']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cf175b6-a2c3-42f9-b579-75456b968f5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '206.189.5.249']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4f6646a-ffbc-45e9-b510-7b32de07e705", "name": "Malicious Host", "description": "Web exploits: exchange-ecp-proxyshell, spring-boot-actuator. CVEs: CVE-2021-26855. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '206.81.24.74']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "initial-access"}, {"kill_chain_name": "mitre-attack", "phase_name": "discovery"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-26855", "external_id": "CVE-2021-26855"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-34473", "external_id": "CVE-2021-34473"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22947", "external_id": "CVE-2022-22947"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fa8b2157-0bcb-4359-8d1e-81857c5d794d", "relationship_type": "indicates", "source_ref": "indicator--b4f6646a-ffbc-45e9-b510-7b32de07e705", "target_ref": "attack-pattern--70763895-ef5a-42ed-a5bb-49eaddeeb4ed", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--552e5bd0-69d5-4436-a87b-d7e471fc6a8b", "relationship_type": "indicates", "source_ref": "indicator--b4f6646a-ffbc-45e9-b510-7b32de07e705", "target_ref": "attack-pattern--dac02ec7-9fab-40e8-ab91-f7aa9152bf58", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--555cf525-a0d9-44f2-848b-72af3683a50b", "relationship_type": "indicates", "source_ref": "indicator--b4f6646a-ffbc-45e9-b510-7b32de07e705", "target_ref": "vulnerability--af124007-9bf3-4a17-87d5-a9b52e563fa7", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7e90d300-2c18-48ee-b3d1-8a8e39cbd6a9", "relationship_type": "indicates", "source_ref": "indicator--b4f6646a-ffbc-45e9-b510-7b32de07e705", "target_ref": "vulnerability--b5147848-022b-4261-a578-bf3291614d40", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a23a1ee9-c99d-4d24-a869-b23d45859728", "relationship_type": "indicates", "source_ref": "indicator--b4f6646a-ffbc-45e9-b510-7b32de07e705", "target_ref": "vulnerability--a28b04e8-ad85-462c-b923-9158a7008803", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7313c148-ff28-4dba-bcac-1761804a069b", "name": "Malicious Host", "description": "Web exploits: exchange-ecp-proxyshell, spring-boot-actuator. CVEs: CVE-2021-26855. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '207.154.212.47']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "initial-access"}, {"kill_chain_name": "mitre-attack", "phase_name": "discovery"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-26855", "external_id": "CVE-2021-26855"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-34473", "external_id": "CVE-2021-34473"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22947", "external_id": "CVE-2022-22947"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1bfaa7e6-290c-4bae-8731-054f01c42078", "relationship_type": "indicates", "source_ref": "indicator--7313c148-ff28-4dba-bcac-1761804a069b", "target_ref": "attack-pattern--70763895-ef5a-42ed-a5bb-49eaddeeb4ed", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8b5b34e0-805b-47d3-833a-5be8e0f846a5", "relationship_type": "indicates", "source_ref": "indicator--7313c148-ff28-4dba-bcac-1761804a069b", "target_ref": "attack-pattern--dac02ec7-9fab-40e8-ab91-f7aa9152bf58", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a0b3f49d-2a4d-4d1f-8cbd-84b1d132b8e0", "relationship_type": "indicates", "source_ref": "indicator--7313c148-ff28-4dba-bcac-1761804a069b", "target_ref": "vulnerability--af124007-9bf3-4a17-87d5-a9b52e563fa7", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--49048c2e-5e1c-4dd4-a03a-1eb1ec4afece", "relationship_type": "indicates", "source_ref": "indicator--7313c148-ff28-4dba-bcac-1761804a069b", "target_ref": "vulnerability--b5147848-022b-4261-a578-bf3291614d40", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1fede1aa-a418-4157-a2b8-f1b0e79dd80e", "relationship_type": "indicates", "source_ref": "indicator--7313c148-ff28-4dba-bcac-1761804a069b", "target_ref": "vulnerability--a28b04e8-ad85-462c-b923-9158a7008803", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82ddc7a3-854e-43a6-a800-9fc8ce43fa8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.154.213.59']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c192d49-1b81-4029-b587-162a2db8872e", "name": "Malicious Host", "description": "Observed: FTP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.175.78.239']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ftp"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cefaaed-b9a2-4b0f-88e3-8f9133a116d7", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.10']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b309555d-66b4-49cc-a63e-29be95aeabc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.11']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a112daa2-7e62-4c2e-8547-408be9f2e37c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.13']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a85fe2b-132f-44b4-859e-6d31498031d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.17']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d70a8015-a08b-4c62-bb9b-a1b43f7cfd8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.18']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b3e782e-cc6b-489a-9be1-f5d9b8b2d230", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.19']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60d42fb7-477e-4610-88dd-bde620a91041", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.2']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc34ab85-6bc9-472f-bba3-c3ada324f1b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.20']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1565187c-2928-425f-a071-d455392cd452", "name": "Malicious Host", "description": "Observed: PORTSCAN, SIP activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.21']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7570457f-db89-4931-8f53-2eddc780902a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.22']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7411d80d-f71e-4cfe-891f-edeca046cd12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.25']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cb55cba-4bc4-4fc3-bf70-dc1b1f75d39a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.26']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af18f368-e792-41ca-9e7a-342d80de520a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.27']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10fa4a1f-7d18-43fd-9b12-8f20c77f75ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.28']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01d73afb-4f0a-416c-aa32-73eaa6b55209", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.3']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6df3477b-9b5c-4ea4-aa2a-da9585e27d1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.4']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd61d90b-2332-4459-a08b-f927679296c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.5']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f863c457-5cf7-4dea-ae71-5b9eba2d8cf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '207.90.244.6']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46e2ce4f-6474-4523-ae93-2fb1459b5e98", "name": "Malicious Host", "description": "Web exploits: spring-boot-actuator. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '209.112.91.75']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "discovery"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22947", "external_id": "CVE-2022-22947"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a6c17d55-dc93-4db4-9585-0379725ddb9f", "relationship_type": "indicates", "source_ref": "indicator--46e2ce4f-6474-4523-ae93-2fb1459b5e98", "target_ref": "attack-pattern--dac02ec7-9fab-40e8-ab91-f7aa9152bf58", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7e175492-089c-4531-8155-705f181dac27", "relationship_type": "indicates", "source_ref": "indicator--46e2ce4f-6474-4523-ae93-2fb1459b5e98", "target_ref": "vulnerability--a28b04e8-ad85-462c-b923-9158a7008803", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23a5de6d-6aa5-40e4-b5ec-da96fb6e7702", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.141.46.157']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2c9efb9-58e3-4cac-bd50-22a614185a95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.131.131']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--978a61ee-84c0-46c9-9562-9fbdb59ef14d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.18.189']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94ac0218-68ad-4233-af2a-8fe22a8add27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.24.203']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b043613-3755-4d4f-9774-4d7f8ac3105c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.31.161']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc69e196-8124-4d34-803e-7c6b4d2b5aea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.70.156']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fc465c1-233f-475c-82d7-0ef33905d08c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.87.72']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e2008fa-f093-4e2d-a2ce-17d54a50b619", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.38.95.114']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4b2bd19-5df7-4375-9ace-73e2bfa77820", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.97.129.94']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fdc5309-62c9-4cb4-8d8d-59c81bb5002c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.184.206']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84f7ba15-0f06-4efb-99aa-3ae3b861a780", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.187.10']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--143dd9c6-e61b-49c8-8c67-9573a46fdbaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '209.99.188.229']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--070c5e09-9256-4d3b-84da-ef0e5d5b5a86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '210.106.142.206']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--071fea1f-c210-4d76-8846-99ff5f5742a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.124.226.103']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45f05e14-575b-43a3-b06a-8503c8f60114", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.25.241.153']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bac573ce-0802-4181-8663-d8690541e534", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.53.113.225']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e78a617b-0cac-4f24-8b7f-dcf9631927e9", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '211.72.236.224']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0ac398f-9a42-4010-bedf-a47cbb356a9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.102.40.218']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00530cf1-e6a2-4f56-9e45-03f0d85c10d7", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.132.108.161']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c71fb67d-b4d8-4f2e-8391-58f4337a2d26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.132.111.47']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73b53513-b3aa-41aa-97fc-46e4e396ded5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.62.98.71']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b13bfdc-feff-48cd-9b49-fc8e4c6b77cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.0']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86faf7f9-e302-4036-aa00-c8b188b2847b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.1']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b8c4122-debc-4251-b19d-ecf4d0abe692", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.10']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d99dbc5-e907-492a-8e0e-962daa5ba695", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.11']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b503e431-82bc-4459-a5b1-c32eec2980d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.12']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a1f42e0-15c1-463d-8f38-b3ef2a376394", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.13']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c00bea10-a476-403e-a3df-2689987a2c8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.14']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bd73d50-c929-4b81-abbf-05ded940ba42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.15']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6685539-e32c-4699-bb8f-227db1038d7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.16']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--516e7ad4-c369-4d26-81df-7a28aa2132ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.17']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5145db60-c0d6-43f3-b656-e4eb760300e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.18']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--485296a9-6026-4164-a31f-cb47a14f2062", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.19']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88bb99d0-755f-430c-87ba-e6e2d6d309ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.2']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75b17281-114e-49d1-98d7-23a336cb4d83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.20']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e3ba0cc-dea4-4ec0-9766-b4f17176c3cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.21']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08c7236c-0f28-47ee-8bda-c485c6da6a24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.22']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94d4b42d-d549-491b-8d7b-10aa9819a75e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.23']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65273466-5c3d-4772-97e1-06f49dccecb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.24']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--712a20e7-fed2-4ff8-9812-3e9547509966", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.25']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8049e37-1f92-4ea0-a2a9-3bb17843216d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.26']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05cc884c-4e98-413c-97fe-cf2139884ecf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.27']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f579774a-d10f-4f12-984f-90470f182769", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.28']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f127dd3a-fd0e-42a7-826a-d138482fc846", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.29']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a52e151-691f-4acb-8857-fa6b3a8d6745", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.3']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb6a1f7a-e7e7-4167-8036-b51f25860491", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.30']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c8325af-2231-4df6-91ba-96974747f3be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.31']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef51bcbf-f067-48f3-975d-7e2b29bb39b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.32']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baf870fc-8742-4daf-9d74-481ac2388f49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.33']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdb090be-1eb6-4f28-a1ff-b0a69f333b00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.34']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89f42668-f1f7-4065-b5f5-37dd11235b4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.35']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdb6b774-7afb-45cb-9f5d-812459a208ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.36']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38faa046-c6f7-4190-ac82-dbb36a2eddeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.37']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95b78714-1e29-4e77-9268-92af4a8750ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.38']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--699948bd-ec8d-4fda-981a-6a5741e18291", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.39']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f92e80e-2ac9-4907-b13f-15df19537184", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.4']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d02d9c2-9944-45cd-9876-12bdcdffc9bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.40']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fdb6ca5-3d09-4a50-8b82-cd96d825b8a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.41']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e30595b-f05d-4175-a248-41ee6a735778", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.42']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c173b6f0-b782-4457-af0a-d4fa743d8b07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.5']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb007be2-83c9-40b3-bd14-c0f024853584", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.6']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95a2ca2e-334f-4948-833c-fdb3783863ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.7']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8574f1fc-f2a4-4720-8194-2cf5a9a51e70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.8']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e27e3105-8f0f-45e6-b052-e32645e67524", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.73.148.9']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0b94681-5fe5-4f03-9be6-568751b657f8", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '212.8.58.70']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4513ae08-1d42-4dbb-a1c9-44e4d9ec7af0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.136.68.185']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3530a90-24f7-40da-8f56-2e0c2a772936", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.174.0.201']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--883cd828-39a2-444f-8598-8c3704de109c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.180.203.107']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c0f6dd5-27bb-4380-a14d-b5b42556ef28", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.180.203.238']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--959a2a4a-b295-45fe-a2e9-5eb2513f4f93", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.180.203.241']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82899192-f14c-4857-9ee9-33201896b2c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.199.42.227']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1ea5d1d-5aa7-426e-93ac-7f31dd4fba90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Web exploits: aws-credentials, php-backup-grab. CVEs: CVE-2002-1149. Sensors: revproxy, vultrtokyo", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.154']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}], "labels": ["sensor:revproxy", "sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--aba496a8-161b-4bbc-9e07-eaa5b933e44c", "relationship_type": "indicates", "source_ref": "indicator--e1ea5d1d-5aa7-426e-93ac-7f31dd4fba90", "target_ref": "attack-pattern--95634810-4d5c-4cb2-8998-8afc1f8d05a9", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1698b925-1010-4986-8122-ddb434b4f813", "relationship_type": "indicates", "source_ref": "indicator--e1ea5d1d-5aa7-426e-93ac-7f31dd4fba90", "target_ref": "attack-pattern--0e6e4145-cd99-4e68-a56c-3613ee5420af", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d0932e93-3570-40cd-98da-0cd86840fc21", "relationship_type": "indicates", "source_ref": "indicator--e1ea5d1d-5aa7-426e-93ac-7f31dd4fba90", "target_ref": "vulnerability--9f6b4a40-b312-4d6c-8962-53e248873558", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de9ee9f4-d570-4a9d-8c52-e94326edafe8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.25']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32571810-0b80-4ef5-bcd6-68aa105cbb25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.26']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3168d521-a8c9-4ed6-9051-9a31a6973e90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.35']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eed1d98a-fd77-42d1-ab0f-ab93d7ac6c42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.209.159.66']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--116e2e3c-92e7-4a3a-a238-3718f274097c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.230.86.206']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba076f3c-82ea-4998-a87c-8ca573e0d46e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.250.146.46']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c0f496a-fb12-4987-b25f-b7463056ccbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.254.134.82']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7edcbf32-c7a7-4139-b3bd-d790114101e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.74.41.106']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15bf4a20-b092-4ad8-b2aa-032416928392", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '213.91.182.69']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13bd4e8b-9c17-4e4b-849d-df16b8da75d5", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.126.231.42']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--779ba2ac-de7f-45e8-8514-0802743d5cab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.180.246.28']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0e3b9f3-f81f-40b0-a796-8b2d61340dc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.198.247.71']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cca3c35-c0e0-4a11-bdcc-189fc0cfb064", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.103']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc3827c3-5954-4ad0-ab10-329c87997d93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.108']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0f58c14-4811-4ce8-ad88-aa247e5a5d18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.112']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2922543-da2b-4ceb-9877-36635b0b1b65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.116']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--438ade94-1e97-4312-9425-14b868e3f03b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.119']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88365309-9e9c-4b30-b727-78f3cf671520", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.126']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa12c560-f8d2-4dad-8fdb-a77c0751d9e8", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.66']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a613123-2d86-4620-9f1b-0bc6fa82a55a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.70']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18a531d1-7984-422a-baa6-2c86b6ba93a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.72']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--253e4bf9-0c5a-46cd-8843-4464006d55ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.75']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b7ac358-80cd-498b-8fe9-d2ad510b96ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.77']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35fd26b3-e234-4283-a408-f43d78de00da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.81']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cec03530-9c19-461b-ab0a-8cef985a718f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.82']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--341f86a8-7dfd-4c36-9850-817f9e2dce1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.85']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00abc31f-96cb-414d-bf14-c4482844d51b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.95']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--728fdaba-4bf9-4fc4-b2d2-321b46807fc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.98']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50f99a89-600a-4a9b-838c-d9346bde0183", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.218.206.99']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d87c72e9-5997-46c1-85cb-ad5b1905987d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.76.10']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd9e3f75-5fc0-43fa-b4b3-aff149635d00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.76.30']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc5606da-bbc2-4cd4-98cb-e459c6f49efd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.77.10']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97b9f9ed-cb87-4f1f-8ab4-c3fca9e7f402", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.226.77.30']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a49fc3a-69e2-4295-9be7-ef82f1a1176b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.100']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d6852be-07f5-4cdc-a6ed-bdf572091d73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.101']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6025083-79a5-41cb-a787-a3edd62e9659", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.106']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92c3d4b9-734e-47e9-9f80-481c9c891855", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.107']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cd0c81d-ecb3-41d6-b0a8-ce43b6341dd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.113']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abe6b920-73e0-4635-a2fe-fa427d87c280", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.122']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2d29391-2cb9-4866-a239-d7bc21c82c15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.140']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28ccd28b-6813-4b00-ab1c-96466e807682", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.143']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d1fd0ac-2919-4438-a474-e9db3745e3ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.145']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9f6c7c8-23b6-48a9-b773-e4fc241357a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.152']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90b9bf9b-f7e0-4ed5-8e81-611a985dc1a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.65']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c98f61bf-5007-4695-a06b-30b7dbd76c1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.66']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e588e0b7-68b5-41ed-a1e0-996a70d597b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.69']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24a9dba3-43d8-4d79-b29e-39815622da65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.83']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f5427a3-95b5-4071-a59d-e2f230a151eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.86']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cd12c0b-62b5-425d-9bb6-ec7b3ab0693c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.89']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd1c85a0-b469-48ec-9855-44f0f45f12cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.92']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf1900b0-934b-4fb9-b1bd-87f8959aded1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.94']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2af2844c-5978-4a8d-958a-bd25458f29a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.25.89.98']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--658e3d30-cb99-433c-b1e7-404005c6723f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.70.97.74']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b97c5735-384b-4bde-a323-3b6fa9db4fea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.157.78']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d66fa45-4dcf-4733-a47b-a56b22922299", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.160.201']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b265bbf-55ad-4d8e-bd19-21aec398c6c3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.163.144']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a73b0d23-b826-4284-adc6-59c8b6fdf5db", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.216.203']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--882b13b6-02e3-457e-93c2-7cfab00ebdde", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.216.218']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dacfd1da-96e5-4088-95f0-de82e2cce121", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.216.7']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d16dbaa-977c-4f09-86af-b0ba948333c9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.217.103']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f40282d-2aeb-4a87-a390-15d4170756b1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.217.31']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccbab703-5208-42c8-82b7-b7f2b250a758", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '216.73.217.75']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3036cd61-d467-4145-bcd0-a8b72dcf7471", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.154.0.63']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b371f1a0-cc52-4b6e-853b-b9e248830c5c", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.154.217.5']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--466eca68-6901-43fd-8726-8f0782f0f277", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '217.60.195.57']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b6f3b4e-9bf4-4748-9440-9c77fbc1b96e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '218.244.143.162']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d774c90a-ddf6-4cab-a2c3-2e2bef106dfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.121.50.38']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--752ac5ba-f65e-4fa8-b417-35ea864ad219", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.138.101.103']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b975b64c-0f30-413d-a75f-6a2b4355a463", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.147.17.165']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--944d2a14-904b-4748-ad99-82b5e70932e4", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '219.157.134.207']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f071f2a0-2b5f-4055-9efa-61d3d2778b39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.121.206.61']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--132086c4-908b-41d1-88ac-674ac53fd3cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.132.194.158']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33183c1b-14c3-416a-9f7a-6be5d3239bb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.143.17.207']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff6211c0-36c4-4463-87cd-4891c8d3afb0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.154.133.166']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--270c03d8-211e-4bd6-99f3-b42f75466e05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.167.233.46']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--520f430f-7db3-41e2-9937-fced22c46d09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.167.233.92']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22027ab3-1030-46a8-bb9a-71bb25c92762", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.174.29.227']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b63daf5e-8a28-4bc6-bf94-2d24f5a4d092", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.111']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a6c4a1f-3c97-4618-ac7c-2a22b5e4b30d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.145']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e8b2163-7889-4114-9953-3701f4ed4381", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.155']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79404583-0ac3-4df3-ae0b-f3fc059cee3c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.181.108.84']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c179cc12-e260-47bd-9da0-d0307b94db10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.197.85.47']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e42f0ee-7bde-4535-abd8-572b32d3c9b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.197.85.79']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d05ba064-4e68-49fc-acf2-a33cf5d008de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.202.112.112']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2eb23da7-50e6-481a-aed0-483d9285a688", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.202.112.134']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1d6a12e-dd00-4d1c-993a-1930b9728b98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.202.112.154']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46fca769-9ac2-4ad5-be30-796d7bc388cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.202.112.194']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae3201af-97e7-4eee-8fca-58226fc1914a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '220.86.231.179']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecd94e61-8c06-4ffd-80f1-9576bebe11da", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.14.107.151']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b13bdae-084a-4887-8eea-316b20347776", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.162.135.179']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a026d51a-6a92-4692-9bc2-fd27025a83e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.233.31.176']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96d758c5-27c5-4992-a784-52a71c4e5b13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.233.53.85']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c935fc39-e1ec-4a65-bd8c-0c1eaa2758a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '221.235.196.107']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4dbb7aa-7b15-45f0-814d-180f99710afe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.176.201.36']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77a80601-9c00-45ac-88cf-bcace3a4e991", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.187.52.148']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--932d4305-5543-460a-90be-08cb3811d5ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.211.137.196']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24319215-4d41-45bf-bd62-04f970112ad0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.66.59.68']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8d6d8ac-9d70-4743-94fb-e7c6accee9c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '222.97.112.179']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e971578-9546-4fde-8e08-b4f6156a8264", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.123.124.181']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--779fca0b-5d3e-45f3-9cea-2aadd560506c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.123.16.238']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--773bb91d-148d-4ffe-ba3e-517668655e8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.167.169.77']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46542607-0ca7-4e29-9c63-09bcd933a13a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.171.87.110']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--126080b9-9e05-4203-a968-b44631fd0c4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.243.26.188']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac74cceb-0f28-4632-a712-8e3de69bb75b", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.74.72.80']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83517df2-eb3c-4348-b3a7-30c6a2896371", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '223.85.253.137']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0af3781b-b6c4-4bdb-ac7c-cd9998b62b27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.111.14.183']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fff88a3c-b1ab-49e9-82f8-c984a873d14e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.111.14.184']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--244f14f4-ef51-4114-976e-2095d1fdcf6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.111.14.185']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49278d27-c2c5-437d-8c9d-def9920665fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.111.14.186']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58ec15c3-a147-4d47-9461-b2120a4a7e7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.111.14.187']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdffedfd-331c-4d1d-9b9e-5c257004c156", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.111.14.188']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8c77c28-e4c0-49b4-bba9-8d3de5cce360", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.111.14.189']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77a0c12c-9479-4c95-b519-00c02e2f4a78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.111.14.190']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2e016af-143a-47f3-8a9b-1c222a4d79a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.111.14.191']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c57a7f13-326b-41eb-b2cf-9b8c200dd50a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.111.14.192']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8224cee-7fbc-4176-ad2e-2f345fe18f06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.146.236.118']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ce44d0c-fafc-4aeb-9a5d-ec40569ccbea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.237.47.159']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89993209-6c13-40eb-91ce-ea3e192be6a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.11.208']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5330d4e9-58b1-4e53-a0b9-3b590e4d36b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.239.4.211']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25e9d6d7-15a3-4ab5-991e-4e09eb97712f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.247.136.239']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8faccc96-3568-4972-8695-756ed3ee3d13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.88.4.105']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8f4b939-d858-42c1-8762-77bd77debc23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.26.123']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cb544d5-34b0-4c78-a8a5-708b7cbdee7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.26.126']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b98ac3db-d9f6-4080-8916-dbd0efbef426", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.26.16']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fedd643-cf41-4d55-b1a5-620981a846c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.26.208']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30b9881f-d39e-4dbd-95e9-77b2541ab9f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.26.21']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d0ed8c4-a18a-4ce2-9d93-c9de3bd41558", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.26.28']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f5688a8-80fa-434d-83f3-e0134fe6ebdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.26.65']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70ef660e-3c41-42a1-bd4f-2e4fdee335fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.26.77']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9c2de56-5f1b-472d-bc10-596987a99dcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.27.179']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2dd8a7c-9c5d-40c2-8707-e8e306b15849", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.92.27.206']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bcb617e-c91e-4e0d-bcb6-4818cff20092", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '23.94.213.252']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbc1a206-dae0-4e0e-91b0-da0b2bcbe195", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.144.87.197']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9a36c04-6f21-4f8b-b10c-8f7af22ef879", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.199.105.148']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3985fa3d-eef3-40a9-84ae-05d31e07216b", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.199.106.58']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbfdb33b-df1c-4d16-a8c9-f4be27fdeef1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.199.108.98']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8e75764-ed15-4723-98ba-5c2e2e947681", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.199.126.56']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74a4e184-8c77-48bf-9184-001740bfcc58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '24.199.85.58']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afe71cf9-7bbc-4c49-917d-9181fce27a9f", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2600:1f16:743:ac02:ed8e:e663:627f:86e1']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2b7c437-8b73-4c83-baab-2ff8f31a24ae", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2602:80d:1005::1a']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1171d715-d41d-41b3-bd5c-fa2120ed2608", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.150.252.40']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c505bcdd-797f-409c-a33a-043d5a71ec4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.152.176.204']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bc78208-efd1-4138-af19-e29f8fc7d9b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.152.55.220']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8d01a58-105d-4c5b-b904-90bc24317a7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.19.239.196']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90b1ecbf-5d6a-4ed8-b04b-05fa729513aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.192.218.152']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0538f1c4-7ba9-44ac-8aff-2747ed774ef4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.202.96.136']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab73411e-235a-41a9-a08f-fb326729b1c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.209.76.37']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69c28f1e-6dce-4b02-b3d3-60af485e8bec", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.21.25.80']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea683be1-3a8f-4f1d-a2f9-a9ae3874b887", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.28.43.193']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddab99e6-10f6-4347-9192-7f011829f37c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.35.230.28']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1aa73400-567b-41a4-b057-5b99b02986fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.64.141.199']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eb6c6d3-ef60-4b39-b4c8-31923caea342", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '27.79.3.119']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f99febb-8b40-448f-8be8-da8dec0040ca", "name": "Malicious Host", "description": "Web exploits: aws-credentials. CVEs: CVE-2019-5418. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '2a09:bac1:76c0:3d0::48c:31']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5418", "external_id": "CVE-2019-5418"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4f54798a-dad7-480e-a1ef-041977c2cecf", "relationship_type": "indicates", "source_ref": "indicator--7f99febb-8b40-448f-8be8-da8dec0040ca", "target_ref": "attack-pattern--95634810-4d5c-4cb2-8998-8afc1f8d05a9", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--07d6c754-9eea-4b21-8c57-c5fd68733f4e", "relationship_type": "indicates", "source_ref": "indicator--7f99febb-8b40-448f-8be8-da8dec0040ca", "target_ref": "vulnerability--53f2ce60-c955-4767-b602-d139545467b2", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--045c2c04-eb45-4f89-b184-242ca6d40499", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '2a09:bac1:76e0:3d0::48c:65']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc5b2551-abbd-4f39-8e03-a09b6fb608ea", "name": "Malicious Host", "description": "Web exploits: aws-credentials. CVEs: CVE-2002-1149. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '2a0f:ca80:b00b:ce63::5']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7cde43c6-76e5-41d3-8572-5dd8c4852350", "relationship_type": "indicates", "source_ref": "indicator--dc5b2551-abbd-4f39-8e03-a09b6fb608ea", "target_ref": "attack-pattern--95634810-4d5c-4cb2-8998-8afc1f8d05a9", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d3c2bb7e-ee5b-41c2-bc47-34b22680d1ab", "relationship_type": "indicates", "source_ref": "indicator--dc5b2551-abbd-4f39-8e03-a09b6fb608ea", "target_ref": "vulnerability--9f6b4a40-b312-4d6c-8962-53e248873558", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--277a5440-e6e4-47d3-b312-84c683a0ba53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.124.176.179']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44c9005b-340c-4e86-9b70-980ac0927caa", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.129.187.38']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2498c7c4-8d2e-4c9e-b6da-8d8cb29d2a62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.130.168.2']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dea5445a-89d0-4efb-9db9-27b18860feb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.131.24.55']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c56404c5-430b-4b7f-a44a-1d6723a8e875", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.147.122.184']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b8ee924-a65b-4810-8adf-a9d7e66b41cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.151.116.231']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fcd7fba-e84c-4609-b823-cc41d3d85fbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.208.16.205']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a67f0b95-5a66-480b-83ab-becd57a3fd0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.213.226.45']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--475bc9d5-5580-4260-af1e-378126c2ff35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.227.192.235']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ffa6bcb-a1bf-45f9-b590-2fd92e566a31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.74.234.166']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7f12f7a-d380-43a8-8962-7c96c0d1c75b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.77.24.41']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a21e47f-44de-434b-9959-27a6ac88fa42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.80.146.66']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08baca71-ef22-49fc-ae73-a1091b6d9ce0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.80.34.248']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2154b364-e502-4299-bf02-576905cc56d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.82.209.93']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0b2f410-6e29-4bd4-9785-20db211e3d0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.83.245.221']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--286494bf-1d57-474f-8572-0df400bbccb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.84.206.80']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26d00995-2401-47e4-8391-fdac34d36c82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.87.186.57']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7ff957c-cf55-469d-b27f-829f9a576a9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.87.196.69']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbc0dd24-be87-4adc-b9f0-16335a3d34dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.88.203.46']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--217be6d0-1905-487f-88d7-23d49499596f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.89.118.35']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d8a3457-89ea-49fc-9bb3-89428b2be741", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '3.89.209.40']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f998e869-1702-4a04-b436-6d87dd15bab8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.132.90.3']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b1eb71b-5316-463c-92bf-dab8c7c1bc4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.6']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47e9fe14-f6a3-4571-a979-8803830f9587", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.7']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67d69b93-a945-40d2-84b4-426e83a35b4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.14.32.8']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71cc8d2b-ef96-465a-917c-0f6ee0abeeef", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.146.22.173']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73672795-fefa-4c8f-b7c8-0c8475f05fd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.15.20.38']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59923efb-dc2e-4bb1-9794-bec02a7b67b4", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.170.147.50']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bf83732-8313-4e1b-addf-a92371077cca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.184.195.246']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7773f9fc-0c40-40dc-a773-5c8817386b38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.25.235.62']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87660468-4300-4f69-b3e1-22cbad50d88d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.25.236.108']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7240924-625b-4912-a41e-079aa848228a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.25.239.91']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d49db4e7-e0d5-4c44-848e-b06d7cbe080e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.197.116']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e4b5958-ae17-4c10-9fc8-7c4f292ce027", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.197.117']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdfc6d11-f8e9-494c-9ceb-714ab42d0354", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.197.118']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4b65eab-9d55-42f5-96cc-8449627e81d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.197.124']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41bd21ef-9b09-48d4-b8de-66a99352669d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.197.126']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a2316a8-3c91-4da6-a5c4-c479e9bc790e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.197.127']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea72efe5-5950-438c-bd70-3771bd5cf9c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.197.148']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--321a67b9-6ce1-4fb5-b4f0-f90386af2829", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.197.149']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc6e207d-3300-4db4-8c38-7cafd0f04042", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.197.151']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f02504db-df1f-4aeb-89fe-27f38e8c4a33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.197.156']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36e8de8d-34c0-48c4-a3db-aa010cfe21e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.197.157']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f00f47f1-5d6b-47eb-a08a-fb28ee4a6cdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.197.159']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afa2f532-85bf-4f47-8d6c-0f33fc265fe6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.197.180']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--456b04c9-0204-4069-927f-245e850a5ed8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.197.181']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b5f091f-b2b2-4de1-9061-6372f70155c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.197.182']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac3151cc-8070-4593-afe8-0e2e7c719e3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.197.183']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2221b1d7-5410-4fb5-b99b-a876a2074f0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.197.188']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--958584fa-babd-45e0-9c5a-3da4e377bcab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.197.189']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a40919b-fe08-4596-b7df-44d4aa59fb7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.197.190']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8040508e-ba21-42c3-b5ec-8c7e9f8c6fcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.197.191']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64328c6c-d148-4b3e-beb3-27db7c95e355", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.197.20']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fa59e54-1bba-4c20-9d6f-f11cc2dc8fc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.197.21']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18a5dced-56d4-4461-94b5-232a1094644d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.197.212']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62d57a6c-058d-4729-a26f-65dd3d0c172f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.197.213']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--279051d3-6a0e-4245-ac58-726ce4398e4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.197.214']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee027ec2-3296-4a45-821e-706857dffef1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.197.215']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6581ecbc-31dd-41a7-900f-bf36f35cfd5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.197.22']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1475a8ad-0c48-4f49-9b1e-7d31fc4286b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.197.220']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84536afa-f220-4e86-b0a4-807b274fe8ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.197.221']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e039e0d-0ba0-4784-a397-997e489a2721", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.197.222']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccd33465-d97f-416d-9238-d18e8467e73c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.197.23']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d261050f-e247-4cad-8240-9a0578f345c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.197.244']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bfe04d8-ce7d-4859-95d2-0cc545f76009", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.197.245']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cbb942d-2628-40de-92d5-0932abf7e24b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.197.246']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9eeb920-ce7b-4a57-a197-cdf291377bdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.197.247']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90297b04-cc06-42a8-9560-52284693046b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.197.252']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b114bfc-2c14-4bfa-ab67-724953a72950", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.197.253']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ff968cd-bd5e-4361-842f-d9bbd65c2928", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.197.254']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0f6247b-05fe-4aab-a563-2cf6d4964d2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.197.255']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8beee1d-2093-4d48-ac7e-7f1412fbe593", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.197.28']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39ec13a4-f483-4d22-9143-f6579bbbeaef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.197.29']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cce525a-4d25-4644-a91c-43ead5387266", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.197.30']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc3f6229-f717-4cf7-b9b5-ae0da372d41c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.197.31']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcbc6532-cacb-4a5f-bfc9-6c7787d6e6fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.197.52']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1aa322d-c129-4fc7-bbb1-a08962c943a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.197.53']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7be0f160-abe7-493d-a638-de2f9910edd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.197.54']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf0ced12-4a4b-41d1-bb99-8c484b54aeff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.197.55']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86e89918-c653-4b7d-b562-2e2e9e8c984e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.197.60']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3acc0a53-713e-4dfb-be52-81940fb69769", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.197.62']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d3dcacf-07cd-44dd-b2ec-6810c49daf19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.197.63']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c39f2e1-3e7f-4f15-bdae-4bec4a6c5379", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.197.84']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2327d372-b3f7-4a00-bfd4-d34c5cc2040f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.197.85']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--793eaaa6-03bb-48b7-bf36-15ff27a2a9ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.197.86']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--258b387b-1e78-47e4-b4fa-46d234ea291e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.197.87']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a14c893-de36-4f40-8509-313793444cf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.197.93']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a568895e-a774-413b-add5-5950cca423af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.197.94']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c02db9f-7944-40ab-8243-3c4cae7da650", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.207.116']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--480b0f59-e9c3-43cf-97fa-004519166aba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.207.118']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23620a0d-46c0-40f5-afcd-cee14198b0b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.207.119']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bf2c08b-397b-4d97-af73-d672c7e1f48e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.207.124']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a246640-3a8a-4ff0-9300-3901327b4d97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.207.125']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3850956b-f6a1-46c1-9602-051b163e8918", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.207.126']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c30ea221-3123-483c-882e-a73d791dea0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.207.127']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41f5ad04-27ec-47b8-b20f-6954348dd36a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.207.148']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50543e8d-4619-4730-a227-b2fe0f7c465c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.207.150']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88270556-57aa-4c07-a9b1-3794b74a3a23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.207.151']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77f8e2ff-3b61-4886-bb0d-29112626aaf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.207.156']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7448d375-023b-4ad3-9bd0-e182a755de6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.207.157']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dae982f8-22a5-4997-8fe3-6e24b36563a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.207.158']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa868ccc-8c7b-44ce-9618-0d1a68da3ffa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.207.159']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--076b0ded-ab36-4c5f-ab88-73970be6ee53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.207.180']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e02bedc9-a204-443f-87b5-d9b4cf33ee87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.207.181']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c6793e6-0e19-4e24-9486-49ee1827a504", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.207.183']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54420774-b38e-49e4-b8f0-398b3a1b1693", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.207.188']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5d72172-10ed-4f44-b27b-9fb3356b5390", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.207.189']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0f6e79d-e32b-4440-84ed-ad815b3467a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.207.191']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82d8acc3-33c1-463d-a2de-81cc70a4fa85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.207.20']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adb1275f-1dc8-432b-87e4-7befd1907edb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.207.21']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad1128cf-409a-4f5b-a75d-6ba5dbb4b0cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.207.212']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2b633c2-4904-4202-9e90-246ab41f6085", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.207.213']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--393365ac-cd27-459a-9c0c-58230cc78e53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.207.214']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a535df69-e562-43dc-9fae-e4c2a603ae60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.207.215']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb6565d3-eeaf-4e93-8360-160945ac3bd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.207.22']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8edd3d3f-f914-4197-9e8d-bab297fd5215", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.207.220']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34774b4a-15c7-4d13-987d-4332dfdb79d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.207.221']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ba30eac-6b63-4974-b5ae-e580db9f64bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.207.222']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdb7972a-d482-4d9a-953a-2c51b3dea20d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.207.223']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--287766ed-7ce0-496d-8889-3c31fb2dd310", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.207.23']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f74ccf3-3b8e-455d-8cac-0f61f0f21bc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.207.244']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ef64c63-f340-4e32-87c2-973eace1285b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.207.245']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1806a26-54d4-46a0-8b88-66e2a24d43b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.207.247']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--586e7c25-f42b-4578-a371-be28f77c6088", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.207.252']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64ee683f-e6d7-49eb-b878-78a996f7363d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.207.253']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7887b53d-9a98-4426-9813-6686c68c17ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.207.254']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eecd75d-dfed-499c-a02c-fdf9cc88b636", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.207.255']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44b5f55a-1e27-4534-87b9-01551f4ea535", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.207.29']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d54cd6d6-34fe-46bf-8bd5-d04cca9b172c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.207.30']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--732b812f-3876-43af-8eab-259a647e7d0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.207.31']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f07bd360-5a79-489e-808f-c77b25f13394", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.207.52']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec2757bc-3701-46b5-bb42-d669720452d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.207.53']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4648610c-2ef7-4896-bfec-485d86eda650", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.207.54']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--970416f7-5360-4118-80b6-41865a52a180", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.207.55']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4308671a-c2fa-4cb0-86cd-1d7a1210f3c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.207.60']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a82a308-e6ab-43ea-a987-7d110a603c19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.207.61']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b9cfafb-97d5-4530-82f2-609234c2fede", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.207.62']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d085cf2-9000-4d86-9815-659938fae094", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.207.63']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6aefad1-6a19-4820-8e2a-d4956948861d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.207.84']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--935254b9-bd2a-4ca2-82ff-86de3186f975", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.207.85']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0030141a-9dfd-40e8-9579-ed78fbd15cc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.207.86']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--545db6b8-f70b-4cab-b698-3f27cb5784ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.207.87']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfb52fa9-967e-4d89-b405-7d75dc2d82df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.207.92']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8613238-7517-4a39-bce8-3e600092d3de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.207.93']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c524e58f-614a-4fee-b724-6e3b90547f11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.207.94']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9263d58b-2cfe-4537-8d84-38ac0e9d1b68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.40.207.95']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9340b737-3774-4a3c-acd3-48aa4a472678", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.41.89.31']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b043342-9fff-46b9-ab4a-70d3afdd4b0e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.41.94.248']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f88ff16-e1de-49b0-8a6b-863edd84f18a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.42.66.204']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d73d9441-3c7b-4530-99f3-ed17db16c1c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.43.116.253']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d686868-4dfb-4155-b489-206b3828cdad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.43.62.45']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c537d3b-f06f-4882-8fda-08d2f9e17d40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.47.28.147']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b46ba76-2686-4279-b5a0-cee12b742d18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.179.100']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b971a8a-0962-4b5e-a1fe-85082ce51821", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.24.50']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f89a1ff3-556c-4ce2-8159-ae07148fee8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.44.105']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2b45282-ecb7-4007-ab04-480d1bf03b66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.44.38']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c350a60e-7ee8-4c59-bc70-f013c9c0bc09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.56.44.58']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d03528cb-c6b3-4216-aa99-dfbac69e0cca", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.57.216.26']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fb755b2-f033-4aca-9e9a-ec57f6e0a07e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.76.38.117']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8f98417-1728-4bbe-890b-853fef7b9bca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '31.77.114.43']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b915c90-6092-4309-95b1-8491812a9e7c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '32.195.58.96']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3100edba-ac5b-4447-8b06-fad7071dca5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '32.199.173.55']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5ff2036-c439-46dd-acb4-3c18d589e7ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.101.121.69']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e18670c-19b7-41b3-84d9-46df12667b46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.116.93.59']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--893bf704-e8c5-4636-a065-c10d4c516982", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.118.41.2']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--216d3933-820d-4218-8f7b-d5a893cad308", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.126.95.25']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc5887d0-ebb4-4923-885f-ec74f3a97f01", "name": "Malicious Host", "description": "Web exploits: mitre-t1190. CVEs: CVE-2002-1149, CVE-2022-22274, CVE-2023-0656. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '34.131.238.120']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22274", "external_id": "CVE-2022-22274"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-0656", "external_id": "CVE-2023-0656"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--41810c2d-f8ec-43ad-b558-3522ec66ff04", "relationship_type": "indicates", "source_ref": "indicator--cc5887d0-ebb4-4923-885f-ec74f3a97f01", "target_ref": "vulnerability--9f6b4a40-b312-4d6c-8962-53e248873558", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ccbbea63-4550-4467-b624-ee9ee8d59c96", "relationship_type": "indicates", "source_ref": "indicator--cc5887d0-ebb4-4923-885f-ec74f3a97f01", "target_ref": "vulnerability--7981112b-110c-4ce1-bd6d-9361a9d00747", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a78519b2-0243-47ea-8a54-2c7b55bc5e76", "relationship_type": "indicates", "source_ref": "indicator--cc5887d0-ebb4-4923-885f-ec74f3a97f01", "target_ref": "vulnerability--611e800c-c845-478a-b4bc-40f780f1b283", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91e79b34-3cf0-4165-9568-89fcde7e75dd", "name": "Malicious Host", "description": "Web exploits: mitre-t1190, php-backup-grab. CVEs: CVE-2002-1149, CVE-2022-22274, CVE-2023-0656. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '34.135.154.152']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22274", "external_id": "CVE-2022-22274"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-0656", "external_id": "CVE-2023-0656"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ee6bbb06-68cb-4b93-af78-0d3b1ac94762", "relationship_type": "indicates", "source_ref": "indicator--91e79b34-3cf0-4165-9568-89fcde7e75dd", "target_ref": "attack-pattern--0e6e4145-cd99-4e68-a56c-3613ee5420af", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--744eed6b-c4ee-49ae-b64f-02b6cdab2cc5", "relationship_type": "indicates", "source_ref": "indicator--91e79b34-3cf0-4165-9568-89fcde7e75dd", "target_ref": "vulnerability--9f6b4a40-b312-4d6c-8962-53e248873558", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ac3273df-ecaa-45e6-8ca0-11fc58a73d75", "relationship_type": "indicates", "source_ref": "indicator--91e79b34-3cf0-4165-9568-89fcde7e75dd", "target_ref": "vulnerability--7981112b-110c-4ce1-bd6d-9361a9d00747", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6d2054e5-894b-45e0-b52c-c926f39b90bb", "relationship_type": "indicates", "source_ref": "indicator--91e79b34-3cf0-4165-9568-89fcde7e75dd", "target_ref": "vulnerability--611e800c-c845-478a-b4bc-40f780f1b283", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--048cca84-25cc-4364-908f-64e0f0e0b757", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.182.255']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebd38567-9b54-4c55-b0e5-c1eec688a5b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.140.248.159']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f275cc1-2f7b-4d98-8210-d022c71ae490", "name": "Malicious Host", "description": "Web exploits: wordpress-wlwmanifest-scan. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '34.141.178.1']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--244e338f-a89b-4123-9f45-7204eb5bce11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.149.204']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--869c5c10-5198-4c0e-a801-fd5cadc2da24", "name": "Malicious Host", "description": "Web exploits: wordpress-wlwmanifest-scan. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.155.213']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bb44fb8-24de-47b6-86c5-5cbae1d25774", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.220.189']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--017dbb24-af93-4345-b144-d8d02e6833a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.73.13']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef1874e3-d664-40e0-a3e7-21b559a380bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.156.86.46']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91036be3-dfc8-42ad-a3eb-d73be2964099", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.158.104.217']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--842e3edf-40fe-4a1b-95f0-4ccb6f256227", "name": "Malicious Host", "description": "Web exploits: aws-credentials, php-backup-grab, spring-boot-actuator. CVEs: CVE-2002-1149, CVE-2019-5418. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '34.177.105.135']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}, {"kill_chain_name": "mitre-attack", "phase_name": "discovery"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5418", "external_id": "CVE-2019-5418"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22947", "external_id": "CVE-2022-22947"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7f6423b6-241e-42e7-ad4d-8e9ca99812e0", "relationship_type": "indicates", "source_ref": "indicator--842e3edf-40fe-4a1b-95f0-4ccb6f256227", "target_ref": "attack-pattern--95634810-4d5c-4cb2-8998-8afc1f8d05a9", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1290f56d-ccec-4b0f-85ef-fb8f2b922263", "relationship_type": "indicates", "source_ref": "indicator--842e3edf-40fe-4a1b-95f0-4ccb6f256227", "target_ref": "attack-pattern--0e6e4145-cd99-4e68-a56c-3613ee5420af", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ff17b8ad-b870-4720-b381-e6ce2dae84f1", "relationship_type": "indicates", "source_ref": "indicator--842e3edf-40fe-4a1b-95f0-4ccb6f256227", "target_ref": "attack-pattern--dac02ec7-9fab-40e8-ab91-f7aa9152bf58", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6736b37e-d975-4fc2-990c-8025759587f2", "relationship_type": "indicates", "source_ref": "indicator--842e3edf-40fe-4a1b-95f0-4ccb6f256227", "target_ref": "vulnerability--9f6b4a40-b312-4d6c-8962-53e248873558", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--54469b36-1e57-4808-b9bf-27882322af9a", "relationship_type": "indicates", "source_ref": "indicator--842e3edf-40fe-4a1b-95f0-4ccb6f256227", "target_ref": "vulnerability--53f2ce60-c955-4767-b602-d139545467b2", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1ece81d9-5cba-4dcc-8a2f-73318fe54a40", "relationship_type": "indicates", "source_ref": "indicator--842e3edf-40fe-4a1b-95f0-4ccb6f256227", "target_ref": "vulnerability--a28b04e8-ad85-462c-b923-9158a7008803", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60d4b4de-3a47-4569-b274-d53026bacb30", "name": "Malicious Host", "description": "Web exploits: mitre-t1190. CVEs: CVE-2002-1149, CVE-2022-22274, CVE-2023-0656. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '34.180.125.70']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22274", "external_id": "CVE-2022-22274"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-0656", "external_id": "CVE-2023-0656"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--464ad3b3-1c53-4bd9-b022-a111d5633ea1", "relationship_type": "indicates", "source_ref": "indicator--60d4b4de-3a47-4569-b274-d53026bacb30", "target_ref": "vulnerability--9f6b4a40-b312-4d6c-8962-53e248873558", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--e7c145c0-5ca0-4c46-9025-5fd8003871fa", "relationship_type": "indicates", "source_ref": "indicator--60d4b4de-3a47-4569-b274-d53026bacb30", "target_ref": "vulnerability--7981112b-110c-4ce1-bd6d-9361a9d00747", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--aa913deb-201b-45ae-be21-44f41071cb5b", "relationship_type": "indicates", "source_ref": "indicator--60d4b4de-3a47-4569-b274-d53026bacb30", "target_ref": "vulnerability--611e800c-c845-478a-b4bc-40f780f1b283", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d885b79-4e32-40e8-90da-c2c45098c049", "name": "Malicious Host", "description": "Web exploits: mitre-t1190, php-backup-grab. CVEs: CVE-2002-1149, CVE-2022-22274, CVE-2023-0656. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '34.180.29.45']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22274", "external_id": "CVE-2022-22274"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-0656", "external_id": "CVE-2023-0656"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1b179337-e153-45e2-8073-e2af037d6138", "relationship_type": "indicates", "source_ref": "indicator--2d885b79-4e32-40e8-90da-c2c45098c049", "target_ref": "attack-pattern--0e6e4145-cd99-4e68-a56c-3613ee5420af", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--aeefda26-f79e-4c8c-8f6d-eb690f31f25d", "relationship_type": "indicates", "source_ref": "indicator--2d885b79-4e32-40e8-90da-c2c45098c049", "target_ref": "vulnerability--9f6b4a40-b312-4d6c-8962-53e248873558", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--42bc7d3a-e536-4050-b623-b8e5fca1d374", "relationship_type": "indicates", "source_ref": "indicator--2d885b79-4e32-40e8-90da-c2c45098c049", "target_ref": "vulnerability--7981112b-110c-4ce1-bd6d-9361a9d00747", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0b2486f2-6d31-40e9-aacb-2db52cde5846", "relationship_type": "indicates", "source_ref": "indicator--2d885b79-4e32-40e8-90da-c2c45098c049", "target_ref": "vulnerability--611e800c-c845-478a-b4bc-40f780f1b283", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c646a606-4d7f-4cec-9143-12d6244db0e7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.193.242.118']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebcae3ab-bc95-4da5-b01b-b497c24d501a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.197.70.90']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f75565d7-e1f5-4c31-b667-d6f2ebb3c65a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.22.176.54']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98253902-3583-4b5c-8c44-87b40b8d005b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.224.33.150']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce532fcc-c143-4a1a-9d6e-45596893aee5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.227.148.44']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ce80e90-284f-47e6-b301-0a2b8e99f265", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.227.61.172']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--504424ae-fc63-4a34-957e-26e326eb1bc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.228.104.231']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--389861b4-35b4-4231-a74f-f35780ee21c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.229.166.45']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d09d30d-8459-4ca2-95a5-045647adc636", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.230.221.101']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04475732-c0a9-4cb3-8c7b-157a68b7df01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.235.166.12']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--748c9255-7c04-464b-9f02-51de2e032412", "name": "Malicious Host", "description": "Web exploits: mitre-t1190, php-backup-grab. CVEs: CVE-2002-1149, CVE-2022-22274, CVE-2023-0656. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '34.30.254.221']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22274", "external_id": "CVE-2022-22274"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-0656", "external_id": "CVE-2023-0656"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3437be1a-fffb-4ac6-b531-f19289cf5a42", "relationship_type": "indicates", "source_ref": "indicator--748c9255-7c04-464b-9f02-51de2e032412", "target_ref": "attack-pattern--0e6e4145-cd99-4e68-a56c-3613ee5420af", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b1db7772-f5b4-4988-809d-cfd927431725", "relationship_type": "indicates", "source_ref": "indicator--748c9255-7c04-464b-9f02-51de2e032412", "target_ref": "vulnerability--9f6b4a40-b312-4d6c-8962-53e248873558", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c6da48ad-a809-4540-81cb-bf5f6dca614e", "relationship_type": "indicates", "source_ref": "indicator--748c9255-7c04-464b-9f02-51de2e032412", "target_ref": "vulnerability--7981112b-110c-4ce1-bd6d-9361a9d00747", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--46f94e2f-8105-4de7-b304-42c38a4aa23f", "relationship_type": "indicates", "source_ref": "indicator--748c9255-7c04-464b-9f02-51de2e032412", "target_ref": "vulnerability--611e800c-c845-478a-b4bc-40f780f1b283", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5236e1d6-8627-4f98-9f7e-03bda3f9a205", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.34.52.146']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--beb00493-9f4f-4ab7-b175-1cfa0df4f1dd", "name": "Malicious Host", "description": "Web exploits: mitre-t1190, php-backup-grab. CVEs: CVE-2002-1149, CVE-2022-22274, CVE-2023-0656. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '34.35.105.184']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22274", "external_id": "CVE-2022-22274"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-0656", "external_id": "CVE-2023-0656"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4ff060b9-4721-4bb7-ade2-e7ae0dbdd9e1", "relationship_type": "indicates", "source_ref": "indicator--beb00493-9f4f-4ab7-b175-1cfa0df4f1dd", "target_ref": "attack-pattern--0e6e4145-cd99-4e68-a56c-3613ee5420af", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6c72efec-0175-4ea2-8d0b-183ce76794d9", "relationship_type": "indicates", "source_ref": "indicator--beb00493-9f4f-4ab7-b175-1cfa0df4f1dd", "target_ref": "vulnerability--9f6b4a40-b312-4d6c-8962-53e248873558", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--326ef009-d972-45a4-83ad-55e59390f0b9", "relationship_type": "indicates", "source_ref": "indicator--beb00493-9f4f-4ab7-b175-1cfa0df4f1dd", "target_ref": "vulnerability--7981112b-110c-4ce1-bd6d-9361a9d00747", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--26044f8d-6993-4233-ac0e-787a81199055", "relationship_type": "indicates", "source_ref": "indicator--beb00493-9f4f-4ab7-b175-1cfa0df4f1dd", "target_ref": "vulnerability--611e800c-c845-478a-b4bc-40f780f1b283", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8a548c8-966b-456e-b247-da6c7a56757b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.114.132']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cd436d4-b5e4-4e80-b02d-0519d07fe99a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.165.85']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eacfbc10-0b05-4a4a-9e75-d731d3bf94ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.225.145']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f017a523-cd8f-4c9a-be9b-074a4584ba54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.38.78.4']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69345aed-7fb8-456d-a6bb-17a0bd967993", "name": "Malicious Host", "description": "Web exploits: mitre-t1190, php-backup-grab. CVEs: CVE-2002-1149, CVE-2022-22274, CVE-2023-0656. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '34.39.142.103']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22274", "external_id": "CVE-2022-22274"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-0656", "external_id": "CVE-2023-0656"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a4d1928e-0e79-4da6-aefa-642726171c3e", "relationship_type": "indicates", "source_ref": "indicator--69345aed-7fb8-456d-a6bb-17a0bd967993", "target_ref": "attack-pattern--0e6e4145-cd99-4e68-a56c-3613ee5420af", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5187405d-e312-49f9-9263-3e5a1b68f377", "relationship_type": "indicates", "source_ref": "indicator--69345aed-7fb8-456d-a6bb-17a0bd967993", "target_ref": "vulnerability--9f6b4a40-b312-4d6c-8962-53e248873558", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--2824b737-b8d8-4471-9116-1cd0dbdb6045", "relationship_type": "indicates", "source_ref": "indicator--69345aed-7fb8-456d-a6bb-17a0bd967993", "target_ref": "vulnerability--7981112b-110c-4ce1-bd6d-9361a9d00747", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--21020780-f98c-4203-b4dc-44f18858c3dd", "relationship_type": "indicates", "source_ref": "indicator--69345aed-7fb8-456d-a6bb-17a0bd967993", "target_ref": "vulnerability--611e800c-c845-478a-b4bc-40f780f1b283", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3648ce2b-8a8d-469e-984e-72727b954b47", "name": "Malicious Host", "description": "Web exploits: mitre-t1190, php-backup-grab. CVEs: CVE-2002-1149, CVE-2022-22274, CVE-2023-0656. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '34.39.187.127']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22274", "external_id": "CVE-2022-22274"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-0656", "external_id": "CVE-2023-0656"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d227ed66-76c2-4f29-a4b1-ce502525ce02", "relationship_type": "indicates", "source_ref": "indicator--3648ce2b-8a8d-469e-984e-72727b954b47", "target_ref": "attack-pattern--0e6e4145-cd99-4e68-a56c-3613ee5420af", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3502b619-b256-4767-ac1e-007463156654", "relationship_type": "indicates", "source_ref": "indicator--3648ce2b-8a8d-469e-984e-72727b954b47", "target_ref": "vulnerability--9f6b4a40-b312-4d6c-8962-53e248873558", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--b5de27fb-227e-4f1c-9871-4eda8de9974b", "relationship_type": "indicates", "source_ref": "indicator--3648ce2b-8a8d-469e-984e-72727b954b47", "target_ref": "vulnerability--7981112b-110c-4ce1-bd6d-9361a9d00747", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--19ecbfb8-1681-4150-b989-f5a467583ffc", "relationship_type": "indicates", "source_ref": "indicator--3648ce2b-8a8d-469e-984e-72727b954b47", "target_ref": "vulnerability--611e800c-c845-478a-b4bc-40f780f1b283", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--333f0e5d-8af4-4264-8f4c-967aea53fe62", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.52.131.103']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fae12888-a7f3-49c6-90ea-4e3ae47d56cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.52.144.176']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb26b447-4711-4a82-8d75-71c42d451fb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.52.183.14']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b8c5dce-1ed1-463a-98ac-7dfb7ba75a86", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.53.186.49']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11e24d18-c3e6-454b-80a9-1fcc3c5b9297", "name": "Malicious Host", "description": "Observed: FTP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.53.216.85']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ftp"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45a8f887-1fec-45a1-a2b6-8f7002316254", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.57.183.115']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30f42e08-216c-4822-a50d-cfdca9e44f3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.6.193.105']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2de0a9d7-23e3-40d5-b08f-123c2132feeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.104.132']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e9a77d5-b91b-417b-826d-6eae0fe10545", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.235.35']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d14d3cd-950f-48a2-81f4-711a79ebeafa", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.4.2']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3db8cb11-cfc4-4d87-9a2f-2cadb2585867", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.41.110']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--584b18a5-a78c-4c9d-8682-d1efa8f5da04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.62.93.54']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--421357fd-72a0-439f-98f2-ad67525362e2", "name": "Malicious Host", "description": "Web exploits: mitre-t1190, php-backup-grab. CVEs: CVE-2002-1149, CVE-2022-22274, CVE-2023-0656. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '34.7.195.237']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22274", "external_id": "CVE-2022-22274"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-0656", "external_id": "CVE-2023-0656"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--30ee9152-a291-49e2-83bc-5cdf275fd5c4", "relationship_type": "indicates", "source_ref": "indicator--421357fd-72a0-439f-98f2-ad67525362e2", "target_ref": "attack-pattern--0e6e4145-cd99-4e68-a56c-3613ee5420af", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--93402526-5885-49bb-9fe5-37b4cb2edf1d", "relationship_type": "indicates", "source_ref": "indicator--421357fd-72a0-439f-98f2-ad67525362e2", "target_ref": "vulnerability--9f6b4a40-b312-4d6c-8962-53e248873558", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6d76c0ee-e636-4e86-bb19-6fa429132510", "relationship_type": "indicates", "source_ref": "indicator--421357fd-72a0-439f-98f2-ad67525362e2", "target_ref": "vulnerability--7981112b-110c-4ce1-bd6d-9361a9d00747", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--fc7ccb3e-c63f-4ce3-8e57-16ef3c5e73e6", "relationship_type": "indicates", "source_ref": "indicator--421357fd-72a0-439f-98f2-ad67525362e2", "target_ref": "vulnerability--611e800c-c845-478a-b4bc-40f780f1b283", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee64c3f8-acfd-4ca6-9f90-b94bfb6796db", "name": "Malicious Host", "description": "Web exploits: mitre-t1190, php-backup-grab. CVEs: CVE-2002-1149, CVE-2022-22274, CVE-2023-0656. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '34.72.237.222']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22274", "external_id": "CVE-2022-22274"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-0656", "external_id": "CVE-2023-0656"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f126e72f-e943-4589-b48e-7700812ba520", "relationship_type": "indicates", "source_ref": "indicator--ee64c3f8-acfd-4ca6-9f90-b94bfb6796db", "target_ref": "attack-pattern--0e6e4145-cd99-4e68-a56c-3613ee5420af", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6919d9c3-11af-4e08-a027-5dc525ed427d", "relationship_type": "indicates", "source_ref": "indicator--ee64c3f8-acfd-4ca6-9f90-b94bfb6796db", "target_ref": "vulnerability--9f6b4a40-b312-4d6c-8962-53e248873558", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--20f36650-c1ad-4595-a2d6-c78257fc7be3", "relationship_type": "indicates", "source_ref": "indicator--ee64c3f8-acfd-4ca6-9f90-b94bfb6796db", "target_ref": "vulnerability--7981112b-110c-4ce1-bd6d-9361a9d00747", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7463ec96-b2b2-49f0-9faa-4b56e94953c3", "relationship_type": "indicates", "source_ref": "indicator--ee64c3f8-acfd-4ca6-9f90-b94bfb6796db", "target_ref": "vulnerability--611e800c-c845-478a-b4bc-40f780f1b283", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--199abe64-aa17-40d3-ad4a-cb90b0eca726", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.74.190.168']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9dcddb7-ccd0-4136-870f-797addb4a9aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.75.243.19']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--948318f7-52da-4915-8c4b-4d289d44fbcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.170.100']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73971b95-31a6-4181-835f-8b5236224068", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.172.72']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--214e94a0-454f-4c4a-bbda-5e81ad1faac7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.76.238.254']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a67138e-bf4a-41fe-9f15-0f6de4f10fbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.193.157']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d62bffc-41df-40ea-9c01-5c9a171db018", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.35.118']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93f0d5b7-481c-4fc4-a8aa-11484e68fad1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.77.61.91']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d8cd8d9-c2a2-4317-84e1-951726d69e1b", "name": "Malicious Host", "description": "Web exploits: wordpress-wlwmanifest-scan. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.104.124']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bfd815f-9574-4fe0-a18b-6b7369622afe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.78.141.113']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c031f7d9-9a2a-45be-8d0a-d4b8c288b2f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.132.190']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23e20f63-73f3-436c-8af0-048ac8b752b2", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.79.14.75']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ade4c3f-2fe8-4fa4-ae79-beb318e0cd13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.80.233.207']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e513ad7-7315-42d5-9423-6540d94d1102", "name": "Malicious Host", "description": "Web exploits: aws-credentials, php-backup-grab, spring-boot-actuator. CVEs: CVE-2019-5418. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '34.81.220.73']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}, {"kill_chain_name": "mitre-attack", "phase_name": "discovery"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2019-5418", "external_id": "CVE-2019-5418"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22947", "external_id": "CVE-2022-22947"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--6d84b1eb-9731-4c37-b858-f2bb2e292b07", "relationship_type": "indicates", "source_ref": "indicator--6e513ad7-7315-42d5-9423-6540d94d1102", "target_ref": "attack-pattern--95634810-4d5c-4cb2-8998-8afc1f8d05a9", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--0d6a741a-0227-4d2d-aa9a-76251061e427", "relationship_type": "indicates", "source_ref": "indicator--6e513ad7-7315-42d5-9423-6540d94d1102", "target_ref": "attack-pattern--0e6e4145-cd99-4e68-a56c-3613ee5420af", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--4e68df52-7755-4181-86f2-b92d69f7984d", "relationship_type": "indicates", "source_ref": "indicator--6e513ad7-7315-42d5-9423-6540d94d1102", "target_ref": "attack-pattern--dac02ec7-9fab-40e8-ab91-f7aa9152bf58", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--a6ae29b9-fb51-4684-af82-d8cf5e11a6e2", "relationship_type": "indicates", "source_ref": "indicator--6e513ad7-7315-42d5-9423-6540d94d1102", "target_ref": "vulnerability--53f2ce60-c955-4767-b602-d139545467b2", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--3e72ee25-3fa1-4ac7-99c1-cc86d9fe2fda", "relationship_type": "indicates", "source_ref": "indicator--6e513ad7-7315-42d5-9423-6540d94d1102", "target_ref": "vulnerability--a28b04e8-ad85-462c-b923-9158a7008803", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1cc61c7-e45f-45bd-9868-b7956cda1218", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.84.6.240']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f5bcfd3-5e5c-41aa-9f2e-951def3ab45f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.87.216.78']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--457d9081-aeae-4edf-a5c7-789198ac1920", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.87.38.69']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cc8f9b5-1bc8-40a9-9e9d-912b70ed7dec", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.89.7.8']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--258ec422-8a98-4838-b21b-92c801dc0d74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.91.10.99']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d607af2-8a13-446e-976d-c77179057745", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '34.94.140.195']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--586d1e59-bad9-4cf7-a649-1ac5a2aa2de1", "name": "Malicious Host", "description": "Web exploits: mitre-t1190, php-backup-grab. CVEs: CVE-2002-1149, CVE-2022-22274, CVE-2023-0656. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '34.95.196.39']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22274", "external_id": "CVE-2022-22274"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-0656", "external_id": "CVE-2023-0656"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--8f5158b4-755f-4978-a03e-c274b2e04463", "relationship_type": "indicates", "source_ref": "indicator--586d1e59-bad9-4cf7-a649-1ac5a2aa2de1", "target_ref": "attack-pattern--0e6e4145-cd99-4e68-a56c-3613ee5420af", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--aa1fa21f-550e-4cfa-85d5-ff8ac99fee36", "relationship_type": "indicates", "source_ref": "indicator--586d1e59-bad9-4cf7-a649-1ac5a2aa2de1", "target_ref": "vulnerability--9f6b4a40-b312-4d6c-8962-53e248873558", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--baf4e8ff-a037-4726-9199-549b1146cf69", "relationship_type": "indicates", "source_ref": "indicator--586d1e59-bad9-4cf7-a649-1ac5a2aa2de1", "target_ref": "vulnerability--7981112b-110c-4ce1-bd6d-9361a9d00747", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1b78c82e-a4b9-45be-bedc-87541c007a0d", "relationship_type": "indicates", "source_ref": "indicator--586d1e59-bad9-4cf7-a649-1ac5a2aa2de1", "target_ref": "vulnerability--611e800c-c845-478a-b4bc-40f780f1b283", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b907087-6ecb-4ad4-92a6-e04ef522ad6f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.129.169.68']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da2727b5-e9b2-4cbe-9b0f-9a54fb49cc1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.169.206.177']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abd03115-c792-4f6d-838f-faeccc82d677", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.172.134.248']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7e3d176-16b0-4966-8b7e-f62ed2cebfdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.187.27.108']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e4af88b-cb3d-42f3-96b1-2d99027bbad1", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.187.40.163']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f19c03df-7ba5-4bf9-b37d-e7ea9a26f818", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.188.237.239']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06f03f9d-b759-4ec7-b1ed-0108bd345492", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.189.213.206']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93a44013-d508-4fa8-981f-a601cbd0026c", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.190.210.118']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a104f5de-e7f0-420e-9001-fbf1f7578690", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.159.53']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22c32214-8f49-43cc-aa43-64826155a602", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.188.22']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--800a6f75-612d-47b7-8673-ff791a416e66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.224.118']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32af3c8d-db66-4969-b021-810fd5ad60ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.195.78.114']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f7d45ba-2750-4d78-b49c-5fceb984726d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.106']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b641977a-92a1-4794-ba7f-02092a387702", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.107']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18c7f799-b2f6-402b-82a2-3bb58d031763", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.108']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdf968a0-ca69-46e5-8f2c-1fca3648abad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.109']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3a8459f-3f49-4141-acbd-f169cc413e60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.110']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7220be16-4cbb-4bcc-baf7-e097992d8a0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.114']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53e579cc-8b4c-4fb4-b18e-e23fc400754a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.115']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3931040-8925-47e7-a3d2-a7f1d79385f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.116']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f68d59f8-9488-45c3-b328-7fa8317f57e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.12']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78775456-da11-4c50-92cc-06411f10c219", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.142']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b05675f-b0ba-4dca-970f-fe1d821e9439", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.148']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d1913b4-4653-4555-a9a8-ea633cbeb537", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.152']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfb32d62-5ca3-4779-b7d2-06e9893b9c76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.160']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4b62c10-5f3d-4b61-93d8-aa3eae5bf6d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.163']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a150c40d-4cba-4bbf-a02f-11177342605e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.164']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba879b84-aa4e-4612-af7f-c11e29912a77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.175']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b80e0d3-1af6-4187-9903-41644a7dbdf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.179']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a099e51f-d240-465b-9945-415daac740a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.183']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a5970d4-b834-4098-b0cb-75db0601db84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.184']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87865f58-b97b-443b-8b76-f52b8a32209b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.185']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adb1375d-1d99-4c90-8c0f-544693481832", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.195']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1f27904-26f6-4690-a16a-591f34a2b1ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.196']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c26d287f-bde5-4aaa-b829-c94b2b00c58c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.198']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3507c625-ad57-47e3-a5f3-2ecf227bea53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.20']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12d77efa-c29f-460e-ba94-498f09e78cfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.203']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--573d5e96-d6b4-4468-a802-17805dbecdb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.208']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfe15b88-3740-4ff5-8464-1ddcc3180dab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.218']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--429bf55e-a8a9-4062-be35-bfbfcc7f4d12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.229']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c2649a4-be84-4cb4-95c1-e9549ec1bcbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.230']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--985e3590-0323-419b-9769-a11d2a7b15f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.235']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c11f4b43-5c73-4f02-9c58-6f6440afc2cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.238']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41420d06-74ab-4402-ba99-c395382b259f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.241']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48544fd8-c8b4-4ed4-92fd-f0d0f638c8e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.243']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49cfd67c-894b-4160-811c-a683dcfed72d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.245']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a6a3b3a-e953-42dc-8cfc-70264c6f8dbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.25']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--859be43e-8a95-475b-876a-b6831e86d231", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.26']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d868e2e-9216-401e-b9f2-056998e07c06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.37']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1844c1c1-ffdf-4c5c-be0c-d2f9a9e53cfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.39']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffbf8020-fc77-43a6-b1cf-b45819c17e6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.43']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58de0e81-c7a7-46fc-a100-abf71a946a68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.45']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee285ffe-42fe-4955-bec3-b12f4109355b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.48']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d45fb188-dab8-4337-8a62-64d5a25d1c51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.56']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d96a364c-23d4-4192-a500-5f15c7450cc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.60']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4cba030-849a-4571-b509-a7cea2c54f03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.67']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d67b17bf-9bef-4fd5-99ef-fed2e06757df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.68']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4357bd45-162a-43a8-868e-89fb55c21671", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.76']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6933c9cd-38b4-4667-bc3d-a21c184972b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.210.84']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46293bd2-655b-4687-948b-14a7a3face21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.101']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebcb2000-1eb0-4cbc-a765-ccfda696d4dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.104']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--854eded8-aeae-4030-b131-a4db5f6849bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.107']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5525cd02-5424-4fb9-8e00-dc7bea3e8e71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.113']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ff87e93-c218-4028-a06e-c4f9dd32da3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.12']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c8b3778-5df7-4863-85ac-15787400199f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.125']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--041f2f48-08bb-4016-8b28-8abde45905f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.132']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69de5fff-da3c-4768-af07-f67c8eb6241e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.138']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d922942-9b3d-4870-8cc0-c13fad06ec67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.139']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52e46203-90d6-4aa8-90cb-b93a8f93d599", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.144']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6289d7f0-2ba5-4213-9c2f-0339e330325d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.149']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b2cf61c-ed37-44ab-a68b-e577ba96de00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.156']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b261e2e5-caaa-4c52-a68f-0b346c8da331", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.185']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87e0d55b-d336-4000-8ccc-5cfe929adcd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.20']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afb84fd0-20a4-4e09-b874-10bc7f3765e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.200']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ad884b2-97c6-41ce-ad6b-4f4b6facb20b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.204']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7464fcb3-6d9e-4e74-b758-fcb3225b564d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.21']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--581de3d6-729b-4254-988a-c89f8b9bba4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.214']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e9ead63-504a-4daa-9a10-c1aca6e34147", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.224']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f7b287e-010d-4da6-8cc0-0bd41c12217f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.226']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5537ba12-5f9a-4846-8259-9b591f3dd46c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.228']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa503286-4652-464c-803e-e03954a12021", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.234']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbb88caa-e8a3-4de7-ab5f-0d814c98a7c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.240']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a8a9378-917f-4890-99a5-50ad6fbbd84b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.25']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15a99710-3da3-4ec9-b2d6-fa8c75c98c0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.3']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34c57764-b7dd-4f4b-a82f-5522f6c5c91a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.33']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0df71b0-129f-47df-b4af-f213243ce354", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.36']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49846117-6b93-40d6-8642-be6fba551655", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.4']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79936b0d-3cb8-4cbf-80df-6dbec69b1f7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.41']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aac45760-cc61-4508-ba4a-37fdcad5d963", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.5']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--752c6b00-5f7d-4cb8-ae02-907b25a78a3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.58']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0229e8ad-92ae-499a-94a9-d4ee740f12e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.69']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bcce6b1-2fcb-4b3c-9128-515f8a54aacb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.73']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0ebe0b1-5838-42a3-a266-e8ca0829edcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.79']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--873e9e93-ffa1-4dd9-83c8-77e7a209efe2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.80']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd8669da-9d88-47e7-bac0-75ebb9589578", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.203.211.93']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93f739ac-f6fc-45b5-a97c-c4364c531731", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.183.76']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72ea47ab-44aa-46e8-8404-6418c02547cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.205.27.210']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a6c35ee-5895-4b68-9b95-c5270b98de39", "name": "Malicious Host", "description": "Web exploits: mitre-t1190. CVEs: CVE-2002-1149, CVE-2022-22274, CVE-2023-0656. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '35.227.186.145']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22274", "external_id": "CVE-2022-22274"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-0656", "external_id": "CVE-2023-0656"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5d14ea2c-27bc-4bae-a124-14afaed0b798", "relationship_type": "indicates", "source_ref": "indicator--6a6c35ee-5895-4b68-9b95-c5270b98de39", "target_ref": "vulnerability--9f6b4a40-b312-4d6c-8962-53e248873558", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--d62dd68f-78ce-42ff-95f2-8b6438ea261a", "relationship_type": "indicates", "source_ref": "indicator--6a6c35ee-5895-4b68-9b95-c5270b98de39", "target_ref": "vulnerability--7981112b-110c-4ce1-bd6d-9361a9d00747", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--65fb9df9-bdff-440d-866a-517707383c8f", "relationship_type": "indicates", "source_ref": "indicator--6a6c35ee-5895-4b68-9b95-c5270b98de39", "target_ref": "vulnerability--611e800c-c845-478a-b4bc-40f780f1b283", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02abe708-6827-4269-bd3a-bda623c5b899", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.228.211.226']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d334eb46-5db3-47af-af7d-9e34eab736c2", "name": "Malicious Host", "description": "Web exploits: mitre-t1190. CVEs: CVE-2002-1149, CVE-2022-22274, CVE-2023-0656. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '35.237.85.166']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22274", "external_id": "CVE-2022-22274"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-0656", "external_id": "CVE-2023-0656"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--c96fa4a0-acfd-4f12-9418-98257f500571", "relationship_type": "indicates", "source_ref": "indicator--d334eb46-5db3-47af-af7d-9e34eab736c2", "target_ref": "vulnerability--9f6b4a40-b312-4d6c-8962-53e248873558", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--1d165fa6-b6a5-41ca-87c4-826b5b387013", "relationship_type": "indicates", "source_ref": "indicator--d334eb46-5db3-47af-af7d-9e34eab736c2", "target_ref": "vulnerability--7981112b-110c-4ce1-bd6d-9361a9d00747", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--84249024-e699-4536-b83c-d8222f95d296", "relationship_type": "indicates", "source_ref": "indicator--d334eb46-5db3-47af-af7d-9e34eab736c2", "target_ref": "vulnerability--611e800c-c845-478a-b4bc-40f780f1b283", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d584807-6528-40fd-b4be-28848c67b32b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.240.213.148']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bc52afb-21e9-4f35-bed9-8a6a8d607bbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.240.87.206']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8574cb74-82a9-4edb-ab19-5f529d725c6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.241.167.160']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d56cf7a-b6f1-4136-abef-d858910e0ce2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.243.108.228']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9d3f085-2a4b-4440-9283-a7713956bd9c", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.243.132.179']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efe84bb0-51be-431a-ae75-4bd5093e259b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.253.86.96']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--730b04c7-7baf-4773-806f-0400583604b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '35.81.39.40']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79b48d21-069d-46dd-831d-056db06b2c5b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.232.160.174']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a0b6787-c663-4afc-94e0-2f5c6044bd7d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.234.95.43']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebc297d8-be8b-48ab-a9f1-7a8852ff9381", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.235.72.27']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb297e6c-0e4e-4707-944c-c62b83c7bdb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.33.252.119']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af2bcb10-3954-4e2e-8120-5355a743a589", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.54.98.33']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca5aec07-7098-4c52-814f-9baa4d544cd1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.64.131.68']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b17752ad-9056-41b0-9339-ee609974d9c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.65.1.87']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2b40b5a-9ed6-4cbf-9ea1-253d230d094c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.70.79.7']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc668467-8c7a-4cf1-b8ec-7a1b22c2698c", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '36.83.84.149']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86941e4d-8643-40d6-99d8-152246bc96c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.116.1.31']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eec2ecb4-640b-4580-be11-6f645d40cf96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.187.189.23']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21ea0d27-6910-4d48-aa52-89704c24a4c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.228.64.54']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16ea797c-f270-493c-934f-afc3ef01c602", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.53.108.178']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c3930d8-3812-4eac-abf0-4d319eb4667d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.57.224.232']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0d5715f-8ce2-4d78-b7a2-8559cc25f38d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.77.150.26']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aa4efd0-1dbc-4428-82e8-ce6ac0a04588", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '37.99.37.52']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a91396fe-63f3-4c47-b48b-8b2a7eb6af27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.146.28.70']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e58d46ac-0216-4e58-b961-1c37753f68da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.19.156.227']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4051a2ec-10ad-42b9-a038-1e211c7c2f53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.246.26.116']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da2a7539-a83e-4d11-8945-3b215cad0964", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.255.24.38']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f6a7844-b25f-4133-95aa-d3ff83f61cbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.61.184.44']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74185e05-78c2-4470-b08f-bbb030739e74", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '38.74.225.138']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a8b7d8e-eee7-40d7-83d5-d9da6b9314d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.153.189.154']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49eab03e-3cb3-424f-9a1e-d5b546a60b5a", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.37.163.206']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfa9881c-0caa-4f6e-beac-af86cad2edf6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.47.185.243']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f240a360-19c7-4ec5-88fe-1994184f06c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.69.29.90']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c6186ed-dcb5-4d41-80c4-0616a73c8645", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.73.186.82']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55bcb04b-9ad6-4be8-a064-0de87a496baa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.80.194.152']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e84c988-bfb6-4492-b467-359a13ccadb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '39.86.148.180']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6696d6b9-e749-4ca1-8ebb-e14dd54f7da8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.148.1.136']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a712feda-6a5c-441a-969f-de60456bc44f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.148.1.50']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7ea74a0-d763-482c-a541-a6e5aaf8a3fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.148.1.89']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7da6f5a7-13d3-4b42-bf2b-097b9c6661e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.148.1.91']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b8e0c72-caa6-4abc-8406-eea6d0904c28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.148.1.95']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c4dedc1-1bc7-408e-866e-5caaf35373cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.148.17.163']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f27e3cad-fd1b-4469-a050-7a87dec62910", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.148.17.174']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--116011cd-034c-47b4-ace7-003656dcdbd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.148.17.19']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fa30def-e592-43b1-a72d-517c1f6c461f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.148.240.209']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcc057e0-9361-4eda-bf78-4ff478757c78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.148.9.22']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e408b76-111a-449b-9ca2-874fdee59ed8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.150.189.129']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68c4028d-2e04-417e-bdbf-b59f4bb9052d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.150.192.58']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8107525b-a707-48b8-a7de-fe2976c13f42", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.224.59.75']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cae83e2-0762-4059-9f20-82bf15280c11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.227.180.172']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9637f460-0472-469c-8853-a7b2f63d74df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.227.180.210']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89effa05-01f0-4b39-860a-9dcc16db43b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.227.181.20']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e13a943c-a4b9-4947-ad1d-791559d663f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.246.229.67']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73293b89-f669-4829-9f04-d65c31b5913b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.249.16.233']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1ca39c5-0c12-442c-adf9-d86806bca02a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '4.249.17.106']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eb2a238-1264-4f34-940e-13e28b1f8c6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.28.175']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac3fa437-a606-4c8d-9ddf-a84f9a4b19ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.28.53']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c324a14f-78dc-46d1-82ed-e3c235069efd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.29.109']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b503ae3-9eeb-4a9d-9e3a-ad73145b6eab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.35.56']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b41402d8-e97b-426c-aa57-ffba4a51122a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.36.161']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62d46160-44b9-4f8f-8af0-4afb45efc462", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.36.83']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d86f8a5-40c0-418e-a1fc-13f0f46f0f84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.37.43']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--928420cb-a083-49fd-a60c-ce210184a72d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.43.133']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95ad5786-5496-44f7-abb5-35ff0b4c0add", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.44.118']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b2d8cd9-840f-48ef-bec5-952a11e37d5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.119.44.140']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--256ae901-a840-4469-93f1-9de3aebad298", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.112.119']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4608f50f-265a-4cc2-980f-a05706252877", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.112.233']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--250a96a4-9f0f-4902-a951-c82bf4ae0b86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.113.197']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31ce06b1-3035-49c7-bd1b-c0bed1727a5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.113.221']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3a1bb3a-daad-46d9-aa45-59cd67f08bd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.113.225']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22ba194f-bbd2-4906-9caa-98789ae4521c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.114.124']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33640018-c79a-41e1-8514-a3ab419a0ab6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.114.197']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0a35786-1c7e-404a-8949-2b964e79dc95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.114.206']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67e112ad-45a2-40ba-a78c-42ba412b1b32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.114.255']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84d9c8c5-ad48-4d8b-b6c9-82a5ebe62d7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.114.34']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbaae222-3b45-4a5e-baec-3ecdbfeb5486", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.121.102']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--182cdbf2-1f49-44c6-84a6-aca6d3be0b0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.121.15']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b72762b6-d5a4-4cdf-bcb8-54c455f45252", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.121.219']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0343c0fb-db90-44d8-82b7-c7377b207d19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.121.48']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7972dc4b-ad89-433a-ab65-591b7040bb54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.169.129']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f74d5039-6ed5-43c3-85f8-946715f6a048", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.169.231']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c72e3fe-7216-4fbe-ad9b-12e89ec00f76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.170.135']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01a9b2e5-6111-4602-b293-54ec23cadf74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.170.171']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef5762c3-9636-4885-95b2-043064755fa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.171.19']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53b212c5-dfe8-4858-a86d-09dbd8f9a1a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.179.225']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eba3b622-3e25-4b34-b736-a3851f10cfb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.184.214']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da23d414-b218-4d78-9c9d-a0bfcf0af35b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.185.230']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--962e9817-8987-4424-a643-e705c0297f63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.186.101']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07b0e126-2112-44ca-976b-42674360510b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.186.111']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23df030d-e8f6-4750-a963-27d9d9c3efc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.186.80']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bcae0e9-bb1f-4ae0-9ca3-990aeef2f441", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.186.88']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4f6caba-a250-4614-9f40-21e9444667c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.186.93']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f44201e8-876f-4ee6-b4e9-267a25acf4f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.187.52']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccb70805-8e0b-4e2e-848b-adacb06f0912", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.81.69']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--382b1880-b5ca-4b22-bb21-e876ffaef2dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.82.180']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0315c16b-fbc0-4b5f-b685-7b78f18ba58b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.82.219']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38422dea-c8ee-4110-be72-89a441286891", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.124.83.73']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb8a1e3b-cbc6-4d39-b956-8e0da16ad452", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.233.3.138']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff6c6380-be9f-4c20-8c8e-a76ea5266d3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.67.162.136']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76f42510-78da-48a0-845a-29e1e7d783df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.67.162.172']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9796972c-d691-43d3-9d95-b420096909ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.67.170.132']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a444dc62-aa3f-4eca-98be-493bfa23027a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.74.210.34']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2b8642f-f520-4707-835f-d4ea4b3987e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.102.101']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c472bd70-6ad2-43f5-8f09-d1c674534874", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.113.212']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22e52d1c-6f32-44e1-b0b7-414a8ad6a6f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.76.122.49']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb7f4cff-0acf-4ea5-b35c-f1fe3763ee19", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.132']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44c31937-4b71-436c-9231-704264feb121", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.14']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--927c26d9-b658-48f6-994c-deb8955f36d6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.151']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dc455aa-6fb0-4131-a25f-33feb8e1a034", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.203']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85bd01b3-cbc5-48a5-8719-7e63736e35fd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.235']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92eb1cce-f568-41c2-9b43-2e4e5e31e8b3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.24']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24ba9cd7-6107-4667-ab08-208d737bc1bb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.255']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8016650-ab68-4902-92c0-2a7ff9fedec1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.30']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e4f189d-2b3f-4d10-87d4-edc5c53e21ce", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.37']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bce5fbc-6c17-403a-be1e-0972966bd54d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.40']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5305c05e-aa4b-4a2d-9053-0cbc406c6869", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.43']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d8ff8a4-706f-4f74-b01f-20be0e1b71ad", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.77.167.7']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51d576d2-41a8-4351-bb39-7a295a80e073", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.80.201.206']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82fad51a-5c90-404f-99e3-5f59dbe01385", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '40.80.203.218']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73281697-2e62-4ccc-a244-e00d18e52a4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.185.61.177']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20fba942-5935-4117-8857-2f04aa52d5e6", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.208.158.241']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73b7064b-1422-4032-961f-157e2bfec84a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.220.200.106']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5be507e6-162b-4b94-9003-38f52063d3a7", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.230.60.199']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc0efdf1-7704-4e1a-ab90-a13c3e210512", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.232.27.112']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36de3653-9b45-4535-9a94-2be722ef851f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.56.131.2']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34922206-31cd-481a-bd8d-5739424321ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.56.200.120']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f144a39-d3b7-4138-91ac-06972b94a393", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '41.76.83.206']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d53e601d-8d2d-4ff8-b191-c0ca895e7898", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.100.58.208']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6913dc9b-fe62-4651-b446-6569d32e60fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.116.229.217']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0604e6e3-ba0b-4e67-a0a0-834501cb941a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '42.233.144.23']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--119445fd-1db4-4843-a766-6dbbcab01269", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.106.17.250']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd8f5d49-907b-4d4f-b1fd-3ae51644e643", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.129.68.8']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac815ffc-8bbc-4b85-ae07-ba69b65751b3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.102.223']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f7ab863-8918-47ed-9a96-a3a40c96608f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.102.7']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3748f0ab-9f04-465a-a2b0-3bee547c30d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.111.40']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5126da4b-8a54-450c-8702-a8488e9add42", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.28.99']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8760dfe-4a34-4c52-a93a-64f19944968e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.130.34.74']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6e1607a-acf0-4e91-a1b4-b3556b6554c9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.131.23.154']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ac43e9a-8cca-46d9-8695-bf87eb103659", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.11.201']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2edbc0f9-1bbd-443e-b802-d1fcd672acfd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.78.217']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53a6b401-8782-40a2-a91f-cd87aeec1b73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.134.91.35']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e608e3f1-a0ab-4e2b-a3a1-511f5f905340", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.135.116.88']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b8126d3-528c-47cd-9f74-2e72a49fb025", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.135.148.92']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99ae4744-65c0-41c5-bb9f-7e0155c7c734", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.140.247.223']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--705906a7-9f60-483f-9e9d-e14ac3dd35c2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.10.13']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c0d7be6-c15e-4c36-8e44-5cef46d99ef7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.134.229']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b586dd2-257a-4796-9b0a-dc554ccd8aef", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.205.159']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a412d74-df6c-45c6-8131-b1fa394f582f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.62.161']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a637239-6dff-48c0-abd3-3ad2d7eea978", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.153.96.233']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad79c92f-e11d-4d96-a196-7cf3428d4165", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.163.201']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a34ecf2e-fabc-4af1-85cc-bddb085f2938", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.156.37.91']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3854ac6-2e99-4dd3-ae94-f486cb4498f7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.142.101']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af55b917-4d5a-4b75-97c1-a894c692aaa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.179.227']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5fc7f4a-5ea2-40f9-b1fe-97640d6a4164", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.19.28']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dcfd977-846a-42ce-9c9f-7bad388a3e5c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.46.118']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4204fc5d-7936-44d9-ab8d-5f6b8a5e3c98", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.157.98.187']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a5d0b1c-4750-4dc5-a4d9-d0e3ebf8456c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.159.128.155']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60f6e5fe-eb53-4daf-8466-8e86c91be750", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.159.138.217']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18c1d8e5-3f1f-4a39-857d-ec72d869f16f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.160.207.19']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f11e0cf-af6a-4263-92d1-b19cdbed9d93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.163.113.160']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--395129fb-caa5-48fa-aae6-ee0d1cc7dde1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.163.232.168']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ebb478f-4f5c-4578-923f-ae4091365af7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.164.0.96']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d136f22-7b16-49d5-8b0c-22c9a0e08926", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.164.3.182']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7db78a78-551f-4344-a541-afae14732105", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.165.170.119']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ff29204-3daf-4dd1-9d8d-67d6ee66f0c4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.167.194.179']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47b1fa32-cc89-4194-9ca5-a4515d80ffa8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.167.205.9']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a471ef6c-e716-498f-bd0a-21be4e544b5d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.194.54']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73a1de43-871d-4309-a856-f8de042a97cb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.195.82']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1c4d72e-dd8e-4c87-a19e-4e35e7f03787", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.196.203']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10de39fe-8f04-496a-a8e0-56faf88a51b1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.196.40']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e659b526-7896-4364-81be-08a0c82d7430", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.196.41']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c60de2a-6a79-4003-86fe-ad34b3033b7d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.197.175']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--021dcef3-d529-4b16-8c4b-869ec4ad3c81", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.197.45']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f5b25bc-4bf7-4155-a06e-f38e2d1b98bf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.198.104']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec622057-4f43-42ed-8b50-d7fe7990c0e5", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.172.198.229']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1826ee6-b4e4-4702-8d2b-7efd6a605131", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.173.54']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65184352-c9c7-4dea-82d1-675491098c5d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.174.113']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e0a16cc-17dc-486e-b25b-3f70cdfd09f7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.174.167']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cad8164-a84a-4902-8694-2f3c566d157d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.175.102']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45723dec-62d5-46f6-9c89-58028e9461ef", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.175.226']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abbed48e-6463-4317-85d6-da46e03d3789", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.176.149']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0691f60-52c1-4316-a952-643d68dbf39e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.176.164']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d74abe3c-0169-49ee-b0e9-848557c0513d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.176.171']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7959c8d8-411b-4e4a-81ef-87ad0c4a6357", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.176.179']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3315034a-3d94-42b2-9c61-196939466582", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.176.224']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2f88c90-d69d-4bdd-b586-0ed00fa74204", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.176.44']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7dfea80-3d6d-4d2b-82a2-2f6c266d1a46", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.177.250']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c25a6c9b-4a70-4ea5-8f79-bead64813fca", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.177.79']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7ecbbb5-5b2b-4701-9dc1-460f1ec9fbc6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.179.173']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45bafa3d-8b5f-4913-a261-abb48fb9bdde", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.181.58']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb32d59d-6179-4632-a854-9b816aec6350", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.182.175']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d890174b-9dab-4f14-b149-23fb3c1160dc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.182.254']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--996a841b-dffb-4845-b49f-8e2b6d086b8f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.182.8']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49ddcd65-f18a-4ffe-8042-69e28f12cc23", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.173.182.80']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b61f429d-1447-4857-9755-b94484600793", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.10']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25f90a3d-db3d-4360-b7e6-43f6521ac47a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.8']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeeb8ce7-da63-45c7-9a7f-086d358f0ec5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.228.157.9']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff8efd63-63b5-4635-8cc4-0388555b4a6d", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.230.94.188']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cadbbd76-aef0-403b-aade-1825c540f34c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.240.14.35']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dc19830-eba9-4240-a770-f1e6d010e2ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '43.248.108.224']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc9951b2-a217-45ca-91c6-a894939ce979", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.201.163.116']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a23f5e83-95d4-4d0e-b203-a423f07560dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.201.252.11']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de697308-12ef-47b4-bcc1-971dde3502f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.203.125.226']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96731c22-c823-4aa7-bd94-ac220540829b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.204.80.36']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b11a5f78-2b52-4ed9-be06-22ba1cae2fd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.220.164.249']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f217df35-fb52-4760-9a93-e04b847e39e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.220.188.58']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--089df095-f61c-4d38-8743-6f515b46f787", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '44.226.211.167']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2de56f1-fd0d-425b-95af-64e7e0743973", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.119.212.99']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cca359bb-6820-4bab-987a-257dd9c4d3e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.120.126.66']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e97319d-d0bc-42e9-8852-b0d6013c349e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.134.185.116']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4f8578f-9cab-408f-a362-993d28e15bd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.134.185.117']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--173f4b9b-f70c-467e-b898-441b004717df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.134.185.119']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19e9bc3b-da1e-4780-a5ef-dedfa440fd14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.134.185.124']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da728650-2f5d-45f1-a5f5-7e38bfaf12fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.134.185.125']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb380a05-e360-4794-a120-41d1ecfdfc7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.134.185.126']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bf79094-8f28-4713-a4a8-c1b5f0ffc384", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.134.185.127']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fb13760-d174-4d29-aed3-7eafc0a5f86c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.134.185.149']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0c2580e-f4e5-4fab-9e68-d31923aef90f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.134.185.150']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7754b3b7-1b3c-484e-88f6-e308455a6686", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.134.185.151']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2ce55ba-ad1e-4c10-ad6c-155ab7dc09df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.134.185.156']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d798f023-ceb0-4d52-b387-42f5b87ef633", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.134.185.157']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bafa55a-9366-4b33-b08a-5d92a924743a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.134.185.158']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d954198c-b9bf-4014-9223-a0602b058c7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.134.185.159']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--954a0e91-f4c0-411b-a6fa-11c0b725ebfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.134.185.181']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--971fb4c5-b3b9-4211-b1ff-90cd10aca0b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.134.185.182']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d5e81b3-e014-4b94-9017-7b123f4032c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.134.185.183']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c5200d3-613f-4193-8a65-f04c0ffd1445", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.134.185.188']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6415d02b-776a-45c1-beb2-f835ae30be68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.134.185.189']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77bee255-1b9f-4db9-a41c-9abfc22a9613", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.134.185.191']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05ab4a6e-b522-4a45-906e-f61910551ca5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.134.185.20']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66dfc58a-cabd-490f-9754-376cc2085d9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.134.185.21']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d59234c-b281-4e95-96da-c8b2b072efbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.134.185.212']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--314d613d-e4d0-423d-ab31-cae01e5dd76f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.134.185.213']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80abbca4-91ab-4efb-a51b-1bccfa812b1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.134.185.214']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dd04f54-8567-472a-a1c6-4a26516b54d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.134.185.215']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2768e1e8-ad28-479e-96d5-22e7a8ac4fa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.134.185.22']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1decbee9-978a-4439-bd67-e2d4dc73b5fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.134.185.220']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f2649a4-82a8-41e6-a43f-67aff617963b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.134.185.221']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f518f14-868f-44db-8a16-9f07adb570e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.134.185.222']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bc8f041-7cfa-4654-837d-be21c9308756", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.134.185.223']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4f5e71b-7008-4795-9ff1-bee4c0b85a06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.134.185.23']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d16c571-5967-4e2a-b3a0-8214fe07047a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.134.185.244']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a03891d-ef94-4cb0-95ed-734bdc92773e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.134.185.245']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44599448-99c4-4a77-ab4c-a3a5e7f4c6b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.134.185.246']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3a67e74-0c18-4ed9-a870-ca6cac68244c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.134.185.252']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45f7b3a9-0278-4689-93ff-5c73025986c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.134.185.253']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14c63527-4816-4626-98fd-26351a30527f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.134.185.254']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b37b82c-b126-4538-bb26-65529bec82e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.134.185.255']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2728a285-1ab7-446c-a0eb-a91156658c40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.134.185.28']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87f9f35a-e780-462b-8925-c35081db44d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.134.185.29']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eab0b82-dc8a-4cf6-be57-0ea6bdfe1a71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.134.185.30']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7195e003-fc6f-4d7c-909c-f561eef87bd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.134.185.31']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11317944-eceb-4043-8bd8-407465ab0336", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.134.185.52']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31632895-4362-47de-9703-6746ceb17434", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.134.185.53']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5d5b927-aa6c-405f-88e3-563781fbdf69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.134.185.54']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a2ae47b-1b7c-4146-9558-76ed6712c51e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.134.185.55']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--599b0b26-c398-47a6-b733-a8f82af51c86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.134.185.60']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7bea538-56f3-4bf2-9633-ee0a1c844490", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.134.185.61']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--455ee843-4e8b-4897-9a5c-def4fdaa929d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.134.185.62']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eca9ec56-bc7e-485f-9206-c7b234a6c4e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.134.185.85']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f2c5723-f200-40e1-aac0-3707fa2dd858", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.134.185.86']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcc2ba9c-c20e-4db2-931e-2e807b2edc45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.134.185.87']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--deb12ce8-4e80-4efa-b6c5-6f828f08ddd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.134.185.94']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0de68aef-079b-4672-8176-2e1c36e337fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.134.185.95']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5034d1af-0cc9-472a-8ad5-2e697e52020b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.193.193']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3a7f380-8f5e-4f3b-8a60-3d3aa86b37af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.193.194']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--210e9b3b-cfcc-449d-9be8-bcd45b42a25f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.193.198']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44a1ece5-7017-47d4-b107-acd081c205f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.135.194.113']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ab063cf-3276-45be-a22e-d86bed326a8b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.139.104.164']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbf7ddaa-d76a-402f-a2e1-c0eef42826f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.161']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7362d59f-ed63-49df-9071-23c778d7d11d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.164']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc6f9592-9cdf-47c0-9ba2-f44b8b6d2a1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.169']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d1cf60f-85a2-4c16-af39-fa1f4b6d1bd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.142.193.221']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17e2e7e3-b0fa-4963-9d78-f0111ec8167a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.0']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8f3764f-a5b2-446f-9d05-9371e37f9ffd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.10']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9dc5272-4671-46c4-b58f-c4e54002c0f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.100']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75f95e93-db92-4915-8964-e47d5e65d5f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.103']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61f2f383-9427-4747-800c-a7e5dbf5f508", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.104']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83327ab8-7267-4f91-b25c-017aa1c61543", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.105']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97b55993-3edb-4871-9709-a119b07f498d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.106']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3df72de2-4cbe-4ae2-b873-0bc94640c146", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.107']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c05d1a7-2dc9-40d9-b0e5-bd588b78f37f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.108']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63bc6335-6605-4c51-8ba5-46a5bc671c8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.109']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--389272a2-6d31-4c15-8c0d-2146abdcd2f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.110']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cbcb5e4-97a8-4d1a-adc2-a568389b4e64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.112']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c7bce45-d7c9-40c0-95d5-1c6bdfcef136", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.113']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa21267e-c099-44aa-99cb-3922d1886c79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.115']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70e84522-3f78-4cae-bf83-6bcd81bb1b77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.116']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0b1ed7d-ee84-4829-a83e-56671f96e9f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.117']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43fa1818-d07e-463f-93ee-a96554f1c087", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.118']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f9cd971-9a3c-4854-b89f-3ccc14a86bf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.119']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b630b469-9676-4481-a19d-07fa76234133", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.120']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05d97f71-436c-4aee-b71e-bf66f1c50301", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.123']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6aa7c5ff-0ce4-4e6f-b969-dded639f5f1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.124']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41581e27-43be-46ae-bb19-9e161ee56e0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.125']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aea55f3d-c4c3-480d-9c1a-c4cd1aae4f6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.126']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da5d4e4e-ec2e-405b-a43f-0078be9aff9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.127']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbb746c8-11e4-456d-a75e-d70e2ce295fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.128']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--289ae87d-ea86-4336-9266-1469a791ad9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.129']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5761bf09-ba58-4a1b-a000-33c8afe9f51d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.13']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--499d84b8-f3a0-4550-989c-97fc47484824", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.130']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fadb147-0556-42d4-8f8d-47a3d00b7753", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.131']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e783da4b-cc71-48f0-b622-d4b0d220758b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.132']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--833a22bc-1068-455b-8bac-27938fe54c2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.134']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d42c3b0-5420-4dd4-9ace-011eb518e4af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.135']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2351034b-7b3e-4b5e-8491-102d3c2411c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.136']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb4fae96-d640-4f1c-b60a-773691924eb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.137']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65e5e083-993a-4686-af94-9b2c3d32fbf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.138']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3043c3a8-ff4a-4230-a9b9-4b889919c125", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.139']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da96a744-3d33-493f-8888-f35a1d2bddb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.140']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e246fc5-d30b-4ace-bd27-b1034c03fe69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.141']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9cef92f-f429-45a2-94ed-60c57977f17e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.142']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43222f46-9c70-4ed9-8bc4-7d9deaea268e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.143']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--519b128f-32a3-4c22-852b-790619dac55e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.144']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac7456b3-780e-4dab-b491-f953e568bb03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.146']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5399ca78-9f32-4e2b-a16b-d61a03247fdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.147']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef9cb986-1a46-410d-9fc7-8d214d21043c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.148']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--928a6dd6-8375-4e4b-b711-2f29bbd25982", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.149']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--315b420b-bf5a-4066-8aa9-ebe9c60796a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.15']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab5fba6a-9df7-4e6c-a39a-306541f34cdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.150']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfcbb7c4-ea65-429e-8521-74ef38bfa493", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.151']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbd5ee02-8a31-45b1-b58b-26c7a8798378", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.152']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c141d744-9e17-4a4c-a4b5-fff08c5ba559", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.153']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63c97f83-da1f-4c50-ae98-b88a612e1cb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.154']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2e7e45a-8c43-41a8-8b7d-995ed05904f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.155']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c0659a4-c071-4580-b9eb-f5048b39de8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.156']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--006c7b1d-c78e-4006-b44e-9dd9ab88bf2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.157']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--268cea9b-d052-4e5e-a297-0add795a2735", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.158']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb273581-5858-4c73-9931-9cb8ba6915a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.159']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83bd6dfe-481b-4aef-82cf-6492125fef19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.16']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d9c1ad1-baea-4624-8366-acf3a1f36d60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.160']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--526df72b-01d4-4455-a0c9-c5fa00dd35bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.161']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0d1e72e-b923-4cdc-a92a-6bd941cfd4e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.162']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9368cb77-523c-4042-8f82-ad8d781177af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.163']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02424cc9-00de-48c1-b21c-a7ef62b28bf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.164']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb3893df-a35c-41c5-b0c2-57ddafd7d57d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.165']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e1288a8-8a5b-4bc1-81ed-42a3c0191168", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.166']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5318503f-5084-42f0-a012-e79a4e6017da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.167']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07612897-e7e9-4094-b672-9a0acb1b3dd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.168']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6631c9ee-d594-45d8-b19e-2a036adc9a3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.169']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29039e55-9da9-4eea-9069-217f0aa7847a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.17']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83df044b-f97c-4385-8662-5433b30bcdcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.170']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bb740cb-26ec-4bb2-ae60-4f612e757995", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.171']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--822ee9f5-7a16-4fdb-8f92-4adced7ebac7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.172']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81559563-2398-41fe-9bb7-be158dd6f699", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.173']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa05b2a3-b0f6-4e83-8057-cb3a90045147", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.174']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c50bfed5-ebb0-48f9-8c37-b92228e7a609", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.176']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4112db1d-414d-4fd9-832a-8a36dd170c15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.177']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13c0482c-0f4c-4651-871b-4f43d4d9c24a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.178']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c6faaea-5f7b-4720-8aec-6b4738d9d76b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.179']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70d9b8f3-6c6b-4d6a-9a17-ef8517a79226", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.18']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1f9a707-6671-47ae-b629-09e73c2b2f7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.180']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12724877-c87f-4cca-bf57-8298e4c37d1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.182']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4c682f7-871b-4ef4-b0cd-3dbcc0833564", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.183']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52084626-303e-4151-aa96-b7eddb5f8256", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.184']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b0a91f8-a72d-4d52-afae-03f5a89e4857", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.185']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5ab884d-dd4f-4a86-9900-6852ada79d35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.186']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15a5b076-3f95-48d9-a6b2-4d01ebf0cc9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.187']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f79a6d1d-4b39-4189-be12-8733fa079343", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.188']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0142851-03fd-4ec6-9ef1-4d4dbe837140", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.189']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14baedf4-e750-40d0-bc0c-72efc6aa7d54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.19']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a399862-5885-4e08-8c84-099b423ed4ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.190']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecb762a1-805b-4a82-8971-6e21974cbf5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.192']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e24f49a-f363-42b4-8a05-e4da8811eb1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.193']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac907c7a-1a6f-4c56-8802-dbef64186aa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.194']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--999cd79e-36af-44d6-96bd-0a8dab78965a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.195']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--181948bf-3dcb-4820-b026-4be7ed93cbb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.196']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6497f76-fb62-470d-9059-8ac058046c7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.197']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b1e211f-bc49-442a-97ad-943bd6ce295d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.199']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--325e44ac-c66f-4953-9b35-2a5b46c3a671", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.2']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f749b8bd-dd48-439f-bda8-90ae0fe2d7f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.20']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37f02aa6-518f-4b58-93c2-3f14949d3d9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.200']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87746d9a-a209-4e4a-99e4-e4f16a331ddf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.201']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fec25bd-9406-436d-88a9-121896b77127", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.202']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a258c4f3-c256-4097-97f7-f492e53b07cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.203']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4710a56e-cb31-460f-a21c-2582b44b57d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.204']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29c1ccc6-0414-4516-a81a-543f926bfadf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.205']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04deee12-0630-4cdb-9920-3097f2389233", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.206']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bebf69d8-8a3d-466b-a047-11af06b3e117", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.207']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--933b71f0-de99-4aa0-bbeb-621d85f8721f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.208']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2edc2db9-ae34-4fc8-b51f-e3bea876ba60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.209']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--797dc880-373e-4d70-b521-c6968d60441b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.21']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79894548-0d3f-46ce-896e-65e59b4577e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.210']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bae5e87d-bda0-40b1-8e54-25dd38f45b2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.211']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bff58fa8-37d8-423d-b6a4-3dbf0b1df4dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.212']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d41eb2b9-3a94-4043-8bd1-dfdcc0e8ce00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.213']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0773035-1c3b-48a4-aec8-195e622aac62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.214']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd79ace2-d937-42b3-9bd0-bc9aac1641a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.215']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--622af699-3bf3-406c-a8ba-8694c88118d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.216']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--335cdc13-3e41-4fd1-b715-fb802df5eadc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.217']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4a35987-f070-4195-afac-e054a49ddead", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.218']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32a85296-b185-4260-a9af-18f4c67b0723", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.219']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04a0be58-0b28-4c9f-8fa2-12cb6923f309", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.22']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5dc86cf-0e22-4bf1-901c-b45700d70a84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.220']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc6c89cf-6394-471e-b182-e751fb6f2ca7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.221']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0006e66a-3f57-4e77-a72e-5e497b743d14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.222']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b800c588-3482-43dd-b2bb-050f2f84a858", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.223']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7f01c50-fbc3-4f00-9d1d-52feda42d144", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.224']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de14b699-d572-4e26-b993-315bdce5c23d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.225']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--191cc364-7336-4f47-bc5a-4d00006c81fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.226']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5baf6e5c-63b4-4fae-ad3b-2c5ab93391d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.227']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e77fff4-7734-42eb-ad2b-a5b577679dfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.228']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3999d052-79c8-4bfe-8ca6-3a178acaa48e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.23']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2aae5fad-346c-4cfe-b819-45f308c327c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.230']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a2da224-9fc0-446e-8e13-f727ef61638c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.231']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1bee49c-8755-45fd-b13e-74612dc8c308", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.233']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21b509df-de25-4290-aadc-150fbda6788a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.234']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e88959e-6e4f-48da-b3bf-ffae085f80e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.235']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1c79a52-a385-480a-982a-9ec68e0e24a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.236']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e4198a1-4c5e-4707-a487-2371fc5fe818", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.237']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--510005cd-ee94-4bc0-9f0f-c6bf55c278ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.24']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58477131-f6e6-4752-ad52-544b24e395b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.240']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5d514ab-db7a-4c26-97cf-689db9fadd29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.242']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34e96b66-131d-48f6-bc59-6cea12409835", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.243']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1399066a-6d02-4e3e-8f6e-40e8055a2c57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.244']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0fbfd85-43d0-44b1-a89f-bed17ada58b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.245']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84b55cfd-e4d6-45fa-b555-fceb25b1e059", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.246']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4763d979-3233-43bb-ab4a-092d1ed56fc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.247']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72c8424d-3cc0-4129-b820-d28c9d34dda2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.248']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20fb6c23-3212-442a-98ec-76f69347f904", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.249']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8a4182e-4e6e-4408-8705-c129454f1549", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.25']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a35a6ef-81ef-4477-89d6-60cf448d15fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.250']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd6ca64f-68d1-4cb3-80c4-06f426c6ebf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.251']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbe43c19-9ec2-48f4-9597-bf5d9662a91f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.252']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91905411-b789-404c-9973-c83690890d47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.253']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8927a536-4978-4a6a-b17e-17411596b750", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.255']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--135451a8-e4d8-4418-9ded-81fed97850cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.26']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4261b2a9-efc7-4354-bce4-37bb64e8f4e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.27']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae3a4747-66b8-4b4a-8d6d-1e65f8aabc03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.28']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb8e5d65-dfc7-4410-b577-2606d4a400ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.29']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--822565ad-ce3d-4e77-9636-94b267b046f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.30']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8390343-d254-4615-a443-4a2c9fc83fac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.31']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--159a51a1-c31d-4aaa-a823-c4982cf6400d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.32']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ce2fafa-1997-4eeb-b945-9f73d3811c89", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.33']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f48bcfd5-af79-406b-8f02-c2efa0c3b034", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.36']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70343aa4-ca8c-478e-accd-5a002725aec3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.38']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac4a3641-745a-4efc-9929-8e059fd01c9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.39']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87003e52-6534-4627-81b3-f6f0a542a9df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.4']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a81823b2-a107-4876-beb3-6418d3cca4ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.40']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51595c6a-4fa0-4fe6-8b20-1633869f5dbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.41']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16e499d4-09cb-4201-9e2f-c2e284f36af2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.43']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3ff0043-3ad9-4e8a-a94a-ff6d13dd5b9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.44']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6da1ed00-97d0-468a-b98a-dff566abe2b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.45']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--530872be-b9d4-4eda-b176-f5c0c1e6e959", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.46']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4815f92-2bc4-44d7-bc62-3daf4f61fbf0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.47']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ff22946-992d-473e-b16e-2e559e94bebb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.49']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--657670f6-44c3-4a24-94cb-8574173f6b6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.5']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c0bcb88-91c0-46ce-b365-f4cb5d091f0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.50']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbcea1b3-4ca4-46f3-90b1-ca869185dcc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.51']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cc0e3f6-f832-4888-a008-039e33111e1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.52']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c385daa4-68c6-435b-ab5b-45dead2bfa38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.53']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b8a847e-740d-421f-82a9-0fafe1fabf83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.54']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f6654fc-4ea5-4b6f-8f15-127b00369d3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.55']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2bd0055-0026-4ae4-baa3-393be84efb8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.56']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75ff59f3-a58d-4c74-8741-82fea67d9049", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.57']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8200f76f-8de4-4ead-be55-fc93ba679989", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.58']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--896de2f2-d297-4d00-aa7a-af44f9f2f49f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.6']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8be51f8-924e-4475-a275-05df1e4be000", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.60']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f837ad9f-7cc4-46ab-8ae9-dcfe7ee4fc53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.61']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e27086c5-33dd-4545-8813-a5cd022fc407", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.62']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cc41870-8dfa-4a32-82c6-ac8f3f0fb775", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.64']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9785f86e-eb31-4dd0-b0ef-3e0629053a4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.65']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b61315d0-f389-4380-ac90-b1a50249b24c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.67']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da83a654-718d-42ba-8b91-c19aeb345ec8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.68']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f9cd9c7-66cc-4060-a74e-85ea461146e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.69']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44c0483d-53ea-4c0e-9844-de8a602dcf6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.7']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--582bc147-7053-4b35-92a4-16c60ff4bfd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.70']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd1c5f93-58d9-4b69-872a-0ed5831aa935", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.71']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12a121be-b84e-4f0f-9028-e27eca71d46c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.72']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0577cbaf-89a1-4781-a731-bf929de562f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.73']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ffcb32d-26d2-4a32-9955-6154d1febfc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.74']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8ca6c7b-f180-4ff1-82a2-b6f8eefb6cd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.75']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12c95c21-81ba-4201-8a07-d1f2e583cd17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.76']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd8fbd87-6061-468c-b5f0-37aa37de26f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.77']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c55bf6ec-83b2-4320-9785-c440c247f8fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.78']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d87ff29f-4bca-472e-92d7-a7c1eb07907f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.79']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--597f4f53-bef4-4a82-aa58-e7b869858aaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.8']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d1c4614-7374-4da5-87e3-17156b52cbb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.81']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e42382a3-afed-4811-a7ff-339a8a6b78e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.82']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39aecc4a-5012-4540-b5de-5bc4a9ecc608", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.83']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40f01280-30ba-4c3d-9f05-9844af12d27e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.84']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8c0acd4-9037-417e-86c6-2cbdb7c0bfa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.85']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f05fc85e-10ec-449e-8f97-83aa7de8b2f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.86']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fe83e7e-5cf6-4191-aeb0-5ccf97af1e8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.87']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98ee99e5-88e1-4290-bec3-e8904b474bbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.88']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c2f4f82-32bf-426c-bc9c-5d89344b3105", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.89']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0b04e08-962a-483d-abe1-f4f0f31f36e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.9']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5838e695-1212-46fa-af0a-d8d4b08938ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.90']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa4ab368-7fb6-44c5-8cff-c05812cccb74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.91']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6371d9c6-8a58-414b-9daf-b08e6f923b20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.92']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eadfcae-1e8b-419c-b077-28ead2d49161", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.93']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5c1fb26-9fc0-4e9c-99ef-d470a18b6955", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.94']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d641622-230d-4148-a06f-b530cfc530dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.95']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f174a46a-d787-4651-b665-45070357c352", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.96']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa60e6e3-120c-4543-9ea7-6736d0f4b823", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.97']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df4397e5-60d8-4002-bef8-1493878d6040", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.98']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6528e916-1a72-4cbc-b5aa-909c0f15acf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.143.4.99']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74480a19-ce36-4c57-a2d4-c236ba7cadb1", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.147.123.66']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9351bb29-6a4d-4618-86bf-70a14ae057a0", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.141']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ec39775-bee7-4f7a-8447-37e5bc1a846a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.151']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac1dd712-b566-4f3d-bdbd-f785168ff7f4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.152']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf948266-edae-4366-84f3-4c7f9bd20988", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.157']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51ace58d-ce16-4b8e-8907-dff694d664de", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.16']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2dd88e4-310f-41cf-a2f7-509b0e7eb2ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.188']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fac161dd-9b6a-4db2-823e-63cec6c7e624", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.230']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a91dcf56-b20e-4244-b9e1-1453ec2f7876", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.10.5']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40e9bbb1-330a-49da-960f-0342a9d47137", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.148.9.11']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad8510e7-a698-43c2-afc0-7ffa7a137a7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.152.73.133']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f75d29ae-0a86-468f-bf93-e19b9fa1a4da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.219.111']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d3d38a4-a7d6-48c0-8ae3-8e9f149f23d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.153.34.87']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4753ef06-e0c2-479b-b24a-8eeb15cf69fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.154.244.176']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60db7825-383b-4b40-8ced-62cc4f51eb14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.10']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6914d973-67a6-4b29-b2dc-b56a43ce36d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.127']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0831fa95-6efc-49e2-a914-7b214629e039", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.13']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d82fd44-c74d-46dc-b673-0b901154526e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.15']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--338a3e81-8924-4a9f-92c2-f5583a49c866", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.157']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56f86ecc-ec1c-4fee-83e4-1dcd565dcaa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.177']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cecbb19a-e325-4737-8d1f-ef1d9f139726", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.54']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26561f09-2b04-4e0e-b3cf-a10e0d6dbe28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.56']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c93127c-4522-4b82-a24f-ffb7ccd5c9e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.128.72']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e19c38f-81ba-4c54-aa39-bb7d83e433ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.135']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17421dd9-c01c-41bb-a12b-c031c4c1d596", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.153']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5232f1a5-43a3-4e3e-a0cd-3f5b7bbfa070", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.186']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19e44c7c-f955-4042-b357-2ec84748b561", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.189']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddb2ffc4-10fe-4b8d-b4d5-c378e748d4be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.191']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2261edd2-7404-4162-94a1-d160638e5db9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.54']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebc3f190-24b5-473c-886f-1b45a44fde79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.57']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faef4169-feb7-4f49-9a15-1142c6387f1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.78']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90a9aa2f-a1e5-4c50-873e-6c5232b6c307", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.87']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d72f17b3-46fe-418d-b763-b5425dc49414", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.90']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--459f37c2-6508-4a0b-b124-c95980ec087e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.156.129.96']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b73b8c67-cd03-4f7b-b569-e0555a0c11c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.164.247.138']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16aba732-7e3d-4290-bb1b-e2fdd2874bca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.165.12.27']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13419ff8-f76f-4756-a21e-3299ea8bdf99", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.172.42.72']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55ade7b4-61e5-4f6d-97e3-3110dc25568b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.181.242.66']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--185bca29-5a68-46c5-be25-b93464455188", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.186.157.130']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f44b921-8155-47ad-a3f2-39c267131626", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.186.208.85']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7efefc1d-51e1-4941-a39e-86eef5a72a96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.191.117.155']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e315f222-b9e8-490f-9ae0-23fcf663eae3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.191.224.217']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e955b89-e233-4f62-9328-ab2e53ae4479", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.67.46']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b07e95d6-3bf4-47ff-8de2-e704e30a7765", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.248']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f8badfc-7e0c-462c-ad58-ddfa497435a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.249']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--512d4184-d42f-4f0d-9208-499694886441", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.70.252']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fe41dcc-5b54-40db-aacc-8773b7705f3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.194.92.67']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bef7f463-38f3-40a7-af6d-09c6fe8f0876", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.205.1.245']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6191d827-6c57-4029-be30-51e8af4bcc54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.227.255.73']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9cc350a-6362-404a-91c0-4575c2daaba8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.229.86.12']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8abaed1-d5d7-455e-9f98-2bc9832764ce", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.230.162.47']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee83eb7a-72b8-4255-a7aa-c085dd6ef857", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.235.6.72']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f3063e2-4d14-44b2-bd0c-0c9e6eb60394", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.245.54']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2813b098-386b-44e2-a365-88d001301cf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.249.246.17']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2920a763-a0b8-437a-84f7-d93eadd587f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.105.182']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e95d58c8-abd7-46ce-b92e-c39dac27d13f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.105.76']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86b4e88f-0cca-4946-b229-106fb4c9abf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.110.79']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e82603d5-ea4c-4e29-8f9e-79791c982757", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.120.143']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--629a1a1b-10c5-47f8-814a-6d985260aa56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.40.18']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c14b402-7aca-4624-a8e0-4bd45d4f1070", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.41.118']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--062eaa19-17f1-44a9-b30f-0fbb63ef719b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.42.25']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edfe1b21-8fca-4ae0-a6bb-ca6de65b73b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.52.85']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07806352-96f1-470c-b159-20c21db8ac06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.54.133']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e52c8510-8782-41dc-ac1c-3be501b04f58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.78.24']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--733e8e52-e59c-4772-88a2-bdd05fe51883", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.78.70']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dad3c7bb-251d-44c2-93f4-64d0a365f430", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.83.115']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7499e113-aac4-42ec-bc44-afbb574bacdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.84.124']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0570ce2-df9a-403b-a474-2b8b5a91ac78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.89.53']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5aa8c81-2429-41e8-9758-29e5086d4eeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.94.76']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3793bf75-22ee-4de6-87b5-8fc7dfda8ee5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.33.95.64']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f677a767-04e9-444c-8b19-610c2beee2ab", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.37.149.212']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d056823-d386-4b64-a5d4-eeef665738eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.42.88.54']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dfdb2e7-dab4-4a8d-950d-16836e4429a7", "name": "Malicious Host", "description": "Web exploits: aws-credentials, spring-boot-actuator. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '45.45.237.65']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}, {"kill_chain_name": "mitre-attack", "phase_name": "discovery"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-22947", "external_id": "CVE-2022-22947"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--806a4122-fb62-4fcf-84f2-1c1e278f2c01", "relationship_type": "indicates", "source_ref": "indicator--2dfdb2e7-dab4-4a8d-950d-16836e4429a7", "target_ref": "attack-pattern--95634810-4d5c-4cb2-8998-8afc1f8d05a9", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--5051a96c-53a9-43a7-8836-f700cbd565c0", "relationship_type": "indicates", "source_ref": "indicator--2dfdb2e7-dab4-4a8d-950d-16836e4429a7", "target_ref": "attack-pattern--dac02ec7-9fab-40e8-ab91-f7aa9152bf58", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--7767674e-4d6a-42a6-8115-9d451dde1563", "relationship_type": "indicates", "source_ref": "indicator--2dfdb2e7-dab4-4a8d-950d-16836e4429a7", "target_ref": "vulnerability--a28b04e8-ad85-462c-b923-9158a7008803", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38e2ad06-b585-49c5-a11a-d53cd9e7aee0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.46.112.181']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1594b4f-e1bb-4153-af0b-f5a1381db180", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.100.206']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88aa5cac-4b0e-4622-bf7a-ce38e43e18e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.111.60']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2957c6f4-bef9-4339-921e-ca8c8a4101c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.75.18']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81f54e1c-fefa-4677-bdcc-4d71dfc9a4e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.83.110']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c98eede7-586e-4e5d-9695-d7f277bbe9e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.83.247']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b2d5868-6cc1-4405-8587-05afaf9d0e22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.84.110']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--499182d6-e992-49d1-beb0-e8285886b667", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.56.85.254']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eef04bff-8301-4a0a-83ae-b8cbc9d88e50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.59.70.252']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad0750e0-bf27-4437-8a65-7c2a04e73265", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.59.70.60']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32f88764-a4ef-4785-b72e-75f375125c03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.61.114.184']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33973773-1129-454a-aac5-5a85f05441f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.61.170.217']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1d0fe17-3942-4e23-ba7d-5b98af6f7521", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.62.170.106']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cc0d56d-ab84-436b-b7b3-b269a92f8d1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.63.4.69']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e854c41-5c20-4441-b53f-411670762b2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.103.169']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43fe00db-4a1f-4aa8-950a-2e432b9560da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.104.47']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--481cf1df-b8cd-4ebd-9e31-28b0ee550005", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.130']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bc746f1-773a-4089-9d25-68ed32976e1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.193']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c030cb2-168e-4acc-bef1-4912c2d4fe10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.236']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b703f5d-c018-4cc7-b689-97b54aa7c6c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.109.4']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b28fea42-f7a4-40a6-8579-952bc1710394", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.110.218']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--388e4841-9a4f-4c5f-9cc4-57a0935f84e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.114.248']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecb6ad71-5f59-4e1e-bf06-10403fb8c1bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.130.153']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30d028c3-66e9-493f-8a29-240c81059c0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.130.156']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3741501d-b657-4373-b1cc-cdb46563d4d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.130.95']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5bcfdc2-ca2e-4d8d-a6da-6340b1d50182", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.132.41']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a393d8a1-e6a5-473e-9b16-0ed5bf0e0ea0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.145.211']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1e989ff-2509-43af-a7ab-799bf95a0eef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.145.233']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05b711d7-2adf-4b32-8a39-069c8b640bcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.145.254']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ad66c61-78a7-4825-afe8-0692f09d61b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.145.34']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1d1ad47-cb88-4aee-98eb-b01365f7c67d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.153.51']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dee48c5-4cc4-48f4-a505-61583616f535", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.153.72']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13b26194-c952-40df-8179-23fca2fdccc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.177.245']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cc9a0b1-8c0f-4b51-8aa2-89f0589354ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.181.104']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83caa8d6-3e28-4737-b5c5-87aa98b6f97b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.186.176']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21f2caff-c027-4401-99f6-45b79a0c7ca7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.191.178']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cf16081-c818-4319-9f2d-0980859ec3ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.2.137']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df1843fc-3faa-47af-8666-e7a36a8130e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.2.244']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37798401-4e23-46e7-b107-f2b8120b562f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.225.32']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7df9dcf2-a7de-4c16-8c72-ecdd902ffccf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.82.114']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d669434d-1a51-4243-b536-d8f2af2f0e56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.92.218']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8caf86c9-d714-4870-bcf3-d3b7ab66e527", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.79.98.252']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--218b86f0-4d64-4d68-9636-ae099686ad59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.101']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33dbfe88-d1c1-4c7b-8a8a-21d4ebcd5b09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.102']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2b7109b-0eb8-4254-8365-fb0b5e650cda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.103']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e04c21e-0be5-49a9-ae39-ff4f6cd4eb79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.105']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16e2dfc7-cce8-4bef-a267-27652c1acdc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.106']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--136c78e3-6646-428d-b514-87742e602677", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.107']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b1edea7-0a59-4128-86ea-01ce9369515e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.108']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80725c39-2338-4d82-b3f4-c92641315335", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.109']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16cd237b-c6ec-4062-9834-b6f1e9478ad1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.110']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f830141a-44f9-4a6a-bb67-b9e81ee45f88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.112']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7584b4d-a934-4706-a83b-f69bdfd1170f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.114']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a3d756d-3ec7-4834-8f6f-c9e75a6b22f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.116']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d2b3104-dc28-4c52-8ec1-a6e57c4473f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.117']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--116791c4-4134-4998-b984-bd2c06570b8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.118']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6073b126-0aad-4f64-92b6-5941507f9e63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.120']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd87aa80-0efd-4aff-9b3b-c3081a04883f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.124']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fc97f2e-efa8-4f86-a8e1-2889a4b098e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.125']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75a7111c-96d5-416f-ad30-6c905da92565", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.127']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac26cc6b-f4ca-47f8-9af5-61c553d79499", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.128']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6b990f8-a41e-45a3-ba0e-f3a5931b12ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.129']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cbfcbb0-642e-4819-ba07-19c82b992f85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.130']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37398a77-ecc0-4789-8421-18d6fe1c499f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.131']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e77a8bf2-92fe-4cf5-84d5-4bd1848bd6f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.132']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e979936-c17d-41e6-89ce-ae2bcf057c50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.133']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e25daf3e-d9e9-437d-b98e-c9cf36879e7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.82.76.137']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb7336e5-790e-48b6-8670-3b4d9b9992fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.83.244.151']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de2bcbee-f59c-48cf-a823-6fc98228cd26", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.86.83.156']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a56f9e51-b2ec-4a3e-bb6e-b22add428f50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.9.168.192']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e28beaee-ffbc-4260-a701-b121b7545eae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.90.163.37']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b0310f9-ea3e-450d-a396-f9274e8a6919", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.91.64.6']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66061237-511b-4d29-82cb-b431573403a3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '45.92.229.216']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dea44679-f74a-4f31-87b4-be57a43d0be7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.105.132.33']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a8c593b-0e0e-40f2-b25b-4e9aa6d7af6f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.105.39.50']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19708315-bed3-45d9-8667-eb58104ec106", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.138.95.106']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bad5f2de-9cea-4f7e-b5c9-5bd9767378b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.151.182.191']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aa1db1a-d1e5-4aaf-a755-cecce3e0afae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.16.34.21']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f078944-c644-4439-8d67-0090c0590e00", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.162.203.252']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f123694b-16a2-4970-9d56-765ce64f49fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.164.173.182']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6ff436d-61d3-4172-b9b1-5843e23b9ad5", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.200.18.14']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fd9d774-f43f-4772-a5c2-68519a5246d6", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.201.200.31']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--921a99cd-ee8b-42c7-9cb8-0a519bc5b0aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.225.197.179']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84f9e5aa-5b84-4493-b83d-9ae694e6a979", "name": "Malicious Host", "description": "Observed: SSH activity. Sensors: digitaloceanlondon", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.225.30.174']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:digitaloceanlondon", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52238856-bc30-4f81-9c23-272c440d0a34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.229.233.132']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06be7f91-c624-45e8-88e3-34ff7702f392", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.236.65.252']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31d2b83d-9a53-4311-8f24-4fe5df9bcf00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.12']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86ca826c-b5e7-4a6a-aa7d-94802b5c6b62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.121']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20ca360a-3845-4645-ae2d-602d11c0c120", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.130']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72976923-975d-4b2c-9af8-3bca4dea7711", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.132']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9f6e77a-a038-438c-b918-9b733464d237", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.190']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e477f37-7ea2-487a-9cc3-d46bd00c804b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.193']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08eb63c3-79b6-4c74-812c-49e21c3ff1f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.247.61.7']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b917521a-43da-45b1-bce0-36d9933e5c21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.30.158.50']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b2648cd-25fb-4155-9237-56fb520bc1dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.36.201.223']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1246c623-fb50-4306-9650-016ac316c1ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.36.201.54']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6458d762-279b-49df-81f2-be33c6dcd13d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.36.201.93']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c8303bc-b4a9-4115-a30b-617840b41c60", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.4.156.114']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--004d0bf3-dcee-4cc8-b160-2ea00e04d501", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.49.47.113']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5be54f84-541b-43d8-8ecc-ae41fd5940e2", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.98.62.122']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8198bbb-f99b-440c-8057-e1d9ac91e024", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '46.98.62.53']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2aa5f96b-9a60-4322-bd66-5e2a8fdbff56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.110.155.130']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7820aa3-c157-4038-9c58-b17ed783ba38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.165.0']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0d079c0-ee2d-4047-9029-257986ea3cba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.184.180']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--640db3fe-7ae0-4bcd-a922-51ed2ad22259", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.236.250.100']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2efd5ad-859d-4d34-bb52-807e14f3c7b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.187.66']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eb0df9a-70b2-41cb-b99d-e5a077f2f24c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.214.145']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08409af0-37ec-48d5-b30f-dd10673504be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.237.87.73']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0296ace8-0686-40f5-8f92-25afc8cbb808", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.136.243']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2693faa-3094-463a-b262-4624d0ce1502", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.136.70']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6926e1fc-7640-47a0-bd4d-2fe565b3459f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.137.228']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62051eb8-b51f-424d-b6a2-fc576c0cb9e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.138.151']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--496f30db-8180-4857-a0a9-0d6f109f3a6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.138.244']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f4e08f8-8b7d-4891-b057-ac2f65d6a038", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.140.118']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c217d65-c4dc-491b-ad5e-b4692ad415d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.141.131']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d2f0522-6493-46bc-a837-a15fd6e1e088", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.245.142.218']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3455d549-dc5e-44fb-ab5b-df788da4357c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.12.50']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0677f817-255e-401b-b6ea-e5eb52222b27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.120.24']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec29722f-a62f-42c8-8f70-e0f2d828c8d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.124.101']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70118585-11a1-4cba-a451-c3294af1bf91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.135.106']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afd3053a-3559-48e8-97a3-b85654d069a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.136.213']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36bff559-30c0-4a05-9749-7244e34bb27e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.143.234']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a399ab0-5003-47ed-954c-2fdbdc70b397", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.160.98']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6daa18b-a340-4440-b183-5b7ccacf99a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.176.173']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fffe950c-1caf-4669-8ef5-510a4a225f37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.179.209']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51c5be0a-d0a8-415b-bd35-b13736b0e9a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.179.242']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02b56002-ec04-4e7b-bf3b-3818ead3796e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.185.143']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfb25749-7846-409b-a54e-65b35e2351e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.189.193']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b67bbd75-f053-491e-ad47-ef40b0d636a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.195.177']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd2d4166-3c12-4897-8631-cbf76fc0ba33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.38.192']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9f80f61-af5a-45f1-a87f-4f2e5a9a8cf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.38.242']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af4c98ae-7886-43c6-8c75-6d812c5c29a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.43.176']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02aa25ee-d862-4bac-bfe0-3e3bfd3bfcfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.47.47']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e23ceec-d8fc-4315-8f64-2289c7d08d8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.53.113']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad775b3b-eb62-48e4-b53f-caa3115c0a6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.55.12']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e6848ac-c52b-47d6-b137-223df8b19011", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.83.136']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--688f1ab5-2693-4c47-934a-8c90850505b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.88.100']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81a3b78a-d879-45c9-8dd9-1ed9b091b9fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.250.92.199']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9bfd8af-8723-4f10-a927-5ae248bf51eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.106.132']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc0ad63c-7dd4-4104-a800-570f276ced7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.106.248']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--908046ef-0f06-47c5-aa8b-9435391dff9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.109.140']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dab57d3-2d56-49a1-9f62-4959b0936f18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.118.213']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e03cacd6-eb79-40a2-95d9-4791bccf198a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.118.34']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1664c223-42bb-4667-904c-ee9e6dc7ff2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.119.40']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fade3a9-d799-461a-8a37-47ced8cc5ca1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.124.111']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca0ac09d-1b1c-4b4c-82ff-9780475035fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.125.230']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02220d88-efc5-43f1-8ae1-3de73c22b9c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.141.241']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dec7f9e3-c6db-453c-8316-1b1aa2ebaef3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.168.192']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c257bfb-a8c5-4cfb-9ff4-6c60c6a242ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.170.23']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43f75653-2cea-4064-a757-1ad7e3546653", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.174.222']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a320f29b-ed99-4f21-bafd-2d84dfc83117", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.184.146']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--92be13bd-ca34-4958-8aa9-a452c2181272", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.186.35']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a54c3b75-6a1e-4c3d-9976-9b277941ab5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.244.237']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48e99faa-934a-4c86-b8fd-ac60ff6004fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.252.230']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9bf8439-dff9-48ab-9193-2309bd3d2d99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.253.192']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e27ad449-9f48-4b9e-97a0-9e90a7d2c5e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.26.195']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0895ddc7-8229-4743-af6f-a37ae57283d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.27.28']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0b8427b-d234-4c04-8b68-65d5db03d4bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.55.11']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aeabb6ba-4d02-4ffa-a99c-4b5921c534ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.59.83']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85c2e241-cc36-4eb5-89f4-db6cde555ed1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.65.177']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43b9f6de-9147-428a-b163-b9348f40d8c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.78.53']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2681781-1d8d-4553-b7f5-afe41ec33cb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.82.209']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff70e3b9-e312-4d77-9608-8c86e022046e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.251.96.168']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5a86a63-2bec-4c73-9817-2dc202df9858", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.253.218.190']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c9dc951-6bb0-4399-a659-b926960af3a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.133.107']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8380d64-8235-4e54-ac62-98be641437d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.14.239']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cf8055e-f54c-47f0-8364-a3a40e897983", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.144.111']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faa5d30f-5604-40d5-a850-b4fc5e2a49e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.144.215']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa53dc61-0a9d-4f1c-b8c0-6e26d2ceade3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.144.24']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98eea281-9de7-4b7a-a803-36974f3ea673", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.156.14']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9be5354-b8a8-4cb0-9fae-9ae88b85222c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.20.29']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6de9be28-6d54-4a5e-9512-097b17234764", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.231.141']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--845e4310-6ddb-4c2f-a182-760500c6f066", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.239.26']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17e80449-5129-448c-81eb-7af275214f9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.243.99']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5ab88d7-2ee4-4118-aed1-e098f1c20902", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.255.62']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86c9b706-ad7a-4978-a1e9-60d33681700b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.28.173']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ec87281-66f1-4956-be04-33cf15c5bfd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.31.152']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef7788b7-1cab-4571-83a4-2e8fe0d5bb6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.36.112']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--528e21e6-791b-41c5-9190-5fd4232a30a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.44.85']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f6daa92-f907-468c-816d-5fca0359eb34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.254.93.174']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dd8de69-ddc7-41cd-9ca3-3502419359a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.45.19.244']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e6cc6b4-1cf4-4ee1-926b-c29a4476cc28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.4.253']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32c279dd-d225-4b7b-90d7-a547fcb4cf34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.74.5.117']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a2c0fae-8dbf-45ef-bcb4-e835b5e75bc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.211.73']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c34c27b6-233b-4ae8-9258-0b879877ff2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.230.66']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef29621e-abb3-4951-a56f-0094f1431d82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.233.1']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f0cba89-2662-4044-862f-31bfbb1c8eb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.233.17']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dc091c1-abea-42b5-a42b-0fdfe28505b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.233.8']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f32a43ec-d6d1-4659-8b4e-561ddb3de82a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.77.239.30']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d670ee2-da0a-493e-9753-7ca8edb3af4d", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.80.63.229']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb117ecf-3c0f-435b-87dc-fc335d4c41ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.100.215']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f306e40-738d-44dd-9e27-56b6ab6d4b0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.103.153']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e89c8317-8b91-4f4d-910b-800f2f866cfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.109.254']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a53f77d-f551-4e35-9ae5-c0c142fb401e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.112.155']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8f0db25-2380-4793-a952-c7e2b6f55620", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.117.91']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a16d88aa-a313-4629-85e7-783cd69ef91a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.130.169']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5fd5659-b3b0-4712-9c1d-1ca2480cb90c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.131.60']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7606abc8-77df-4d1a-b631-504d23f24cb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.137.161']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7112151f-6027-4faf-a54b-7cc547d2cd9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.139.248']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd37f663-8d20-443d-99c9-3cc7e3e2d54f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.140.143']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2d493ce-7866-47cb-8549-c5320d03ad3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.141.156']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17b03aed-bd08-4794-900c-25ddc7c58fa4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.196.143']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f9a9c64-0de6-48a4-b3f2-5b5c5dee76c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.197.66']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45bfb6c7-a5f9-4982-a486-ef68f5614cff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.199.160']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffc017c2-a971-429c-bed2-6c38da2d45b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.203.194']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--891f90f6-79b4-406a-af7e-5e617c4898ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.84.206.186']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c22348b6-27c4-4be3-a79a-ccc7320dc8b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.1.163']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ece6311-de8c-4be8-80bb-d3ded37979d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.19.130']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c69855e3-3b43-4ddb-bc11-e7bbb8b761b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.78.4']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3973373-5bb9-4cb5-9fab-cff156621ecc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.88.9.192']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed341860-f9d5-4ea8-a3cb-1f4034eeff04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.89.154.16']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14e915c7-4a24-4df1-9033-b9d6af230c87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.31.15']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7effbd8-d3ab-4945-87c9-5486a961a4f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.91.87.204']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fbd167e-483b-41bc-a5da-c5852dc280d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.94.80.99']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d21db068-c59e-47bf-b144-c01f2ee78245", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.95.196.164']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adc10e20-8497-440d-8b4b-f4d7e8a52658", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '47.95.234.23']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--231e53d5-d394-4cb1-965a-8fb7fcdb2acb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.214.145.236']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--434930eb-6700-4dfb-8bb3-782440f6189d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.214.146.0']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8ac1428-4959-4e6d-a7ae-750220c8a77d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.216.219.157']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--569daee7-e92d-40d7-b4d9-c0216757fb70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '48.217.85.31']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05eb46c9-dbc3-455b-aefd-161d445cf1f0", "name": "Malicious Host", "description": "Observed: MSSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.118.166.254']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mssql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4f36edf-e55e-4606-b034-8b5b287d3337", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.142.74.19']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c87e244-2eb1-42f6-a39d-adab120fc519", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.203.164']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d902187-29a5-4d49-895b-a8f36ad1ea7f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.204.74']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d1362d1-a10a-472f-99e9-2b35f8175b5e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '49.51.39.209']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0daf616-64de-43a2-a614-342b03374974", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.167.17.249']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad7f84e2-be3e-4cfb-a4c3-f6eb7e39b2e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.0']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc611121-99d2-4c33-a2bc-370929342652", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.1']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9efdc84f-3e1e-4878-a93f-e51cfa436294", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.10']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87b010b1-86d0-4cfc-8ce9-7d5ddba6dd76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.100']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b32ba915-3dd5-4491-a1a5-f947f4cee98b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.101']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a9f9cc9-8064-4091-af66-d5a7277c8f2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.102']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--261a260d-79a2-4586-bc8a-1e1adc2539de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.103']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--237c62a9-e152-42a0-8089-fa0b0f911ab1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.104']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfccb0b7-f4ea-417c-bf4a-3aa134058637", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.105']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cee863a-0e79-45df-8507-846cebbd004e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.108']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab8d2a7c-8b84-4e32-9626-0c427dbf6f98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.11']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ad0b008-f5ba-4e2f-a297-67a6676534ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.110']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e12005a-f7d2-4272-b578-8c25240be089", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.111']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b80f60af-a31a-4623-90fc-b3a9a05255f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.112']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c70e489-5c6f-44f8-b7a5-8943a20d8072", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.113']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b7be1a6-3472-40a6-a344-9354edba69f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.114']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68a7afbd-2fbc-492c-bb94-97bede5344d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.115']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39159711-2322-4f4e-90c6-f60f6bfecf8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.117']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b64f098-2d55-4964-8577-71b62fd24570", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.118']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e964673-6d13-4b72-b68d-5ee2ccb5ff94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.119']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--683f026a-32e2-4879-b2db-a68f5d5ea211", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.12']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14e9d3d0-19ab-4d77-a12a-064afa61a797", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.120']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a214e36-f3a2-4d3f-924b-7eae6ea82f61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.121']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9e9d354-60a3-45ed-a1ef-13a9ee877e28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.122']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8f61924-478b-4ae3-9527-982670f4bcbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.123']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa99db71-51ae-406b-9f03-e7f72993564c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.125']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--740df643-2d47-4152-8357-dea02ad7a8a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.127']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41c8eeb8-4542-47be-9492-c26605d99dc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.128']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df87ba79-0eec-4881-8f84-a32cc1ab5ef7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.129']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26f3b4fa-9199-41c0-a158-eef44d5e050b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.13']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f456133d-5f5d-4f0b-807f-ec6e5cbd94cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.130']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af1fb868-2f1e-400e-82de-8d27f5bc4fac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.131']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fc88c21-9362-4670-93e1-7957d7fb093b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.132']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f21e9af2-127b-42f1-a85a-7fcf500f3f87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.133']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39b2c2b7-e6ff-4871-9166-22302e30ce3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.135']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37e017b3-11ae-44c2-92b9-60c8608e8e46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.136']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b698ea67-228c-42db-874d-d52c40d9f4e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.137']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21240a98-d5d5-44a0-b1b7-fba494778c55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.138']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3b7d862-c542-4ede-b40c-0072ee9894fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.139']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f561f6d-333f-4a8c-8644-309835a13eef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.14']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb2f3c61-67eb-4f86-a5e9-74326f5f639c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.140']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27ea69bf-5218-455e-9096-76aac405e01d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.141']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3de48d0-c9a4-4bc3-9d42-f593c6b255c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.142']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c63b7cb4-a84a-4dbd-8a3e-126e3a2cf199", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.143']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8600a32-139e-4ca2-9b7f-a718ff9b0378", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.144']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c5d4a65-55f3-4205-9e88-cbe12bc23c75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.145']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a864503-5c4a-488a-8ee4-dcf60ce8e96f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.148']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e6fd044-045c-4207-a591-4f8fbe0ef13e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.149']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a9c708d-82d7-4949-b554-7a45ecd6ddf3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.15']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f90ffd65-089b-40e1-a4d5-67a6295777ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.150']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb034412-1fa4-46f7-acb7-10e31ce2c9e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.151']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdace6d3-f826-4390-86f4-cc9e9c9565b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.152']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb6211fc-7c4d-4533-927f-e2f0237a755b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.153']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4bee038-39ee-4267-a327-11e2b5f9d14f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.154']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c06d87c-ab79-4236-98aa-3c83a79adcfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.155']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--642391b0-c1ae-4478-ab74-5d8e0dffb62f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.156']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71c15aa7-3033-4e4c-838e-03e4c2c06063", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.157']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89e563d3-38c1-42c7-b3cd-39969a730a44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.158']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b216954-a53f-44b5-8fb6-4f7466b492bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.159']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6891d9d0-d9ec-400f-829a-5a0adf84992d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.16']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd49d66b-76f1-412c-befc-e8fe8a649972", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.160']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60cfc801-e1a4-4f18-9774-62d6b7037ca4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.164']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd59331f-22d5-417d-92af-f95c6e09b8fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.165']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0c00538-c28f-43cb-94b6-01c171a5d997", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.166']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--640495fc-9489-4449-ae42-d84f650a90fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.167']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5faf5e3-5ae6-4f9a-a388-95fb414310c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.168']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a027e64-a86d-4fc7-b491-9d3263cdeaed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.169']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4477d96-a704-48a0-b30e-c77d32c41490", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.17']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a596c80b-a556-41bf-a0a0-53be2cc4709e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.170']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10b75fb0-88e4-4b34-9f5e-e22355eef802", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.172']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af804b3b-437a-4ee0-a98e-58e9aad032d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.173']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4fb33c8-8856-4c3b-802f-ddac82ed6c24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.176']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1335ec44-5ffa-4caa-94e2-bd3a523ec632", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.177']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6056f96c-fda4-466e-9342-d89cefd3ab66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.179']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7169fd6-89e8-488f-8d32-1c8cfadb0bb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.18']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b3c4d58-6a70-41dd-86d0-ecf8b9eae2fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.180']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea879c04-2ad6-4feb-aa76-fd964e48b7e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.181']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0226c734-e753-47c0-b65d-103ce09ee525", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.183']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52b9cab3-4e9a-4ce6-9376-54920e110a79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.184']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6203e311-67dd-45e3-8753-2ceeeb78c6d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.185']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df2f8250-bbbc-49a3-991b-2cc8bef540eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.186']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--487f2ed6-7049-4f8c-8f74-9d949d640d75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.188']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85e2776f-232c-4ea0-b47c-6c31f526494b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.189']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0125da4b-bef4-45f1-a029-7baa4b16d551", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.19']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbf3c8e9-6ddc-4541-bd2f-015fd838438a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.190']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb183c0a-ada1-46b8-8b5a-56edde3d01cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.191']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44366bb1-d285-4d0b-bf17-5ea3c9cba0d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.192']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--257dc3b1-e6ef-4984-83ea-f794f5114701", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.193']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e72e6fe4-c99e-4047-b2da-566a7c1d7933", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.194']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--413205fc-4e3d-452b-8b3b-8a2d6096764a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.195']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e165d9b-6462-4ba3-8487-1657dba54d8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.196']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32cf3764-4f92-456f-92bd-16727843a881", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.197']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa32d61d-3916-4965-ba47-eafb4d1ab861", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.198']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45a80bb2-6641-41c1-8d78-f0e7af19427b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.199']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23009412-0bff-44d1-8043-940ada93b249", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.20']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d2114da-d86f-45cf-99b6-8cc3aab0b307", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.201']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7f6ca2f-c91c-4e7b-b8e8-75c617474db0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.202']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44707e1f-b893-452e-b75e-0623a07e5648", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.203']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44d11e4a-a499-4f3d-8402-1272e41d1b19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.204']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30fb9a68-a795-4eb4-b26b-fa911beb95de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.205']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7c22547-16f7-4ff6-970d-5119c36560c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.206']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03eaa27a-139c-4158-9009-e6f049ce5904", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.207']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6659404-0ec7-46ea-b942-59cd8dc9bf58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.208']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3cc1d3d-047e-43e6-8b37-4dc381484a18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.209']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--683cd011-7c15-41b3-a65e-7aa3885f4694", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.21']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06e32b01-db05-403d-bd6d-426d91fc0b54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.210']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c4eb9ed-55e6-49e9-82b8-9875239c3647", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.211']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cae0672f-7530-4f7d-85b6-114e6f6b15d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.213']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0815a09e-694e-439c-85da-60ed9c5ab342", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.214']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--251bae3a-95b1-44c6-a8a3-e2839ac2fe1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.215']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--267de943-8bf6-4b62-ada2-fe8ec3af3806", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.216']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--560924fd-6580-4990-ad76-3dc4af7094f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.217']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac2ca215-cc98-4f48-ab0f-b7c6030e5222", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.219']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d87182f8-be1b-4f73-b9b4-eadc43122a39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.22']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4f621d0-6a1f-41fa-9497-da883b29c2fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.220']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11ccae52-992a-44a5-afb5-f3aa524e008a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.221']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04a1337e-e8bd-49ea-95b5-41e7feac3ac5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.222']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e0626a2-6ecc-4911-90d2-f639c7f13bfb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.223']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c0644d2-dac2-4c2e-a67b-cdc17c375239", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.224']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bd4c9ea-8a9f-46ba-b146-1dd1d395b2a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.225']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--489021d0-f52c-445e-b74f-e5a8c802dfb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.226']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6fa8a36-a6a4-4aba-8fb9-760f7911296e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.227']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ff78187-8e34-40a4-bd89-05ed5bc54948", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.228']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9516beab-cdcf-478b-871f-76732d5def30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.229']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bbaae83-aa64-4083-b351-9ef723900334", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.231']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7525d46f-caa4-477d-bbb5-f8c680eb45be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.234']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd75224d-5915-472e-a1cb-d22ef218c6c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.237']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ff64c51-20e3-4221-bbcd-2b91fc5f8b07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.238']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dab18acb-0356-485a-9145-76d46e05cbb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.239']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5db833b-1b4d-4b93-add7-d0afb95476f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.24']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ad566ee-f52d-4ed6-bb31-1079b4879dc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.240']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddc089d1-f222-4e18-8a12-4d837966b58a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.241']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1282e538-c75e-49f2-8322-448fc9984dd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.242']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12dbf2cd-039f-4be5-a5fb-8c104dc559db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.243']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6d63b13-6ede-4456-82b0-430e9b8e7a48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.244']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a1a6dc7-4637-45dc-aca5-5d2838e271ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.245']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2d2287e-a971-476c-a182-e3dbfa923400", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.246']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57c89283-e112-411a-a61d-a88179863e23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.247']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c638022a-a10d-4d6c-8b93-2e0392585d08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.248']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a80fe37-e11c-4330-a33d-efec19e8ab7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.249']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c87afdbb-8a03-4f8a-8beb-ba9f63a1cefd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.25']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3f4899f-9b08-49ed-baef-d04970be1fd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.250']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd302ef7-944a-4cb4-8122-3832b6d0f06e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.251']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6ace096-8a9a-441d-af8b-04897f312cb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.253']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ba2b019-0778-44cc-a623-7710ce6d2f14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.255']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a04f0b4-c24e-4990-9ddd-0390995a68e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.26']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73daa612-db96-49c4-a2ac-a56c0fd2e199", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.27']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c1de354-d6ec-491f-85e1-d1e221e6365f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.29']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b883b018-68af-4ff7-a71c-d79c9a64503c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.3']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cdc8636-31eb-4c54-afff-73e947e771bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.30']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba0a639e-1a18-4f86-8e4b-328727454fd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.31']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a1d1fac-b839-4c0c-9523-cff2899d67fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.32']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31a2fdec-7c34-49bf-b10c-8bd346e06864", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.33']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fce58990-436a-4231-b71c-59c8d3a6ce98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.34']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4a36d72-5e7e-42e0-be5b-08f0f3851922", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.35']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb8a9321-0d97-49ca-ae89-f5dce6160aed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.36']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--157a842b-48b0-463c-b60e-04f02a83fa26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.37']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64d421ba-e1a1-4b9a-b277-8720d3b1052f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.39']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f20e7ff-7229-49d1-83f1-bcc1e2d7fea4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.4']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--695b079f-599e-4a63-85e9-de05c3d3ffa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.40']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97c8e6f2-c712-47a4-b8c6-0811a43ffce8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.41']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9974f81-2994-4891-b575-cf28feb22966", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.42']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d91633fd-ffb5-4c2a-9f76-fbb5f470b642", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.43']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c4e6cbb-c3bc-46cf-b2f6-5207b4b828e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.44']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82852612-f803-4bc9-8f87-3d11683589df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.45']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8537a2d5-2b52-4a8c-ab1e-5eee313ddcce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.47']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf28376e-784d-48d5-a261-ddf53468dce0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.48']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fad95a86-b57c-4f58-87ff-f062c41e0177", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.49']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--572d7fb3-0616-4882-a419-d1a02d7e8b43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.5']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65eae95e-70e3-4c84-88d4-bc1c008e2091", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.50']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40bfffef-e375-469b-8c9c-bd244de2da85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.51']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3a8cc2e-6a2e-4c54-84ca-106eeef8a783", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.53']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3523a21-8afe-4509-ab1b-590806a60b27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.54']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fbdf289-07ad-46e3-8c03-1236ce93c1de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.55']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49a299d8-8b2a-48ff-be8d-4ca75785838b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.56']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81db1e1b-e70b-4023-8c0d-89f590cd5442", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.57']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de1dcfce-882a-4cc8-a7e0-add762bb51b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.58']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a37ceffc-c105-4e04-8c16-6484bab76b80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.6']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c6e5ccf-d62c-46e3-91c3-e4fa9c019673", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.60']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e185886-f1c4-4c5d-bff5-e52fd1d1eabf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.62']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fca8c9ac-a6e1-4626-88dc-ffbafc8b8588", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.63']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8a0db7e-e4dd-4a96-9b68-be8fe647594b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.64']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd96f0a7-b6d4-459d-a1ed-fa0c40f24b84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.65']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce8f4fe7-0f14-4e8a-ba65-89473c1e9bb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.66']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e2a54d3-8f00-4f33-97cc-50ae1acdd7c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.67']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88ce597d-b4a4-4997-ab71-78f87646ffe0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.68']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1db5666-8048-49b7-98e8-d219db80407c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.69']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e02f218-6312-4fec-87ae-a41b5d8fa8f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.7']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eb1f39a-68b0-44bb-b577-ea58beaea670", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.70']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0746200-ae37-443e-bfd0-bf54ebfe2810", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.71']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7df40c0-6552-4fbd-a408-8ee7e9b98ea0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.72']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64f3cc35-efaa-4646-82ff-58e5d35b330b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.74']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ddcb7b1-fb09-4996-9fd5-88da0cf5af4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.76']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3062662-3296-49b4-ac4c-ec4f70eb18da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.78']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--225e7de9-d96b-4c9d-a065-3d7c6d112b54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.79']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e4eebf4-f63a-47a0-8193-6add07da500d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.8']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61641d40-51d4-4446-9c4c-65c1f3740b8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.80']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b79083ac-41b7-47d5-b5b3-b43ca52b18f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.81']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa4c5224-868b-42ea-94c3-a1d5ebfcca8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.82']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d916e79f-c645-4cce-9b8f-7d74223f3e8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.83']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a1fbfb7-0346-4822-8502-386378955fb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.86']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e15abcc0-d218-4f4c-8f6b-40d9e2be4d6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.87']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--632933d6-b543-401b-b520-75684170370b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.89']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--418a37a2-cdd5-429d-894d-53b80cce2e7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.9']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f5cfdf8-4ffe-445b-b624-41a21f6a4fc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.91']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b204af5a-7ce8-464d-9e1e-7e651d9141cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.92']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36c4c287-88fe-48e7-a6c3-fe2becbbabbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.93']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a9fa7f5-b244-43cb-8c39-4933b08808d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.94']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ca241f3-dbeb-44e2-a67e-89cc1becf9ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.95']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79b8cb0f-8a48-45a5-bb6e-9dcaaed3511c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.96']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4595058a-e25e-4dfc-ad8a-e467a69a1839", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.97']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1a3bcdc-99bd-47ba-98bf-8e9ce99721dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.175.249.98']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--086a058f-34cf-41a3-8140-491854a5139b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.180.81.156']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--514358d7-2555-433b-a3ac-21a49980305a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.180.81.188']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddbefe18-f8a4-47f8-87a6-fc32a9a529e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.180.81.60']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f09a1bdb-2b96-4d7c-a4f4-abc4c25294a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.208.153']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd8101d0-e3e3-4c27-825d-924caeb7d6f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.116']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb7d8d21-3156-484a-bcc5-83ca22c294d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.117']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--760a6ce8-f11f-4c47-b97c-09b4aa0b5d74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.118']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--049e4d24-3a09-4468-87c3-fbb0fe103b3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.119']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3d6157c-1698-4ef2-aee1-56107e90ed5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.124']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d341ea38-5052-4ec2-8a43-22b62e988264", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.125']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abb3f932-e06d-45f7-8981-a7b1caaa270f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.126']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--400f7a30-9079-43ed-a4af-4453c5cf1975", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.127']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6064211-fb0c-4e75-b74b-2d0c7ae62378", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.148']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--653eafc2-bb50-4e64-aed6-cdb748d89749", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.149']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2973692b-1353-4b5b-be20-b827e961fb6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.150']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--910f33ed-c72c-42f2-bec6-1c7c8cad8f24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.151']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6737ee5-af61-4036-a666-3e2276c40b4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.156']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb59a686-00cb-4ec7-855d-09ddb8879f59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.157']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0546c7e7-c6e6-430e-987e-551f46de45fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.158']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19674bd8-3161-4a16-b10f-36aeea35f457", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.159']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--986c4823-141d-45c0-888d-ed610b6fc728", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.180']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb572c05-f8e9-4c43-9b54-b78875870d20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.181']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1b4842b-aad7-44fb-9c9d-fb15f5640c15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.182']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e271b3f9-a18c-4e86-812b-66ed6b8ddb42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.183']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3f070a4-7af3-4b0b-a5fc-cc9589bc22ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.188']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7f9ed75-e943-46b6-93e4-ef5b228b2524", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.189']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c542edf-9fe0-4e62-a4ff-39333fa52367", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.190']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fee0e526-a1c1-43bf-8a28-5e82f5f25b17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.191']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--973a09be-094d-4a05-9b45-a0b047413485", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.20']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e95fb22-8b71-43f0-aa7e-4261ecea6c2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.21']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65782281-7353-4f9c-b064-9c9513d24479", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.212']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e94cd0f3-67d1-43f2-94a9-6aa02e8e5218", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.213']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a1a2ac9-e0d5-497d-ac4b-9a9d045b7735", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.214']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10f92199-bf67-4211-a7e0-d98f96211afd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.215']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97c5b7eb-9a20-4330-b5ee-2465281b88c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.22']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b566a0bd-dba7-478e-826c-76452ed03ce5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.220']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1c8aaea-b2f0-4852-837d-d416d91eb1e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.221']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--372f518d-d11f-4c1c-9d02-fe972779df00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.222']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef3166f3-0447-453d-b34e-1885fc86002f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.223']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15311491-048f-45ed-b1c7-561fa4a1e428", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.23']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--859a51a9-6dab-4265-81d1-8e68cfc149f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.244']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a924920f-33c0-4b96-90df-581d86fc1449", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.245']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--375228d4-14f4-4472-b084-eae89db74e69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.246']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7b267a8-40b0-4274-9aad-122e171fa672", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.247']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb8bba52-c3f9-4bb2-8789-d9714b0f933e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.252']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d4c4765-fc13-4a90-99bc-48504f650cfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.253']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8da4436-c07d-4152-a786-4c1ee5f39f1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.254']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc1ec2c1-8a49-4d45-aa08-bf18d639b76c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.255']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e384eca5-5996-4a6d-8996-9cb8c58a73c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.28']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c644ebd7-a97f-449d-8015-d1fe7de6a752", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.29']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c32e3802-2b83-4a52-993e-0c99510af916", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.30']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e7acb13-d31c-41f5-a991-285801b3e188", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.31']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2bc72f1-d508-473f-b5d0-960880cc85ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.52']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bd5b3e5-68d2-4081-aad6-c435c5d07d09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.53']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a17515e-d93d-49c6-ac87-823cceabc7eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.54']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed7abd11-1f3f-489a-aee7-d5265ed9109e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.55']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a6a25e1-0200-485d-bd76-d73ce046636f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.60']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac0d5314-f3bc-43dd-80c3-f5f61d4c096b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.61']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8eeace92-4172-480e-9df6-eefbe16f28be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.62']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c187e09-5892-4c43-a8bc-2da450b06412", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.63']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1ea3909-01d6-4e05-a4b5-e0e71b76b1f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.84']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5797087b-bb01-4ca4-9f9c-b64dfda5ffb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.85']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e28d0957-a91e-479f-b9ef-1b7a1e01afb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.86']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81e77c0b-4995-4901-a411-23f76687be4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.87']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d928b715-9d90-4a2d-8da8-4f9568af3947", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.92']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ee5e610-71ac-4e04-8098-88a065a8f565", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.93']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02dc551f-78d3-48c3-a172-23068a322b3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.94']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2abff94-281c-412f-a390-b04c27f6e11b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.182.34.95']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--109b8599-c0c0-4d32-8006-9e42147f16dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.206.30']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a2722f6-e9f8-414a-828e-a291d6b8d41e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.188.206.34']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54f2031c-65fb-4cd4-ba2a-42de32d28aaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.250.253.180']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1219a2bc-2a4f-4a42-9d74-96d2fbc91500", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.250.253.20']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c93c989-a00a-4f9c-b950-2de345ec3dda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.250.253.247']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--283132cc-3874-4a71-92a3-dcc5176977d2", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.253.103.221']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a32af1e7-718a-4b69-ae06-d03ae3bfc6cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.255.126.130']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d61df49-c54f-4c6f-a6f6-23ad053c76cf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.255.231.11']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2743c130-db82-47ad-9de3-6dcb9dcb4b7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.34.216.39']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a4d7cfc-0f0f-4fd7-898f-c8b86a7ab4fd", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.39.19.237']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e98811fb-1752-4f6a-8a37-869aefeb3f81", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.59.98.59']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3daaafc1-33ee-4520-b151-c547da524951", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.71.45.164']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc6e63d3-2c7a-426c-b9e5-82e2630438ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '5.83.138.189']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdb24bc7-e3a2-4b46-ab26-834886d2700e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.0']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d359db74-d5f2-4a03-a4fe-0be46761a470", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.1']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61694416-21a0-4451-b3d3-4995e583a0bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.100']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79594aed-19ec-495b-a026-32b9d9b636d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.101']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfa2a0c5-98f1-4bea-b898-539a9626f0dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.102']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed03f517-7eeb-4042-97cf-d3e850d3631b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.103']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f01444f3-7d8b-4548-bf1c-c1e58a530af5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.104']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4519a91-75a1-41e0-a931-c2011edcbc45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.105']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--392c91fd-c549-467c-b034-2f39c9a76afb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.106']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d56b63c-7cf7-443e-94f1-cbb38d415d4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.107']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5285b9cd-7f62-4d6d-af4c-cd737e821e7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.108']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8075a17-0e68-4b80-8b2e-d3741797fb1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.109']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9515f548-5eb3-46b1-b9c2-9bd75e64339c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.11']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b1e4b2c-e3e5-4f53-8f2a-d450c2618755", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.110']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bcf9a89-0f68-4877-8a22-ac709ee8b992", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.111']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7fd90b9-95de-4831-9a81-d41f3e1caaab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.113']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8a18ebb-f5d5-4fa9-99e7-146dbbc68ae8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.114']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc5df065-fecd-45f0-9dae-f5f9081c81c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.115']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c52ae3a-361c-4ab0-90d6-9f9c52e354e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.116']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcd16712-eb24-4298-8699-2d05a7431e75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.117']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4177e97-5b73-414e-a993-bc9909a7de68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.12']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30857613-1aed-4f27-b3bd-4f89b45dd698", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.120']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--084cc3b2-09ed-4378-8ff8-c01ab83a7380", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.122']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--050a99ac-469f-456a-a8f7-a235f8979579", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.123']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23318b37-6144-486b-b2bd-569398d1c02a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.124']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--035624b6-d388-456a-9562-1426b133f2c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.125']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--886181a3-cd1f-438c-b682-7b972b3cd1a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.127']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9f37aa1-799a-4e13-9ceb-b323806c2a72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.129']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--556dc15d-9e84-4348-bbd7-3fab120e2680", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.130']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3f5577c-3d5f-409e-ad22-148e31e62470", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.131']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cde9a30-98ba-420f-86b6-262ff690f5e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.132']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a96dfa6d-2e1f-4e1b-b878-b67a7d541c6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.133']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af4a7505-96ff-41ff-b328-3f71aeab5a0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.134']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d07b347-9516-4e02-ba5c-5bb04f325678", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.135']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95036f14-b738-42e1-92ef-819edf014c50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.136']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c374509-db48-4eb1-8cf6-4cc96c420b6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.137']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a7ed7ac-4fb4-4ea4-89be-1537b521d324", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.138']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfb32f00-edfe-4f03-bfb6-c75cecdae466", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.139']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d726a39-6e9b-4b06-8696-d00bda306536", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.14']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d6833fb-8b6a-448a-a1b0-cfc0ebbf2a95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.140']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b9166be-caf9-48c7-8e4e-c9854e7f3043", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.142']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbb7e5fe-f895-4496-b65b-898369c7a6df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.143']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf042b44-0205-4bec-a4e0-9b34ec5d7023", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.144']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9e49743-aba1-491b-b348-ba382948b3e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.145']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--958250b2-a551-4971-9549-5d3dff54af6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.147']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f71a98e-dbc9-48a8-8d3e-3306ba7bf269", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.148']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2117738b-86c0-435c-9593-1e16eb9bf369", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.149']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--686b860f-fff5-466f-9909-28ba6e5fc24a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.15']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95c49210-8365-412b-b3c7-deb5498d92bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.150']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11340075-fe3b-4099-b0a9-eb843b52256c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.152']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c283c9b-2e5b-41ec-b8b7-944e726a97b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.153']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cc5ceea-7c1b-4370-8efe-168f27b05196", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.154']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f63d7cf-32ed-4549-b3cb-a1d003782af2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.155']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60058e39-5d4d-4876-b5b7-22638c6d68dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.156']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--698a1db5-1113-4480-8150-43ff8dc441fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.157']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3cf3172-9eda-43b4-b3ca-6db426786218", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.158']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--520dd47d-ca0c-4d89-9874-a257ea046d9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.159']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c4615ac-424b-4dfb-8ca5-50d4d08c7b02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.16']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb447eba-7628-48ff-bb79-69a2b520a951", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.160']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cf56e6e-89a5-4330-af00-f423e97c32ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.161']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54c4259c-ce18-4773-8d9b-bc0cc78ebe24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.162']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--912868de-d9ec-4961-b883-965b2643634d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.163']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dae22322-275f-4064-a18e-f3989170df39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.164']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3e4b3e3-e17d-4fbb-a4ec-6b55188a3163", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.165']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d705bb7e-d824-4374-aa16-b9d343999499", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.166']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fae9bb21-9f2e-4ac1-a777-1799240e1245", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.167']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51d951d0-57e3-45cf-a579-54ebccde1777", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.168']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0f91461-147d-4262-9d5c-4094d6d42bf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.17']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11227ece-df03-4891-851b-86b85366731b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.173']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b4505cc-820e-40b1-b1d3-5855074d7ebe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.174']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f8a029a-abdd-409f-ba6e-4ecd1f7579b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.175']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ba5be3e-ba02-48e9-9f10-813fa6cbbff7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.176']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d46a64b-42d6-49d9-9682-2ea2fda086c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.177']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8b0f475-70de-46f9-937e-3f8cc3a924b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.178']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d7b0e66-e250-4ba4-a7d6-f304b10b5b32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.180']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8a51239-e50b-4395-ae88-6aeccde2a90e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.181']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0b2ec4d-b05e-4023-9c70-9dca1c699b2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.182']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--589afdc2-e540-4d66-bff7-6722283f6bd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.183']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9535dd0-520c-4f03-9cd3-a3174db9fcba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.184']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77cd94ef-4435-4693-a971-5025f629309b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.185']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--009e1269-00c8-4512-967f-c801331321e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.186']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--159e1fc0-b751-4b2e-ac18-02a17801d705", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.187']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c63bbcc-0f88-481f-ba40-023167ea83e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.188']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce350594-2b97-48a4-a37a-4f75ca761663", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.189']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6279b87a-10a6-4a8d-9ed9-92159313bc85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.19']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7a58b4b-e3d4-4575-81e3-748fc81cbbfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.190']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cd6f5a8-a4c7-4218-85de-a547eb9f9892", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.192']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6167c303-318b-4d10-b8cc-bdfa290b4ce8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.193']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe385cbd-e832-4efc-9928-b91c62996c2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.194']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78ceb88f-afbc-46e2-93f7-736e084e5006", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.195']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9611cdd-9e82-4f9c-9443-44cc7d3e6fa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.196']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a76f80b4-0a5c-4481-ac9b-f18df9f39740", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.197']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3ae9987-fe20-4ffc-b220-26d7265f14ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.199']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eac9232-2f4a-4b2e-9034-0adff2656639", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.2']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03b51cf3-e65a-4178-95ec-98114acd4485", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.20']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--096a8e38-fd11-43c8-a069-b545f4a67087", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.200']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9aa28f18-985f-4e35-b618-d09f8ba16bf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.201']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9881407e-01b1-4126-9d69-9bdc1292b9e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.202']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f927fed4-726d-4e1b-9363-d65e73f0cc3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.203']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3be2cb24-92a1-4c89-97be-45fcc6963043", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.204']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cadf3639-9635-4053-b27b-2cae7b3e64e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.205']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8aac949-5b80-4204-aac8-a6f9351cf88b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.206']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5efccde-c5e6-4598-8c75-c5e05922a6e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.207']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3bb4753-b002-4a2a-9c18-4bcf030341c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.208']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d31b177-8d48-4538-ad9f-eb8db78a5f3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.209']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3ffbe9d-da0b-4d37-b60f-feeac01bdce1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.21']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1264d78e-4d9a-492f-8c10-c4cb151018e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.210']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c67f0be-f618-4114-bae0-939a37677d07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.211']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76e18635-9a71-4ced-b026-0f200870059e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.212']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ef5d831-4047-4ecb-9cf7-283296234f68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.213']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fa40fee-5fe5-491a-8b3e-6315b53c8c46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.214']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ff64e16-67cd-4512-85b2-a926cfda2a7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.215']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adaba242-0f45-4e7f-a00a-79a217daea41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.216']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89727053-05e3-48d0-a4b0-d0b7e0ce33de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.217']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9cf6267-4286-417a-ae6d-3fa8f3560109", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.218']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bca3e02-817b-46ff-be2e-1083ddf9aea3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.219']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de709138-00c0-4d1b-875f-b960d125951b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.22']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--933b9e06-721a-42f3-a207-e0f19b2c67f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.220']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ff1878c-0d27-4290-bd3b-ec5e0b82c067", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.221']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cc0a5c1-04b6-4284-92ab-3077e8d5bf3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.222']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d398747-79f1-4011-bd7c-aba3396ca51f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.223']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee4ef276-81c6-42a8-b8ed-ea6728bda7c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.224']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93610677-d53f-4a59-88c0-cdb67b233880", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.225']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b26ae51-dded-4dc8-954d-33e96a0109e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.226']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9b83471-47df-4887-b8a8-11537ca2a634", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.227']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73a43cce-916f-4cd5-a187-2900d357a752", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.228']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5644cc9-cce7-4540-94c2-d60e211a28ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.229']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84d28528-7ab6-43d1-b2ef-01a0d7ea70aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.23']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--316416b6-2cfd-47be-8d05-bab5623c3fb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.230']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9826c05-39be-4621-8c1a-92ba1223e0f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.231']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d163683-a020-40c8-a4d5-cbfa5148e008", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.232']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fe698ac-af3a-4220-8e32-b7c06512d15f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.234']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--882ff57a-4d98-47c4-86ae-1770ba9a386f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.235']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b194d26e-d4d7-44b4-b826-166d4f9d5577", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.236']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42bbc4d6-6b11-4145-b664-0811fba83876", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.237']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--591bf154-443b-471a-a740-37b8bf7d44e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.238']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b98eeb2-748a-4de2-89a0-d501add484c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.240']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1775e7b3-4e88-435a-bbd8-322da6e2945e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.241']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee9c61fd-cb11-4a6c-b16f-626729875b24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.242']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2c17361-ab5b-4915-b3c6-cc186955f037", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.243']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0905671e-2134-4394-953a-511c8b8b95dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.244']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5fcc77d-d58b-4572-a526-4418908efbae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.245']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cb753a0-3adb-4083-b044-95e4b88f6d0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.246']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a53ebaa0-80ea-4cbe-8f6c-2519ff8c907e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.247']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62b13958-1e73-4034-8eae-0d6d79a07aac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.249']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d915d9ba-2444-4765-9914-01487a640598", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.252']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f799008d-15c4-4972-8a80-937fe708ffb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.253']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--523e823b-70dc-4d39-960d-289357d39753", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.254']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--960fe824-12de-4dbd-91c8-5a0e0e753976", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.255']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3451b324-83f8-4869-bcb7-4280123187e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.26']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0abfbb7-48bf-4147-ac9f-a64ca3218e54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.27']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9190e598-ff27-48b1-b6a7-9bb3a5a47f6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.28']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ed1b97f-a173-428b-9367-a99605d422cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.29']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--909857d2-1c6f-4aae-b389-6792458789cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.3']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--725a8c5a-854f-49d4-8e53-2ed8deb1c513", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.30']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--513d540a-a106-4405-8ae8-30a087fbba0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.31']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--886ee570-ce8a-43c5-a493-fe0c9617b663", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.32']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6838c1e-fc52-47eb-b788-d927d69b4f06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.33']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d259247-3c0d-4e8e-ae6b-e976ccbde8bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.34']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36a4e96d-296f-4fa3-8fcc-b038ef960e2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.36']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d111d2e-8e04-4d7e-8ddc-d02a41d12366", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.37']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81beec57-23b7-442f-90c5-d15809b9e19b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.38']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52d35420-417a-483b-b30a-477304dbd24e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.39']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e3175db-8762-4b56-b766-03b0264f7c73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.4']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdb0586f-c8cd-4884-8031-9d9d30ee61c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.40']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bef9cd4-0196-4665-9d23-5c0d5b5263ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.43']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e0fe573c-33c8-4a85-98de-004580e66ab6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.45']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--221eeb96-bdab-408f-8218-638dd06de3fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.46']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4267c8a-a5bb-4a51-8dce-463bc8ac2ebd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.47']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--924afb4f-bb3a-4b14-a4bf-19ab40bd0d7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.48']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0d34271-e2b1-4b09-8da7-061da3c5a28f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.49']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41641702-7c43-44f4-863c-943455e7fbdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.5']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c8b50ff-8403-4037-a914-838ccef778e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.50']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adb8fa3b-95ed-45e0-ab30-24ec9ef649ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.51']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed36918c-90b4-4609-b617-bc5b339e6ce4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.52']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d217eb7b-0815-4699-9c54-03d648888653", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.53']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--190b691e-cafa-477d-9cb4-5fdd93697646", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.54']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ecfac39-6ddf-4582-b90e-0d499dec09a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.56']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e73014f-ffc0-426b-87ec-620b69cbfa2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.57']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecdf614b-9ae9-47d2-8e04-73cbb1f91a73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.58']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca8f098f-91f7-4d41-a3ef-40abf3e68e28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.59']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d195a010-1c6c-476a-99ff-b1c7b9b42c05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.60']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd56d3ef-a2f1-4bbe-812e-e0fa9933d863", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.61']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38255da3-8ddf-4b19-8a69-ee0e6360857f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.62']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78451190-70f6-42f3-8cca-a02095e52c96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.63']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a0fc950-e86f-49b3-bada-ccd01aafc943", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.64']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0825b1ab-1f87-4999-a797-d4724e5996a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.65']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cb43fa4-b4ab-4fb5-8455-fcae7bf84b7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.66']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e21d5444-397a-4af7-a09f-e25d186e6222", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.68']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--652deea3-a6b4-4309-af58-7519a78de91f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.69']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--766a76e2-18e4-491b-9a25-98ac14184092", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.7']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cad1f5c1-141b-49c9-a3b7-4d3498e695bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.70']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67a970c1-5d1e-4412-ae23-6c1e5e6c826f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.71']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5589b501-0d8c-491a-b5a2-069c85f490b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.72']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee90e96f-b0ad-42e8-ade5-232c60baf105", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.73']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--374d62a3-6f31-4255-8945-9bd99a651bac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.74']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a97e57c0-aab1-45a4-81c8-dac2f388f4fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.75']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7e4dd2a-8321-494e-b655-418d7b460234", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.76']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8bf3b24-7468-4acb-9911-f8cc3c83f0ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.77']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17e58354-3a46-4168-91f0-89a1ca4d05a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.78']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16225ac5-a309-4ad6-87fe-f258a3b6a950", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.79']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91cf8248-63f8-4ff9-afdd-e678bc0d6cef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.8']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68caa48d-d89c-4db0-9004-936ab8b8e590", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.80']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--042e5369-97d1-4f96-8040-90ef84544b0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.81']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a595d6d-d306-482c-a282-4080ffd35e60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.82']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d7de5fe-7dd3-4fb7-b855-b8a7fe760881", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.84']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f30690e8-f58e-4b9a-8e0f-e6cc8666e799", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.86']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f03fb5c-be34-4c5f-9238-64ec735006e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.87']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1a7d913-a383-490b-861b-93a77138c3d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.88']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf81a40e-3f81-4581-acd8-29ba51920da1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.89']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--852df384-f143-4d48-9dbf-2b9139418b97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.9']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab54c169-d214-41c7-a0d8-2f830506ac02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.90']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3572134e-3ca9-4ed9-a71b-fdac0de7e90a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.92']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38353ac7-5dd1-40ee-9305-9422be4be477", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.93']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2660333c-065a-4f82-9052-c1ce3932083c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.94']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--695542f6-192a-4a19-a8d0-e0a5eb24706d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.95']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2d2ecf8-a99f-4005-8ac8-a5cdd2adee60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.97']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--294242ad-64a3-4b63-8384-446543882e61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.98']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--12ceb315-a5d3-45d4-9421-d79778d77762", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.114.185.99']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3552073a-1344-42f6-a18a-e4f76106c459", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.116.20.82']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ef786e6-bcf0-46ad-a43a-37fce8504207", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.19.55.109']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--331b2115-1d55-46c9-9f22-7c45022da910", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.242.76.137']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4709f62d-f0a0-4e41-9bfb-6a9e9adf9e56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '50.250.207.222']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d90d658d-179d-4995-b43a-ad11ae1bd252", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.158.205.203']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba7183ad-8442-4b70-bce7-90a44a8280d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.158.205.47']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6029a880-f7cc-4a74-8775-2d14a9032f39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.159.111.44']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91d9b9e8-017e-495d-acd0-ea289fcb9635", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.161.114.212']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8d8a39e-67b8-47dc-affc-028243680e32", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.186.144.203']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac824a9b-0004-4879-b368-f6ae850a5a92", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.195.215.113']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89721c11-82f4-4b4e-b3ff-b8554de48636", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.38.12.15']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02f2ebde-3d59-417f-96db-434b4a73fe15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.57.81.105']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0b621e7-e68d-4c73-b161-5fae49b77a42", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.57.81.108']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66622255-c300-4777-819f-fb09a32602d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.57.81.164']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e65de7d-cd36-488f-92f9-d6e0e4480ee3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.57.81.172']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4485044e-e500-48e0-894a-a04ae73174cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.57.81.81']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e76955a-b8ae-4f52-874e-cb193843fb45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.57.81.84']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b3c6f33-c544-4921-963a-b0987c823d21", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.68.107.161']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29fa14db-9fe8-4a68-a7d2-60c9430dc42d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.68.111.218']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7c09f07-c26a-4bfa-9218-fac496d3e303", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.68.224.189']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb7fdc7e-4156-42c5-8e35-ad4231eb88be", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.68.236.91']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--307424c9-41d5-48d1-bd37-28aeba22c4d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.79.212.36']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73a0d4b1-3a59-4a85-b961-8403dd514dd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.79.212.43']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--458b1152-5154-49d0-9e65-4f1cfe6a5e4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.79.212.48']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9a5bc97-1d69-43e6-a9e2-e2b2043d91f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.79.212.57']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19c35b12-9037-4aac-a613-a227b967462a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.79.57.12']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2254ef8a-ee72-4b58-9ca6-77464531a0e1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.8.102.250']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1438ecb-6175-491f-aa21-3c2ce665a3b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.8.108.105']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea1b1ba6-23ee-4058-ac9f-f0dc816b31f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.8.108.184']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51181cd1-12e1-4180-86b0-6c4aca64107e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.8.82.249']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c006b073-be39-43b3-8167-9b478512711b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.81.103.247']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dfc4087-b888-4f73-95b1-06c0b0d4e4b6", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '51.81.123.140']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13c871dc-f99b-41a4-9bea-e37446690dd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.15.153.107']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9503a515-a761-4eab-8b25-244abdeda539", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.151.198.111']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b5883d7-e013-4376-97d7-c8a17a30f274", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.91.37']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fe1b807-9fcb-448d-bedd-67af0ac39feb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.92.144']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85505829-fb92-4642-88b5-181f31ad0605", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.96.90']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0128fbdd-cf92-49f8-b21c-34290c56b279", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.165.96.93']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a68e9b3f-bd86-4ff3-b6cb-1c2ac858700a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.147']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95cb7254-6a52-41bd-b376-ab40ed7aa6a6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.161']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35eab078-2304-427a-a5d2-3c9e282c59bd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.17']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08006fca-4396-401b-b040-26a0653324d7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.175']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d12af0f-2047-48d8-9bdc-23132f8fbcd6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.179']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43d035af-6c35-4510-accb-d76f66e93568", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.182']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fb12c2a-317e-4a79-b26b-eb7f50361e7c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.193']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5728eb55-2a8e-40ad-83cd-d139413a015a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.197']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03f64b76-bfe9-4d9b-8bd1-f9b9a3d06e54", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.167.144.228']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebe7dd9f-8ded-4892-9b0f-f194f40a0a4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.180.152.102']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75a9cf7c-0d4e-4002-b14e-23f6b1b2f693", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.186.183.216']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bbca840-4ee4-48e8-9211-04bcec7b34a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.20.198.190']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--063f6e07-fd1f-46c3-afcd-b7a2b99ec0f3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.20.51.46']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fe2f0fa-751b-4f64-b4e9-7cf4787cf119", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.204.15.76']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a2994a0-063c-4a24-a7a3-f866bff2b074", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.205.101.167']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d7ac342-750b-4f5b-8aeb-2abf597f2946", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.23.169.251']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ade45333-cc5f-43d7-b99d-464e2ffdbe3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.248.41.146']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecc9ff4f-13bd-4254-8e69-ce8f7f4ce82d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.248.41.160']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bbb3fe9-b3b0-4b90-8702-06e26ba58092", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.248.42.143']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a9b8610-8909-4796-8598-f391344f1a1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.248.42.195']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59ed33af-ab67-41bf-a548-19cf6cc12c4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.248.42.214']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d5ff251-b479-4a36-84b3-b9e9eac4d665", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.90.155.32']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c3f2944-0540-4a04-afab-a7849303ab0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.90.2.76']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3daf3743-162d-466b-a866-54af6fa45337", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '52.91.252.11']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfbb5346-0e8e-4175-9f16-507c32a23f63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.158.230.133']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dd1c2a9-dae6-4f56-81ba-e2a8bc422f90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.158.24.253']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b25b7d5-aa5a-4520-842c-851933bc8195", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.158.9.100']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc3fcff2-acbe-42e3-90e1-24e142cf9ff9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.159.49.205']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95d31829-ff26-434e-8144-3b42d43d86b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.163.26.251']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38533b6f-7ac6-4028-b806-ff6e94961bc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.163.36.171']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac0d237d-8ca6-44f9-b25c-baacb7393eb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.167.95.180']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29087e27-8f01-43f8-b5fe-96f09eac57a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.172.133.72']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d931283f-1ca7-4dee-b769-cd872e56601f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.172.145.28']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d5b64a6-c2e8-4e8d-83e9-a64fec68e7ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.173.242.101']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df47e364-c0f0-45fe-8cab-66510416fc8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.175.103.21']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29b9bca9-e3a1-4a7c-b7a5-4d8426eeca1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.175.149.14']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ef8826b-0660-459e-8a86-1188cd3ee4ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.210.190.44']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c514c454-07bf-45ee-8279-e6673ad85e52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.225.10.129']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e61e4de0-6145-481f-8f2c-2a255be9e859", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.234.118.190']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b5cfee9-5405-401f-a532-e9556b489870", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.235.12.127']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc58fd9f-f1f7-472a-a63f-261fec2698ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.236.6.238']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--140ca0b6-a9d5-4e47-9ee6-e3cb03545b11", "name": "Malicious Host", "description": "Observed: MYSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.241.178.162']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d80804c8-4a0b-4ca6-8198-e847c98c169c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.242.243.244']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1af2137-3166-4519-bdf5-382c0a67231f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.242.47.239']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e0a10f2-21bf-43d9-ad6d-da52c4d2392c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.242.53.224']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e853a93a-7112-4e6d-aa91-e995e97f75ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.243.13.14']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a004f31d-2188-4d4c-9a07-4c2d6f90f970", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '54.91.134.82']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ff7695a-1ade-47b2-a9da-86ce02851747", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.128.224.185']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2aa8bdba-162c-43c1-8c65-3f5f2ac5b7ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.129.123.152']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f344aa6-77c2-4753-8bcf-b4db10bb59b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.129.48.33']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d8a5130-ef33-4466-9f44-616758d992ee", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.129.81.225']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b872737a-888d-4174-a479-09bb57743f2c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.2.11']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90bcabbe-86a8-462a-ac31-b2c382756de1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.2.16']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2756b506-ea25-46c2-9c08-8bbd060151eb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.2.17']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78eacc58-72b3-404f-95cf-e7f3cf745a2a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.2.19']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e59f3a7f-ef2d-4202-a8cb-be67b81f5eeb", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.2.21']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--443adb44-4a96-4e09-a299-5297fff53de9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.2.24']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--851c8872-460e-44a8-92b1-dda94f394344", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.2.44']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--640715c6-4b7d-4491-8bcd-77272eb8ceed", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.2.56']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c576fe2b-1c55-41f3-8479-d53c03d95ee2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.2.6']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1736f095-73a8-4194-872a-c47e98d4c1e4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.2.65']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c477f672-fa03-4e97-b386-029f3bd802dc", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.2.76']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c9d116d-22e6-49ae-97e7-e06c7f070070", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.2.77']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56247829-69de-4242-b6be-f40cf8ba0277", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.2.78']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a637c5a1-a011-49f2-ba5d-f2a031646d10", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.141.2.8']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03a03a9a-7f7f-4539-8c7d-3f8e436d9833", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '57.151.107.17']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6adebde-c829-4989-9823-020a7d81a454", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.186.20.101']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7767c77b-86a2-467e-baba-b28d089e2730", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.212.119.120']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b31f93ff-eb5d-453f-8022-4f808484566e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.240.112.150']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ca029e4-c27e-4444-8452-e57ad315a968", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.244.73.250']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4212b88-054e-41e9-8d66-38b2e016b1f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.47.63.89']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b749835-6d4e-4f16-a250-a93aae2676db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.51.44.255']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba17382c-d689-4c3c-a2ae-323a297efcc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '58.59.233.177']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e968746c-3f38-41a8-a758-e00fc4279fc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.11.42.221']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--815cd59e-fd8b-4bcf-a2c0-617670b1bc3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.12.109.224']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--059716d9-e150-4007-9bb6-8470ef2873d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.126.175.8']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--256d147f-c607-42fb-8013-06e5d7ddbc7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.126.194.111']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86d7e7c7-1f99-49d2-a64e-2e7984957713", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.48.59.246']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b055427-7a70-4381-a464-dfdb37fd0760", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '59.50.184.101']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7bb1d2f-3580-4b63-9b54-99263ec6bf6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.10.154.78']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50863752-1d5a-4e23-a8c3-fd1743a109e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.208.177.218']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0e17b27-d2a7-4561-a638-583bf302a42a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '60.6.56.83']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90051ad7-569d-4667-936e-787e18b12e8a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.160.195.24']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fbf0299-bece-4eec-b8a3-454db3f280fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.169.106.246']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3466a8e0-4dab-4965-b6cf-1a8d46ded6f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '61.178.24.146']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--038066cb-56ee-4db5-bad8-e6863a6890a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.164.211.80']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df50c2a0-a884-4eca-9e92-0d34dea6a33d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.169.26.141']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e9cd39b-ee65-4211-9b1c-93e33555579a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.171.146.116']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e21b8901-05c2-45fe-8a59-245585893cdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.171.147.220']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dc5a97a-1b06-4cf3-9922-39208a1b72d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.171.169.75']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bb44a90-8893-473e-ba2c-5632fcf68e5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.60.130.148']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e93efaa-a43b-4c49-9291-02f765b1e332", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.60.130.201']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c8c67bc-5e47-4fb0-8e70-062a39cb3cb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.60.130.219']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c902b39-8249-4b09-9e84-0495d1106f98", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.60.130.242']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89e9bd2b-0ce7-4d04-bb43-0f22ddef7580", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '62.60.130.253']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa48a49a-bd4a-4d0d-8d9f-65e152bc9937", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.187.121.21']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2544fcce-4178-4b22-b7cf-89894c75b4b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.225.15.95']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f17b25e1-1be3-4b26-b373-bf365895085d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.225.74.178']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cab13f5-c112-4cf3-a013-0a9eaf66451b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.226.86.7']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63b25d77-23bd-43da-879e-2c3a429605b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.226.96.73']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3138fcc-a3f5-45ec-8aff-84ea5dcd9605", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.226.98.14']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55a5446e-17ad-4bff-ba9a-642d029ad02b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.115.180']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a89e3f6e-83e0-4823-a1e7-a39ca8cf9463", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.227.146.163']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfe65a35-3248-4499-a19c-bf506d6aff17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.161.101']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d626dd9a-6ff3-4dc7-b96b-01164939a35e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.168.78']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7316b373-0d79-4810-82a1-4b6d2ae082d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.214.73']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95610f9c-b001-40ac-9975-a98b532cdbe5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.23.217.254']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30eecefb-52df-4352-a8ea-bd0cbbaa7cbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.52.80.117']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab836128-dd61-400c-a4d3-bde30d64e82b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.10']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb7b0919-271e-4683-81e6-16e09d3a5450", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.106']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33609177-80b3-49bb-aa9b-14105db99f5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.108']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e8641eb-4123-472c-8e07-232f51078c60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.109']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1ff2be0-783f-416f-9c2e-dba941ae46a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.115']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9b01bb2-c288-4bd3-a481-27c7adb90838", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.119']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--debbffe1-9418-41c6-8991-9bf2f14bb51a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.121']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2dbbcdc-a22f-49d8-bc44-5829816415df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.122']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7c09aba-7327-4996-98db-5cd40cc467c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.124']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59a31190-80fb-4a7b-a4c1-4ac51d184ee2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.126']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f25548b8-f141-4521-b6a4-4b1a831e5bc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.128']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--964dd139-f395-443f-881b-fb832c3e0a96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.137']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d002231d-09e2-4d06-93ef-f2f5c3b6e30c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.141']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad0da7a8-7c79-4e5a-b07c-e8e783132d49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.142']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--736d9a48-9e3e-4db4-91db-439441938378", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.147']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd26839f-0ff8-476d-905e-d945fd604e90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.149']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0d99278-e421-4fd7-b158-f18597bae620", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.150']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9c31867-d9a0-4e24-85b8-fc3944c7be47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.151']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b1805d5-45d4-4abd-ace0-c48198956750", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.153']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77e9d0aa-7ed6-4303-9498-96afafdaa947", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.154']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f35ab2e-a6ea-4104-9509-081d935c1c83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.156']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c5b3ac2-ab68-4ad4-bd7c-28128d439cca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.157']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a206d01-670b-44c9-b60e-2820017ba396", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.16']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eae3819-a532-4c15-8fbf-69b0682756f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.163']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f23781a9-bc4d-4143-8d7c-a4d9cdbcb782", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.164']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dcaa5d1-6f4b-4024-aaae-5169e04ab4d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.165']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3d59f6c-47e0-407e-bcc5-6f543363f616", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.167']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3156fa4b-da8f-4ec8-ae41-5b36d1ba5c1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.170']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d391dd12-7661-402b-afde-8ec9764a5534", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.171']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30030956-38c0-44ae-b98a-e783945174de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.179']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d8f73de-0b68-422f-9060-05815cc2453c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.185']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b4d72b3-4be2-4c30-8df9-d610e7a1ce63", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.188']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d85cf19-8156-48aa-a7f1-fde6ef74aaaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.19']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47c83cdc-81fd-46bc-bfce-b0d38bf01c2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.191']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef6b58a4-5d36-4560-bb78-d59688b7625b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.198']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78d654fe-6c74-4057-9ab1-0bca511d5602", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.200']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a8c26a0-e744-4303-978b-7846d38b465e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.201']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--872b3414-1fbd-4309-ab7f-f9a46c4cbbbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.202']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9cfaa3f-52b9-4eed-92fe-d6290a9c0f52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.208']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b974bf5d-f109-4462-8e50-36fadba7143f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.211']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef53eb4b-ccbd-41bb-8f12-0258fa549e70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.212']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42ab35a6-4541-4d95-9995-0f00eedf20c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.213']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04bd1d25-0614-4733-ae4f-0b441a5534a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.214']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0970599a-7be5-419f-a80f-03706513b96b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.216']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3af4e6a-b31b-4a26-9d38-c75c5e20b703", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.217']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7319262-580d-4f9e-93c7-924b8706ecda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.222']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8598a9ff-cd20-4920-9eb8-6bfcc4b37147", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.226']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea11d978-bcad-4c49-ba1f-abbfe6a65c27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.229']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5eb5a9f-09de-47d2-b337-886e788b8ebf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.26']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5feba939-0043-4070-a1cb-d1d02ee812a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.29']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32dba316-845b-4d47-ae7f-802495fe28fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.40']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--048eff08-fb3f-4910-aa51-922ad580e28e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.56']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dc1975f-64a3-4ae3-bc1c-2e23c284c80e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.66']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a81c226-d8ea-4a02-ae68-3035ed050aad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.68']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88860b11-35d4-47cb-b21e-46176d1d7e7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.71']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f6f136f-789a-47bb-ada5-92c8a7ac49a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.75']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67d85f0e-5329-487f-b502-f416da3c110d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.81']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01059411-f5b6-41ab-acbb-52176c0f3305", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.86']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61644467-9bc0-44a2-92ee-52dfb40d73d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.156.89']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b57ddfc-6b39-4943-a23e-8b003ec6ffc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.100']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--555e40a0-3484-453c-b083-9b21fdf21f95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.102']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8e48620-3ecc-4e0c-8e0d-1f2dea878bcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.105']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--423a3e6b-ad8d-40f3-be58-45f29afc4684", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.108']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6863132-fac6-445b-8e43-f63dc2941bb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.110']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bd8b0ad-db39-4d12-8ff7-a9da991145e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.114']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38d18712-fafb-4249-b5db-83f938ffe9f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.12']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee2b2d8a-94fc-411d-95ef-20cdf75285f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.121']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f61f5cce-2c17-4a68-bbd9-661a5ef5c7ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.126']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc2688e8-81f5-4acb-9272-6f95f6b48951", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.129']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3005587-7bdd-4353-980a-c48b05959b5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.133']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2882505e-dc03-44f6-9bc5-5aa163b245e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.134']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9d7fd1b-de21-4963-ab14-2e050fd58d20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.136']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42825304-3737-41df-8c6b-34a15e6a091c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.137']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adacf4ad-0a71-4ecd-afdf-e16dcc0335ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.14']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99e3047e-3b4a-44b8-8bf9-363a3eeb176d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.142']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89c02f4d-2c95-4f8c-8883-0faffa5046ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.143']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d6a1e58-46c2-4b2d-8b27-080a9006a2b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.149']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc7f0898-8258-421c-a422-5b393ffcb9c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.169']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c398b208-5119-4c4d-afa6-51b4cf4b60a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.17']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a5f8c64-f2bf-49cd-82a8-5a5a02ab6c35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.180']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f757e00b-b48f-4486-a04e-92b856d1cc85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.208']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5700f1ef-5250-4fe6-8469-6c237b87daa9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.214']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4cf6928-18a1-4c2a-97b7-e9fb6875043e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.222']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4c577ff-2ad4-4dd7-8229-b976f618d82b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.228']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f567be78-5de5-4441-aefb-48b089baf82c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.229']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b54618b2-150b-47eb-b4ea-6f4dbd5d50b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.23']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2e429c8-d108-4e22-b65a-16d451b563d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.237']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f21e270-8041-4081-84d1-372b56a87cd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.241']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--032360a5-83d7-4827-9583-a07bb61b9a9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.28']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--299b535a-406f-49dc-bfd8-f1e60f75c5e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.3']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--216946f1-039e-4bf2-8004-2e96bb1a4f2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.35']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2b7a153-e7ab-4765-a52c-e4b4e3af46ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.37']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63a2d35c-2c6a-4ace-a943-2c949b4e7d59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.45']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e564fdc-9798-45db-92e4-a645f25e505b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.48']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecf0590a-2d04-44fd-a19c-4fb998f2bc33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.53']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d516e841-1f5c-4018-996c-530496a3a388", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.54']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea3f064b-0258-4894-b8b9-cdcd7b06fd3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.55']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b4ef0ac-c63d-4255-bad8-1812c7860053", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.56']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdd71318-9cbd-4c96-9d9b-109349c3a350", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.59']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f1846ac-fd00-4e98-a1f4-096f53b0f445", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.61']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7134d95-9eef-4b77-a90b-c7b5fda0d082", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.71']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78348829-2324-4a97-bc99-dd576de96b44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.80']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2bc1daa-5e39-4518-8ce0-0ef0b8be16c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.85']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ac87e90-2732-4e8d-8671-2c4d19a63b67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.62.197.93']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d5e9c88-642c-4a77-9d6f-4460871790a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.160.135']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3207a852-3ac6-421d-8ee1-aa3e814d6a1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.160.201']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90bd61a9-78b3-42c9-a510-f88ee685d2c9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.161.160']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13dae6e3-426c-4b10-a72b-768b187024e5", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.141']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74d3083f-ca9c-434f-b1a4-e10c800ea6cb", "name": "Malicious Host", "description": "Observed: MYSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.142']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8183d41-eb9b-415f-bcb6-21ceebd919bf", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.146']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a865f346-7402-49c4-b725-c5374075a68c", "name": "Malicious Host", "description": "Observed: MYSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.163']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c34e77c-98c2-4009-905f-dea7a1f6db42", "name": "Malicious Host", "description": "Observed: MYSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.165']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cfa75e4-b17e-4c44-815b-cc750f763a59", "name": "Malicious Host", "description": "Observed: MYSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.167']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71881fdb-f949-47c4-b752-d3a512880e22", "name": "Malicious Host", "description": "Observed: MYSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.168']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21272280-9791-48be-98fb-0d9ff9180c0c", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.170']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08ac4dda-5cc0-452c-bff5-66f321f45559", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.176']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d9be96d-f795-45da-a385-0e1f7e5e16d1", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.178']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--669d15ff-f7c7-403f-9430-34a65a3ca286", "name": "Malicious Host", "description": "Observed: MYSQL activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.180']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:mysql"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3cd4ac3-5678-46f6-8e37-97ca91bd5e96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.235']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3074d8d6-7713-474a-bc85-02e0e4d05799", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.81']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--810337ea-8dd4-43a8-aeb1-85115912c861", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.85']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f16414e6-6ef8-4196-9918-4ae02c210a9c", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.93']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0305eea-e644-4445-9872-17794c74b8c1", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.94']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb516c9a-ab55-4d36-b1fe-8a945a422942", "name": "Malicious Host", "description": "Observed: MYSQL, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.89.163.97']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:mysql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfec71c8-ff49-4000-a026-26b92c23aca5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '64.90.20.234']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ac70d71-6c1d-4ae2-8b63-bc4e5c88bb7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.104']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68acd10e-b3c9-4613-b73c-01dad5632d57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.105']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10822254-88d9-48a1-bc6f-d297e612fe05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.106']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2795c4dd-ee0b-4803-80aa-14af0ca736ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.107']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c89fcb0-0e09-4769-ae7c-a8ad663a0ae4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.108']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f280244-50e9-4045-9838-b23e8d75ea53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.111']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a8ca0a3-528b-4f35-8497-36d64dd400ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.116']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc6f7d26-ad88-45f5-80dc-3fc3ea20b80b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.117']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79916ade-825c-435c-bfa6-10b49519d5e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.118']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22859ce2-d7dd-4778-bb20-9391d38b0f5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.119']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62b7f2d2-a408-418f-a7eb-c7e61405ec98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.120']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe386ad0-877e-428f-82b0-2eaea545c3f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.124']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87c06551-cc7b-4ebe-9b1d-7d8ce453dbbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.125']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5f82702-2ebf-4d0c-b026-7874d2776b59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.129']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7784ec60-adad-40a2-9738-cfb2c90005e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.132']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14266acd-4669-4c27-a991-527bc6a73983", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.133']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f440524-36f6-4854-a89f-5f6a228a2efd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.136']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc590634-8ba4-4232-95e1-143cd48c4150", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.138']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3e2942a-ddb7-48c2-8341-679f4efae53a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.142']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--745e2ca6-3d33-43d8-87ce-94bcc03afea4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.143']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25e7397d-c20b-4ed0-b0ea-9e596543461a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.145']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--faf56783-cc32-46d4-acf6-7c3120d312c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.149']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--521a003b-3283-447f-9a5a-27921ba4dc66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.150']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d82c527-3fa9-4abe-bbc7-c2cd9cf55beb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.152']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61f8e5eb-dbfe-4998-a64f-c8a61bb3fc29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.153']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd921493-abbe-4ae0-98cd-ba1e9b897da2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.156']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7e25702-5de8-45e2-b75d-0abdf62f0cd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.157']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afbc392c-f3e2-490d-b4d3-ebb4d8f48f10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.158']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21295f7c-d057-46c3-88a4-b01af6d0369a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.160']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc7f9457-f5eb-4783-9ce2-62459e3be75e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.161']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56ebd7b0-b704-4bd7-bd2b-d27ab4b58b1e", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.162']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd72226a-e962-4f31-8d9e-8567a81b5c9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.164']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ff64af2-19f5-4204-9069-5164287227ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.165']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc3dc687-dff3-4d61-82ff-332137fdd4b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.168']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9766796-3233-4578-91cd-6e03c152724d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.172']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--343ed985-c3f6-4490-bd95-cf8312461cd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.177']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70734888-e67f-46bb-95e9-2698d8119cb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.18']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65def553-59ce-44ca-8b68-a946a9c22342", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.181']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adfbe4a9-21b2-4bed-95ba-32cc57e356e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.190']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7dee73b-1d42-4b0d-9831-c9eafded6a09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.191']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d937b064-deb8-4b6c-ad4f-93b734968abe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.192']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2688d11-4c03-4d0b-84dc-5d43a3ba28da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.195']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a902782-dedb-4e0b-8544-f5f0ded4d756", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.198']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86fe55b3-4afe-4322-a21f-12cd1d7d6b97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.202']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a065d82-3cc7-4321-9a02-902826b6ade3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.204']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ad006da-68e8-4021-9f59-3215d52067fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.207']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52326ce6-66c2-4695-9b83-fb14f3c47091", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.211']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90186067-8ce0-4558-8e8b-01a4ab2bfde9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.214']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dd69c50-1685-4665-9f3a-6090e745f38f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.215']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fe105a2-158f-4591-ac2c-a256b2276ea7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.218']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f330587a-8501-49f4-8d14-405a4bd6ebea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.22']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd16f840-5d07-44c1-90a0-02a042255bf4", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.222']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3090417b-43ef-445d-8f7f-82e43ea8f4cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.226']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efe14235-d897-4d32-b5e2-2f040ec83ab3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.227']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8aa1f3eb-afc6-4bed-8b33-97322caf5cdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.230']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c5b2fcb-8600-4dd4-add6-a70e3139150c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.232']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdaf8d30-1a3e-469b-8587-993d2d1beeb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.234']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6c0aa2f-2559-4829-84f8-f4b14bf37684", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.33']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--326b7a04-1688-4098-84f1-4660f73a7946", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.35']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b76def4a-1811-4b1d-935a-6f81764946a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.37']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27fa4f46-aed1-4813-9e4f-8ade4921a8be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.42']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ff307b9-d9ca-40c3-a24e-11f56be8b601", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.43']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4793646b-7cb0-46c7-9273-59b65eb8c71b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.44']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5566b75-1b41-4e14-a017-ce4cfd601e5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.46']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3ab93c0-31e3-46e9-92f7-6d7f6662df01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.53']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62a58897-ff2f-4ed4-a698-5e5ed8d39da9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.56']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca260b62-f12e-4a8c-97ed-873f06e8f331", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.58']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a540a84-ce14-4da6-ad6d-f9c2f2a4afda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.69']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c6992e8-7be3-4c61-9d47-aaded04a93e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.70']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34769043-2004-4fe3-9ff5-c96ff9a066c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.77']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae9aad2c-66a6-4ef2-8d7d-1faf634c742d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.78']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abb2636e-0e2c-4783-810b-16e24621e121", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.88']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cc88dca-303a-4429-b6ce-755066949e07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.94']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--735e8e8d-e6f2-4dd7-a6e3-8e35ef78d2e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.97']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91d98f6f-f2e9-4806-8753-94419d924dc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.1.98']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abb61999-0653-4dfe-952f-6918cabd8767", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.101']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adbde2c0-7825-48c0-9881-7c71efad2724", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.103']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5571c943-39b4-4976-a899-769a071f1c7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.104']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a5fd714-4f39-4b65-933a-d2ba5f490154", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.109']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bf04854-83b7-4264-b76c-4f78a3a552c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.115']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--778a0721-3ace-498e-8698-00344f7314ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.119']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81d356ad-d266-43b0-b9c1-62020f5c890b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.120']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64fd7a13-994b-4086-afa3-61159973f0de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.122']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27fab337-509f-4063-9155-722ddf496d8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.123']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f89964ff-1c6c-4d8e-9bdd-b95c048c93de", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.66']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf5496ae-1bf3-40a3-8e3f-c56e04572046", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.69']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b3f8413-3563-4f3a-a001-98a70cabcea3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.70']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d562a52c-b0a5-455b-96e4-d63417754667", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.79']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bd4e616-f472-46df-814c-0d0e0d54805f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.85']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b51fe22-182e-4f5f-a6cf-b97da0d3d823", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.89']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--138eb1b0-5b74-4ddf-83b9-b4943b09e49f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.90']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dff4f2c8-b36c-4c58-a449-d2f20872b680", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.92']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85e31546-71f7-402c-b5e9-7746af054e81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.94']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9a8984e-a626-41b9-b268-475c84274128", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.97']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b70b0713-bf0c-4b0c-a27a-d3c5af759c2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.49.20.98']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d955ce5a-1294-46ae-b4da-834e597d4490", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '65.60.54.138']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6e4e829-4538-4598-8912-8b7a54e28dd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.104']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff19aa36-a164-4b20-b0b4-924b884ab065", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.110']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad6c313d-9f98-45e2-9db5-daddc82c7f92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.112']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5fdb000-1ec5-4f91-aaef-79d2de0232bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.113']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--419962a8-92bf-4f72-a0a0-476df5c2c4bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.114']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30202737-17c1-42ce-8955-f97501449187", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.115']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71db6d4d-e277-44fb-90b4-c1837ec2747e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.116']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bc5e1c9-9ed1-4303-b2d6-189f0531aa00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.120']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8635bb68-0493-449c-9813-46dbc8007d36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.121']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e684a4c-f87d-4ba3-b621-9719fcdca28f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.122']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5478c09-32c8-40ad-8fb2-5bbd3937b1b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.123']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a931f691-ed6d-4039-98be-54913c6ca176", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.124']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--432d4471-6c9c-40c6-96c8-0fd430ee0e3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.125']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43a7f26c-87e3-4c8b-b5dd-f0fefddf9400", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.126']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a759a79d-269e-4900-801a-1ea26802e4df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.127']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ddfa846-4785-4247-b4c4-493bc070504b", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.128']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e493f54-c8aa-4020-a068-651a851b8cf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.129']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2bb205c-917b-4f08-a26c-98e1d77a2007", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.132']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--932a027e-5d40-44ac-8412-afc5e1382c75", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.134']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68722043-0ba3-4101-9f55-66feb23d36e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.138']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2691756f-468c-445e-8f7e-34a799d5e50a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.139']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4e4357b-abab-4abd-a1c2-83de5a6af790", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.145']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5865b6e-5cbf-4dae-8413-86bddd0b6cc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.146']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cf6e3f1-6c00-4b52-8f3b-3fb907dbc1fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.147']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b47148a-cc35-49fd-aedb-a323a2dfb552", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.148']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7819199-6c19-4437-b07a-a22aaf858961", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.150']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cafbad49-f561-4fed-9add-3f5237bc4237", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.151']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6807045f-bb61-4546-9d32-e659f73f49e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.152']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80f610a4-3114-4560-b1e9-6f2e6f0d01bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.153']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e60acc6e-9357-4dfa-9f32-9476ecf830e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.154']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d54aa53-0acd-421d-a79e-0b7dc5a2d463", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.157']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d479bbf-5961-40bf-84b3-92e2074c10bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.158']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c8bf1cf-cfe2-48c2-a66f-bc5703cb9116", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.159']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4692678-3da8-424a-ab71-caad04683beb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.16']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da50cd72-cdb0-4bf0-87c4-9e26c0729e4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.177']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4c87bc9-d06d-49f2-b9ac-29d88edaba65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.183']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83bbbee0-d1fc-434b-9f08-1ab693ad26cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.214']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbcd6a15-03fe-4c1d-8842-4060e962907a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.224']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b82d698-a0cf-4e46-9183-f76dfe82d957", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.225']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cc5b0ce-1f7c-4a0a-85e7-0f1bfd7244de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.226']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60c41726-c0c5-4d3d-9795-696445444f4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.227']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81eb4d2e-ca5b-4cba-aa73-4ee7528beac4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.228']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ecc3f50-8a86-41a7-b617-37234159dddc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.230']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c43d1eaf-a972-4d1a-b510-2bf0639be40d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.231']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01617ab4-2998-4dee-b27d-0fde605b5f4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.232']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--779da1ee-f951-4bc9-8a1f-e385cdf3b5dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.233']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdd5a630-d80d-4bfd-8ced-52cdb85eca64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.234']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bc8b6ac-2aa4-4c4e-8e3c-244e0eedfe4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.235']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9ca7c12-06d2-493c-b243-72ef77876820", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.236']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ecba8e5-1eff-4434-a822-0722ffbf4f4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.237']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b28f5f98-8c59-4acb-858c-2f0584305ead", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.239']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d774168-7a03-450a-a78e-4e659feacf45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.172.40']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6efa4e1-7a57-49b1-83f8-78f528c7b524", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.128']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--509c6da4-e802-49c4-8d6f-74e8031b114f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.129']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c33c18aa-0558-48b8-8799-436398f9c1c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.130']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--862ea553-6a1e-4aab-9282-4dcda26e80d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.131']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a0f7413-9d0a-433f-8e2e-dfe446abc0cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.132']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d04f31f-f903-4196-8cfc-914da788693d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.134']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77c0a618-1648-4d4a-9599-3047d590ca05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.135']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d27dfe24-467b-42f1-9101-f002d9c02de7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.137']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e55056ec-fee2-407f-b5ae-cb90b15e3112", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.138']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11e581e3-cf47-4307-9809-6c840ed53e7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.139']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23e47015-3e12-468e-9a1f-42a1875843a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.141']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62ca933e-ea6f-4fe3-b528-97ba0898a9b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.142']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--121d73aa-572d-4c97-aa1a-1dfd402dc4bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.181']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c842f28d-b7ae-401c-9f4e-b604cce2b453", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.186']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80a9b98e-0fb3-4749-929e-1112639fe484", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.191']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--026d8c87-edc4-4626-91c0-1644ab9e56ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.192']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--111c8a36-8823-4d53-984d-e4264b758a92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.194']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2eca53d8-787a-4731-ad0c-07e12e174fe1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.207']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b205b37-7065-4e28-bced-9dfdc0b4863d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.209']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cfba1e6-a2cc-49b7-985c-7c750596429d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.210']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6388a14a-d22f-4976-9bf6-5d0d668c7310", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.211']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e07a4413-9d4c-4f01-b4e0-ef6edc86e377", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.212']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dee635f3-27f3-4bf6-bb3f-78a641a3bd74", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.213']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dce783b-1272-4230-bad6-0a5af94bb5ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.214']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b5bc735-eee8-4510-b1fa-f896eab12879", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.215']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac72cc20-875a-43b2-8fd8-c3be45ac558e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.218']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e5bc96a-c655-4eaf-a08c-69e52e138afc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.219']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15d58e69-0e4a-410c-8e47-41889a8db867", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.220']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3185eea0-ffd1-4e35-a57e-f18e6713f263", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.222']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11f0c797-e91e-4ea2-8934-cf87818ef52b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.224']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd24f4f2-4b13-4930-bb5f-3257e70c896a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.226']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19395c7c-6a74-4730-ad14-1913454589d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.227']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c204ce8-d71f-4e4b-8181-37fd1e8fe7f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.228']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdc88cd0-58af-4d66-af00-544068f65a00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.229']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--817ef3fa-9a01-4668-a332-82ff32300cb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.230']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4e82afc-1165-45fc-85bc-746ae99bb4cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.232']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac49f5bd-dd0e-4e47-a6bc-2d22d4dfe825", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.233']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0348aaae-0d89-42fe-be80-d3033df4a12e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.234']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53aacf32-2c5c-4032-9928-853c0fa7533c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.236']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--308b4fba-947e-4972-9e82-515224cd83ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.238']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab25427a-338b-40e4-9aa4-eda9823bed0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.239']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a38928c5-9f2b-4575-923a-ea99ec42d474", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.240']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--601342f7-fd5b-4d35-9c54-50b5e443ae78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.241']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6aa01625-97f6-4013-b946-00637ed7afba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.242']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7970849-fa81-482c-aa8b-2999eea2abee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.243']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb8edc74-434f-4a03-b9b8-89d842fd6550", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.244']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5a02717-44b6-40c7-94f8-679cb81a5c2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.245']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c97096b2-91c5-4640-82c1-dbdd5c67d832", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.246']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46d5f1c4-9ed5-46b5-92cd-74336b481b78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.247']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55e9f317-64d3-4028-a51b-58bed57beacf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.249']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00433bef-c6b1-4270-93b7-624fb9e01beb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.251']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa136ddf-27d3-46c4-a6a0-c9a7046069b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.252']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b573065-7862-4786-b2a0-8ea8eb94acc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.253']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c933e157-6fd2-44d8-95d6-1ec5167b63ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.186.254']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4d5df42-5ac5-4609-9a83-8889c43df054", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.102']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31832b28-8235-43ee-af2d-fc64ce8c27ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.103']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84327172-ac68-4918-be32-acfe449dc453", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.105']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30b6dc95-77cd-4fed-ae45-ca106d835531", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.107']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0f8b59c-1cb2-4af5-a709-85abddff01a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.123']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e7ae507-1f77-49e7-b209-4bded1421036", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.16']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0fe5206-768a-405b-a0e3-1745cddb18b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.17']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7efb7ab-7679-43af-a05b-79a6c040d229", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.18']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6b78057-3fb5-4169-905c-b456f9dc06d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.19']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--164f31f7-9b14-45e4-99a0-e4a6b1119594", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.20']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99ec048d-5193-4fb7-b1cb-ad5c44eb6b11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.21']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47d546fd-d283-46cf-ab1f-50ca75324f33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.22']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c264351a-a85f-442a-b0c0-9f1dbb0f8401", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.23']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c53cd633-f99f-450b-b9aa-e161ef1feeeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.24']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cc3ba4ca-fdc0-4fe1-89fc-817dde61ad3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.25']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--526557e4-dc81-431d-98e6-c2d2e0644ee5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.26']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f63d1541-374f-4341-ab83-57ba1297dbec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.27']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8902dee7-9bb9-4b48-a09f-b4a3e67cbcec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.28']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df1af038-145f-4b57-afa6-5e3ba1a04bd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.29']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5706d326-b032-412a-95f4-49b01b2f5c3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.30']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de596938-c459-40e1-93a1-b3d054a24265", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.32']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2964418a-f947-4ac4-a920-77d79c4454e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.33']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32b7a82d-b486-4fe9-af59-dcd6d4293f8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.35']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--119141f1-ebbe-4498-8d1d-a4a61d515a1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.49']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feed9064-b39d-4db2-bafd-c046c1a6ad9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.52']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5a9831c-d300-47f4-9e4f-7d5920398e15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.57']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0ed1f39-a1d9-4e12-853c-8955cdb8322a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.59']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e80e2a92-e8c4-4cf2-8808-bb433cea6baf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.68']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e2c7291-474a-4ea9-b7dd-a9a695123ee9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.74']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87a1b26c-8335-4891-b658-c2c1b6304714", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.90']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d96a097-c07e-4bf8-b29b-8b0961895fc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.195.95']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--385c632d-9a3a-402a-bd8e-da400e07000b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.16']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ddca0ef-6f45-46ca-9cb4-dec11a6ba560", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.17']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f526837-2cfe-4468-a5f4-5a599fa174f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.18']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f2f5836-df9d-4691-9e23-0338ffd0fd54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.19']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e26f1a9-6035-45eb-b8a9-75959a14468e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.21']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1eb010d0-582c-4f51-92ba-67c11528587a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.229']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d18a64d0-d26e-4296-a9a9-88b7bae0f1dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.24']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c2184e0-1e66-4d5f-b0b5-d4b051af4f3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.25']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ac56cde-696b-45b4-8592-f419b8ec8e05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.26']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cbbb7b5-54bf-483f-a7ec-64ae7f21a72d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.27']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5ce703e-0869-4d99-9ea6-daa696679c66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.28']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--835e301b-2a6d-491f-b4bb-28d80960abc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.30']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9a0a063-e1ec-4fda-b494-c4650491e1f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.79']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ece56437-5d2b-4606-aa4a-af612b9894ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.83']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3aba7e2-de79-40e7-9a37-78ddf3db4d5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.84']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a14fd326-be01-4e74-9cfb-1aaeff8c7c3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.132.224.91']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80d3dbb2-0fbb-44b8-b23f-44ed485a2087", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.150.198.186']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5a1b63e-e091-4116-901d-640c2013abcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.175.220.105']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66b2279a-27c2-46ce-851b-28cbd2bcb603", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.179.10.139']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0460bb8f-1876-41ff-a13b-d9bb87d5c1f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.40.98']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8159d78-f9b7-413e-a67c-e4f95e542daf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.58.100']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fc828f1-ff88-4ee1-834e-2bda5671c689", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.228.62.61']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f90aee3-78fb-4b51-bd7b-e8313b1b625d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.205.34']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3120318b-11b3-4b34-ab2a-dfeb59c8919c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.219.146']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ac6878f-9276-4182-afb1-8445db0452bb", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.223.208']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf928022-fe5f-4d45-aa7e-424d18d50a76", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.223.214']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff951b2e-b528-4879-a025-7dd17b695bb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.236.109']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--228bf312-11b3-4e4a-a53b-c527628c90f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.240.236.116']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee319e75-266e-4cf8-8e8b-dda69f449b83", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.249.66.64']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eab67ad5-a879-4f4f-863d-c6c238dc4179", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.249.66.77']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9636334d-30e3-48b4-b9d4-0b176cbc3db3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.249.66.78']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c21ac4ef-4dcd-4c28-ace7-2a53868a6134", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '66.249.78.41']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6570afc-27e6-4ee4-baea-54df3a7419f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.205.144.98']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec77ed31-379c-4498-95bb-5b083ce7325a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.205.186.48']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b178021-7ab4-4782-9a78-1b2d38f55ba2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '67.207.83.69']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd6ddb27-0756-4c06-bf11-f2bb01e4f016", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.1.133']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc90ede8-091e-4859-afe1-8ee5bb6b0758", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.118.156']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bce81676-8d9f-4351-97aa-f2e20562f0f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.124.108']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8acdddd-b333-4493-8ea8-d45431098b02", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.126.140']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad5f09f0-d5ad-4c98-a811-ec9f6edbd39c", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.18.106']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c446a8bc-eca8-4818-840f-16dc40db665a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.23.112']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07d956c4-99ad-435c-9cac-889cde4cb877", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.183.58.201']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed6175f5-0a74-4286-a974-d5f79bbc93aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.220.58.144']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cd82bcd-5636-4a09-a867-3ad62b2ea945", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '68.235.45.2']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87b76be3-20b3-4ace-9138-ad59c34d76f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.12.71.34']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c56110c-c1b4-4b9c-8a50-69b9b72f4d3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '69.164.214.243']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1765a8e9-82b5-4f7b-9ed6-3207d2a86fec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '70.125.16.226']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9e9772b-6801-4ebe-87fb-ae8de2b49819", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.204']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49e7d120-cbee-42ba-ab42-d1f280a4ce1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.228']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e7add3e-5771-4c5c-b255-b1ef89996016", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.229']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07ebb116-26fb-4fda-ae4e-06c413d524f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.230']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28933d92-bf0c-4617-86b6-4e0a3ffd3f3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.231']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3969925f-9229-474a-8479-8f35e296cc2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.232']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e48f34d9-9bf7-4aa7-98e9-20fa13d6ca16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.233']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cf7e507-906a-4644-826d-0b1f03b7ec98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.234']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22d76af1-f53b-48ae-b43b-98734d56044f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.235']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61a1ca86-bd2b-4980-af1c-6c7e3b317c9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.236']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21eb0557-fb26-4513-bde2-eacbb98c1046", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.134.237']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03c7b598-c295-4e26-8cf9-4f038997ddfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.135.131']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--325bfc33-8259-447e-b0f5-be1dd8356756", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.147.254']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca470e98-dd24-436c-b119-11e7fa61e612", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.165.200']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30f1dbc0-4551-4723-9eeb-c4ba1277496a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.199.23']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f618160-6bfb-4ee1-b5e6-29848ff4ba82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.199.65']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cab32ffc-d4ff-4b02-8f13-1b37d6287e08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.20']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b86e9d08-ac4e-4d25-aa85-94e98725fc5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.22']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--497298b9-b100-4f39-987f-8c23803aac5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.23']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8db3f1f-ced7-409c-ac02-c21cf8e7ca3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.24']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2fa02a9-1eb0-4cac-984f-334046b6edcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.27']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0d4a22f-d2a2-4c62-9d4c-fd6f60f893e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.28']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c943cf90-d23d-43d6-be89-12dea7680473", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.29']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4d8600b-4308-49f9-9eef-be9a4b567e4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '71.6.232.30']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d59ffe3d-d766-4530-a716-28826e2323d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.14.147.83']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2cb86982-6cef-47a1-9a26-1ed539b78d60", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.22.151.89']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--462e579b-9686-47d4-8680-4a29bb30ad5a", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.253.251.3']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed78ecf8-6dd6-4f1a-a774-cd23d0a41223", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.255.18.194']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7928a2c8-9612-4f49-a109-6431d70ee2a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.255.19.227']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb38bd8e-dbf8-4561-8c7f-c848d0e318f2", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.255.33.133']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6869326-0204-4fbc-b327-ff0d4f5fe297", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '72.255.37.94']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50a391aa-3dcf-4747-a66d-b8972c255e35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '73.206.62.105']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25f23f3f-a11c-473f-8ebd-1b1804db5208", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '73.76.159.70']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81a49e35-96f7-44a3-b7e8-eeec87d9b2f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.207.253.22']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcc6601f-f337-4de7-b5de-8bc920885796", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.105.121']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--094c7600-837c-4afa-b03c-dd9130f6a8d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.139.83']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7261bd7a-096d-4845-8aaf-843c52c6972b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.165.57']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9156f455-7857-4d04-8e8a-350076699d4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.235.187.188']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af5e6cc1-83a0-4568-a02e-1d22ceab1b96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.177.249']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c51c33c-b7d8-4e10-a9a2-53a700ba7013", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.178.155']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee309bb8-b2d0-4654-ab20-e1e192f5e291", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.185.115']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a63a4c86-01c0-46b3-adee-f0b543b9d509", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.249.194.100']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a05dea09-8150-4656-82a9-70379c44193d", "name": "Malicious Host", "description": "Observed: SIP activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.50.98.193']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:sip"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7498ab1-2ec2-43ca-ae7e-79cad347bb1e", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.7.228.53']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ab4106e-51ed-4a14-8e4b-74770813562d", "name": "Malicious Host", "description": "Observed: OPENCLAW activity. Sensors: openclawglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.7.241.163']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:openclawglobal", "protocol:openclaw"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9169ca0b-dac4-4a76-87fc-fecf2785ac43", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.7.242.61']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--676a006f-73e9-475b-b351-8f46fbcfa498", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.11']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58404133-c73c-400f-a581-7b828a269130", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.16']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57481be3-5805-4289-bc4f-63bfc719321f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.19']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--444ddb50-ee6d-4159-a6f9-2d4297f2b4c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.2']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f4c6352-e4bc-4c9b-b658-9e7a76deb4fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.20']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9b85c74-d468-4e1e-8489-1874e79713bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.22']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ee5a6e3-eb84-4583-b475-5c2284a82e79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.25']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ff38d71-3379-4a2a-9bb4-f1b33a6eb951", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.27']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdd77c19-5e4b-4c13-8eb7-1d2f73706c73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.28']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd58f579-810f-4bfb-8992-80566b2cb429", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.29']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a19226a0-814d-44b7-b7e4-660840017e4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.30']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad949995-923f-4e00-86c6-9f2b4a3a0bec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.40']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a58e1e02-503e-473e-b410-f075136efd60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.41']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec861bea-4c76-49bd-90be-fa62e82121ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.44']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79cb5784-8b96-45fd-825e-b3a39d100d15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.48']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dcbcd57-9ea8-4eb3-82c6-2cbf6540e338", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.49']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbb7e78b-1ef2-4973-aff1-1c6fbb81d164", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.55']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--836b6a79-5673-40e5-8af4-e042978bc9b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.57']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--962d6b3e-b01f-43b4-8c3b-f7b337f653f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.62']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f4c754d-f743-4ef1-91e2-e3ed7635277c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.82.47.8']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--506c0a9b-702f-409f-8024-7a0822bf10b4", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '74.91.195.12']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbcafeba-2df6-429b-9460-481ad551551a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '75.71.20.187']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66dc4a04-4275-466f-a271-5601f32b8dc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '76.14.106.53']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--020552b1-9e9c-4d7c-b27d-b12ef4c9ccd5", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.101.112.87']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab2b1f01-1757-47a8-ba15-e2bae08b1106", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.239.124.104']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc78b077-e387-4dc7-84b4-3986d87b7c54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.239.124.127']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d41e973b-4c28-4c7c-9a00-a812e742d0de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.239.124.130']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--50f7ac6c-adfe-42c3-9cea-93533b6761a3", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.239.124.180']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5adfd13-e499-4ab9-9d78-13fdf7bd4bb9", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.239.124.185']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edc4c571-2b6d-431d-b90f-d18073bc0e54", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.239.124.205']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd6af59a-e107-486c-a4ce-d078f08f27d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.37.53.58']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4924bc4b-1287-4e74-a59b-51586f70a385", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.77.80.168']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84a35fd1-a930-48ab-a255-cd7b2a741d51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.4']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0beea302-8316-4177-aa47-c1a9b8bd9bf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.83.39.94']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--473e9203-ae1b-4a92-b690-871c881f3235", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.16']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a4837c6-0fe9-4fe4-897d-642b0614e748", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.20']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63e3c068-76de-45c0-ab82-63d25810efaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.238']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67a9a036-6a82-44a1-a42a-fc59f7645c40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.78']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--354f3ac0-edcb-4262-a296-fbfd832ffec6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.185.79']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--610cf520-7e48-492c-9524-8a2e40ff20ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.1']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e45bbf5-7410-4e27-965a-f157ef6a09e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.10']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82d50eb0-9001-4250-85ad-61ed984cc573", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.102']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--671e51ec-c172-4c22-9a61-79db0de9c57b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.104']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--320cf347-8004-4eb0-9cbe-ac9253a52793", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.105']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3d74855-d96d-4515-8d55-e3c7b7e9a989", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.106']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b39da00d-3ed5-43e2-8621-1a4769cc0a80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.107']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abf8958d-73f7-4e11-b135-3d528379644d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.109']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20f8d5db-caa0-4dfe-a609-c18820722482", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.11']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b3ba9af-390c-49a0-911e-06b8e09ad1f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.110']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1213662f-543d-49a5-8ad5-8a3d2a4fab2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.111']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6966349-8151-46f0-8218-dfbb62797a15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.112']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b231c27-2621-4ccc-a9d2-7b6497805f6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.113']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9a46198-11a3-47e3-8902-7de41d3111f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.114']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f9b2574-6a45-48e8-844d-b924330f093b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.115']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a8c1b74-21ed-43a6-a37f-ec662291c808", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.116']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4be562a0-62d1-4ee3-b604-aa8ae7b28b65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.117']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--874f9f39-268d-40e0-86a7-c309b012e305", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.122']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c9bcefa-97c7-46cb-ad74-8bcaf5233a78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.123']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdb6ec95-0db2-4ce0-9e7f-66ef7c9fbe03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.124']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f7ab7a2-9452-4f0d-8a4b-bce8d3cdc419", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.126']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80a28ee5-82da-475f-b63e-11d5923af7fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.127']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--953c2667-4bf2-4935-b08d-38bf8ac4714f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.128']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--128383e7-3b85-488d-b91b-66b755eea8d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.129']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6f2fc7b-ed82-41d8-8a21-b5a44ccef173", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.13']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--628ac4ce-1e63-4809-a1f7-cb758997807e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.130']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60989f6e-6e1f-4230-b541-8884d580ca3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.131']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f168e5d6-a14e-48e4-bb44-727114240d23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.132']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c9cf16a-74d3-4827-a4ad-e731a2f4abce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.134']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5817531d-82b3-4dc3-a208-fb06ce437456", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.135']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--080ab8ea-379c-4f34-b751-f758b69fa1be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.139']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b23d3e1-3c52-433f-8ee7-8ee2fecc9b5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.14']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45ec0c46-89a4-4645-b3cb-cb4357a0f4fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.140']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df33458c-d448-4f94-ab1b-002bc6dade30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.142']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9f499cf-91bd-4578-8de3-f6e5119dc693", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.144']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64dd0226-51ec-43ec-aa40-04743e84e57f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.145']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3089f91-6bdd-43b0-be71-4c791d514f2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.15']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24ef2e88-a8df-4ecd-931a-74218234608f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.150']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--647dd7fc-2ab8-451d-a420-00598c85b5f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.154']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3553f6d-1cac-4ce6-893e-c580952e3f6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.155']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f3bd6cd-1d08-4191-b18c-970bcdeb9dfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.156']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d67ec5a-12a2-4885-950e-68f355841fbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.157']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72da9f1d-6276-4e27-b724-4e20b23a795d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.158']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3adb24b3-f350-400b-b208-fc87e60ad74f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.159']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53b6e693-431c-41f3-8521-401ce85c68de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.16']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d5171ce-b3b5-4ff6-bb6b-f65462c9a090", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.161']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d3d21ed-4352-400a-bbaf-82dbc3175ea5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.164']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18f97899-78eb-4e2c-b3b3-ab6c678c303e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.165']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0afd7303-3a31-4aaf-9409-7dfb83441e18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.166']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24d58531-9a43-441e-9fb9-debdb4911a5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.167']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ec9bb88-d042-4f25-b440-0a3e8994b75a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.171']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--028349a2-eacc-43ae-afca-c63b6360ebbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.174']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--539b9eff-51c5-4570-a643-5c08c453c84c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.176']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bc9e7ee-b639-4a88-b3ef-a0bbcab2c49f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.179']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6478d4f7-255a-49b2-9e8a-0f784ff49e2a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.18']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--732d1380-38df-4b49-b53d-fbacd0415a72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.182']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48d93e8f-d06f-4b71-9996-7d70e044d2df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.183']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d07335b-943f-484d-9878-009ea2c37c35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.184']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69f014f4-33cd-4c75-9562-e1fbd7ec8866", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.186']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c575c0af-3be0-4d04-9312-528783374c9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.187']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--603455a9-b25b-43b5-85a2-e294ec407aa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.188']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd2c7cf2-312d-4548-b66b-1e620c1f3b3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.19']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34970164-5db2-4b25-84a9-bb3cd078c55b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.190']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66d8228f-c487-46c1-a1e5-e3dbec219db7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.191']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de90a547-4599-46c1-835d-aeff852606b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.192']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b594515-70cb-4b2c-845f-caa6539d2b5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.193']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed811382-4204-42f2-a6ef-8eb38f87a2ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.196']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a42cf3c-e356-4840-8cfa-08b313a1cb42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.197']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--339ba53e-886b-413c-ae57-28eea24e522b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.2']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a7f2485a-7206-426d-a998-ce0300927068", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.20']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f6b7d6f-b158-45da-b68d-bb347251ac73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.200']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b55171e-3648-44ec-b788-593eb7944c43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.201']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--606bd957-5b73-44eb-8e02-352d0b985e8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.203']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdefd8c0-42f4-4a33-9897-33d54e995729", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.205']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07eeb703-d1c9-4bcf-8e33-f68b7c23dc29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.206']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f919714-c5ab-4c0e-aec3-9275d631a0ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.208']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--089f3e24-9643-422a-b26a-60643d72c9fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.209']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee4f85e6-5faa-451a-9874-a85f486c816a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.21']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f63c76eb-1a31-4222-a591-5b8673c06616", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.212']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c64d14a-e973-4960-9dd4-fdc1ea314c56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.213']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1be236bf-1130-4bb4-9c86-fd0c350d1016", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.218']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a28f578e-a74e-41c0-bceb-63aa8d1bdf13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.222']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e087d17-502d-448f-992c-15e385a85417", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.223']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ff6c0ce-4d44-4b8a-b04e-0cee9a14470b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.224']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e79d7da-1d3a-4694-a2fa-38cb4e714554", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.225']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fd767ed-4cc9-4efe-b91b-6290660ed939", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.228']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fbc431a-58ee-450a-8e86-2e5fbad8b30e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.233']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4587faae-c1b9-49eb-9466-eca97847f844", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.234']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3647486d-be2d-4d9f-a4f4-87fa5ec9a222", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.235']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe3db272-855e-4cc8-a834-ff96129c7a0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.237']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aaaac7fa-80f7-4d97-96c5-989657ac187b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.238']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3084e8fc-7de4-4d67-868c-4019bf69fc56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.239']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c924a0a-8eeb-4b53-bf61-a36b0912b54c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.24']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4315bd2c-a5a1-4dcf-91d2-6d22bb7c06b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.240']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d8f391c-3a07-44fb-8b37-e5b4ca196b98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.242']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06bdf62e-2ece-48e0-96ca-1af6b44e0142", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.243']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43b120d8-2497-4412-9af9-3ccd1f1f13a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.244']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3994292-7644-4006-9cdf-3bdbb9a28c09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.246']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--540dba92-01c9-4c2c-b50b-f55ceb778721", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.247']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e614e1e-bd55-435d-af5c-582db06fe0bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.249']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0bff47b-80e0-416f-8d35-48bcc5e99b52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.25']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--220e1cbe-802e-4e73-9259-42a602ddbe93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.252']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2efb94c-5594-416a-b7f9-ac40641f02bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.255']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70bdab22-7c6a-498e-87ba-e18797287870", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.27']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f50223c-f1e5-4f2f-adb2-0202fba10a13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.29']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea672e65-8e18-4577-b41f-eea283beb943", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.30']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4972e067-baed-456e-9b29-461d825fa0bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.31']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44c70176-1b51-48da-b170-34750abecca4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.32']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9782ae7-d3d4-4e58-a1c9-e4588a7a8525", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.36']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d04943bd-b97c-46a9-b6df-3f642473e73a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.39']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--549711b0-1aba-496a-ae36-8e2d717d56bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.4']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0509537f-327f-42da-a7f0-8faf2bd9c361", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.40']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--008a6442-3b57-492e-a60c-52019c6de9ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.41']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4c29ffe-d35b-4406-ab51-dc1286912e1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.44']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c7db25f-bf6d-40ed-a8a2-36908c03aa86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.45']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f021824-215f-4c8e-b88c-4d71852762e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.46']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff6589ee-0615-48be-ab30-707911eeb5e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.47']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c912ff5-7ea9-41c9-9473-ee5c4f23bd66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.5']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdcb4614-5aab-4ccc-9a2c-8f255dd503d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.51']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e2c8caf-e9da-43cd-aef5-3a3feedad5e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.52']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e3a2bd6-a7a8-4dc9-8369-1503bfcf888c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.53']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2584455-6dfe-411a-b28a-650b616c1e1a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.56']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f060b3f-07e7-46de-aa0b-e6c50ebe1a07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.58']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf17f07d-1883-46a6-8d69-df1a24aab6eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.61']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--078cb17e-8ad3-4c84-8c8f-90ec25df6c1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.66']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcff506c-3d55-4f20-ad42-8f95e91f7948", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.67']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb872335-33ee-4365-953f-8f27adbf5741", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.70']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b386204f-ae15-4c98-9b9a-1e15466255de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.71']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32bd6043-21db-4cb3-8edb-09d1a1e5f480", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.73']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab66dc59-16f3-4936-a70b-d494a519e066", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.75']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64ead483-59db-4a46-a47b-b310790bebc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.76']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--464ccf11-22d9-49a2-a227-edb1685e9128", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.77']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b44aab7a-5471-4ced-a0a8-74ca10d4f13b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.8']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5df0e45-c813-4316-99c0-f2ffd469833c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.82']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55f19c58-2be7-48af-ac53-24fa02e3b324", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.85']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f665223-cf42-4ed4-a130-4c02a6f851f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.86']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c06ae3f-c8d9-4cc2-a3ad-288c5da7e44c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.87']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94ffe177-8d18-4762-a01c-c08ae05ef96b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.88']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93240da6-74bf-46de-8c36-b043a1213ea0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.89']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2102f091-0b55-4a1c-a09b-8d517d9d5fe3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.9']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a70b658-376c-451f-a247-dafd44dcad2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.90']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3190aac-0de2-419a-8368-8c95a1f8657e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.91']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3101781-e485-4552-ba93-86c569bd987c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.92']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76c79786-51cb-4e87-af9d-43ff5ef9d220", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.93']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea0654c7-f75d-4b2a-8d51-0cef3d5972ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.94']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52405ea8-41ab-405f-9099-8a7ee7721ff1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.96']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3200b2da-9333-4fe9-8a14-8d7edca94b53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.97']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72511796-307c-44de-b3fa-7d72925f3bd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.98']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--052b34bd-404b-4b74-93bb-835540b603de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.90.57.99']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0192fdd-db02-4e44-b741-90cb230658ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.118.50']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5b34b73-7bc5-4072-8560-ace3ef97ef97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.10']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b3de36e-144c-401b-8e78-937a3cef59f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.11']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cd0f76f-ba04-4df2-8057-124b8a92266c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.12']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90aab629-72d7-4884-a600-ee447602003c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '77.91.71.43']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a624b10b-c4ec-4868-ae8e-ea60249bd6f6", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.120.151.62']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e516ae44-25ee-49be-9f97-314f5aff46ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.112.30']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5c8ce18-c3d8-4539-8284-32a7eb79810d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.112.6']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb1b0dd5-82c3-4d6e-bdb3-1cc0b4228aa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.113.22']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b107ca3a-8d2b-49eb-a2ed-150ed50c1867", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.113.46']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d3088f6-781d-415f-91d8-e89511a23e2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.113.74']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19be938e-e360-459c-83ec-acbc1124aa14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.118']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--098913dd-a24d-4c26-86f5-f4ea3ff20625", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.162']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b2524b1-2557-4f3f-899a-7c34ba9cca33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.174']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3616bf2-5361-4a57-96b4-10bd711c14bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.128.114.46']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b00b5a77-d2c6-487b-8fe6-873fd298d217", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.142.18.52']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fb96ca6-27b6-4275-890d-a5510b66622c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.190.2.76']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f2d3790-1634-47bb-a3ba-2ed08492dc54", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '78.38.19.161']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c1b3ee4-872b-4d1b-9fcd-c953c9a876d6", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.112.131.33']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b282fb2-bce0-4a02-ae28-35e951bbde23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.162']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fd98b5a-defc-4982-a147-664e4e976e4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.40.166']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f30c2b52-865d-4aa9-a08e-16aee406588e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.102']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00ea48b4-c710-4a7d-b894-448a8e03f661", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.130']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bf6c1ef-682c-471e-8503-840bf5fb9791", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.134']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94c5e5df-96c3-41a5-ad6b-019eb3abbc71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.70']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38de9474-b97e-4f8d-a332-243e96a69e78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.49.90']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fdb97c7-e282-44f6-ac19-91a95c22f3b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.56.102']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e29cfd1-99df-40db-bfc3-97633cc83430", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.56.114']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d263f45b-af1f-4589-94f8-e67d8f1839a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.56.142']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18f2811b-4c58-46e0-a9e0-859496f7eb78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.56.202']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--545c7bce-c49e-4553-bd9b-606a150bffd7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.56.222']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--363a80eb-a64e-429d-8d05-96852eb74ce0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.58.18']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--372399d2-bc70-4170-9207-fb5003b903c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.58.198']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--065d13d1-291d-42a4-92a6-352f3a560592", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.58.246']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--790c8082-2e9e-43c2-a826-d4eda0082bc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.58.90']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecbf2aae-e0d6-4a08-9d63-cc64ec610c5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.59.106']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4f1bf0d-c5ef-428e-82b9-dda3e984ecca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.59.178']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86efecdb-0e06-4eef-9fdb-7fc0488d0dc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.59.182']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6df13762-da20-4fbe-a668-4429af5eb2ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.59.186']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6fd0540-c96f-481e-9d33-82ad13690984", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.59.78']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6556675c-bedc-47c0-886d-0c4bcf9f427e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.60.218']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3f7ef1d-9829-4419-b1f2-2acdae0dabaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '79.124.62.178']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0335ce8-a719-452c-bc12-916ac89b3cc0", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.134.124.8']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--796d17d1-f78b-4fc8-a114-c12df268c750", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.137.106.77']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1146a684-cc4c-41a5-9dcc-4f88d4f36b02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.101.19']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb189741-d76b-4737-b487-e8913d7bc855", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.102.92']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--144d1ea8-4508-478a-8877-94c05ab09a81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.126.67']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85355c74-3c95-43f7-925f-556e0bd7a3eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.201.85']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a25e655-995a-4003-8c96-a22217ad0718", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.211.227']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89c0d3b6-359f-40b9-b304-57120fd2809c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.216.222']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd6c33ca-288b-463b-8fa9-487ef83421a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.228.69']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ceb59f4-0442-4da9-a0a1-e5d7a3937a33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.209.237.154']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb5e1fce-e5b0-4e78-98e0-c122dd446423", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.12.213']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a438d1b-bff7-44d8-abaa-cab5105ceb51", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.175.209']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77b13a4c-b0e3-4d07-84b5-71bff4741b87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.211.178.95']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61980a22-4ef6-4926-a8c4-7a16d12f528f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.213.82.133']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--798dccbe-0efd-42af-a347-8c34a5b39865", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.0.100']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e964ae8-f207-49ed-aa26-4cb5bfbb3e90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.10.2']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb8d75f0-54e3-4951-adc9-745f1ec0dc61", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.10.200']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a8b563e-8589-48fc-bcc4-64809fbbb5f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.13.122']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e732945-e695-4a44-b9fe-e039d0f7d59d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.14.197']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd2eca8a-997f-41b3-ab10-1837edc5a020", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.16.92']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02203de9-2026-440e-83b3-661faec89cb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.17.243']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b03ef49d-24b1-44ca-b20e-c43d94a06456", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.2.109']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--683def78-0e1c-497c-affd-ce848fcd53d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.1']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--702bec35-0e87-40a7-86c0-b0de69f11f43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.3.244']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ac3dba9-ff43-47f1-8fe2-0453103e826f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.52']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--024d0ba5-a7a6-4e6d-8282-36f6a0bc6903", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.57']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ba1039a-199c-4758-ab8e-d90b061452c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.4.82']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2969d30-0115-4995-8a2c-e0af7cb0e5e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.122']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfcddc18-6f1e-44bc-b633-00a970f0bd1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.5.214']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61548313-c1ef-4132-aa8f-f1061dab1987", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.133']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dfd5f5a-198e-4906-a31c-dc0104b9e3b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.191']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56ec96e8-54db-4994-acc7-da09add0884b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.6.61']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--247578aa-da10-43d8-8324-724e8ab2b5e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.7.175']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--292e6933-207f-40c0-b441-e8fca1f6fd6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.30']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2ea2086-4ebc-4b55-a164-ff722840fe5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.8.45']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8074fb6a-f4c4-4bde-aae3-9b02e7ad83bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.11']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--946ee691-4c9f-4b11-acdd-afb4da2e429c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.112']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9156a8da-0620-436c-9f6a-f9081aa280e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.216.9.30']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a4eefcc-6aa9-4864-b191-5cc75d141845", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.217.145.188']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e2ba5008-c459-4b9b-b19c-4f5ed0c696c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.238.77']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eae20a2-7fd7-4fb1-a9b3-672ba8da0c32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.68.3']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54a24b1d-9aac-4b4c-aa0f-d04fc0a24edf", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.219.8.35']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da896eb9-bda0-40e8-8962-bdda0a898b37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.222.160.19']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b39b908d-ea91-4d9e-a652-ff9874caf8ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.228.125.216']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2f4afbd-843f-4f87-ab75-1053aeb615d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.231.246.76']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f54bc8c4-74ec-4423-b482-51af1c299f68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '8.234.94.118']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98ec8171-d1b5-4f84-88b5-4f70884bace4", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.244.43.235']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97968b04-8519-428f-a760-471ef05e445b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.83.43']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--505001d1-6e67-491d-9f4d-d1cc0aac7273", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.66.83.80']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a29b4cf4-8fd2-4c4e-a77a-e466cd2b980d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.73.192.186']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--288f4983-cbd9-4957-852b-3b702c762fbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.78.27.99']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--466ced00-d50c-438e-96f3-e7595745f618", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.65.245']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f64910d1-e159-4ee8-9f17-7b6596690d35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.77.139']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c89ed0b9-a16b-484b-a4c6-5a2bc5c47fb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.77.202']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f37cec5-a01c-4158-a733-45b1c6c18245", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.82.77.33']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b50fb3fb-c1f0-44c6-bc3c-018f0157c190", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.87.206.19']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cce8a5c-ff8b-496a-b0fd-85efe42946a5", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.92.179']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a96fd93d-4a13-4002-93b2-fe11b6fab1fe", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.115']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e2e7409-3914-463f-8617-99f8b24a41f1", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.116']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--184b9046-c2a3-4258-bbac-8898ce6f5d1b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.202']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cab401ef-cf9e-4de1-9668-c8372cb66154", "name": "Malicious Host", "description": "Web exploits: php-backup-grab. CVEs: CVE-2002-1149. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.211']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--10597a0a-7f26-4ced-9b3e-3be41665c604", "relationship_type": "indicates", "source_ref": "indicator--cab401ef-cf9e-4de1-9668-c8372cb66154", "target_ref": "attack-pattern--0e6e4145-cd99-4e68-a56c-3613ee5420af", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--ee124df1-04e5-45d5-b9c6-a1b59b793b24", "relationship_type": "indicates", "source_ref": "indicator--cab401ef-cf9e-4de1-9668-c8372cb66154", "target_ref": "vulnerability--9f6b4a40-b312-4d6c-8962-53e248873558", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a497ee9a-0844-46de-a44e-57bab29ce3c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.245']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffee34e1-4f5a-4307-a9d3-800d6fa605ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.43']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49eab7bb-3993-40c1-af93-166230ce5bac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '80.94.95.83']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2dee7c31-aef8-4578-84ed-3865cac67218", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.171.72.135']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--736ac921-75b8-4399-92e1-dc48bf000fad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.25.76.136']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe356f60-f143-4a65-a044-4d3f5b731c22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.68.179.56']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1059d6ae-8476-4909-948e-3d1cfc2d607f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '81.79.42.38']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35c3b8b2-b1aa-42f1-a701-195a0f737fd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.129.224.250']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66e4673d-847e-4eb2-b94e-8a3d99613a22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.147.84.190']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c0a9670-db66-4daf-9cef-950c672d00a8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.156.34.74']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d373fe93-78f7-4dd6-b9c7-98466d929124", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.156.88.97']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b400cc6-ea07-4b8f-a646-877f949da5f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.25.45.105']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68ba1f80-5a80-4d29-b397-1c0febe078f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.25.45.109']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e47ada6-d285-4ed1-8536-fd7daf15fa18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.25.45.37']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5124468-1103-443c-86b4-839ba28fa07e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.25.45.57']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cb93650-4379-4fdf-b64c-0d61f37d1026", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '82.86.138.102']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f4bb2d2-ac50-4255-adc2-384fe84d2798", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.217.213.120']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fea960ba-ce95-4335-8279-04bf33d505a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.239.158.174']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3999a84d-e204-4f92-a33a-7c5e5fdcc9cf", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.60.138.189']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e37dda72-1303-4a65-bab7-bad22be50ee7", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '83.83.113.225']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d02eadcb-5308-4e4d-8f88-dca21e0416d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.240.203.18']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--101509fd-0d4c-4d9e-8ee1-b5ec764e48ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.247.128.26']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--174eb86c-915f-4aa7-a475-c32334987bc8", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '84.79.99.207']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67b1d187-8687-4dbe-9369-f0738f73a5d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.132']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0761955c-4c06-44c2-9050-8e21427f0d16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.185']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1830132-949e-4147-aef4-6210ae1e64ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.7']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd270510-81b7-45e9-b43a-45d259e739e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.11.167.74']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59acff3f-2605-449c-8445-e1485e4c525b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.120.216.131']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d8133b9-ca28-4346-bb79-258abca8ca43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.132.104.140']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--229bec62-9f16-4caf-ad2d-80d72d7e11d8", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.165.104.58']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad62089d-46ae-4b19-a489-b7f681282f03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.175.170.253']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d84d942-6a66-460e-a99c-d98c818b29a4", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.198.19.217']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c51c9d25-441d-4493-b890-11e14445c624", "name": "Malicious Host", "description": "Web exploits: wordpress-wlwmanifest-scan. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '85.204.70.104']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--159e704e-02b2-4b44-93ca-4491ce57fa53", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.193']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a2a43f9-3dc1-4a17-981c-9c4f49ff6651", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.194']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e526529-c66b-468a-9677-87e69839ca53", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.195']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cda3bd5-1cd8-4d93-8be5-823eeb3e5d21", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.196']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c40b65f-ea3a-4b0d-96a8-c09caa2e2b46", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.197']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5cbed4ac-1004-4dbc-b2f9-f2c129cbaf75", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.198']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4bbb0447-870c-4a2b-bf16-d73ccd0f30f9", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.199']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90998d43-539b-49ae-aa0c-d6b1969539cd", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.200']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5bcd253-6878-4497-bee4-e74c55f13a46", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.201']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30840f26-a677-4e52-aaac-40ba05a06b7a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.202']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b578414d-8479-4224-bb3e-89f8f6528ee4", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.203']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54799897-6897-41fc-a95a-d06a1ea1296c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.204']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31fba481-85a2-4290-9881-e7f4efa32b18", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.205']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88e99c2e-7719-4e39-b561-5b0fe708bc4f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.206']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df465e51-d521-4635-8c82-aedf37f3cf92", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.207']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62f90dc6-2e3f-407a-8620-18429b72d8c3", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.208']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42b72e0d-c39b-42e6-a32a-3e5b9c5f6126", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.209']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ba8b115-0e96-4c6f-9e3b-19f36c651b5a", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.210']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79db6a55-7b27-4420-97bb-f5f5b955888c", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.211']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbafb3aa-238c-47f0-b169-ef43bb129f13", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.96.212']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--787fe203-09ae-420f-914c-775de27e26f2", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.55']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b634e64f-2b3c-42cc-966a-0e339274d425", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.56']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b59fed4-1a2d-420b-bc87-f6fd478064f8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.208.98.59']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--122375a0-9c8a-45eb-a59b-85c5dfee3468", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.214.99.159']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d867cb8-580b-4237-b17a-a33e6f6c4450", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.1']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95ee75ed-ad16-468f-a20f-b6c2d727345a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.10']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc88ec32-aa81-4243-875f-588c652fad05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.11']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5a81853-a580-488c-84c8-629acdc550b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.12']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8a5eb90-3cc3-4fe0-a819-bbc257e0e3c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.13']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a07b63a1-4b69-47b1-8405-bc559cdc0cac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.19']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac1a1f3b-b49f-4264-9026-5207a58fe11a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.2']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1776327-bfce-4d13-aeb4-b695bc1a8c09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.23']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bf7da60-2018-457b-b89e-93143f66e0f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.26']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c3c567a-ee50-418c-967e-d1eb6703021e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.27']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0936761-ad91-4a42-8cf4-c25334ee4398", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.3']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35863d4d-1ea7-4742-a825-a592457adf53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.30']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2519605e-06e1-4b10-ac4c-6596cf2b8280", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.33']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bca6038f-327b-4d71-a259-d9a3bf3a9c72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.35']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ed898af-eaee-4b18-87b6-34790922edcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.37']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a45172c4-f16e-4f97-9f90-9d81c1123879", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.39']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce7a57f5-a593-437f-ae5b-02711ed5a85f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.40']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbfd7134-4d65-45c0-8cf1-6bcb0f066af5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.42']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0d68041-ea9e-41ea-97b2-059fd6cf1e9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.44']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36d1b142-f4e7-4690-ad28-b3a15bde5ef7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.45']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce011036-1e63-480b-8b52-90e6355c9900", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.46']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf9e0106-b10f-44dd-86f6-c9b39d71c3bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.47']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5399d423-4cd3-4ffc-9343-242faf9fbfc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.49']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--efa709f2-1f77-48e5-ac8f-662f324e1e99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.50']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d080b3d2-bd82-4810-85a8-891300f4d271", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.51']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14d92078-4d0e-4401-9699-f1c7244d8a78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.52']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f923a29a-2d0e-4dad-b2a2-2e74cc80fffb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.53']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad9280a9-712a-461e-8b26-d434dccb5374", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.7']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e16791ed-682f-4e0a-bc0c-54db8cd356a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.8']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dccc9a7a-cbd3-48b7-a776-8fa676c7204b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.140.9']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd1e438f-b689-4504-ba36-fe71d246ba7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.1']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7df35b9-3ea6-410e-8911-8682d39ad136", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.12']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43b77249-3f8c-4a91-bc73-ebf134ba5064", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.13']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--189b50e1-a584-4e37-8b14-fe30d693be73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.14']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e70c35df-b69b-419a-add9-c20cef1d999a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.15']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c103143-4de7-4ed3-8fce-3224891769fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.2']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43dfa6ae-b84e-450c-836c-8767eed47a27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.26']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae6cbdde-d682-49ab-9033-60fba3fee186", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.29']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f63bbfb-2d08-4356-a15b-e40f6d20c93e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.30']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d00fbf92-b8ed-43f0-9c09-25e6fde67b8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.31']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b25fffe4-99a6-4b71-be8e-c8863a52f133", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.35']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eba6819-dd37-4be3-b73c-1605460fa1b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.36']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c591483-2cc4-49cf-b815-38fc3fc9abfc", "name": "Malicious Host", "description": "Observed: REDIS activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.4']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--805659a1-20c9-4c0b-881c-dd9b4c4e23e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.41']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--993fb017-e1a5-4a49-9fb4-021169a888dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.49']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6df66b5-6693-4eff-8007-493e10807cec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.5']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78dff342-9bc2-4a18-8414-019492423eca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.51']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b4d12d9-e314-4ec7-8edf-1b1570379e81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.52']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4a4c95c-67ea-404a-b9cb-357840cd14c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.60']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e1af1de-3cc7-4111-96a0-6415e3a6f3d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.63']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e834d6e6-1613-4598-8826-9f51375fe046", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.64']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b53ca4f6-05c2-4b55-a424-19c5897c206e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.66']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce0a373b-472d-4430-adf5-a5e5357ac64e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.68']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47cfc0d0-a563-49bf-9f56-8c7a9b6601a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.7']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e594e0b-8c78-4acf-a21d-c06f26e3a501", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.70']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--746ecc24-e648-4966-a8e0-21a871d375d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.72']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3b375db-4928-4040-8d3d-9f3fe655f8a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.73']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6206cffa-363a-4025-899a-f1c655ba4c9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.217.149.74']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d7451b1-c99b-4ac6-bdee-e5b509cd2674", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '85.239.151.34']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ba8dc53-203a-4ddb-aa2a-d4000513ff8f", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.156.241.24']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f24d751-b648-41ac-849b-21ce6bddb4cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.34']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bdefcfe-f933-4887-b83f-5dddb38d13e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.36']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8092fca-9773-4a9a-8881-ef6ae9ff0917", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.38']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1fbdec2-7212-420a-8808-115f1bd74f66", "name": "Malicious Host", "description": "Observed: FTP activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.40']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:ftp"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f14518d-8f23-48a4-9bb2-3417f2dc213a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.54.31.44']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--237c6a21-8d05-41ba-8912-8f2c7ec2db65", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.63.33.236']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d102c55-214a-49fb-bcfa-6244fc97b39e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '86.92.53.191']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b660ee5-c012-457e-9ae0-1afa5609a044", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.11.236.14']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--527f8c31-0859-4d45-9112-85db4847f752", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.120.104.79']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba6f3e87-d416-4d98-8f66-0ebaf444508e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.236.176.252']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c8e7567-e709-4dbf-a829-a791e05b341b", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.250.224.125']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--852a4d57-a44a-4f45-bec2-cea770fd43d8", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.250.224.127']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1904993-1685-481f-9b5f-5a6ae5b3a641", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.250.224.201']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--893dbb63-c4a7-4835-a850-8d28b8fbed98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.255.208.66']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e6dfe53-52c6-4d79-99b1-c30f31cea8f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '87.31.220.190']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1cb2f89-0376-4a13-9550-3da5d7dfc766", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.162.36.111']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d209d7cc-b850-4768-a2cc-47581d9cb9ba", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.207.33.79']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2a0ef58-2603-4d99-9a4e-ef739f277056", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.247.185.24']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--165b3a87-3816-45f4-ba54-76ca41e54c22", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '88.254.6.197']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--527cc4f1-624d-475f-87ab-5797b2e5a432", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.114.63.40']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6a7d2f45-84f3-4c31-90e6-f290fd7711a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.0']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd77bd8e-111a-40d8-904e-cd96bc459350", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.100']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acb5b1d9-409d-491e-b726-231f30b02ae3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.102']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90d73aeb-11e0-4243-ad60-02e2fcc2ce7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.103']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be9727ed-4fbb-4ee3-9896-d85b415004fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.104']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d861bec-67bc-4c01-8806-57ec3a09c8ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.106']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67de4a40-4fea-483b-813d-9bacb075c183", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.109']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c768afe-ecaa-424e-8636-de17cd80e5ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.11']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e625d23-eb1d-4a8c-83c3-076323c76049", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.111']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48b23d8b-8e2e-483a-8d54-25d8c67a9821", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.112']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04ff7809-6f90-461e-a9fa-3e954418339c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.113']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a832ec78-8825-467c-90ea-9fe8bbc12e9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.114']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6fe2d4f-09c7-401f-953e-ad26eee5e852", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.115']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43c77580-fc55-4f90-9714-4ad3de520e8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.117']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--decae894-9880-41e8-ba91-ac98020c0250", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.118']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0dbdbe0d-92dc-4828-93f7-a6c8daa53832", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.120']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30756508-777a-4a21-bcd2-358d72ac78eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.121']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60021045-12fa-49b3-a73b-8d17cd33efa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.122']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f565ab6-1c99-40e1-a6b4-57126b87d904", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.123']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31838525-e018-4286-af6c-57f07466ec5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.126']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d38de0d-6762-4865-9dbb-6c332d96f3e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.128']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53291afb-1449-4b16-a6b5-680b6426dfaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.129']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0680e803-3696-4c5b-9ed3-c6c463d3639f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.13']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40829529-522e-4ad9-a032-700fb392452d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.132']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d959ad84-56e1-4fb4-9aec-8759867a3778", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.135']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--212ec99b-f9f9-4fa6-a8ef-5231a625c2c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.136']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04ea17ad-21a1-4517-8697-3bab146ef661", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.137']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5fcbe86c-4f2f-4dea-8dd9-6e32dffe1e78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.138']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8cacf188-4e77-4720-bfe3-150966fc03b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.139']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea1d415b-2d7a-4ce8-84b5-d1f0b9bca794", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.141']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58e57ef6-6bf8-462e-b17d-00046d459cb8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.143']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab06ed54-906b-4411-ad02-d0d8b87f9ddd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.145']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3865cff-85f9-4521-9987-7ec53881ed9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.147']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b748d50-9f97-4b1a-89d5-e758c8618978", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.148']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bccbd79-8576-4a15-b797-534e04182bfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.15']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ad8bfbe-7915-462a-b180-7e9bdd941589", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.150']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe17eb45-de53-42c3-98e1-9f9db5ce9e0a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.151']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e150d6b5-45f8-44aa-89a5-ac9bf4b84a17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.154']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--016031b6-8860-403b-94aa-9901798afdc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.156']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e23d91dc-9957-42da-b5e8-3872fd9a540f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.159']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d0b5240-6125-4d39-b582-bb16c9cc2fa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.16']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30b4ee4b-0103-4e4c-a1a2-44de82d31659", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.161']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef27f003-1a00-4ce5-a150-c8d86b5f2955", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.162']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7f35591-be46-433c-bbf5-b1791fe1f0dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.163']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--767bb5cd-a18c-4768-8f77-e19d4cc7ee67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.164']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5921d002-3956-4306-8939-79301aa5539d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.165']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da3cc644-f2a0-4fcd-a195-fd1f615cc54b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.167']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43a2f803-faa9-4c4f-841c-ee9b0c4712c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.17']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6baf7f37-d0ec-4878-8245-ae6f03b16008", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.170']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9d24266-8190-47f9-87ac-b3d60ca4e750", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.171']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--683bd312-6168-44f8-afe9-157a2785db1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.172']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--944cd21a-637d-48c5-aa07-c7a3a52006a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.173']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe368cc6-966d-4f1a-8ea9-f17e3f5ce81f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.174']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c19d705-7387-4cd0-a151-be102d689e23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.175']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--893b1355-ffde-4268-89f8-889de24ca8dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.176']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70dc18fe-9fb3-46db-9fba-63f916314a8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.177']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79469458-e66b-4c14-8923-fc758ffd974b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.179']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a149168-9a33-46d1-915e-b32a9072f8a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.180']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d7376a1-5d79-422d-83e8-e1f63e7ea4f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.182']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb945c9a-5c34-458e-8c9f-f9fb7f66a408", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.183']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6c52d42-2494-4257-85fe-8685054f0d15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.184']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddf3de3d-f66a-4cf5-a672-777e8844e1d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.185']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a43a1d76-1a5c-45bd-ba39-777e08b27968", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.186']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad9fae85-f74f-4716-a7d7-856fd739fb99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.187']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41185548-62a3-421e-8792-70001328a871", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.189']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19a353c5-1fd0-4183-b3f1-a8daa0842bc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.192']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--922a9a7a-3524-4549-9eae-d63b4557dab5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.193']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36b05fd4-2f88-4247-a8ef-6224691e3f21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.195']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f30fece6-73fe-49b8-a010-bcd112c8b66a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.196']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d570088-7fd2-47a2-b4c1-0d3c508d2223", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.197']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37e7b30f-091d-494d-a8ca-b6c9ebbe9c90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.198']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1ee35af-89c9-4c24-a9a4-032fe49dd907", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.199']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68762c74-8e92-4a7d-bed4-588f10ec1b8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.2']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53696cd3-2005-4b1f-8b30-e0b732833245", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.20']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--216462be-9ffe-4c36-9259-a8f140abafa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.201']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42f712f8-6ce2-4452-b537-a1d850ab5afe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.202']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cdf4e98-391b-4afb-85ad-24994003c2a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.203']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2af78ae3-8ab0-43c3-b1a6-475c84215f7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.206']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fab48be2-2a90-4123-938d-2e0c85845981", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.209']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e915f59-6e52-4b91-a54f-2e439f98036d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.210']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8a5dc42-fe4d-4cae-b510-8328b6ca3edf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.211']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fef1ac9-65f0-4169-8544-a41b9fbc7278", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.212']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c69c22a-07f4-4513-850b-4b2843f21ef4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.215']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e171d68-3542-46f0-a87f-a5680f2a0ce6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.217']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--236faca0-3a14-4322-8eb9-0deec2b63a7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.219']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e22d7d2c-a83f-4dc0-9af7-e76b94a194b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.22']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca6cc811-cd06-44d4-9f98-cb0206276693", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.220']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd3db15e-bd38-4765-bd23-cd650237e3fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.222']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eff7aaa-e1e6-4034-a399-70dcb4356f99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.224']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2ef330e-b2fa-452a-8df7-051eee34f8d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.225']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a13fbfa3-e4ca-48f1-adc9-696f57bf17b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.227']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0288b2cd-43f4-49e3-8ec4-e799f8651832", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.228']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6dd8906e-4e1c-4e08-9a22-50d95c607e94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.23']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e48b5745-5dbc-4a70-a9eb-57d6c1ed2aa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.230']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--347baff0-41be-433e-a088-99d73631d69f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.231']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64ff782d-50f5-46a6-95bd-507f448b938a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.232']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4a99522-4ca1-4601-bf75-7c4a6c76d0ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.234']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b18c8db6-e967-4ae7-a44a-f76109266036", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.24']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f392b9f5-0b28-4b82-9234-d7234c6f216e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.240']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2316fbd7-e497-44aa-80e3-c64d9ac138a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.242']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51ac57cd-bc7d-4244-bb5e-7508cf0d9f3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.243']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30ec022f-b341-4bdb-88e7-e746dee6ab7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.244']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5db8d6e-c323-4275-b0dd-03272bfcabf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.245']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfbc1dd6-b1fe-46a2-b1fb-01f368a5ad7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.246']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0943e09c-98cf-44b7-a941-fe952bad139c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.247']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fb9ba85-aa5b-4e1e-a091-8ac28e1c5018", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.248']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eb6baa5-3a22-444d-9e6b-589d1e784025", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.250']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5acb0c64-349a-492e-94b3-17fe63bc833f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.251']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f8edcbe-6c1a-4e41-a05b-b90d0dfdcd27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.252']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d1ed251-72a9-4626-9e8d-d10a80fffa60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.253']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94211bf0-7d25-48f7-a257-cd15603a3242", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.254']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4d87034-8abd-438d-8e74-4599bfe783b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.255']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26c7c9f2-cfab-4c30-8773-ecd8050b22e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.26']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--830e92da-f846-48f4-854c-4622626b3233", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.27']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9d4af10-9155-4123-938e-6832afad0883", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.28']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47113179-a76f-4373-9ab1-f1c6261f8f4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.29']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6bd1cb1-fc4a-4abe-92b3-ce1b2e7f0797", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.3']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47b95330-cfb9-43d3-b9eb-7c8c5f2ea0be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.31']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c379c16a-b164-4ae4-aa34-3c1aff956d79", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.32']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3e54f97-07b2-480b-bb98-f2ea72ea2d94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.33']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5825dd1f-6485-4621-bed5-75d2ef5d8efd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.35']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cb298ff-a3b4-4b3b-a599-428d84670b01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.36']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a46fe231-da34-4d7b-b136-0489135a6eca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.37']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bbc219e-4879-4527-a406-96b94f8f4bd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.38']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c69281aa-01f1-461e-bd92-9757627ddd5e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.39']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--473fcf85-aa21-42a2-9f55-ea271c29c7bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.4']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf934b36-2915-49f4-8c4a-91ada7f07149", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.41']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3cb9903-7808-4844-b125-fe3c27a5e56b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.42']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01decd18-d436-4227-a617-8c9b16b0324f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.44']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a471b41e-cd26-4de2-b233-c655c7575e1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.45']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baf1c320-b996-46ca-8ec6-3fb023811e18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.46']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee6d6f82-630a-4567-ac1c-92e540a6830e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.48']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7449eaa2-7ca5-4850-b47d-79f2ca78b322", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.49']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3f478b2-26e5-4fea-94cc-7fd0372af77d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.5']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1492f00a-18e1-4969-bb3f-5f4f4a328715", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.52']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6fa158a-5a96-4a45-b928-eeedb940b1a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.54']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffd5b01b-2046-4075-a9b5-25a5489bd3d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.55']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c532df78-7871-438e-b616-ef895b6fdccc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.56']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d52f23cd-b395-4dc0-8e10-74a54fc572b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.58']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfc36db5-5a95-47ec-9c5c-c029c02c32ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.59']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e4cde24-b88e-41e1-a58f-5433634e55b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.6']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25c4fec1-6aa7-4950-bffb-2ed2428537e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.60']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7829c9f9-958f-4f41-adc8-1c87b5852688", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.61']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46be25d3-63e3-434b-baa4-0a8771ead7b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.62']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f1fcc34-c5b3-4ce1-b447-47dab64a8d8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.63']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--485f0c4a-12e9-4bb7-81e6-b9deb6b398c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.64']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--157e8496-e945-4f5b-b2a2-9138b9f7f425", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.65']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d06be94-2455-474a-9755-0d1ae2c84da9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.67']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06529dc0-2060-45f4-a8df-b5cf98052df4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.69']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--897d2225-bb86-4568-964b-8eed809920da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.7']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a33879e9-3a1c-49dc-8450-5dd1011293f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.70']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c71edf5-6fb4-43a9-b877-26e524139ccf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.71']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd20d5f0-0e10-4261-988d-0a60f2832dec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.72']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56d14838-f962-4228-8c1b-cd27cb0bda9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.73']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--34328036-9bb0-4ccc-8306-12583c6ea0b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.74']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b2d94fb-88b1-43a1-ade9-bf4ff830418f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.75']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf7821ac-a510-4fdf-95a3-64737f67826e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.77']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--204c3e84-0737-4142-8ee2-84584d4b41a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.78']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb725f60-f296-4d1e-82f5-cbf0d50d1e50", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.80']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a231531-ed2f-4aa0-807b-a7e728fc9367", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.82']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb4c30e6-cd44-44cb-b936-1167a013844a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.83']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c314bf3-f6ce-4e7a-a743-c23ef70ee27f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.84']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59acd0fb-eae8-4d4d-b52c-24328341d4c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.85']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02e81737-2aa1-42e2-ae86-e252369910d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.86']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58a69f59-f538-43fc-b3a3-3f5896087585", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.87']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41059715-371e-4025-a4b3-a38c89d992f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.88']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d65da95-303e-4527-b43b-830632868ed8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.89']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8525ee81-f7ff-4a1c-9205-1296f37998c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.90']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--137633c8-7c16-47d0-82f9-ddf36566d668", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.92']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef8108b9-ec34-4cdd-922f-4f63274589d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.93']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f817c2a4-430b-4c6f-98e6-c12230b42202", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.95']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a4f7721-7670-4d4e-84be-7162670778da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.96']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3568aaef-85af-49ec-82b0-298af475ce6e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.97']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7465a61f-8541-433b-963e-6cc9d08f54e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.144.30.99']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74a0eb1d-00ee-4817-a92c-38b782beb782", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.151.178.193']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4c9d0f7-af6d-4f82-8c82-498d123ce96a", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.200.85.114']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cd3d536-0bc3-447c-8163-8ff5a5eab8e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.163.168']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65e9ab1a-24ee-477b-aded-cebcd619a2e0", "name": "Malicious Host", "description": "Observed: MSSQL, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.167.131']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:mssql", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd9da1bc-b0ca-4fb2-abc4-2d852b1ad11b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.168.36']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2466967a-f863-4e85-8464-2b2b634ab87b", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: vultrmelbournetest, vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.171.24']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "sensor:vultrtokyo", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf9fba2a-523e-4d7a-a11e-b4831a92b396", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.172.10']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ab71176-8261-42f7-b0a2-2c02f5dbd8d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.172.11']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf8fc9b8-1ef0-4015-9d84-1536bf3bc9af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.172.12']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1869e9b0-d0af-466c-a85b-93952c90d3d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.172.14']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41b907bb-5bce-4845-af7d-50d7f2debb24", "name": "Malicious Host", "description": "Observed: FTP, PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.172.33']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:ftp", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22f58aee-e14a-4a0d-946a-3b99899e6ffb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.248.172.9']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84abaa48-92fe-40de-9604-fec53f78e470", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '89.42.231.200']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02c31167-a0c8-4b9e-95cb-60578d1660b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '9.234.42.9']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3839b3e5-e129-4146-af0b-c0b27785ad59", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '90.118.33.145']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fc5a1c9-695b-4722-a855-5525d28676b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.1']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f4d7d09-bdac-41c8-a778-81b2d1bb3465", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.10']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fd47dd1-a463-45dc-bc59-5a815e7cf914", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.101']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--798f44cf-846d-4e6c-b2f4-6bbe6e7e530b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.102']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7dd86c88-c5d9-421d-9a79-2c01778b0245", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.104']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f619bf51-f741-4ada-8b22-6c3244e2dcbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.105']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fa2ea90-64b4-4edf-a097-05791562a58b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.106']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7ec82d2-90f3-4205-b439-3b17aa2b335e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.107']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc0bce11-2745-4bf6-bfeb-b6ac38d9fb6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.108']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cbee27c-aab9-4bc5-9b7e-f53705c921b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.109']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e30a0bf-0e52-4727-ab95-8fa07b2db584", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.11']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59520bc6-4f56-49d8-bfb5-73763c2c5b91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.110']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6125a7ef-bd2c-4911-95f2-4dfcbe96fba7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.112']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ce018e3-e36e-4c99-8aac-188d57925dee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.113']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--231a7f31-1144-4a2a-858d-154bccce3ac6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.114']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09b078b4-04b8-4022-a04f-41ed4d3f4bfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.115']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76de0492-8f0b-4061-bdb0-15f5a997691e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.116']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4a66e9d-31ae-4e00-854c-5fb26dd57935", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.117']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4c15326-f2d9-441f-8af6-e0e458c40809", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.119']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac32054d-c349-4ae8-9f39-189d054092bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.12']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9df5d7bb-63d7-4e2f-ac85-61a19bd86785", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.120']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2a3fbd8-bccd-4e5f-8c02-abe30e20aa7b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.121']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--847a8aa5-91d0-4022-a789-8a089ca96306", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.122']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eec6734-0ddc-469b-9ff1-6183af4d305f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.123']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eadd9125-44bf-4035-af8b-2a5642dba869", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.124']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6e4a1cb-e3be-4bb7-9bfa-3208cfc6101c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.125']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--842bda5d-9851-49c4-845d-952333c0dd90", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.126']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--696f490b-4d30-49d3-9a28-9d02167c1534", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.128']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cdd7389-27f0-4516-92f1-c58ff60f57b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.13']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f0b30f8-57aa-462e-b6d9-b385c07ce108", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.130']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9d8c26aa-c6b7-468b-baa4-d70837f7ba5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.131']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fb74b18-507d-4dfe-8dba-0f1790202ea1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.132']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--703292cb-8666-477b-8027-220e23247b60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.136']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c13fb576-5415-4251-8299-0d25a23d3098", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.137']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c64f9c4-5cda-4fd3-913c-f4f1af292a58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.138']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9feed688-e1ac-4a13-8c7d-ff3ac3069c09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.139']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8739a979-c439-489e-9fa2-6abda43b8379", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.14']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca394a24-9d8b-403d-93ea-bd778b37d1e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.140']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa4345a4-cfed-4f2f-9506-8c5a0bc6e9af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.141']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae736225-7868-421e-a064-a98e29a20fea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.142']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63ca302e-35fc-462d-a64a-05f3d578f1ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.143']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3199f65-1838-4211-9afe-3396070e1dbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.144']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce28089b-8d8e-4482-abc8-bc1543ef8286", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.145']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39314b97-616a-45fb-8e0e-29398fde52bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.146']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86c9fd0e-0e96-4dae-a78d-8f747f0c08d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.147']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58e7b37d-4860-44aa-ad89-47e5c71fb6ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.149']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77cd0348-b473-4f92-a912-2ff390f15097", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.15']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3802643-6322-4211-9733-32ed2ff57162", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.150']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e75ee97-1d28-4445-b651-f4cb991bd095", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.151']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6261bbea-07fc-46f9-8d3b-ac7e65364c46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.152']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--436b70b7-e00b-4367-badd-2c2cf70a8223", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.153']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b0543c6-6a2c-4192-8fe3-64a39e6d17e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.154']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0351473-7780-466a-956f-d91a3cf7a09c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.155']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b00d85ee-9a8d-4f0a-901c-14abdc3b7258", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.157']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d2ccab5-935c-4b42-b66e-b0b88a89e927", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.158']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51be4aa5-ddde-4fd7-92a6-cec5e4f52178", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.159']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22700396-1348-4d4b-93cb-7d108288c11a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.16']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--25aebbe2-a391-492d-8053-8738eda02164", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.160']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21effb18-857b-4883-ae26-ecbd122b2100", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.161']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fd81cc1-bb17-4e6d-a9a2-adccb09a7367", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.162']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e615589-28d1-4560-836d-17691dce69b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.163']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d314b0c-6c1a-498c-9eab-7cb45fd5ab0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.164']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b305f96-0997-4eea-9c30-067efc2c91cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.165']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3f752e7-6b39-40a6-8554-212deebfc72a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.166']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc454d8a-ca3c-41a0-920f-44bd97145972", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.168']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d8ca110-4ac3-4d77-baac-6150b7baa205", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.169']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3e3631b-1457-423e-8452-e65fbe0118be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.17']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--020b7448-db16-4a13-8efe-45311ae74aec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.171']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ec897c1-e812-444b-a337-b94f783c175a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.172']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d84e2ab6-f3e7-4551-b6a9-11f31a06acc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.173']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3815eaa4-9e7b-4119-aa84-5f2f9ec5e55c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.174']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c89383c-3d3c-4a45-8b24-ea6daf5e2d9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.175']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a5c3fe6-9b69-40f5-b2cb-5fa9854dadc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.176']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--092030f4-f128-4952-af0b-327d8d56afa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.177']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a672212-5799-4765-87f6-a1b4634e2483", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.179']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f995ef4d-62e5-41ba-8917-f9148db12eed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.18']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cdca1d96-cab4-4bd6-b6b6-1d2110e5f0af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.180']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7479f1ee-8419-457d-80be-3d8140588a97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.181']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95110f92-050d-4a66-9482-199b350219db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.182']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aa71e7d-2ade-4e70-8b74-3a6c767f6a3e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.183']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b6fd459-93cb-4c92-88f2-7925bed0233b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.184']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7167c72-4469-4e64-b44d-7415049f0ce7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.185']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c4b4dab-0b9c-4a94-ba73-368cc1ddee8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.186']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--256fbc4b-011b-401d-9494-ecda570f95f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.188']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d265e8f3-f94d-4ecc-8325-5d8012b016fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.189']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--231fa397-f7b2-4703-a134-53421214504b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.19']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb6374cc-2f8b-4891-b9ba-da7d354d035c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.190']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9eb042f6-8bfb-4c65-9d25-5c8c67451903", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.191']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94c5f5bc-0c62-423d-90e5-171c5091bc08", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.192']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45bdab4b-c873-4a04-b8ab-9a590d955612", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.194']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e873ae0-c016-42d1-b5ad-7542f4fb31c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.195']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ddfe6f0-ed79-45b1-8d1d-ada7ace9c04a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.196']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23a97496-655a-4fdc-8220-97dfc2ad8bdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.199']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--360e5cf3-ff01-4c0f-a7ff-117e94d4f5b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.2']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8edac6b-52fc-4220-b3de-57ae9be86f42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.20']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--425e8c24-0e6c-4913-8491-3e5a23f64572", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.200']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63aa93b9-9ba2-4e26-b8c8-0624ed07c436", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.201']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--283ac535-b916-4960-9ade-bff257ebd09f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.203']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--689ef6ec-f2bd-4ec6-8b7c-9cf6abf81d44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.204']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce58d2ea-d6bd-4506-b677-bd32f37b5cca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.205']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e081a3c-a947-4b87-8949-29477ed74c4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.207']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a049b6e4-e99e-426d-a5bc-14eb61f2aee0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.209']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10c3e961-84c6-4f85-bf8f-fad1dac79215", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.21']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e609c359-54d3-4884-aef1-3aa608c3583f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.210']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--caac00c9-54fd-4a3e-a77d-e1a188c47533", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.211']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38c9a21b-cc81-42cb-a2d0-80c79cf01aa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.212']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5514ac3d-c7fc-4713-a98e-74d89f12ffa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.213']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65f450c1-7023-4697-81d7-772e501791bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.214']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae1b1996-7af7-439a-b01b-561b672e1c05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.215']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--150fcc59-bacf-4db7-be27-725f3b56ee8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.216']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ee91154-2384-4796-a546-3d529acf20c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.217']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d044bd3-1d1a-438c-bb78-188ee381d517", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.218']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5344dbf-4f2a-45d7-b961-06e6fdf46ea6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.22']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68d77e5f-743b-4f55-bee6-0d720390cf43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.220']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75a51c35-dec7-415f-94a2-ecedab62dc05", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.221']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f99bddb7-d51b-4bb8-a9fd-3a7b37346d7d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.223']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7676e25e-4d51-4cb2-9777-de61ab0fc7f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.224']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c125083-dd1e-4199-bcb8-e2e59103de0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.225']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--017c1438-5ec7-4944-b82a-1d85696bdc30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.226']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6aaf26fb-a12a-46f4-a0c0-b6d91c085340", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.227']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--459e4bff-b909-4b67-9aa0-581d19700b54", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.228']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--510456d0-3e69-4e5e-bedc-ce42ee545b80", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.229']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52f69fe8-e5f5-4027-92b4-88aa6049aa8c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.23']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e604f89-b137-4ea4-9a70-b38745c7a8ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.230']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--166a1598-0ac4-4081-b6fc-8d1065a3dea2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.231']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe5fa47c-f8d3-4f10-a74e-c0345d8166e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.232']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6e55b2e-385e-4e20-aedd-380788259bea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.233']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19ed04ed-1331-40c5-a991-ed3126889758", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.234']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c07f0af0-5c1d-404c-98f3-11093b8833ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.236']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbe1f9ee-b3a7-4183-bb7c-9136400e4b72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.237']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--88b562d7-0149-4971-b7dc-5bc23bbd5e4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.238']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ac20b80-52c3-4eef-96ff-aea92a9234aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.239']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ac57924-9c65-403d-912d-a3028909b218", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.24']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb328d37-c138-4866-891f-43c57afccaef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.240']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04a87151-e3f3-4a49-8114-7279f5a8600c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.242']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--387bbcee-e97c-4bbc-95c4-c672805f1079", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.243']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33bad04e-fe92-457a-ad87-8363bd9788c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.244']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2684e06f-d8af-472e-8ad1-3d3e8e40943a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.245']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f33aa267-f455-439e-8b99-e0368217f744", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.246']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf9f5373-881f-4181-b721-bf83c1db57c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.247']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c757b7fc-62cf-48a2-b6e0-3075ac9144e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.248']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dde745d-c9a4-411e-89ee-09f8f35cd43e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.249']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48f17cf6-88b8-45a2-82b8-e168f0fdfc76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.250']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b6ebcf9-2255-42dc-8333-b799ad5b7268", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.251']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--563955a8-cb0b-42f3-bb81-2943c11fab64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.252']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d20395a8-a209-4926-9de0-1c75cb01c3d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.253']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f59487e-ab86-47dc-b8bd-79a4de848b96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.254']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--04d12d4c-66c4-429f-940a-732e236924aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.255']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e24c8799-d758-4bec-9d4b-1005f6d65425", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.26']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c77c1731-2014-416a-abec-22f2c8eacfd4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.27']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08f8e706-07a7-4e30-9dc8-987e1a6a1e58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.28']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9108b3b3-132e-4651-a6fe-d6c3b7c1c954", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.29']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--532921f9-ecd6-43bd-85ae-5c5f83250e7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.3']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1268b56f-9eff-4f95-b485-4ce8efd5ba56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.30']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d839557d-0313-46cd-ad37-d3e7979c7aca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.31']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb27e5d8-4991-40b3-aa4e-ecb7e05fc2ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.32']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c21e1ef-7af4-49ff-a3a4-7a58f44a7b9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.33']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b8ec888-1cc5-4efe-be6f-7faaad71dd03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.35']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b63cc66f-95c0-4ff9-aef0-c719593c7f6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.37']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71e166ae-add2-4fa8-b89a-bc8500eca30d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.38']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--251e6b58-287e-435d-a3b7-cc5305e050f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.39']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41666e3e-ad62-4403-9e90-a7dc68997603", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.4']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5914786-3118-4cf3-9260-70e29d1b0596", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.40']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b2f3c70-7672-4c36-83b9-4880fee503c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.41']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--463d772b-e456-4c86-bb30-fbfff066bd5a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.42']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b6b0911-d35a-4727-ba17-88aa7233e32a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.43']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1688f79-3776-4a9e-8873-b9de226a2b5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.44']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--263210a1-bd85-4740-8016-70717a534151", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.45']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a47f994-c907-4a18-bad9-cc2f4e6d584b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.46']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8119ce38-b91d-4e04-b975-61c8ef209861", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.47']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d7658d9-68bf-49fa-b7f8-cfa190652ffb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.48']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a90693d2-05f6-4384-86d4-77a7bf3c132e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.49']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73781a95-fe8a-437f-8e5e-9f0594716198", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.50']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc7a93e1-47b6-4f48-a907-e840c8d70d9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.51']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--069092f0-c879-4b33-9182-f69d1d52dcd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.52']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af96fd9f-243a-4b8b-83d7-eb76275aafa1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.53']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9304eb40-1222-472b-9540-b6a57f567d0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.54']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae2dde4f-8eef-4108-a958-7f6aa4b94478", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.55']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1cbd67c3-dd45-4085-b612-492da64bd9bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.56']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbeb6235-3125-4fa0-be67-0c2c76f53edc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.57']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2005c6de-0dcb-4cf6-85e1-78de297ce09c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.58']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11a19fe5-192b-47ac-9300-518a3c7ca6b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.59']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3cf7576-83cd-453a-86a7-a826e6e46562", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.6']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69103d2f-6859-4d8d-a401-e392871332bf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.60']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e0322e3-f770-4379-9701-6b5456748ba4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.62']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d840905f-dba0-470c-9f33-a5417c46615a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.63']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--017cfb0a-46f7-416e-bd67-eebcf85a8ef3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.65']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad413088-a6dc-4729-9beb-1703d96c86d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.66']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd724853-5c41-4441-8abe-a03b90423bf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.67']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91fb52e7-a849-4002-9756-dc1b9d4038bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.69']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84ce8863-1124-4bbf-a553-8ef6f281fa0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.7']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8978c04-4dad-4027-904f-d74b3537f02f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.70']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4d21113-2b36-4129-b525-b5c36a5ee045", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.71']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0791ad3f-70ed-473c-a564-9e60c443a21b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.72']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e26db6f-4d3f-41eb-9dcd-3f3e5c1d5c97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.73']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--847586ee-2939-4e34-9e52-d688aa92847e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.74']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9646414f-039e-4000-9d4a-6f09f5362a55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.75']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5218f8d-0c25-471d-8af9-4b6ffafe5448", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.76']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1989e5e9-cbd7-4f48-a652-70b21473b76d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.78']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--daad91f4-4911-4a5d-8f92-4bd87a6c37f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.79']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6062d8c0-cba6-45cf-9b52-3b81a9af37a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.8']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57a3b449-5703-4093-a513-f480e03248ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.80']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--801a14d4-76e3-4ed0-8f91-4890dc50f5a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.81']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d3dc8d7-9701-435e-881c-0cae68305e70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.82']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20412b92-e0e8-41dd-a00f-415af7a8f40a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.83']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7f2f91e-8ed5-427f-a6ad-cbd752298ce8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.84']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1ea4e18-8506-48f3-93a3-361c67f6d972", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.85']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9a759107-0637-4d64-9141-dd68cc8d4001", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.86']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29b1be88-c30a-432c-89d7-c2ad44a6f32d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.87']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df1a9670-0cd3-402c-ac0f-ca07e43a8854", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.88']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1856e356-919d-49f1-beda-9359a1575390", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.89']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1866d9d5-bbe8-4706-93b4-adb84229dc73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.9']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--181b5dc9-4c32-4d83-a9e5-008911b505b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.90']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53f2f10a-3fd7-433e-b83a-c0e247e852cc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.91']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbbd8b84-ff32-4454-89ee-b5cc7ad9c459", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.92']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c24d66f1-6dc4-4ea7-bd69-b248929ca160", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.93']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c231cb92-3597-4854-a015-4755e2b76560", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.94']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19696a96-4ede-40ec-b6e9-f139065db623", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.95']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--077a9e44-97f9-4fe6-b02d-10c768236638", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.96']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08f00ef3-e453-4a4f-abed-48699b2e25c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.97']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c1bc563-6af1-438c-a8a3-e949f0ff9b45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.132.49.99']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bc5317c-8899-4d77-9af8-de669fa14c11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.148.190.150']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3a29964-a5fd-4fcc-8119-41ee1b0517d8", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.174.55.220']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3996f81-785c-4345-befd-b36bc40c7288", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.118']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4043a803-49ff-4991-ac1d-7d3a825b7266", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.198']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c682a5f5-f523-4c53-8a76-9ab9c8f8fe7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.46']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28d19eb9-375d-42e4-86d1-b61787b6b520", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.191.209.98']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3d081db-778d-4a14-8692-9994a06e0bda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.120']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94dea1ac-d44e-4cd5-841b-5b8fdd89312e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.122']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2fe5d13-9b96-439c-8ae7-648a56521fe8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.124']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac83e955-c45a-40b9-921f-b33107c3155e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.126']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80eeab45-c57b-4c60-9ee8-5d388e2d95ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.14']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37c4e28e-8e18-4855-8eb9-3f46d9c308b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.184']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e688c044-4578-41b7-9d9c-b8fb1f68f06b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.186']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5209c29-e2a9-45cd-975f-6664feb452f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.188']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b7ffbad-d610-43c3-85db-65c5fd516b4a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.190']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c794b38d-f11a-440a-b447-bc5401f988d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.192']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8baf71a0-2afe-4b6e-a201-4294b61998dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.194']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b8e10df-3fa9-4c2f-b392-29f2ef987960", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.196']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--245f3e81-e677-430f-9c5f-08e7d1447883", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.198']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e93263c-4c90-4edd-84c8-7bbd404dbe1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.200']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--678e9f59-3217-461e-8c1f-2c685b78136d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.202']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2579b56-88a7-4889-987a-15db19f7bdc3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.204']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee831a14-82b8-4a27-9f4c-58adec8670d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.206']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eeefefa1-d790-4b63-8b9d-0546bea9bd4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.216']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b078285-9a78-4679-99cd-096b9ff3ff87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.218']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2372b09e-2aec-48b4-aadf-a3a025b3fb76", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.22']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7e402a1-b4de-4447-a7fd-a7a4428ac9df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.220']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7ffd544-a905-473c-b39f-3f4b60018745", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.222']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bce840eb-e14f-4173-be6e-ce01c182b2a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.232']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bce7fd8-6650-4879-a29a-3dddfd77da8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.234']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95490fb9-065b-4a61-9d96-6a744ccd368b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.236']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--820b09eb-5eb1-45e4-93aa-9596b0e0588e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.238']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35385068-f925-4d73-bc63-0e8eee4b1a93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.240']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--426515ab-f8d5-4fd9-8352-10b868b13f41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.242']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99e3a80a-cd02-4787-8d21-f07d57351a73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.244']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f579d2b-f991-4ddc-9231-9222ab542d13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.246']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5713ab1-cb00-4a3f-a3c8-df648dfc8d86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.30']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb7311ba-85b0-4d35-8580-79e790231587", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.32']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f088006-ccf7-4b58-8d50-5e375cf49a88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.34']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79b23a6c-a679-4531-931f-305936f6715b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.36']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03941141-2e1c-4cbc-9e17-3c32af4f55e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.38']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d0145ad-854a-470a-9042-2dc54b80d7f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.196.152.6']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea639b67-bab6-47ff-8e03-13b4dad62606", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.199.163.52']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53021972-f6c9-4bf7-95c0-7e47b4239f78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.202.25.100']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7c9e2ac-c12f-4167-b6fc-a0b4e03730c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.202.25.107']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d10689f8-cce1-4dc5-949e-d696b9e4d845", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.202.25.111']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21625617-9dde-4070-890b-0fa4a8d07da9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.202.25.114']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7174f23f-de92-43e9-8122-6bd67242b12d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.202.25.120']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58298849-2c2a-4e8b-943d-0808da129c55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.202.25.131']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a007a69-14bc-4b7a-843b-bfc9df1540fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.202.25.138']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c278584d-aece-4e1f-bfc8-4f4bebe021c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.202.25.140']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7d21b95-7cea-482c-926d-f5c0afc879e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.202.25.142']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ed9b20f-eff8-4582-a17c-98632fed5df5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.202.25.145']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e62323ef-a398-4a0d-94fd-59f0b1973718", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.202.25.151']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb9fa6c5-0e1c-401f-a508-999e733cc437", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.202.25.152']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--becfc914-454a-4a2d-a03a-055bf14bdde0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.202.25.154']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22ed3881-6239-4d71-8994-26fa86cb6fc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.202.25.159']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9246d693-86d2-4f7b-8c33-746f7202303a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.202.25.162']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30aa71ab-8036-4725-993f-884e53005727", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.202.25.163']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b659e287-739a-4027-ae42-062712b8f826", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.202.25.171']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6cdbabf-ee4d-499e-ada7-650fd9e6045e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.202.25.18']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07f4d46f-8a58-41a1-90d7-8a8122da91a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.202.25.185']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a29ba551-5bf5-4963-9dd8-15726dab089a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.202.25.204']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08ce8c51-926c-40a0-9dbd-29fb95607f24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.202.25.208']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b2619e3-2eb3-4201-9add-a1346d528761", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.202.25.212']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c2a1197-8f78-4872-8fe9-df729bbbb89e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.202.25.213']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f2ff31e-0f5b-4ea7-9bd9-8d909bd495bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.202.25.224']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d0d798e-77c3-4135-9747-f04ee5e36acf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.202.25.23']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed190e74-b5ea-45ee-8605-ffc1691648dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.202.25.250']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--62ef707a-cd22-41d3-bf85-ea7ae54cb224", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.202.25.253']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0040e70b-3d3a-497a-b707-8373c962d20c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.202.25.255']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bd9ecd0-5c08-453b-a306-0e8a5f417b8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.202.25.29']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15b9664d-eb87-4533-8dd4-3e118df22453", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.202.25.37']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--73db61d3-acfb-4637-bd1f-5768d5da2fb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.202.25.42']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5ec81c9-b2d5-45b0-9168-e41b2dccdf66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.202.25.44']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6bc2670d-2bc0-440e-963c-08feca3b8204", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.202.25.50']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1afa8d77-9c55-4d02-844d-8351d94e10de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.202.25.53']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3925e8d-e59d-4354-8cdb-400e7f5227c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.202.25.6']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a96e72eb-d85e-40b7-8947-41113f22e8e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.202.25.60']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5288740e-2b4b-4ee0-b00b-8c171f71be18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.202.25.61']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ef164ca-e3d7-4351-b4af-2326f0e40258", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.202.25.63']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14d09587-23dc-4b40-9b1c-91ec2e7f2913", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.202.25.73']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d820f2e1-fb20-46e8-a083-f3497683a366", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.202.25.75']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5776fb4-145d-45e2-9665-5a3c62baa063", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.202.25.79']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17ce490b-ed57-416a-98d8-823cbe58505d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.202.25.85']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d139533-261c-45e5-ae07-78d6608320d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.203.61.27']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca490aeb-6990-46dd-8eb4-653cff0db0e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.216.173.121']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a6954ab-df4b-449c-a1c8-e17ed750537d", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.221.6.184']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--482bc7f9-301b-4f85-87dd-fc1aec698705", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.224.92.135']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0800a0b-6cdd-482a-a082-58de5e3fe86e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.225.162.92']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b672710-577c-4c96-a0a3-1ea1cf7bb407", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.229.114.68']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ce21921-28ff-4456-b3a9-08024b3d09db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.0']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9a39afa-809c-483e-86da-8cd1d3900f56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.10']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39ff44c0-0bc1-4407-94c0-c90265b32acd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.12']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d655bd3f-a1a7-438c-8616-94387396d6ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.120']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a044274-447f-4a2e-9e05-1ee188a10ded", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.122']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--acc7af5e-08cf-4dce-b8a5-dbcadde3ebee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.124']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--552ebb1c-77c4-45a1-bbf9-258ccfbbc4b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.126']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76949d20-495c-4c80-b961-88bcc11d8c8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.128']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0978a78a-1fb1-4110-9771-f64ddddddfa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.130']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86f6e82f-ca92-4c12-b1cc-80e6618e79eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.132']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4ad6615-2654-48cb-ab54-e26d64bf9ad7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.134']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ce74ff1-f7dc-4316-99d4-bd9c899d12a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.136']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--415ac38f-14f3-4c77-8ff9-9ffaeed5ceef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.138']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f05206b2-2a6b-4589-b966-dbc5d5242f3b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.14']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cc29819-ee40-4ba0-a5e6-d9f31a01c333", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.140']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bdfd6647-ee90-4684-8c15-1fa649fb4f7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.142']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e762a0a-84b9-4b3d-9642-5712c5f26e26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.156']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad255c1f-0ab9-492a-9588-82113231f018", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.16']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--033b3101-813a-4c6a-8f8b-4cfe7f091e7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.166']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48e8a9d1-8064-4900-9910-4c58bbf036fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.18']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd3cda46-27ec-4ad1-94c9-f203dfebcd18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.184']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4182a51-e0a2-42f9-abc7-719d14779009", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.186']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c367c87c-7e67-49c6-a7b5-f04d2df3adda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.188']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d95d5bd-5eee-4ac1-82e8-5b49c2685511", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.190']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd95a955-00f4-480a-88b9-dab541d3b35e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.2']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13dcd3db-4aae-40bc-8729-64b3b59b3ad7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.20']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35003958-4446-4c64-afe0-4b8f23b30997", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.208']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29a8c124-130e-4447-a40a-1334f798d82b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.210']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c4af761-0909-4091-ade5-95d204b36d09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.212']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa463221-c24c-42ad-89cc-e4e44e023263", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.214']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a2a992d0-149f-4fde-9a5d-c9ddb39d5fa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.22']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4643507d-c00d-4db5-b101-ef0698a7533b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.231']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fd41bde-022e-4f81-9ba1-349ca15a990d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.232']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67fff19c-1ee5-4ea4-864f-cffa736f8439", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.234']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fdf66d4e-71a2-4524-a4d9-e884a80e861c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.236']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9a99e03-589d-46a8-972d-1f9d4c0acc97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.238']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ac54d43-8c93-4d98-95f8-4d6342a0ca6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.24']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e27d9b1-6294-4cdf-8a31-73ced55ac9c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.248']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--291dea09-d152-4bab-b2cf-da48fc0378c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.250']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9625137-f020-4ee0-8368-0cbc542c3bf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.252']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbd117ef-49bf-4797-b572-62b277182717", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.254']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60a34498-6255-4c41-8f5d-0355859035f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.26']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44e3ba7c-e6d4-4818-a834-c1aee40838ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.28']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e9b381a-28db-4667-8385-5c446e6d75d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.30']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b1f6414-3a3a-46c3-84fe-ae8da6ab0b96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.4']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fc34e33-9dbc-40da-a201-659d92eb2efd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.6']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f7972c3-30ea-4f9d-b5a5-73b13eae390d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.70']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb2ed4a6-a198-4816-b6d1-e91a27b61575", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.78']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2c8dd56-025e-497b-85f3-6ac07ccefc4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.8']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1089e74-b475-4af2-ad54-37cd3cbf43d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.86']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--919de92e-1010-4e27-9e3f-ca85123e97e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.88']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--623723db-b8fa-4499-855d-93dfe39f192f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.90']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1538619b-7d3e-4188-9848-f0ff7708277a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.92']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4be9a385-a7fc-4da4-8add-c60fb96eb9c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.230.168.94']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1da75052-e76c-428a-a1a5-5ea4c33ba7e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.0']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17e01401-98e5-4cd0-ae39-1f7f0041cba5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.10']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a84ba7cb-e87b-494e-ba99-e57a2aebf4cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.104']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5482823-5c70-4a06-9950-57c44451d0ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.106']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5182d7a6-7ff3-4ca6-b9bf-d8030dac206f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.108']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14b559dc-bf45-4266-8c76-a88d57a42bde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.110']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc7ed61c-5e86-41b0-ba30-f6e0aee3d9c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.112']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--049048e6-5818-4ea3-bb83-2d2953ab37e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.114']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e04f7660-cd66-421b-bbbd-86fadd078ff9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.116']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe8073d4-e15d-4e26-81d1-b991d5691725", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.118']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8361d7f-4562-4f6f-bdd5-191f601bdc0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.12']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a4ded38-9f04-44c7-a445-df770156ebea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.128']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e5f6d35-f5eb-4b06-89bb-e6927ce21bca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.130']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f16ff94b-278b-41b2-97f8-091a8211478f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.132']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78ab36e4-9387-4350-84b3-35fa67624405", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.134']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4fe11cf-565c-4f24-805a-1c8f8fe92731", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.14']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ada912e2-d8fe-4ff0-ac02-12fe12c1ef72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.144']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec642081-57a3-41c0-aec3-339d4bbc0edc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.146']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a742d4f2-060f-44c1-a1c4-036820850876", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.148']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60389108-6210-469b-9cbd-aa11d9f483c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.150']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85f95f42-29fb-44d9-8dd3-549eebbb8b36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.152']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ff1b711-2670-497e-8301-e1db3d62cee2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.154']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecb55a90-d43e-41f3-9a21-c2a43e2c1900", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.156']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23078955-7ef8-4863-9596-75619d7cdd29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.158']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17c4011b-dda0-4442-b369-26c59978cb2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.168']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--036bf50b-e09a-4cf5-93c8-36a17ba759e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.170']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21ee0b7b-f0d8-4fe7-a513-a1ed076c9fc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.172']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--240bbfd7-dfd5-4f05-803e-23fc8930c6e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.174']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3edf048-2fa7-441c-9b50-eb43f294d5b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.190']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8f1ab10-96a0-41be-a84c-687047438cb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.2']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d260dec-9ed7-4eb2-9aca-bffa848a0ca9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.200']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42f42567-a39b-41b7-a100-4c1f38f389f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.202']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fdec4a1-8658-4855-9854-91e2779283ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.204']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5e2affc-04a3-423f-9dc4-05aaaf347be1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.206']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af345985-4ed4-4c3b-a3f8-1d9aa31cd1cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.208']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--001cd0b0-b3f2-45ee-abe1-e50ef76e82f4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.210']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e1fff2a-1c9a-46ce-9bcd-93504db74b25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.212']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1fa11b55-f1f2-408b-8cd4-01ccc3875475", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.214']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30a5d289-5009-4efa-b195-0dca40abd73a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.224']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa827e2f-26d6-4622-8767-312e8e7485c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.226']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c303c498-19d9-409d-ac1c-18f950b5cd64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.228']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e3e3064-bc2d-454c-ba02-15dd5602a5de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.230']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1a1dfbd-fb07-4f03-a24c-dd7891b51048", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.232']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32282098-b9a2-45a6-bd6a-40a1e9925669", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.234']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bbcae3af-a9f0-4a04-8c83-2f39692afa25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.236']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40b7439e-6136-42d0-ab84-544b6e8317e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.238']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e88a478-209e-4c69-8476-792bdbb4256e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.248']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--103e9dd9-3b1d-482e-b06c-756531b3a279", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.250']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f023a50-5065-45d7-9e11-ee63d900d199", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.252']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bf425c5-489c-4b87-b797-8fde96ced699", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.254']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96dc4781-27ce-4832-9adb-eddf9dd152ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.30']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e406134-249d-4156-912e-59b2fe0508a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.4']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c629551-9e4b-4c42-b1cb-c54e07e0df45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.54']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4eb62a6b-7bb2-4729-a920-e7ea8d7b21ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.6']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7aefe0f5-6265-48ee-9bf7-522c7503ccc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.62']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46ee5ec4-908e-4a6d-bd57-6b48e38ddee7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.64']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d427a95-cb8f-4fb1-b8ed-a2780904364e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.66']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1733d092-27c0-4db2-a149-93b524c81cb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.68']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28df9c8f-503e-40ba-8554-4af86a5ac4fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.70']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd686211-45d0-4ae5-91ed-c82885295306", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.72']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bc67ba2-92b7-4218-8ed8-118a0df1ebe9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.74']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74138382-9ea9-4583-a77d-94dccbec4ed1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.76']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff2e71d7-0ea8-4f92-8c78-b99a0b0712c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.78']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1093df23-94ad-4a17-a15e-786aa4cc3087", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.8']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86f8e90b-10fb-4047-afff-f59b47d4fde8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.80']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb59094f-2897-4979-9738-deeab014df87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.82']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4a9d5a2-0c88-42c3-b872-f5e920f0a7ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.84']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4a1c738-8d2e-408e-bc97-b49dbd46ca9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.231.89.86']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49a5c216-afde-448f-a577-c2e32d287e4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.0']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7327196-cfa4-4367-995b-ed5c9dcb1188", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.1']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c84e7a18-7bcc-4732-b6e5-25c8b51eee4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.10']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b016a4c-08cf-406c-a49d-bfe501426932", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.100']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c60d0877-4ba1-45d1-aa9f-4cf143468b62", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.101']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e34f98db-edaa-4ec9-b140-3b616d3f9fc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.102']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ebec6d1-ddaf-46cd-8fdc-d27de6d6fc0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.103']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48f4aff1-3668-48ab-ba56-e6ba31ef0935", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.104']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e0f1825-1dd9-4d65-8433-c5766829bb9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.105']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e523619-4b90-4a52-b747-2c00aace89a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.106']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--805cc6c9-d36a-4bbe-ac95-798ffd5c8825", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.107']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b577123-0ac9-4726-914a-3ca34e6e3d17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.108']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3a33c53-fc26-4b21-83b7-a84ff678cb5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.109']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--024a2afd-8d3a-48af-b836-c6e44c37cedc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.11']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f1f19e7-e894-4499-a92e-7d5f79a63fe5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.110']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--837e4115-2abd-4ffe-bc97-070cb66db2c1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.111']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--289cf369-ecc4-454c-9019-a29f83d2198f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.112']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f5aa50d-2aad-4732-b1a8-8c0905e26f9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.113']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dab5071-4d91-42a2-a6b3-adebaf450c4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.114']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a6c6b7b-b1a6-49e7-850d-8d20ac7a37da", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.115']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13709c01-fd06-4930-89e3-2ca7807c2278", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.116']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ff9cded-047b-45d7-a07d-c69cb62bf746", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.117']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--61f55f60-df2b-4138-90b2-d50a3dcbd85e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.118']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bad45bce-db5c-433b-b5a9-4bc7c4822d72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.119']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16fe0533-49b7-49da-b04c-19bd799f5878", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.12']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dde07c0-c052-49ca-8a71-79f89e350104", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.120']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06c39ee7-e75e-4614-b4e1-a542d2495fbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.121']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--467f1e76-2545-48a9-9614-8d2b65bc2109", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.122']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dbded93-1474-4273-8e5a-eb253f205cfc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.123']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8d92afd-3fd6-40e5-8de6-0f4a023f0f78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.124']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c552a47-ed9f-4f5d-82e3-57420cfdedbc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.125']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13201e3f-2c2e-4544-8da1-f0741c6198cf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.126']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b135dc78-d677-4c34-9816-5aa74421fdaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.127']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57340d2a-317d-43c2-92ec-2a68926a8e3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.128']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f89ca658-2ca5-4c23-824a-3324caee1297", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.129']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1b45240-3f34-4422-913d-18b3b3e8d31b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.13']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b379c75-4e0f-4180-84e7-ab5f34a6c106", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.130']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86fc9360-efa3-4ad0-a32d-29a68ec3f8ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.131']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bf33e98-32b7-478f-b5e8-66998ef6daf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.132']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb0ac33d-7ccc-40f2-bfb1-9d2a3084345a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.133']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ac6d63b-b600-4be2-9165-31a5c301e8a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.134']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1630983e-eb8d-4b26-ae6a-9778eaae026e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.135']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ffbe030-e7e4-48ac-99f4-bff872530eeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.136']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4016f244-52ee-4e64-9949-614527b7a8af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.137']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9fbc674e-407e-4bd3-919f-1d7b2f2fc92d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.138']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46ace0bc-4273-46e3-8227-c5c43c39f1b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.139']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a02dd292-f29f-4bae-a2c0-7af354c7ecbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.14']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6e51aaa-e795-4cf0-a408-20b6c67e0cdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.140']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7dbc367-cde2-43e2-8504-107bb66fa1d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.141']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d60dfedb-669d-4088-8286-2ad45a3923a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.142']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71f4bee7-9e5a-46bf-b066-2b11a419fb9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.143']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98aa0c12-6c46-47f3-b73d-4a414eb070c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.144']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36aa6bbb-63ee-4bcb-ad2e-3c756f478608", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.145']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8df25545-b572-4697-8840-d6a6e364ae56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.146']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebe92714-6861-4669-9c76-fa6a33d6056d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.147']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6bb4789-db2e-47d9-9eb1-4b79d674dff4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.148']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6cd577bd-6aed-4272-bf53-1daa72e35360", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.149']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67318ffb-881d-4959-a8eb-3317d7b79d52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.150']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78d86fd4-670b-4295-bbe4-38f8275875ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.151']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f08d2a7a-561e-4d86-9e39-ccf87b83c5be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.152']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc9a145e-47a1-4a10-aa81-336437cad25e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.153']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e348013-f5c6-468a-a669-e947b392dba6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.154']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c9bb58f-b978-43b9-8908-f5cda20141a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.155']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4a239df-6da4-4ac9-bb6e-088ea2360d5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.156']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--99bed3ec-975a-4a47-9b07-b2739ab44228", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.157']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29e11b5c-e51c-4d11-b47b-02cfcc0ba15e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.158']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9546622-084c-48fd-be35-84637d4a2b98", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.159']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--117e958a-1a26-489d-b267-e09ad529b89c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.16']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5f0118e-8317-4df6-8c31-2e498408a35c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.160']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bea84e18-2f15-4279-b649-40ef40c23763", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.161']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--817ba413-d732-4610-a7ee-7f21c5da29c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.162']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--537d9c3b-870f-424c-b4e4-834944bae6a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.163']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e305d691-6f5f-46d7-8a61-9f28d6b59a68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.164']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edff30e9-eb79-46b1-96a1-4448ba2c875d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.165']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81b88475-4500-4367-ba3a-d07510ac0b31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.166']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd372949-9f38-4f16-aad0-90661d3a7caa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.167']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df9598af-fa73-4498-ad53-cf388ba91ae8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.168']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4206d6e8-c7d5-4303-baed-03d2e4379835", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.169']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f03788d-17e1-428c-a2c5-fe52cd9fff23", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.17']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28bd5b1b-3bf2-44ec-acd0-101e00a3d437", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.170']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fb0366b-e1ce-45a3-86b9-8a5686f8d09c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.171']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c357c2e9-0cc3-467d-a72e-54e4ce5ecc04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.172']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b336b63f-74c4-4634-b1c1-3492c7464238", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.173']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42e2ff4d-c169-41eb-a51a-cfdb28abbd57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.174']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6239e538-20b5-411e-85ed-73067635ddb4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.175']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35071207-966b-4fed-8500-aca8dd826d4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.176']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--130edfbe-744d-4d50-954a-3ca5036e5f21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.177']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18ae8244-5da2-4cd9-9e89-4888836c01c7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.178']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2adac0d-b3a1-4d3d-a64c-06d323882776", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.179']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d57b2057-9dc1-41e8-8a0a-35bdc3a667ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.18']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86de5f4b-710a-4ec4-932b-cb995ff0c979", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.180']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9ab69e1-7744-4a33-8895-ccdc13f7de28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.181']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c42a04b-594f-46ba-ad1b-c7a38ea27ba4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.182']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb24dfae-6bed-46b8-8b60-47b5ec9f2d55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.183']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93469083-4312-41eb-ac5b-59530280f61e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.184']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78b9b612-e0ee-42e8-b7a7-ec4967adc607", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.185']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0438ff84-e8b2-4c76-8d3c-6244978d2381", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.186']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--85465401-9ba7-4e80-b461-891f04a47fd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.187']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c442463c-a907-456a-82d0-0c1ad5e8c94d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.188']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2938d53f-9ed7-4cbe-99d7-e46738fff1a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.189']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71a1fa1a-b2d9-49cd-bea8-8efc4068db60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.19']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40018744-1f6f-47f2-a418-70e0e5112bcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.190']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--904a05b4-1db7-44d0-b822-c856fe85ffdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.191']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e05470b2-7f72-437e-8174-b627df2a4201", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.192']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fff2e0c3-2ba9-4525-bd4b-7aa4835f45b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.193']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4c355c3-7271-4749-8536-8ab1828c3e2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.194']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6b27687-045d-48e9-aa7b-0917ca47003d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.195']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de47c0dc-2660-48ef-97e4-f61cdefcf871", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.196']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a663ec01-5d74-462f-93f5-6439efaca09a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.197']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--528da811-4f20-40d1-adbd-818c96d89391", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.198']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd24494c-ae74-4f6a-a7b7-dfe0cd56eefe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.199']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1df1f55f-fb3a-4753-af78-a85e7300b893", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.2']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13876123-d518-4127-ae26-f1a40565efbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.20']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e0928f5-6d42-4f12-9411-0eb5c0778847", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.200']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad07ed44-eb69-4a27-b563-6b213a61e476", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.201']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ee2db90-e1ba-4bf1-95ec-01f4122da8e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.202']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab6bfa3f-3c67-42d9-984c-d5758ca6813d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.203']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1333c0c-7ffc-481c-bff7-af775259feb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.204']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a95aea40-1f7e-41d2-888d-40f233d40d1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.205']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79172b2e-2741-4792-a62e-d8b34cf4cbfa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.207']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08db7af5-9c9d-4e94-b954-0f981989d47a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.208']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b255c04-beeb-4f28-946e-6b5b2777710b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.209']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e0b59ec-fcec-49ab-be83-d53b3427ec7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.21']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d559e9a2-ef20-41bf-ab6e-bf867e956c09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.210']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9b7f992-491f-4888-bc87-7226cbccfe0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.211']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2243a69f-6c1e-46f2-9d30-8b78c79d83d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.212']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f90df36-26c4-45d0-b4ce-a09b43f069b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.214']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b28d92bb-a0fd-4816-9565-fbe9ea8c2c36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.215']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2adbb4f0-41f2-4360-9244-c0ceeaebbca9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.216']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4969069-078b-479b-96d4-ef5d84264c8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.217']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55d4e158-d39f-4da2-99ff-ae6706bf901b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.218']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a09703c4-d2ad-48c4-9bce-07ec82b25bf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.219']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7628e79-b7f9-421c-8de1-d1cd9fd8c861", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.22']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b845728-3319-4353-841c-852dfa3029e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.220']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a141d6a7-a415-4bc4-aaa4-9bb0ae875ffa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.221']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b2fb2ec-88db-417b-930d-2c55bd70da0c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.222']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9fdd0fa-4e5d-40db-93ea-071edfbe37de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.223']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21dc5c68-cd71-4af9-a9bf-d009b5d7a5e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.224']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a1144fe-8132-4781-a53a-bb33c6c9cba3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.225']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2157919-f57e-4489-8276-deedc359fd9d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.226']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--145b6c23-4aeb-480b-8352-1381868b731c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.227']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aaf2fd3-3952-48a7-9d02-75fa76977dcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.228']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3047464c-01fb-4412-b5fe-a2a7d63664a9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.229']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4480fc96-0884-4d7b-a7e6-d4380e37197b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.23']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f07a8a40-1276-4d00-a6ef-e3ddb5fe4280", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.230']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1da3e34e-c5ef-4d5d-9d70-bf28f96ba0a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.231']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c66520c4-1d68-4f6b-85ee-3a5e7b10db8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.232']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68eee9e8-5dd4-4204-bf66-657651bdaacc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.233']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f4ecf3a-352e-4e19-8d5a-9e63d858afde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.234']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9d8afea-2d7d-4af6-a18f-ab4187b992d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.235']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8afaf22e-cd6f-4d58-b456-5c7eb9159fb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.236']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4cb27976-5caf-4367-b42c-2540a1dfa560", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.237']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9007abdc-db7b-4a7c-a14c-641c9326afe4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.238']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8301da0-b040-4943-b476-989d4ffa0b26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.239']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0758eb4e-5f08-44f0-add1-084934934699", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.24']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e285746e-95a2-426c-b692-16b7736c115d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.240']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c85cc48a-afec-4d91-8b96-b28db6b95401", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.241']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcfb052b-4323-4da4-9f83-401e67abcf4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.242']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75048d43-56bf-421b-9151-96d7d8804c93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.243']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--809c7d48-90e2-4492-9269-fc013272eb94", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.244']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--355e0dbc-534a-4d1e-9359-bb2a98cd7761", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.245']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0d9afaeb-e631-4831-bc49-5a6a048816b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.246']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d067f9cf-9dcb-4633-8e71-488eea537191", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.247']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d1517e3-9abb-4703-8f08-f44bef0afdbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.248']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7db05f9-4a7d-4157-be76-242f039ae7a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.249']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b64ce80-81bc-4f67-8935-b2d27d8aed8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.251']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68954da9-753f-4368-8969-c745316709ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.252']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59888deb-cf7a-4dae-b145-f4741ee88c92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.253']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e322abb6-461d-4b7a-86ec-fca5f134c0ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.254']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3cf753d5-398b-48cc-8783-8ff13afa43f8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.255']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5be04f3-8a33-4554-989c-c49bfc2c97f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.26']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe0f87a4-ac8a-4498-aacb-40b92b23275d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.27']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6ce8888-8faf-4e5b-b447-a6b099f25c47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.28']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a56b96d-28db-42cd-afa5-80c276e10879", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.29']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0e99b41-8d50-45b2-b162-34786c9b8579", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.3']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3075676-b66a-4198-b63b-2450972a4831", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.30']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2be6adea-764d-4d75-b756-7850742e7cc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.31']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--323ba86b-dcce-4ff9-8b7d-aba179758d77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.32']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2e2b366-a607-4d9a-a9c9-affea37af41c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.33']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d637ee27-0958-48dc-9c4d-90a2448fd429", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.34']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c4ad050-32d7-4128-924e-2dd4d0795d0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.35']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--342ec31a-409f-4461-aaa5-daf3e43f4cc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.36']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1bb8169-e5e0-42ce-b4ae-9c257cd4354a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.37']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7733a85f-8784-4cfd-8e3d-753dca2caba8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.38']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05b56e62-4311-43e1-a860-41cde9d487e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.4']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27c88187-eef0-487b-bdaa-9c2c9ed286eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.40']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab76ead5-3346-41a9-92ca-0f86a3f3f013", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.41']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--90396bc3-dffe-4fb4-a022-14d1ff57f889", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.42']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03652ec9-8395-4498-ba39-1b51594ce282", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.43']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13f84409-c3bf-4720-8bc8-bf45d401ac35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.44']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d6112990-3f6e-4f19-9ed9-724acca6de2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.45']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35b49ed7-4be3-4f89-a88b-85ba3ed0307d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.46']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76b25c97-8d4f-4e63-b3de-871a16d31525", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.47']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91284317-a867-4c6d-b695-15b602abfccb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.48']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09c55364-a600-4249-9e7b-4a36095a3729", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.49']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c88f073-c467-4363-b220-21ca27b8e16e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.5']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c38455d4-6ca0-4bda-a1f6-3573bbce0210", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.50']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b769e5f-804e-4be2-9cf0-91137bc972b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.51']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--876ad76b-fa12-47eb-bb3a-8a51c5f85b91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.52']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--189c3975-a87c-44bd-bcbf-d85d696868f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.53']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83b0b4cc-f64d-4ba7-8873-cc8cf4a63e8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.54']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f6bfd29-f584-4cf1-8283-b662e7cb592c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.55']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--380d6cbb-bdc9-4bd3-bce8-ccd7004d2e87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.56']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf3a11ca-33cf-478e-9c36-36c6f3d9ad3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.57']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0515775-87c9-4100-b4aa-856086baa388", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.58']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7684b431-211e-440a-adfb-2f6807a7fe55", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.59']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1699dada-e4be-4b37-863f-b2d4c951fd8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.6']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a2e4c82-d939-4606-98c1-2269823fd5e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.61']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--167b6666-b5e0-414f-a27d-c860fd9bda27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.62']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a565bb63-3ab0-40d1-9275-56112b6230b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.63']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eefa4f52-ed13-4692-a19d-37b32eaa055d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.64']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68b54ba4-6702-435c-900d-e0d6ab1cd4b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.65']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fde45937-5599-4f27-9074-9959fced4d40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.66']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40e77fdc-2ea1-4936-b475-5c900979c0f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.67']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--501e560b-ff90-4285-8510-1c3ace58fc6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.68']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f58bdbbe-28e0-46ca-93d5-7d2e8f0c0890", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.69']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--590cd5eb-9add-496c-8866-6358d637a949", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.7']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fe61109-ee43-418c-93d6-056889356e7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.71']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c7f7425-ca4d-40f0-9820-d85e28fbaa99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.72']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9d9d1b6-6e2a-46a6-a606-b6a8250527ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.73']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dd86714-a066-4a68-86a7-502f60103771", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.74']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f24cd02-2a34-4a98-9a9a-5087aa8cad52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.75']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b960fc8e-32f8-4f43-9ec9-6d23aaca8bd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.76']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa77400d-68c4-4054-a7dc-d76c3020f32a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.78']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8a402762-972c-490c-bf90-5c85315bd394", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.8']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--355f8460-12a9-4135-b67d-091b2bf8dfb6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.80']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b631df5b-0e8c-4aaa-a788-978f40ed9a83", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.81']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--16e59588-f1e3-4c51-9ff3-4bc2f345739f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.82']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5970821e-1a20-490a-8738-a948be3aa5a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.83']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebab6757-207b-43d2-9d95-8f4be7e15358", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.84']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ffaba62-75c2-4659-b526-69fe606b8717", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.85']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4fbb7d73-942c-4cc3-bc3b-e6adc15d6e86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.86']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1ad493d-b5a3-4c77-97db-69eca65df644", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.87']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3116a911-2dac-49de-bcdb-6ac10ddb36c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.88']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ff411ea-84d8-4d82-8d2e-9e0745636fcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.89']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9c2017d-d599-4f98-b64e-601c5ba57033", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.9']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1baff73-03f4-4f79-bbf6-d7ddf6089c4e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.90']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8edd22e1-24a8-480e-beb8-762be42a19c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.91']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08dbfc69-fae1-4e7c-9601-f4608f4d0e43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.92']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b501479f-c54b-4ad6-8c48-6ed5f2eaf564", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.93']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4030031-5f61-44a7-b85c-7066f39de54a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.94']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef0c17ac-ad9c-4b51-a853-6f2f81b8a8e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.95']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4e4a95b-3e41-4b88-bdf5-6fdc77f32799", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.96']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8ebb5ea-78e8-4129-8a2b-d97121d76543", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.97']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab9e6d75-5fa5-465f-baf2-c4d3e6365fe5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.4.99']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69d1108f-1cc5-441c-8e3d-8dc57b677db3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.0']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d7f46db-e0cf-4f64-b2d1-5983c31c8922", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.1']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9f97508-22ec-4290-9cd5-96ca53a9807e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.10']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2a5c43f-f572-404d-b5d3-316c4f05f5a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.100']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5b507ec-5f94-411e-8752-73c08c74d4b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.101']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bbb8e95-68ca-478c-bd4e-129132f34cd3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.102']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0de84769-6a4d-462e-ba62-728aa70adff8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.103']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e442167-1f2c-480c-b9ab-4348fee39a72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.104']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0681a68-62d2-4c6f-be67-c9d629ad3fcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.105']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4df008e9-9c9d-4351-8187-21c2ca681c88", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.106']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e58e0987-ca2b-4262-b886-31bcb7e5ab5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.107']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dd7cb6c7-9d91-4b16-b2fb-d67c5105adeb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.108']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78d71f15-477a-4022-9419-c1b2666fc806", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.109']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--837e10a5-3556-416f-8471-8ccd89effd5f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.11']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03ece201-5023-4cae-bc16-bb0a0a1f559d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.110']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f862a4a3-283f-404a-939d-2c74896c5956", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.111']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91d069c8-7525-408c-a0b6-e9a60e75b3f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.112']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1e0ca3f-c7ff-47a2-99b1-75d43cde26e8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.113']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1372bffb-6222-476c-b109-4425a636a1b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.114']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3c5cc9b-0272-4b31-b213-25636e279239", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.115']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75f6c218-a33a-4c3e-afbe-a58f1049438a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.116']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4b290be1-446a-4677-b8fe-0a6688efa01f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.117']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fc5a465e-11e9-47e5-953d-5913ecd2cfd1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.118']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce9e5962-6632-42e7-be91-00a5324127ce", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.119']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--762bff87-20f6-445b-b747-dbaddb4a2bbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.12']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--200838e2-58a5-415b-ae2c-2871b479460c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.120']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bd866bc-f26c-4b54-8f4b-5bb1781383ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.121']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66df0f30-8d4f-4ce2-862e-3f804522df68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.122']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f463c345-37d2-4056-a3cb-776a78c3fdab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.123']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4d10cc5-eec6-4950-8736-be6a02507053", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.124']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67032cbc-492c-4cbd-af2a-53793c58aea0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.125']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c902046-6c10-4913-997e-481c42f77570", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.126']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ef1536c-0230-4c8d-a6ab-7e35eedd2ef3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.127']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40c28ee3-36ac-433e-a43c-150113a69008", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.128']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39c46b47-32d1-4af2-8f42-82d6031819f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.129']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e265d788-e371-4975-82a0-0f2ccf669dfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.13']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47866ce7-006d-469f-8fef-1ccc09fd3aa8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.130']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e8872b1-cd70-4bfd-9980-57a6186a5b81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.131']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--507e286d-0444-48f1-a59d-aa0e5bc0e623", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.132']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42b0a69f-a536-4809-941a-df5d7e4b8c15", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.133']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8efd2a8-6f00-47c9-abe0-0203ba6d4b44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.134']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e241537d-459b-47ce-bffa-65e85cacb94c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.135']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c86445e-d66e-42aa-b31c-098abe9f0fb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.136']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adff7750-6441-408e-b61c-75838699735a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.137']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f9b2eb0-5b77-4db2-a447-2b7e48bb11d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.138']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fad047a-1c8b-403f-976b-cdf295d06a57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.14']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1eefafc-ed9e-4bad-909b-bb0b639cadb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.141']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e7699ec-3f4c-4809-8933-8beecad1af93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.142']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e723597c-6ae1-4555-811b-0302a72d5c12", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.143']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6251a2dc-86c8-42fb-97c1-5b44e2ba1ef8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.144']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f14b0150-9e14-4687-847c-e3ae77a16bc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.145']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0baa7533-df5d-4feb-a1a1-5cf4da114619", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.146']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c38a641-91b3-4a22-92ef-876c6e38f8d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.147']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c681f6dd-92dd-4813-9bb9-d5302c6f6207", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.148']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd834416-ddd4-4a22-b2bf-377b7635bcf8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.15']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75d4fdd6-bd2d-4612-b6a7-9cbfad5d3f52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.151']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa5ef401-ffbd-4c2d-be2d-5cab9f8a932e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.152']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4782f191-4024-41ac-80f9-ec1fa78809d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.153']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a407f13-b48e-4c5d-ae93-34c8a6899cdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.154']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1243d24c-8ecb-436f-8e0e-09906f21bac1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.155']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b5a9f2f6-3a0c-45d8-ad06-4ae2bee98464", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.156']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06623794-5c4a-4c9d-b243-524d82ef1701", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.157']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09210e24-f947-437c-aa8d-acb9b40bc832", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.158']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bba99a87-952c-4e5d-bfeb-07e563d7f2fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.159']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f7f7e8d-6433-47be-86cd-d9d2218f993f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.16']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0f8e1e4-c5e1-4121-a0a3-bce2dc4efb7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.160']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c7a6224-d7b9-49de-8dc2-fdf3d2916a4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.161']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72b89a78-bb7c-4dbf-aec0-6fd2e68fa352", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.162']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9abe24d5-963f-4e75-8e78-11a270e7345b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.163']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1377dba5-515d-4457-9db6-0bdf4e0a3b30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.164']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bdca734-a282-49f4-a7b5-b97275e8bafa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.165']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53a8f210-9005-4982-afe2-49332352d417", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.166']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ea524b4-7fb6-4790-9147-9e4cf091066b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.167']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--794ebf93-3adf-45e5-bd56-581d0b6d5faa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.168']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f95da09-0565-47ce-9995-7e977d40ea67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.169']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7d7057d-64f5-441e-8297-14c4bcd0edc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.17']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be365fe6-af19-47a6-9115-edb511370484", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.170']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ae1f52b-ba99-4e44-8ad3-e1f6661b6541", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.171']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36b6d2f3-7fc0-4af1-9699-e284c5cfe342", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.172']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22168a45-2390-418d-9325-7c759eff7d53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.173']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e222b975-9b64-44f7-8eb3-f97e12cd016e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.174']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8fa7313d-effc-4f58-b623-11e72cce644b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.175']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96727a8d-abbb-4c05-97c9-4381278db6ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.176']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ace1b12-91c4-4024-87d5-a1b6d81e221f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.177']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac1ae11c-5972-4ed0-8305-32207f6924f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.178']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--39f11e75-9eb5-41d2-9b4b-beb79e788d60", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.18']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9436ee5-96d9-4602-a86a-a1d7b1b364d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.180']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af8824c9-932c-4414-a774-b5998b40903c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.182']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e750d167-5b64-4a25-8072-7eb75516d8d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.183']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--96745bec-91cd-4ddd-b982-e047216e3f07", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.184']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f39d8a29-2e6f-47ce-a236-07f59b02bbc1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.185']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef5d6a41-108b-4c6b-8546-2694e12147f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.186']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b72c620f-9128-4253-bb85-d53e3d139beb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.187']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--feb78c17-0d6d-4990-a4c7-355c2d2a042f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.188']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d5f4120-694e-4acd-be09-1ab361733c17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.189']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f274d70-7746-4291-a57a-c783c73f4c4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.19']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93df5a4b-fe01-4884-b13e-ef468779bc77", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.190']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b62f1ec1-c93b-4dd9-b325-6fcb7e984d49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.191']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee9ca179-3a36-4dbd-8156-422f885e5a24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.192']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddb04183-9eaf-44c5-a9f5-9c01a3cc3eb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.193']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6e07c361-70b5-4fce-bd41-f6a61844fbb5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.194']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b17baa3-a921-4971-8b1c-83d4eb0a01fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.195']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ebec1526-af82-4fc0-84c8-cad46a74f8bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.196']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32dc4465-fd9a-4dd7-ae45-568affadd366", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.197']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dae3dbcc-2e84-48f6-b1b0-8acb7b850973", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.198']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9565d675-a416-46e0-80fa-f26cb51f7755", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.199']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67b2c0ab-5832-4553-b387-db451c21e60f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.2']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6355f43c-5f35-4c7d-bce1-bb91c51f8c38", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.20']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c88b7f2-be0a-4ced-ac29-602389ea5d1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.200']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75d995c0-0661-44df-880d-ace3b3a0b2ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.201']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4e0ad68-8da9-4ada-a0a5-4e8fbe8914b9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.203']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--045281ec-0d3e-44bc-8ada-77f5f8c9c7a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.204']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7aa97df8-864d-4e89-8cce-39cb9f450828", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.205']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22398aa3-65d5-4efb-8346-b5006d9c0f4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.206']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f9e83c5-1b5b-4323-a50a-c5fd6c9f7dcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.207']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e79d460e-61dc-4c5e-8a09-b1f09c39bfcb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.208']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5da250f-de7f-46ce-99d9-d75db213838a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.209']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ec003d5-513b-4e85-80e2-73db391fc30e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.21']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe69a2d0-3303-4c62-8fcd-e0073fe8aafd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.210']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a149e6f-32ac-4bca-bfbf-5ef9d899452b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.211']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af21763a-3bc8-4da3-8fa4-b8861cab0b70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.212']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20a30ac4-374d-48c1-8cf6-4d2169df1aef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.213']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0954cb7d-5e01-4ae3-8075-73eefb05d814", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.214']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c62b75ed-0c34-4890-a5f2-67dbcfbf80a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.215']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9f4c54b-fcd2-4b19-842f-8ceb8621f8f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.216']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26fb2fcb-8eec-4fe8-b444-370f0ab151a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.217']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de019747-7c5e-4f17-8ebf-44fcaf123b9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.218']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2330bca6-27b9-4165-a7ed-2e2add515342", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.219']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de056911-e26e-498e-94ee-b427bc2f09b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.22']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3d1ac9e-31d3-4233-909b-5d5d21b9dad9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.220']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--268c5080-c61b-48f2-bb78-59c469ec652b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.221']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c882ef30-d389-4334-8569-7e8208694d24", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.222']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3452b3c6-583d-4a8b-b963-46da94378381", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.223']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--675c6bed-4cdb-464f-bfc9-292be5bcf3ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.224']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8746c5eb-a744-485e-85a6-4f02ddc4cf01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.225']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e354cb8d-22e4-4aab-b283-c81d9a82c55d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.226']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5480a1e0-ac17-438e-938e-4d33c306ff73", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.227']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfd5787d-a86c-4bf6-8da7-d98362776015", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.228']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29ad599d-bf22-4f64-aec0-512c238cb655", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.229']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7786dbc9-3401-41da-9bd0-e07feaecae1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.23']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--652ef07c-1bfb-422b-8fce-929263f8d56e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.230']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09c88c1b-6d5b-45c6-a790-bea935079b3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.231']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5792502-81aa-4e1f-876f-d6551370888e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.232']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e9dbf29-112c-4067-9439-0fa70de871b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.233']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--baa0302d-8f27-424a-95a5-3dffc9389284", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.235']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d78e0884-5df5-4d82-89cb-6b0bb190cd57", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.236']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--822bd9b8-447c-4138-86ef-d1ccd437753b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.237']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56c4cbf4-2ef7-486e-b562-09843a76e249", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.238']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--943fbc9b-5637-44d4-99dd-b278f75ba5e7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.239']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44818810-473f-4a91-b26a-33665a035bfe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.24']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1064edb-d80e-4137-8e5b-aa45cd1edb91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.240']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ff5ede9-d747-4022-a030-660eb8c13867", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.241']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8181aece-f5a2-4da3-b013-36d558b9af42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.242']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c9c678e-87bc-4a76-847d-e8c691457fde", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.243']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a69fc2c-1eab-4bcc-9d37-eddfc81aa156", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.244']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ced54a9a-1cd7-4c8c-bd9a-0a64c9a9f2fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.245']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1bf17956-8935-466e-af1b-e99e51afcb19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.246']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c5236140-258f-441f-9924-03a337f45799", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.247']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13f07bd7-e622-40aa-8d48-9f42b72835d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.248']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09b3d357-541d-464a-bcfd-756f5f94ff87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.249']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fed61872-ab02-455d-8866-198b781d9084", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.25']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea60e0ae-389b-49b8-8126-b3cb3749b148", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.250']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--187151f9-36a3-4222-b182-9587398c3b10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.251']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bbd4d17-9426-4269-b086-ba6cd620dcf1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.252']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a745ea44-77e0-43e9-bf04-617173cd7071", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.253']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5729db8b-ee02-452e-a180-192fb4a3b84d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.254']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8e4d8c8-6342-44f0-8a9f-20372bdacda5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.255']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f8d81ef-c920-4cb4-8c51-04ef9cd4f690", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.26']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30516d7e-70b1-4646-b829-f8a29184c698", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.27']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d22f57a3-2e34-4714-912e-65a7f13a5bf9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.29']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cd8dd05-a1aa-4827-854a-51af29debba6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.3']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ad5db86-4ec7-49c1-9000-7a6dbf26daf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.30']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1bb811d-7518-480d-aa7d-89e5b5ecd056", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.31']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cedbbda0-1827-4ce8-9d91-1a48a953e512", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.32']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--07f976a2-63da-4466-ac5a-a61f5a3ca717", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.33']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37e1f96c-1ecf-48d0-b864-ce8e9823edcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.34']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--208cc699-936d-41d4-ae82-08434713b0dd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.35']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--926113c5-c7aa-4aee-a8b6-9bda9ed1cc48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.36']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c60ca8d0-cfb4-40f3-a8d8-0f21e3f371eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.37']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--24cef2c3-6861-4442-96de-9dfd2b97abe8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.38']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c206856-ccc0-4eb0-b1bb-878312812a59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.4']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1958abaf-cb73-4e99-b1c6-e3bda50a834c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.40']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21913f2a-53a6-40a6-9926-d61c9f708869", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.41']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d2f20ac9-b362-4d8b-a29c-56f087d8da5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.42']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b7bd71b-359a-4c7c-94d2-cd1e81d28686", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.43']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e902cdc-baed-49f8-b1e2-f4bbb04c30b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.44']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7630f4d9-059e-4e67-ad56-c134d32cb690", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.45']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c02cf873-1a9b-4a10-9828-9f204c077a99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.46']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e56c83d0-6350-41fa-9bad-20cf647547ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.47']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--06852828-c158-4d35-9b61-658265dd3395", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.48']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ab9389c-2ee6-4b8e-b857-dfe42b16f718", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.49']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dcf831b-56fd-46c2-8431-2fd2096e4daf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.5']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08aa8d3d-2d1c-42e0-8fd8-e4d1a92889f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.50']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19bb7712-9993-4363-a317-f25f9dbd3846", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.51']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66fa0d46-1fd0-48ce-8e3d-30c175c2a2c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.52']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e7444fa-dcf9-42c7-80ff-3a1ce5634868", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.53']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a741e0b-c120-4d21-a4d8-5fa109e51568", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.54']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4577e426-0fd0-42a8-9673-5c6440cd1bd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.55']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b9e6ca9-0149-466d-aa71-71129c51d0cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.56']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b48c0c2c-8daa-431f-b056-4d854b9ffaaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.57']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94cd73b6-7c24-4a88-b1a9-399ef4577df9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.58']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bfa1c504-6263-46f4-b782-c6bb16003272", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.59']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4dfc5016-4737-4026-9b2c-8a3f2dc1ddd6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.6']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbcb239c-5ecf-4121-bc41-0db3e622e70a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.60']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32575712-dfe0-4b60-ae51-a41e90e7ad7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.61']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38020ec7-e268-42be-a297-9e007dd6fa97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.62']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57cdfcfb-9ea2-4306-bb25-1e8807b3a9d9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.63']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b023b8c-19d5-4521-a16e-27571b1e4a64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.64']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68d7ad93-c307-4470-8380-2adaa99e12ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.65']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c5919cf-529c-462a-8023-d11319f7199d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.66']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe1b3e93-bc64-4ec7-9799-44d4dd4d39bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.67']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5049d486-557b-4447-9a09-97c8ffc7e34e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.68']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed42f1cd-28fc-47cf-9d66-7ea9644a267d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.69']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ccdb9406-062a-45dd-a539-9e695731b17f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.7']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48dd0c48-b81a-4bbf-8f2b-c53875577393", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.70']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c49ebd03-068e-474c-87ff-6ed5f4914eb9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.71']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--961e66cf-03b6-4d43-9b81-c6f1839ae9e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.72']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cf9a912e-c868-4396-87a1-2bd893b64fd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.73']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30b20f89-21aa-4f0d-a3c0-48122cd85580", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.74']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15b4b9e5-0ed0-4b94-a36a-e0a55f4d60b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.75']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27757529-05cb-4853-b51d-ba5991573551", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.77']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e265146-fc88-4f71-aed8-757648261280", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.78']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0486ea0d-1ab1-48e7-be27-f771e7508a9c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.79']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--913b7cc9-31e4-4ae3-a727-8d093a9c1711", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.8']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--266e71bc-6e09-4778-ac8d-f54a3590eadd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.80']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1e66906-8590-4869-a6c0-1bc37ea3933b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.81']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--982584e1-38dd-46f6-80b6-37c97c54fd34", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.82']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--053e1f32-829a-477b-be1a-82815660a49d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.83']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--606d8f88-73c1-43c8-8fb5-bc3745faae4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.84']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f60edf1e-fc23-4a3f-b0a0-db82a537c97f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.85']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6ea5dad9-5a8a-4351-ac0e-bc924b6a8493", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.86']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d9cfabcc-6257-4fcd-9281-bfc18c2fbe78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.87']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ca2a9702-4a7a-4315-ba5d-628977fc1f35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.88']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0ef5bcc-964f-4b57-9a77-7e5c398426d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.89']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aad318af-285d-4b81-a48a-0e3c30ede2c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.9']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9bdded72-b59e-4beb-8cc6-1107eba933b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.90']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76cd1c24-7e3b-406b-b875-fa56d6e63311", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.91']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--423cdb5f-da91-4e2e-83a8-77a5dac3e5eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.92']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1f1ce1c-9a51-495f-a434-26f555c17d29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.93']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--42e99934-972a-4782-9a00-030de1c189c4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.94']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37677710-b6ee-4630-ad1b-ccdf3eec5707", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.95']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--847760ae-d197-4f2f-8bb2-0f27f9256c59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.96']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fdca8d7-e9e4-42bf-9b09-a8cd72b9171e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.97']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d210420-7289-4a30-aeae-ee90dac6c18a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.98']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c0d9f2dc-2f7f-476a-9c3d-f8732a151e96", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.5.99']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98264b2b-c343-4c9a-a4de-a857854b069e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.0']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--22146966-5337-43b1-930d-606042d3c77e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.1']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--191b3338-446c-4808-b8f1-a607496844cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.10']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d530d78-e576-4b5d-a7ec-b78cf904ab6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.102']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5a31353-184b-4bd7-9943-b847df4ce44c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.103']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--491f6603-2d47-4cb5-890c-528f81487d53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.104']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec9c3b97-cb4c-4009-b464-256a74098797", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.105']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bb48bac-fcca-416a-89f8-2d0ccc7bf61e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.106']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4af8136c-29fc-4367-a056-1eea32056821", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.107']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9007ba15-d284-4764-80b9-cd7d612d2808", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.108']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4d29acd-231c-4175-a7ac-edd805e5bc8b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.109']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ddf3d217-c1a4-48a5-b779-060214e612ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.11']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0cd65178-1276-40af-92be-32667dd36bf6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.110']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7dfe564-3a03-4e3a-ab55-280fbf16cd4c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.111']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c9669ec-b470-43ff-b773-7094c550f9fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.112']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b5a63fb-a173-4bca-b3cd-7fae41546292", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.113']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--549db56e-94e5-4172-b4d8-8a1a91a4bdcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.114']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fba0b4a-baae-44ff-8dc9-ce75cb8e7a1b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.115']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--485c0b4e-88a1-48fb-bd35-a21dd0f5bd92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.116']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9802a012-f5fa-41ea-b049-72c3499bc481", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.117']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21cbf335-61cf-4cc6-8611-4c2140ab7eb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.118']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b419c665-8d32-4566-9de3-fb4a459999a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.119']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4389b83-c614-4737-b6ab-ac870a303304", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.12']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--76f2484a-3182-4a1e-8094-01ec397a92fc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.120']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afb895ec-7b24-4eed-8a83-b4ae55643e72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.121']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--619b16c5-df29-46ae-8d9c-589707428ae8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.122']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56083253-d480-4489-8bf5-77de64dd8ded", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.123']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b35dd376-b265-41aa-b53e-a8b2de32cb84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.124']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcd3988a-1ed0-474c-b57c-fc7fdafe553b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.125']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f103beff-7ef5-4b7f-95b7-2959d8613205", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.126']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3c6b99f-5ea5-4fe8-86ef-fbaa0ec7279e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.127']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2b41501a-7af3-4f4f-8ab7-f8728571b2b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.128']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49744e8b-6240-4921-99e5-e93e278022a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.129']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6126433f-162b-43d4-b8de-bb6b04818692", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.13']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f26a62f-159c-49c4-b29f-f7f4a6f3be1c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.130']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15e29d0e-e506-4b5a-a9d7-f06fd702949a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.131']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--118ad1dc-fdc1-49fd-8658-dd98a12eba95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.132']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ceaf99cc-3577-43d6-bdad-c3006244550e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.134']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8040b74e-4cf3-4f7a-92d9-2e3683309205", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.135']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c332fc3a-9e55-45f1-977e-9ffef69fc7a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.136']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--edfbd0b6-78ea-44f8-b220-004ce0a76d66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.137']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--75ed7c05-ed9f-404e-88d9-4888be1b97eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.138']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7a366b8-b608-49ee-8ebb-3b8339e9839b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.139']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58c41945-18a2-4db8-b91e-cc0a38caec0b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.14']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--083fff62-6d44-4c33-b391-513d329a5359", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.140']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f60998de-8044-4f1f-b50c-673ab2a801d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.141']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f1ac6d8-42b2-4d21-9deb-f9e9011f5253", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.142']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14bbbe68-a9fa-4098-92ba-cb9fdd2f54f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.143']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5cdcd23-2175-4170-aad9-e1689295fcc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.144']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--052a6193-aabd-4d76-b3a5-b7f435591445", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.145']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe810c3d-1caa-46af-9b77-e918563c4d36", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.146']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8de5a49c-8c06-4265-9638-3ae2a74e37ed", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.148']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77718610-1acf-4dab-a2ce-6103d9140c56", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.149']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4159d1b0-4d83-40b5-94e1-ddc2834f77ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.15']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8043665f-fefc-43c2-acec-22ce4fe0f5c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.150']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ce2cf37-c48c-4ffc-b230-8592f044f48f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.151']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cd49b7ba-0e80-4f7f-8868-3221c7dc295c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.152']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7e44bdb-9b51-46fc-a9bf-10f5092c5b03", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.153']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--543c56b3-e3b4-4829-a65b-7000a0c3bbda", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.154']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac516a44-fcf2-44a4-91ec-9e6c83542e00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.155']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--930362b9-70a4-4eb0-b834-2ed8c49b4237", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.156']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d0966168-4a3f-4458-94dc-38b186413540", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.157']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d93d2e7c-3421-4755-be66-966468410584", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.158']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dc5b9ef0-fde9-4d40-8b7c-a816c489d346", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.16']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0863596a-9e8e-41fb-b9c5-4d30f704d909", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.160']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1ea2611-abe2-4c96-b475-a973106ae233", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.161']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--850af05f-3835-4a06-ac01-6704c5c296ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.162']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d008437b-edf6-471f-9766-bc3de0e285d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.163']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--067fabb8-1870-40f9-ae2e-2ea73559be28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.164']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b4afe8f-f58f-48f0-9035-a0cb7e6d8a70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.165']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--933716e5-233e-445c-9d18-e697c4cf32fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.166']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2db88938-77e2-4c3d-a3a1-42330395313f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.168']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4cbd52c-9149-4cea-a6e9-f0dd58c4b916", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.169']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa7bd346-b4ad-48c0-8770-fab02327eb18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.17']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3e48220-3eed-4790-8973-8b7d83a658ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.170']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10d8b306-39dc-4831-b2d2-bd823263b942", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.172']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2caa0f7b-a17c-4d05-9f58-7b465cd854a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.173']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cab2bfd-c141-46d4-a1df-fe8ab5fdecc4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.174']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4100d8f5-effc-4767-a759-2083aa185d30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.175']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68a7cc76-3f21-474e-874d-e529d5d06aee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.176']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7c99c91-9c11-4d8c-a872-35ce050276ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.177']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--95189725-c154-4a86-8323-1a66d3e4dd01", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.179']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6cb44bf-4aae-4c3a-bcaf-3ca194d6e12f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.18']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f82acfa9-a0d0-4691-a660-e8177bdb130d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.180']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c758644-3b9f-4b07-b9e5-256aa5e60cdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.181']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0c679ead-3c5d-470c-a265-ec3587d6365c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.182']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba08d9e0-f5d0-4e5f-a973-87177eb4adee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.183']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7c2ceb9-d604-441a-91c0-c9fadf800959", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.184']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--862821ba-b6a8-4285-b11c-783cb66c2acc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.186']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--814d8c0d-3bfb-40db-a454-45792365462a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.187']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ba26f66-e74b-48fe-b254-768e01d973a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.188']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37f31e49-7de5-46b0-8914-e63c7cf8897e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.189']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4a6a121-0eab-477b-a333-ccd9f5bca539", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.190']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2568316-dbcd-4e54-aedc-dbef1972083c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.191']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c91cee37-a132-48b9-b982-f5d235a4256a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.192']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58eb2f89-9f99-42c1-8643-069f39057e7c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.193']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82fe44b2-aaf5-480a-9b93-da1fd74b79d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.194']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69c47be2-44da-4cb9-bb55-1fb8cc7f5a13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.195']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b31c1039-e6f0-47bc-af21-0fcdfd3494ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.196']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31700500-b2cc-4bca-b2e1-82c1a170a081", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.197']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--38b64e1c-4745-4a0b-8943-995ee568490e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.199']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14d1e670-9daf-41b2-b1b2-b10b4e4ab5e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.2']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7a004fd-58a4-460e-9f87-0e0c6b40ad20", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.20']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--15f48eae-0ae4-45e0-9df1-d8011d865661", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.200']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5900038a-801f-4833-acc8-61865ffa1c67", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.202']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69a5d2f2-bdbe-4a5b-9673-9fd6b4f3cb11", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.204']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33fdbf83-4a6f-4c8b-b8fd-b8dde5f61483", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.205']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86a42363-088e-418c-bfcc-c22e2c5730ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.206']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4259c79-c356-48a5-b7db-9a0a0f3f8da9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.207']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8473c16e-9ce4-4ba7-b02a-983fe910ac26", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.208']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e8c8f961-3c36-4fd3-92f0-6a2e889cc72c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.209']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--096c699a-d97a-47c9-a23c-826568c224e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.21']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f8dfa90c-5a81-484a-8dce-12fed39ed0a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.210']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1a4f71f-6717-4954-afb2-1ddad6ee7d59", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.211']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0b107cd-d307-46b1-aa3d-17394eb3f16e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.212']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba6173d2-bcdb-449a-a408-110e6f455815", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.213']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e12834c6-17ed-43ea-8ab7-9828b14f4924", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.214']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bcce339e-0703-4fd5-a62d-d150439897b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.215']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--66389f9b-fb96-4098-9d96-e3cfd40980f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.216']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5455894-5179-4c6e-aaa4-e574415fd8b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.217']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c999dd59-c8f5-43e5-8bda-7aeb1d7a5b66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.218']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a322ae2c-8b60-4ace-baff-cab9514351bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.22']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bb04347c-0fef-40c5-b9e4-df4a1a8ad0f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.220']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e541f4d-f631-4808-933d-2c82a963a327", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.221']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4c0fa45-4fcd-496c-863a-4b841380e42e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.222']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1f4dfab5-288c-44bd-9982-9cadc9fa56bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.223']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd85ffd7-ba2d-4466-9d0f-814976817dea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.224']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--48168118-2ef0-4302-8bb2-ddaa21dae971", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.225']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5a3be18d-81d4-452c-a0f3-57eb4e920874", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.226']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d190a6fb-db2e-48d8-992c-2450f968792a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.227']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3b96d3f-a0f0-472c-b0be-7967cca0db32", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.228']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7af683d6-b2ad-418c-a440-a62093b33009", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.229']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1e19ab5c-b44d-4ca3-9151-3ab9cb4384b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.23']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c5192dc-34eb-4ebd-8861-ba67e5bff09d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.230']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--44152c8d-976d-4414-a592-5b635b5f6436", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.231']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72334534-0eb9-46d1-9722-341a4c60b644", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.232']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f5824dbc-ff07-46cd-9c08-6d61512ceb49", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.233']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ef540c5c-38db-4c0e-a497-be76c2803de4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.234']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fd70c79-9654-46ba-9f70-a190d4061d86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.235']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ef571cc-8daf-4cc9-9333-2289e649da43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.236']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d34d50d-549b-4071-9352-391f16e70c39", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.237']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e06b489-0806-4b11-815a-00d3567cc7d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.238']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--112a76a1-0e99-4c73-9f01-8b092ca9aab3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.239']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2030951-7b14-450d-880e-6f0dfded1924", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.24']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bca2cf8-7eb9-4be7-8fdb-da4ab353e738", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.240']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ede5eb63-94c9-4904-a099-859b1cf1c87b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.241']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be7332c2-a904-4479-9c66-ba810f4ccb29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.242']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8a1773e-2e75-4cf5-918c-cea0fcfc2b9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.243']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33870522-2569-4433-ba65-046244a26dcf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.245']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3db5f76d-8adc-4390-ba83-f9b3bda92451", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.246']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fbda9d62-557c-4f97-ae97-49940133a6fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.247']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecf91322-5153-4272-81e7-b5362157d5fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.248']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--720caba3-2151-442e-b5c5-3db612377c06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.249']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9978c6de-1257-48a6-a0e9-e7bbea3129f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.25']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--108e98f2-69cc-4ea9-b7a1-36e1ee9c7ba1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.250']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20c7a6f6-22ee-4582-9431-de8192adf6d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.251']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa804799-50db-4044-8039-771e4f038a99", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.252']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17adbd9e-afbf-4f46-b1a0-362f491f7c40", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.253']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f688c66-68e0-4711-9c60-2b05f57123e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.254']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--17fedaa4-2485-423b-8cdf-23837c40d4e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.255']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0733b997-3a2e-49eb-8dd0-e75d6c78e7ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.26']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c62b8bb-8d50-4cfe-9f75-89926e9b134b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.27']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dfbcb479-7285-4efa-829a-2edbcc9bb6a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.29']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--02c9b946-4f9b-4f5c-839f-89b9099e85c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.3']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cbb8f14e-7fca-4fec-b6a3-8c0aced050e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.30']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6519984e-f18f-4d64-b63c-a42c851e4ba5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.31']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ead6999-284d-45ca-bbca-3dc4eb560835", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.32']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54c6a630-cbbc-4dae-8808-901e993decbb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.33']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2fdf50fa-0e93-45ab-881e-f5d4d672f67b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.34']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89d102d0-0e86-45b7-98ee-5fc322b80fcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.35']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3567e637-8326-4ae2-9833-e1b921f5db3c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.36']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--05b4ea89-ab4f-4afa-b88b-ca02a4b5e7e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.37']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--854fc7c2-2bdd-4238-8284-f29f81e8c580", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.38']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bae75bc2-52be-4ced-aa1e-bf0222c77e87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.39']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--384fd846-da8a-4825-b41b-4b289387e58c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.4']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79eefdba-c9e2-46fc-b28c-f5acbced049c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.41']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03f8228f-df5b-477a-8aba-989cf1d5693e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.43']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94c69857-6ff8-41ff-8bd6-60478ba5a5eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.44']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b355cad-4a68-4920-9192-184214106f82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.45']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d25bef53-3c33-4cb9-b949-8f34e07eef87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.46']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46a94c47-0df7-4c86-a3ed-d58ca3149ad8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.47']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da292d12-41a6-4400-8def-e45029e8298b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.48']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43691631-d75d-4992-9386-d57a26fcb4bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.49']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e11f1f0-d799-4f6d-98a6-41a8639bedd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.5']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d488161d-ea84-4175-ae88-1647cb087fa6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.52']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f1a773d-7250-4c81-97a4-83ed359aa692", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.53']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79fd6e46-1e72-4305-aaf2-f95fd10854a5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.54']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c1561ba2-ede2-4629-8974-721b992b039d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.55']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d312c345-6e16-4729-a6fc-0b03dd2d07a4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.56']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2e75da52-57d9-48a1-a71f-631f183cdd91", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.57']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2efef715-0d8b-4792-b7e1-8bbec30b93b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.58']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b18bca4-1f90-41aa-b621-a717398d4a21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.59']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26742a1c-b599-475f-b8ab-daa2ef367604", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.6']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--41ec7c79-6639-4020-af3a-b8d701a54ef0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.60']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f6e60ca2-ce8a-49e9-9887-b640c5d26d16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.61']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13015a47-e751-443f-af79-6bef18710bc2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.62']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03046443-4726-4020-8211-61df0abfbc13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.63']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c8231b6-63f9-4ad1-8f22-c33e46a83e87", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.64']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d304a84-7750-4d7a-9d58-bbae759a8c42", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.67']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d6f9441-64c4-4413-9ccf-9f7c84f4ae04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.69']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--222c3193-ccd6-48c3-b362-372b0bc570e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.7']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55a8435f-b581-403f-bd68-3b75cb7f70d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.70']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--656f14a2-d297-42bc-9321-cbe975f6bccb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.71']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e198098-7049-4b5a-9025-7ad4fdf33e29", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.72']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--856c17d4-2ecc-4639-b0eb-23dca1cd198f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.73']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--566cad37-56c3-4359-b176-1ed89e45c4e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.74']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6b9286b-c229-4297-984b-2c3790dc09f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.75']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d8bd406-955f-4784-b1cd-5e2dc3681676", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.76']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e398740-0910-4b4f-8cd0-67d91460fa4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.77']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11e93708-368f-4fce-9aba-8f249f131947", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.78']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--578b66a8-208d-4294-84be-bc71a75439fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.79']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e908365f-146a-402f-9096-028fc51b74b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.8']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a4ed9f9-8d1d-4622-b75d-7c950648fcd2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.80']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e1f78117-4063-43b2-9b29-85a1b5609664", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.81']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c405e26-8247-480a-97f6-7170d7190cd5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.82']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfc63dbe-51fb-4018-8a4b-a1f2efb050d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.83']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b042117d-1cbc-4c0c-bd16-06c87a2d9360", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.84']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c56baaed-935e-465c-a0d7-7840442be73b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.85']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8441b5b-0d87-4df7-ba04-21a58d420260", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.86']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d4aacdde-4872-49bb-9167-7c9112e3b3a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.87']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5adbaefc-14bf-4102-8be6-c61fa01490af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.88']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c18ebc0b-ac10-4043-8275-50a1b2a1704a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.90']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bcedb74-8139-4898-af12-8cfbe2ed45a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.91']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b1bea98-40c6-49a0-8f16-15978075dcdd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.92']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fb90a6b8-f338-4e26-85b9-e5afc6bd5dc7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.93']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da0895af-351d-4ff7-aacf-090a1c2b63b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.94']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5bdcbf70-d15e-4911-b602-bd1774ee343e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.95']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c08a15c-d392-49ff-8aae-186aa28cd6d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.96']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f5c0a85-8fe6-4f79-ac72-7e8734ec7dbf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.6.97']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df62be99-5338-472c-85f1-a34bd0a80dae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.0']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--089b6a79-ad31-4c3d-bc14-c51f8db0f1d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.1']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0285fbe-0733-4566-9ce3-9ddf16367f95", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.10']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2de94279-bf2f-435f-863d-8d31fa462efa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.100']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54d955aa-8b76-43d0-830e-a853f0357216", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.102']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64df7011-bd92-45b0-b95b-38f0ca5e3e86", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.103']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ac5a7c5f-1e10-40ad-9a9d-ce194f5f7496", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.104']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ba986f3-bfdb-414b-bdbf-c4703a1e0e17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.105']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd4ae7c6-332d-4b7c-b6d8-09d1845a098b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.106']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce04d341-d2c4-4061-993a-954e989b7ac3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.108']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7fae8e25-5765-463c-b89f-618f234de7f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.109']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--27586265-3008-402b-948d-661f28711034", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.11']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee495f49-5ec0-4f97-b65a-628067e2cb04", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.110']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01d65efc-8409-4f49-afa1-565bfca54fb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.111']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7fc776a-d764-4827-a6c2-b6eec952d150", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.113']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54989137-c5f3-4970-a5ca-80bd429f2907", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.115']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8e66b69-ebc2-414f-8285-9c40e0614119", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.116']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--016cdee6-c882-417c-8ae2-2b1dc03615d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.117']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b15b6ca9-dd6e-4b7e-90b5-dfccd8af0b6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.118']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--441700eb-06e5-43f8-ae9a-017f4b5247d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.12']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3da26fac-fffc-4c4c-938c-e28372a2496e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.120']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--18166e0c-9f0f-410a-b1aa-c28d2980fdb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.125']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--199d7a8a-57f0-468a-8f8e-17505b849bf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.126']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7e52b4ba-3019-48f7-a465-a046a09a1a58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.127']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--252d1e4f-1534-4efd-b80a-c2ab74b20972", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.128']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e9ab3ccf-daee-49b1-be22-24b7b6f6b19b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.129']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d8bb4ad-893b-4a61-9ed7-e8c1d3223e3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.13']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c8a29155-950b-4226-9601-48321e840f64", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.130']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--86336847-491c-4100-b85a-052e8ea69bcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.131']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5551898-3625-4107-9513-16f71a7cca7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.132']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a6ef24d-f1d8-43a2-8887-ced0a8735560", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.133']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--889ad89a-3ade-4321-9133-5f8174a56413", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.135']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32674a97-c662-469d-a45c-2dd1eba4d8a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.136']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f7d9566-599b-443e-906a-6c5a81a57b25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.137']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1c724d98-1439-4417-bb22-035d500d3cdc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.138']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c290db8-efc1-4151-8404-066e18eed176", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.139']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2ca8fb3-5c6d-4d1f-94dc-f12a27273a5c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.14']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3077c2d0-4627-4787-99e1-72552f13ea9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.140']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c308944e-b896-43c8-aa4d-2682c72df710", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.141']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a6ba5c2f-9acd-40a6-b92a-02288e3e18fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.142']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c482891-763e-43e4-b7c4-5307e2a63cf2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.143']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8d148443-abef-4d2e-9366-9136f56b4452", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.145']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b19c3e6e-3cc0-414c-951f-f980ed419861", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.146']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d51552a-1769-4c2e-8304-5f355de075f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.147']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6111f435-aa98-48df-921d-cd7351dae8ef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.148']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4980427-783b-4b62-b1ae-7487c1de7ca7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.149']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc29e17a-f39a-4cc7-be5e-0cabf8f3cba9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.15']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d593c40c-0cad-4948-bd5e-ec6375eae54e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.150']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--591dfa09-02d7-4b36-af72-0fc7bf09a6d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.151']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa8cb189-0a16-4895-9e48-dbd5149ae412", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.152']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f46e442-6a39-40d2-b353-b78fa28b4c7a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.153']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--93ec599a-a506-45f0-b60c-025245a884ca", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.155']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8e421302-8f8c-4a06-be58-4049a778cd00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.156']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--698ff0fe-4503-4b22-a830-127a8fdd2b4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.157']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--89752205-03bc-4db9-a5a1-2e130c3e6279", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.158']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--db6af78c-7053-43b1-a3bc-f56278e75ced", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.159']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97f3e255-801c-4c75-b1ca-a3fc0a481b1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.16']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b53234d6-261f-404f-a903-feb933e9fcef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.160']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--588351bf-0c6f-4df3-930a-0cb53a817540", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.161']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1bf787d-8ebe-43a8-803e-f4b1d5b0d338", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.162']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce48776b-8b64-4403-aa7c-4659974881b3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.163']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2aa027aa-9b15-4fdb-b014-5a87d410a17f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.164']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1678fa94-05d0-49c6-a69b-9b0ae0121125", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.166']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36032aea-145e-4801-97a1-41b996d43ce5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.167']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c90af3d0-45d2-4f80-9277-1d0e628db474", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.168']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74c0ec56-8409-4978-92f3-a79df6374ddc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.169']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba729c70-c962-48b8-8b81-b27f5740d71e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.17']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7c5690e8-bf02-4eed-b1ac-833c2ea20bbd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.170']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fd1d7d4a-a421-44f5-b703-1acd8989db16", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.172']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--118d36e3-8f27-44d4-b209-776e3f365df2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.173']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54296da6-2ad6-4fee-ac8c-aa248f7b35c5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.174']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cae177c8-776c-465c-a54d-12bec3691641", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.175']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--907e82e5-c122-4908-a461-309ab7f0c2ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.176']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3cf095e-afc5-443f-a1ce-2815dd101a53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.178']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--760138c4-7927-4bc4-94a5-81316b21307f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.179']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bae80d9c-6e95-4602-b165-aec3da61f23b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.18']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b8f26c8-bd12-4dfb-8cac-b18077aa28ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.180']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a3949a9b-37aa-409f-95cb-9f05a2582a2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.182']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82d3efd9-d18f-489a-8bce-0488dcf2279c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.183']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3d3eceb-cacb-481c-aaa9-8c7546718e53", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.185']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ecb1f600-b967-47e3-b07e-f4b618ec2fae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.186']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--31a6cfbe-2039-4a11-b52a-9c6f3084d142", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.187']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df4417fd-8141-4cef-a4b0-b804ff309e06", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.188']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cac2830b-c48d-45a0-ab15-834b0b43a549", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.189']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b5f63cd-17dc-4d36-965f-eab77dc5db8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.19']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32927faa-d14c-42f9-8e99-42bf8ab6e8f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.190']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3fefa32a-63fc-434c-a97e-b6c5a4ce1450", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.191']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a5343291-3fda-4f39-9549-9b1fee7106db", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.192']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b189e125-1328-49e0-b95f-d8b2f63d74f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.193']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--388b3c05-84f6-4e66-b18c-9a802c1584c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.194']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8f5a7d09-3567-44c4-9ca0-fc8c13c3bc1f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.195']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c3882c0-11af-4513-ad63-e90dceb80366", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.196']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7cc1082d-eaab-4904-a932-6766cd4909d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.197']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4624a6a8-1c31-4830-ae75-a81fbe330c17", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.198']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0ead707-1933-4d38-ab38-68d7d8ab1858", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.199']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d07489c5-d18c-454e-a469-1806ea231937", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.2']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58deeb06-02d5-4750-a6ff-3fcd5191eb70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.200']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c5fac85-ebbe-4be2-a2cd-864c8c993c00", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.201']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6454d1d-503c-4534-9c73-483c910e980e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.202']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c81e10e3-9e89-45b9-8d56-cb7b6ce9f206", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.203']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea183055-0690-43f8-ba6a-08f803c848d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.204']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b650e91-7753-4188-95b8-ebd4fbd0d24f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.205']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb885dff-8da7-44b7-98b7-f8a2bc77b818", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.206']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--10cfdb43-84b7-484c-89ad-7dbcd3bad28b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.207']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79ad3b43-da78-4749-a044-540b6884fe0d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.208']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--87a3ffe8-3072-40fb-939e-3ce989fcadb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.209']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9e5c85b-5825-4453-b070-37a24f0aba7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.21']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dab4354d-aaf2-4099-a460-1d6a08c11e2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.210']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e038eead-4ab7-4c68-b4d2-80bd2c4bda10", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.211']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e85439ee-6864-4051-bc2f-9ace02bb0875", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.213']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--900ed7fa-cec3-4005-9835-af0dac3bbed6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.214']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dcca5a23-11e4-4fb6-a470-68fc05a3a043", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.215']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ffa1165b-a4e0-4a24-993f-674f1160ae66", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.216']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e035a13-d656-4c1f-ada1-2ec383a49ae3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.217']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ed392f4-c7b5-4444-8948-814888db82b8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.218']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--63e4efec-c413-4b32-9d67-8ca7c1b6a0ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.219']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--58de79ad-742f-43d9-b909-60cae88ec352", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.220']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71176f58-5982-4901-b8b5-1d477ba1bf84", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.221']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e118a71-11ba-4194-871a-7638c2433258", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.222']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--212ccef1-e2a1-4d0c-b767-5ed125eed289", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.223']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4da8d102-a1d4-4a35-9a32-803ec7a99923", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.224']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9af5f629-e586-4ff9-8611-4ac5e3ca6abf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.225']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a184a95a-0674-4aa6-ba81-2d92c78c9a31", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.226']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d6ec217-aea1-44a3-b3ea-968780ff1daa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.227']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f24a877d-9ca3-4a72-9945-1bc2ed69c369", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.23']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6ca8bb1-6899-440f-abb4-a1f34ff45bdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.230']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f3a56d0-b483-438d-8d82-abb726756d68", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.231']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d52a218-e72a-4b45-a835-741f979ffb8e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.232']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--82be3b6b-f28a-4853-955c-020cd59cc99a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.234']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e792337-1032-442a-863c-2dff313c56e9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.235']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--598371f5-9883-493a-8b6b-5de136f630a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.236']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c63b735a-4187-48b7-8400-f3e5eecaf233", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.237']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f29fb7bd-c442-402e-9730-caa7b1f5922c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.238']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b782731e-cc8d-48f8-9728-f3bfcba137f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.239']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--09f7eeb4-47ce-4624-b433-71e0ed109324", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.24']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--313d7c2b-d12a-4add-adc3-bb755e44a7c8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.241']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6f273b8-0a41-4f88-868d-8bb500abb935", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.242']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ca4b88e-9e2e-4a7f-adf9-c806192bdeef", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.243']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b63c7a7-805f-464c-bd80-18b0664ef092", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.244']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6cc2938-68a0-40db-bb56-f6db537fd613", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.245']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--60a8f71d-f195-4b7b-9387-ad7b5a161096", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.247']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a3dedf1-0b65-4341-9d2a-537eed79f52f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.248']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1594a97b-5f41-431a-90ac-9624e79c061b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.249']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c7be7bf-3c88-49f7-b081-bd18c4b9b0c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.25']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b171381-33a6-4a83-8d2c-8dec2e1f3706", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.250']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e5c4eb98-70dd-4883-b8de-f280e2ae197b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.251']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69db465a-190e-45b3-939d-a1849ad447f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.252']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df1407f1-3409-47cf-ad02-ce22a4c8fc45", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.253']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--20d71940-5d65-450e-8e2b-0ccecc33d2d4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.254']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8bc8377-e6bc-4ac1-8794-d4404f3df73c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.26']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8afb128-d35a-4cec-90a1-6c48c66a4a1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.27']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--19233e1e-1d9c-4797-9d3a-e3da9581c0a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.28']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13ef2363-7e65-4a19-a8de-a03b39198a9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.29']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8511aeef-b1bd-4a99-9bf7-5a41a04e4f19", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.3']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7da5c32f-69ad-4da9-8017-26f62218b16e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.30']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21ada4f0-6bd7-4ded-a5f4-eb3dd5c2eb28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.32']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--effa4b15-4d44-4c0e-8a4b-126684756393", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.34']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eb9bda5c-adb3-4225-8307-815c9bdd7ca4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.35']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67bdb5be-7e75-4c9c-a306-76119205faf4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.36']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dbc8e10-7385-4f7f-a99d-b43d0bcd699b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.37']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2bad1a39-01ee-448a-836f-0aa7ffd22996", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.38']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--91a23ece-e6ed-4101-ab98-d59c5dcfdb1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.39']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f4027a54-0b4d-4570-86b6-da69689a4448", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.4']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a53fcd8-0106-4a32-bea4-5fcbc013c4bb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.40']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d352b885-fdb3-4182-bd81-e19f36eab232", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.41']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c43e52e-3254-4bb3-a475-248e92ddb875", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.42']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2222cc3-218b-4e8a-afc0-fb5996df34aa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.43']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cce64323-9cc0-4577-ad2f-bb7d22987e82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.45']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b7f6cda-f421-4ad5-afa3-a279af3860a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.46']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c6e5fe36-8b38-4f10-acf2-a0fc655c84ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.47']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--47360267-aa34-487a-ad0b-00d952bd5757", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.48']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5e64e5ce-d9f9-45d0-91cc-94ddeebceb82", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.5']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80c31bc0-cfb9-42ee-ac27-23aab9ae1ccc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.51']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cfdd8b70-d4fb-46dc-9033-4fc0778614f9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.52']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2f2bd360-b955-400c-a237-3fd8e7c8b9c6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.53']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3d28d7a9-7a40-4f6e-8a4c-14d736aa8c93", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.54']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e7f75620-1075-43e7-965a-d58b792100f3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.55']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1f46fa4-0d4a-4763-9f54-d30fa6f8ad2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.56']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbb43e74-1e52-4791-9fee-28e9b7e48a78", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.57']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ea828f7f-847f-4d0b-a53c-fc57e36218bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.58']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e32187b8-7d2d-4452-81ce-3662168d560a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.59']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dd1fc82-1049-4a29-aa63-32d17fab44fb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.6']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f71fa58-3a7b-4793-8dfb-ddd2bf6cbe71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.60']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a92b10e5-b16e-44a5-89e9-8ff356a10050", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.61']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d983a17d-125b-483d-b422-001dfb9118a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.62']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0706b4de-315a-459c-89b3-65d9216a087a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.63']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b41e6066-d7ca-473f-b01d-6c28c84810e6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.64']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5776348a-5a2d-4a3a-bebd-19d3a3457aaa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.65']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--943d80c6-06cb-49a3-88ac-9334cc437302", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.66']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3376bb1d-a3ae-4ada-9eed-34d17a75674c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.67']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f26f2672-beca-4c2b-937d-902d4210ddc9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.68']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--59f97a86-c8a7-4b45-b7ad-f2273d2cb6dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.7']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--565b315e-f0d4-4f25-a6ef-1c054d55aefb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.70']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d08fee5-2b20-448c-861e-c7f19b377b69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.71']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4b2fcad-34bc-461a-a2a6-768260df2bfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.72']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e6d79b66-31de-4a52-a502-e74445f12d52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.73']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7ff7745-82c0-49f2-b496-2c768fd2d0bd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.74']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1818c4ad-e382-4d33-b9ac-45cb5d0925a8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.75']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ff8ce116-bc22-4931-a15d-efdc1f7ebc37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.76']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9724a4c1-71bb-4d5c-812d-17c34b143dd0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.77']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1a0c1ad-1855-4022-9f14-960b7090bf7f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.79']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--699a4e49-469d-4bd4-a15f-f420af0ae593", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.8']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eebe43b7-a0cd-42bb-b79c-51d4d1d741d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.80']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d41a0da-1098-44f4-ba07-eeb82c998b0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.81']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0496a2db-905d-41f6-a422-d03184bc629c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.82']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--431bb310-c732-4e5d-8a81-71306437fb52", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.83']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13c612cc-5cc1-4d15-b017-a7a6397a3b70", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.84']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcb39488-12dc-464e-8dba-eb25bd12c088", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.86']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ca4cd07-536e-4e2b-9aeb-d0e8d85ae2d2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.88']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af67f045-6690-4496-acbe-c8045afa1e92", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.89']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bc1693f-7fb9-48a5-aba5-9b13ce11bdf5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.9']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97186c8b-d5f8-4d60-9cf3-26689dc800a1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.90']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4caee7fc-1f32-4bd0-bc57-953880da2556", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.91']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dedc4696-1c64-4af7-9fbf-781a77d322cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.92']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--decccf8a-b607-4533-a9c4-68bd0e18c9e2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.93']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5806d195-7ebe-464b-85f9-ffdcacfd13d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.94']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bca2a526-3f25-4a5e-8db6-b4eb31b9f6c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.95']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cba09238-a9c3-4cb1-b48e-2067bb75300c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.96']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4687681e-6517-406c-ab30-a431e0a1132d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.97']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--71cb59e7-8598-40bb-be63-7a2557bb41cd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.236.7.98']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b2c5c1b5-5c37-4f3c-8021-18fcf6befc16", "name": "Malicious Host", "description": "Web exploits: wordpress-wlwmanifest-scan. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '91.239.157.217']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f9f2e2ca-e55b-4678-8517-fa95d113361b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.242.53.184']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8c3d36c-09ab-4193-8c90-c2f298d8e563", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.80.179.135']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3dc94a23-3594-40c6-88fc-4a0a71fde3b6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.40.176']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83c06f8b-c072-4709-94fb-0a9cf9b5f861", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.0']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a8a78b30-3d30-4e97-9ea8-bf7b1a9fad35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.1']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03c07fd5-df31-4315-a4be-f998c99f42b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.10']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b74573a2-fcfe-4dd3-b00d-1f3f2999b570", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.100']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--994572e2-1b71-4838-8e44-595922e79d4d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.101']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7f15f4c-2f3a-4182-b201-b731583b776e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.102']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aa603c80-3939-4f09-b6e8-4095c4363434", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.103']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--51480053-2934-45da-bba9-10d3a6ee9ec1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.104']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0fb412e7-e9c5-4f50-986d-de8d33db01de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.105']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4eec475-c6d6-470a-b485-d737322a7e02", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.106']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f046f0d4-b41f-4c4d-b604-cc9c7cda468f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.107']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f2a5122-9c35-4574-839a-72d99f908b8f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.108']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2509a010-e96b-4f0c-9053-9cf41a954423", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.109']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f801350e-ad66-4720-a2a9-15b89ff699a3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.11']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97eb85fa-cd4f-4af5-a7a7-10114cf3f9a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.110']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--117747d9-08ff-4e0e-838b-93d8f88b1ad7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.111']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c47770e-30ef-44c2-b145-33a3289aeeae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.112']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee583fd2-d5db-4dbb-a472-87fbeeaaac3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.113']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3df1df04-27ed-4528-aa6f-d18e16e904b5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.114']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--aef6d2e9-8091-40dc-8279-aaade4d6bf7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.115']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c1dcf7a-a66b-49ca-9f27-b7a28a6a830a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.116']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3a44893e-2664-4ddb-a9f2-cb0be5b06b35", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.117']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--79dc9bc8-f764-40e9-a521-0d3fcc0b2f0f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.118']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13901ae4-f3b6-4ed7-afb4-6da69978bd3f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.119']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bf861ad5-51ab-475f-aef2-604ba3b366f2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.12']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--581dbddf-9660-4cea-8769-937b20384034", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.120']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0396d409-c0ca-42ce-8205-5df86afb2bb2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.121']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9373fa59-422f-4c84-8f93-276385252d27", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.122']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67d3b851-67fd-49b6-aaab-3ba73b59af43", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.123']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ee17c2fd-4aa0-4fdd-b1f5-e31713f35588", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.124']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d308c302-6e6c-4c48-b9c5-b3a33992f448", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.125']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--00e03707-66c4-42a8-9a75-b80ac302056c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.126']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45a75cd8-78c5-471e-bca2-aca49fdf322d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.127']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--56224381-d444-4d47-970e-f724c70b0371", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.128']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--780a9a94-03d4-4bb1-9514-2917f0edc948", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.129']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f41669b-5a87-4c5f-a751-d9a6177e5def", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.13']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f809f293-c438-4d3a-b163-eb0e7e8ceebe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.130']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afe72eec-5262-467c-81c1-f543863eb4b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.131']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5094e152-dae3-4040-b593-5f90d326735f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.132']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f2f64342-5e40-49b1-b84e-0a8ac9ce1911", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.133']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--afdb6251-4ff7-4f11-8a87-c4aebf6024c2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.134']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--be9c6934-0513-4c2c-abd4-ccbd9c95fda7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.135']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--345d3140-fe91-4305-bc8b-59e07f6b0b5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.136']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08239558-9e81-4803-9d3b-61e413614fa3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.137']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--628b93b5-6e1a-4efc-9936-1e8408da8cb1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.138']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--81c3a082-174c-4f84-a223-c2af30185f9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.139']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4809558-5834-4e06-858c-65edb692f929", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.14']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ee14d2f-517f-41d9-ad54-9be22945a9be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.140']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba3dbb1c-e27b-469d-94f5-8141659d883c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.141']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--adac3ce7-8209-454b-85b6-f654a8bd0c2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.142']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--de63d512-22e5-4f32-9844-7fce22eb2c22", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.143']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3b8ba5fe-1ffc-4754-a5be-048a704d1cc6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.144']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--942fa13f-ec3d-4ee8-974c-6980042baba5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.145']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--563e2ca0-24cd-4efc-b3d5-b05bdb40afa5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.146']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5c4a9da0-9e20-423a-917f-27a061919efb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.147']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5873a76c-9f8c-4939-91eb-97a59fbcbe41", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.148']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2a4b5e7d-ad6b-4f00-956b-64446de39f2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.149']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8bbc63ce-4e3d-4da1-a9de-bbf32d80ca13", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.15']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--29b1826f-328c-4f6f-99e8-9780a66d76dc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.150']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23bd6b0f-4c0d-4c39-b84a-2990f60cadd9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.151']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--099d7af5-f867-4a4f-b547-da3c52e8d6ff", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.152']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b9625c3-e5b2-41a6-b040-24ffce9d5162", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.153']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9cc2c475-eac9-4fc3-be3c-a4f324a170a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.154']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b0784165-d882-4a22-954a-810bfb564aa0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.155']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f41b21eb-6372-4533-aa3d-02c6eb7cf9e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.156']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb664f4d-8667-46c2-a875-2965167bb48f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.157']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dbb6867b-af02-4536-bb58-d71bcd590b72", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.158']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65cadf7e-66dc-4698-ad09-6c6a798b04f6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.159']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f136a924-e01d-4fb5-ac80-ff92e4c3e82a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.16']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--986f8dcf-9091-4a42-92cb-a94ce1714cc0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.160']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cce774e0-b71c-43b4-b464-8b0df1cc92ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.161']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--33d2f577-9ebe-4a47-96c2-330a74d6eb6f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.162']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c4e1272a-829f-4f1b-81b2-f8fd4e6ed8be", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.163']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9ad61f0c-eb16-4483-bfba-c6e6a2ee5a97", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.164']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd5e02cb-5a21-4a37-807a-29357c50f3d7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.165']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--21d580c0-6e78-41d9-8f18-e9fecab02042", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.166']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d3d9d80-8839-4604-a1fd-d0161a1bcaaf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.167']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6eeadc62-3ec1-48cd-94b9-5ca0e3ffa20b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.168']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36352387-1a43-4a84-9219-445b1ffa6b9f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.169']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eabbb03a-8008-453c-a2f0-e38eebb83e58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.17']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--627fb953-dddb-4efd-9689-5ff2bba57a3d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.170']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c3d6d650-33f0-4d16-bc49-7ef376f513b7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.171']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba824f93-9282-4799-82d4-9f435817f3fe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.172']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b8edcffa-a9ea-4a00-96bc-42a2b060b795", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.173']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f3e9622d-3ae2-409c-ab67-276d93020c6a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.174']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e58aae73-461a-4b54-8d65-255b1cc66409", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.175']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b4ed479f-4a79-4709-ac00-b60c5773cbcd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.176']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5eb2241b-3cb0-4e52-a2c8-d68a56954bd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.177']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3ccef1bb-81e1-4a18-8f70-a9dde048b7cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.178']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1d789fa-da31-4f26-ab9a-405762b7a57b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.179']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b8a29c8-0fcd-4cc3-be11-dae0b5ea7526", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.18']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--675e2095-f967-4a04-9b66-836787cb446d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.180']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba7ec153-4daf-4e7d-8eae-9dd3f3efc7f0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.181']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f85d819f-5bfe-45e2-a694-7741351fd813", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.182']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--abd2c532-8ea9-4efb-b7ed-2b0656bc687f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.183']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--335cdf09-9bcd-4fa8-9a9c-73ca6e98e5eb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.184']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98a60a5b-425d-4c6e-a47b-3caea74ed675", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.185']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a169ee35-d68c-43e4-8ee3-a7e2466a4f2e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.186']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a92e709f-69c8-4bfe-bebc-c9fb92172040", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.187']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af87418a-9011-41c9-82c4-42e713e9738c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.188']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--180a1f77-bbaa-4129-8d0c-c3b6e973ee6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.189']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--30c94f9c-65f1-4d68-89ea-07aa4cd0b337", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.19']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bd5ce4a2-90c9-4bc4-890d-f381c9d4dfb3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.190']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e372033e-9f24-4c41-a139-292ae6759978", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.191']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8b6b4f4a-3d74-44f3-a747-972fec44e47f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.192']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5269c910-5fed-4be2-a362-e05229eb4707", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.193']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9e528643-a14d-4904-b7cf-7a958186e137", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.194']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ca5c907-897d-4faf-900a-de33cf24a26c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.195']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fb6e8cf-b6b1-4b5e-b3b7-64bd6c6dcc8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.196']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d8164f6d-4823-4e85-a151-0318bec8a59d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.197']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2c6400c0-cef4-428c-a751-c9e9115b8cdb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.198']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3895154d-e133-4c3c-830e-08ac4a29c145", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.199']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45421546-4d95-40f1-a069-934e6946d4fd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.2']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2435123f-1632-4424-a153-6c6a991e370f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.20']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fda10c28-a870-4865-b015-5ac7d29b5a33", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.200']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e436a5f8-35d0-41c7-ad9d-bb380278d3e5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.201']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--14877e7c-17a4-4dd1-99ce-920e929017de", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.202']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--963640d2-f7af-4453-a808-18bad1c3575c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.203']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b3071fc0-3bb3-489a-bc09-bb4bce633cbe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.204']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da856c8f-8555-469b-aed8-9237c547606f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.205']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e47a9e2c-1ac9-41b0-8645-60010e012b58", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.206']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0bedff21-9126-4c09-b3f4-d07642d4d14f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.207']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9250b948-7897-4a44-ad73-71fc983be2f5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.208']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--23a461ac-d991-464a-8737-4ab6c71a3fc8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.209']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--454c00b8-6c12-46ac-9cc8-e9f9ba13a2bc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.21']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fcac75ad-2a35-4f01-a080-b1469fdccec4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.210']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b6ba8d79-c1d8-4ac2-9c09-13305192522c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.211']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--636f141c-de50-4df6-a38f-86e58f54e1df", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.212']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--411cd95e-9883-458d-b1a1-8067c809ba0e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.213']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--37fef060-74d3-46a7-b4c0-6eab4ed3149d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.214']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--45486876-7b25-4de2-b8c5-3079276c6f48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.215']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--08ca5be7-381c-48d6-ab9e-670b7511a8ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.216']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52261166-7709-4a91-86d8-53bff6072f18", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.217']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1027ded-b60b-4079-8bc7-d183e7ed1855", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.218']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6fa6ef84-e7f6-4dff-a3e0-4b6ebd8b6d28", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.219']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--69089259-24c8-4b55-b5dc-3d3d947b8527", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.22']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5d0ca540-634c-4eb5-a666-cce4e435248a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.220']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9c77f995-825d-4f55-ae4e-1d402349c648", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.221']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d72c0f67-af8d-4551-9a41-0e65c335f079", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.222']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a1f4211e-ac44-48dd-b86b-4140b9619d46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.223']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b1d8d4c-cb7e-4e86-9c64-b204d7361aa7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.224']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67aadfd0-e9a4-4854-ad32-d33cf7440575", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.225']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55a51966-685b-48b9-ab13-3f9edbe2dbcc", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.226']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2313dadb-bb17-474b-9e17-c627e950ff9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.227']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d3fa547e-e6b7-4f5a-acc8-ebfd3639b9a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.228']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80d9c8e6-6c74-462b-92fc-105d3069f9a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.229']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d721d49-810c-4fc6-9b59-43d8d8346c25", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.23']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d28bebfc-0d82-4bd4-b6cd-a1349f742bdf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.230']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--528c5f94-c927-42e0-bfef-fc0c979d4029", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.231']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9bff787-24e1-4ad5-8ce6-5174b0e55c9e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.232']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--673712af-3b84-487d-ac22-8fe97e23ad4f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.233']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--64145137-ea2d-4a3e-bc0f-9597bb3316d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.234']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--28762de9-7c22-451e-8480-b64b038ba3f7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.235']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0442208b-df86-4255-87af-87a6fb6580af", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.236']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b9bffc19-d6f7-401c-bc6d-9778540991b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.237']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6d6c9c3a-cffe-4d3c-a7a7-1159cceaeec0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.238']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74cd46ec-e535-4523-862f-e0ab32267ffe", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.239']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2831823-91e8-4cec-9670-bc9c056e6e09", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.24']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4d70fd62-17ad-4361-b598-e7fc750b5ee5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.240']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c597a11a-05d3-4c5a-a4ac-8dccceb683f1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.241']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b10d563-bb52-43a1-8de7-428d60c4c84f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.242']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--57f36b9d-b84c-4123-a2ca-ba9b27f3804b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.243']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--695be69b-6e54-4194-a405-dfd7b1e59cb7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.244']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9b17a84e-3072-4a19-93ef-967931893548", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.245']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f0cd0ea4-708e-4f66-a0f2-bf769e2dc38e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.246']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5b83a51a-a9f7-4aea-87bb-5532ddfa5651", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.247']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--eec8a495-d826-4fa2-96db-9db6cd61f496", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.248']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5ca119ac-c49e-4ccb-8e7f-fdb07c93b7b0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.249']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7372362-64c4-4f8c-a647-2864156b4d8d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.25']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--35b21648-f65b-426e-ba07-d1631d4406ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.250']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dbc99bc-4233-4e2c-8d31-207f59fd29ba", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.251']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d5459009-7a69-4feb-abf0-c6029bcabc85", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.252']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--26a597cc-c7f6-4313-9b97-4635f21349e0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.253']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--461e8277-3f34-4c04-b04d-5883a7f8b030", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.254']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--84f2821f-134a-4985-8d49-8bd320df40b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.255']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e3443d79-2694-44fd-862e-445ac434af2b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.26']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--78e5e5f3-ee4d-41b3-b083-463bb71a7b21", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.27']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--148a2033-0cbc-4099-a04e-b0f807c2291c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.28']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b17c03b-4561-4709-b1f8-80ce79939d1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.29']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e4b1b727-e277-4ce9-9f2d-bcadf6db5edf", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.3']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--345782ce-9b63-410d-9f34-46e6dbf8f108", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.30']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c55e716e-1968-4e55-8caf-c5d04808ce6c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.31']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e997d757-b55e-43e2-a85b-c4b0a9bf60b4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.32']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--40f55e2b-a4f5-4774-a086-ae81169ed9cb", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.33']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b1f9ccda-a8ca-4bbd-955f-fcb2885da5d3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.34']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--53402eb8-3584-4c6f-8b7c-88219ff9a194", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.35']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0e240052-60a0-4eae-808d-90ab98128778", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.36']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3acbdeef-ea9b-423a-b72d-b5b2612d6e9a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.37']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--df976191-8989-4209-84f8-914f9cda9427", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.38']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--49902793-66c7-4bf2-80de-81025e73591a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.39']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--97736b99-281a-4f91-aa21-6f36c6bc3cd8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.4']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7ccf1b66-6285-4f49-8ea4-af7a9ba3766c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.40']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32cbfd54-4093-4869-81a0-5a1c9b97cb9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.41']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b22454ac-e510-48c5-9d88-32bf22398762", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.42']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a0e5f832-fa39-465e-809c-38d3dd0feed4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.43']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--699af659-d703-4918-bbb3-04a8fdabd37e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.44']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ba26baeb-1e38-433e-bd85-125f485a8b37", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.45']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2631927c-18ce-4ac3-93e5-dd6b05e4e14c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.46']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ab7c56c5-6cb3-4459-9ce9-e4206228b2a2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.47']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36d486cc-9ef9-4b7c-be10-ab243be445ac", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.48']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9f73a347-4473-4dbc-89df-c52edda5b161", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.49']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b7a7fe58-b169-4dea-9989-6ec3841904ee", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.5']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5470cab6-0df8-4e05-a6c9-90e357e11e2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.50']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8da4d112-a549-49ff-bde5-e9cb4e5480d8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.51']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed62de42-edd8-44b8-aa0f-16c7f8aed60a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.52']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ff91fed-310f-44bb-b2e1-e9dcb36b6625", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.53']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4de7e751-be55-47ca-a2c6-dc5825dd43c9", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.54']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f7c48728-3087-4c63-b470-b7952ff7a865", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.55']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8c6e3cc8-6a23-45f5-8bc5-122d79e7551d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.56']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--03807380-f154-4d74-869c-9bc89e6bdb7e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.57']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ac7234e-445d-409a-b642-2f5bde3e6e14", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.58']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1a1b84ce-7685-4884-8903-5c0b9261a1a7", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.59']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cad37e03-2836-4630-8d4b-e5baabece918", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.6']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--791d83ed-6cba-4b60-aa4c-e7e13cc7e3ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.60']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--da0a5bd0-60b6-48e7-8157-1fea2c412126", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.61']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--485f0373-350a-4195-9520-ef1e2e4d4550", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.62']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1b422c9b-c2c3-4516-a22b-558a0b9e4dea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.63']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4a15c1a1-26d1-4716-811c-1422f323b260", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.64']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bee85c62-cd60-4a78-a27a-4699d14e5b81", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.65']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fee30343-49b5-49f7-9d70-9747c5eea1d5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.66']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c7f664a9-af05-428e-8a50-cea4c66b6c8a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.67']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--659d7540-b22b-4484-9b59-d20db95ff67e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.68']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5dff507a-283c-48bf-88a5-45d15cdabe4b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.69']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4f9b7d9a-f1e9-4921-b180-0d199d9c80e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.7']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4473a57d-dea6-4f84-a1a3-58a9cf4f388b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.70']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--557422e8-ee20-469c-b9cf-ce826c5bed71", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.71']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--01a1eca8-44d7-4750-b7d2-91164273a130", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.72']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7885e805-98a3-4523-aaaa-ae846cf1547f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.73']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3bec0b56-f480-4a2f-ac62-d9b5bf20cab6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.74']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f41256f1-5cce-4f95-9c2a-1f872858100e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.75']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ae512228-a1e7-48e8-8a7f-6b9bbf9d0e1d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.76']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ed9a2e84-0230-4c99-a49f-0b83c76afb2c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.77']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9e55854-b5c1-4e50-a25f-2b6fa298f34b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.78']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0ad3519e-0536-43f5-b47b-dd386d6f72c3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.79']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3984766b-fa03-4fa9-9634-81d46e3064a0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.8']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--72ad7a2a-a1c1-496f-934a-282535b6ab2d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.80']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--611d6f4c-9786-460d-b242-afbf494d9935", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.81']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2232313a-f499-4625-b060-3e99994c3412", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.82']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c369fa27-b02b-4e84-b2b6-c032a2486fae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.83']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83bfee35-3e83-42e9-a86c-90f00ef6b12c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.84']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--726c3255-6c58-436b-b40f-3bf93272e021", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.85']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--bc73db81-f409-4098-8a35-ed93c32207e1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.86']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f1ee0799-03f5-4ec8-82f4-10b3526b218f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.87']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--9251c335-6636-4752-94ce-da450eaadcb0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.88']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--cb3a0433-06fe-4b5f-970e-442474a07487", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.89']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--98be0cfd-bec0-4386-ab35-0939b19371c0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.9']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fe05e8c3-4194-44f5-a1b5-4c388e3705ae", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.90']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4f81d1e-f970-4d2c-8fa8-f4d3338d50a6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.91']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d1ef1c2e-e57c-4fd5-a804-f86b37f9ea6d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.92']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ec0ef813-b5d1-4906-b351-e3a7f7afe942", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.93']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0b655573-a656-4bb7-b319-559dcaf210d6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.94']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--54c5eba6-5ca2-42cc-9c68-6a43c4bf5bfd", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.95']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1dd77a0c-ba11-4f34-9816-eb2515b5b4b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.96']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--e562eb90-774f-41e7-b9f0-962321ee8f3a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.97']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2663b60f-5a5a-4336-9831-1972c2c8f1d1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.98']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--172bf9e3-dd78-464f-ac21-2878f39f7c44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.42.99']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--52d94610-1f56-4e04-aea9-0992227cd634", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.47.116']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d43edf1e-706d-4075-83da-bb625416b09a", "name": "Malicious Host", "description": "Web exploits: aws-credentials. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.47.125']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--30640e2c-ff06-453a-87c7-4226717b048c", "relationship_type": "indicates", "source_ref": "indicator--d43edf1e-706d-4075-83da-bb625416b09a", "target_ref": "attack-pattern--95634810-4d5c-4cb2-8998-8afc1f8d05a9", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--94e46f98-02ca-4bee-a26e-921e423fd3e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.47.252']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1ac63573-5b6c-4282-82f3-77cc17bfb8ec", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '91.92.47.58']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8dd2db07-4486-44c5-9e42-cf7ebba81889", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.14']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--680691bd-1845-410b-8f5f-c3c817204879", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.57']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--611f2c4a-aa97-4926-ae0e-eebd150b7722", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.71']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ad77c6f6-eda1-400c-9127-e767d87ca24b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.39.74']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7512a2e8-864e-44ac-a598-0d8b8388c409", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.57.209']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--68671ecf-a88b-4115-9313-7e117170b137", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.118.58.235']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--132116ab-3b05-4e40-b8b2-b186d5ae3082", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.205.176.4']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4ae3eb09-43ba-4b67-99c1-ecd9c5364f48", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.223.84.84']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7456d3d6-5feb-4b8e-8933-c026b68ce345", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.244.229.7']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7f1d99b3-a29f-428c-adb8-c9cc26703291", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.46.110.71']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f562ce7d-03bd-44a9-b9c6-77906a0c9431", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '92.49.107.173']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--088fdc09-fa32-47b1-a5bd-0d521366efc5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.113.10.244']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3eb6dad3-8e3b-42a1-bed2-5f1c875923f0", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.119.10.58']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--11066aab-ef1c-41d7-b9d2-4a7342bcf925", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.123.109.214']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c95662e6-5a83-4004-9275-14f16c8fe701", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.152.221.37']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2ae900f1-17b9-4ec1-b587-279f7a9fece8", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.152.221.67']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3c815178-255c-47d9-ae30-aeaf74c01a69", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.152.224.9']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--65c1620f-b930-443b-898a-5e56b598c1e3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.174.93.12']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--13e765ad-aa2e-4000-b489-4d1cdb7833e4", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.174.95.106']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--fa3e53a9-f04a-4791-90fb-1b7b286e800c", "name": "Malicious Host", "description": "Observed: PORTSCAN, REDIS activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.177.64.139']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:redis"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d57a7e16-9b00-4b0e-b9c3-de65dd2f138f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '93.190.58.102']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c9be029d-c8a8-414c-816f-ace48459aba6", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.102.49.125']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a77407dd-61e1-4271-9e14-b8d4aa30a182", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.124.166.193']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0eb5f968-addf-414e-8f85-7b5442e2cd47", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.138.148.20']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a9f2b5b9-88e6-4fc2-9fe5-de7a77ebe594", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.104']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7bdc3b98-8e71-47e6-921f-0b60674a073f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.126']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6c31251c-3ba1-4957-97aa-757ed532b35d", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.129']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--55d38161-53be-4c34-897b-7cda10536d46", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.140']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4c242b47-2340-4dfe-980f-a8d5065ebc66", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.158']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--80b2f115-31d8-4a15-b9bc-22571b66df30", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.163']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d7a7450b-4dc0-431c-94d4-7ae82de23ed5", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.196']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7d062a1b-ce06-4a40-8eca-a00f0d426395", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.203']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7eb54bf3-e67e-4477-ae76-ea778a4f954b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.223']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6b5fdfff-507c-4869-ba44-8e8a65e5e45a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.245']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0a781bb9-eacd-4aab-aca4-a23ab15a4a44", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.250']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4acff7c3-d581-4bdb-873a-ba081af2347b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.254']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1da377b8-4137-4d4c-aa23-a2a4156feb5b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.36']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--74544025-3499-4ead-9e5a-8e75644eec9b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.43']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--70235502-4f20-461f-84f9-ba34b9e03c5d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.69']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--67a0fb61-c150-4a9a-a395-8ddf49030ea3", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.154.43.95']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--ce487854-3b72-42bf-97b0-e4d1f32980ea", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.134']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--314f0cc9-7357-47bf-b61c-727153d5ef6b", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.231.206.6']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--1d2b9697-7fd8-4bce-8861-5f43f6090af3", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.241.10.224']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--46dad616-c3d3-4ab0-b856-6fc1433bd49b", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.243.13.157']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--77748c3d-21a1-4081-be3d-b97b738305d6", "name": "Malicious Host", "description": "Web exploits: aws-credentials. CVEs: CVE-2002-1149. Sensors: revproxy", "indicator_types": ["anomalous-activity", "malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.106.175']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}, {"kill_chain_name": "mitre-attack", "phase_name": "credential-access"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}, {"source_name": "NVD", "url": "https://nvd.nist.gov/vuln/detail/CVE-2002-1149", "external_id": "CVE-2002-1149"}], "labels": ["sensor:revproxy"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--084f1951-ac8b-4ec3-8fd5-7e25fb82c717", "relationship_type": "indicates", "source_ref": "indicator--77748c3d-21a1-4081-be3d-b97b738305d6", "target_ref": "attack-pattern--95634810-4d5c-4cb2-8998-8afc1f8d05a9", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "relationship", "spec_version": "2.1", "id": "relationship--f0bdbd48-16bd-4e42-8094-b158f03ae311", "relationship_type": "indicates", "source_ref": "indicator--77748c3d-21a1-4081-be3d-b97b738305d6", "target_ref": "vulnerability--9f6b4a40-b312-4d6c-8962-53e248873558", "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--dffa3097-0463-4e98-bc85-b43d71b818d0", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.106.253']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--5f44db34-2be3-422c-920e-fc2957bc3d1e", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.106.53']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--0f13dede-a3b8-41da-a525-4f8ff792a6b1", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '94.26.106.74']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--4e35913c-3712-492b-b886-ad035a5b1db1", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.108.213.137']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2225a0e5-6170-4f18-a753-957c0b2554ad", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.108.213.169']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--36255bd7-bf01-4ecb-895e-28cf78aeee33", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.108.213.181']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3aa3ab90-c25e-40d4-a136-a2d03d0fe259", "name": "Malicious Host", "description": "Observed: WEB activity. Sensors: cfglobal", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.12.119.235']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:cfglobal", "protocol:web"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--d21c5c0a-4f0c-42ea-a29f-5ee37519566d", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.152.48.42']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--6f4bae02-5062-4f39-9e36-d631cc45ed3d", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.167.183.44']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3f71e7f8-2af8-4682-89bc-dfc6c6c6cdad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.173.161.147']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--32079251-3dbb-4c5f-8e10-854e4252a10f", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.174.109.196']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7b8a0896-7c32-454d-a276-36573952288c", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.214.53.157']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--83db0286-0e6b-46a4-b277-936de22803ad", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.214.55.77']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--7a83bad8-9aa9-4649-9094-9af011122587", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.27.143.8']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--8ed046f1-23f7-4181-a4f7-00cf1b58f258", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.27.68.223']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--af56be01-cdfe-4aa7-a813-5a4a1f12f9f1", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.46.142.77']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2980c32d-f47d-4d16-9d90-12b0d07dd173", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.53.244.3']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--2d8f9079-0c3d-4424-bbc8-e8fb50f373c8", "name": "Malicious Host", "description": "Observed: TELNET activity. Sensors: vultrmelbournetest", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.78.44.26']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrmelbournetest", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--c2ae0e0a-5ed2-4d3e-92c3-9b7624071eca", "name": "Malicious Host", "description": "Observed: PORTSCAN, SSH, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '95.85.245.227']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:ssh", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f56835eb-e8db-4eb3-a089-797b02a997fa", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.133.213']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--b19b32e3-dca8-41d5-8653-82918b2e893a", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '97.107.141.150']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--767a9ffc-49fe-43ab-94a9-9c05d7bbe115", "name": "Malicious Host", "description": "Observed: PORTSCAN, TELNET activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.66.233.228']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan", "protocol:telnet"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--a4ae5c87-dbd1-483c-8f63-5cff542920ab", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.70.26.52']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--f904d5a0-fa7f-44fe-aca2-f69513d74d2f", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.81.91.7']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--43dc4e63-7ee0-4c4b-ab12-dec1b14ae7b2", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '98.93.250.0']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "indicator", "spec_version": "2.1", "id": "indicator--3e4abe2b-c83e-41ed-a5dc-f585362ea14d", "name": "Malicious Host", "description": "Observed: PORTSCAN activity. Sensors: vultrtokyo", "indicator_types": ["malicious-activity"], "pattern": "[ipv4-addr:value = '99.8.60.186']", "pattern_type": "stix", "valid_from": "2026-09-09T00:00:00.000Z", "valid_until": "2026-10-09T23:59:59.000Z", "kill_chain_phases": [{"kill_chain_name": "lockheed-martin-cyber-kill-chain", "phase_name": "exploitation"}], "external_references": [{"source_name": "jamesbrine.com.au Threat Intelligence", "description": "Daily threat feed", "url": "https://jamesbrine.com.au/2026-09-09-stix2-json-feed/"}], "labels": ["sensor:vultrtokyo", "protocol:portscan"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e6e1fa4-9af6-4b84-a208-180ea95ee122", "sighting_of_ref": "indicator--bbe9497c-95e3-4741-a67f-edb0bdeec1cb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58faac3d-1cf1-4401-9216-0961e04e4b5b", "sighting_of_ref": "indicator--245c9df0-33e8-46f3-a627-ff0572ce1309", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd7820f5-3c4b-48c7-9741-94dbbde2fb72", "sighting_of_ref": "indicator--d70b5259-3e64-4b53-81a9-9ab0970b52d2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1606f20a-d8a0-4518-8f38-0b3da4067765", "sighting_of_ref": "indicator--6542d40b-ea50-4ce1-8a07-0784b594f812", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eeff180-118b-47fc-a494-25885ca533b7", "sighting_of_ref": "indicator--e22cdab8-f0a9-4589-a859-5a2dd8e11424", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc68f163-46ec-4715-8025-d1da8dba773a", "sighting_of_ref": "indicator--fa8194e2-0802-46a3-a1c4-adbe43c222f0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5ab21eb-b79b-4938-8b97-18a5dc2bdbc8", "sighting_of_ref": "indicator--e92f782e-d230-4716-baae-65dbb4bdd2e6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6158bb74-0245-4035-89ca-fb7e2a308ec4", "sighting_of_ref": "indicator--367c443a-b177-4f50-92b1-035ad1e0d662", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7164709-586c-403a-aafc-e0ca4934e089", "sighting_of_ref": "indicator--0a18cfdc-c08e-4d9a-89cf-b0636efe6fbc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7de59c5-5581-4b3c-a831-d74306c9221b", "sighting_of_ref": "indicator--23698a96-8e68-4b6b-9b3a-73533dd8a0ae", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a8ba4fd-b98a-4817-bdf1-197ab4ef655c", "sighting_of_ref": "indicator--b0638914-087a-4aaa-9aa7-90a14592d726", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d69b243-2fab-4ec3-be69-cda9962164bc", "sighting_of_ref": "indicator--b7f94751-f249-42d4-aaed-fe8ea19b3e7e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9808cca5-039f-4286-a247-701b078c1b9d", "sighting_of_ref": "indicator--1acdedaf-d295-46f6-bbaa-9e844e802e35", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--239588aa-11ca-4b62-b5da-d9b74064258b", "sighting_of_ref": "indicator--c336336f-2cbe-4fa9-a7d1-f873ea380644", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaf897a6-63db-4e85-bac0-7c41e02bde50", "sighting_of_ref": "indicator--e0c03b32-3a33-4903-b8e6-f0266040453c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9d06512-8717-4cf7-b2ce-a8f6480c0437", "sighting_of_ref": "indicator--4d7ac90c-36f1-42e6-982b-b7a61c1cfef2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbbb7dc5-56c7-4b99-bac1-178e63f612af", "sighting_of_ref": "indicator--b9d4b8c1-4c62-41dc-b466-8f0de21a5165", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5bf9203-3d3d-4721-8cd8-ce972d7b5231", "sighting_of_ref": "indicator--d1d98a01-0543-466c-9b0f-856e3bb6ff55", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c826bfc0-66e2-4248-b235-4262e2df34a3", "sighting_of_ref": "indicator--064261ea-20e0-4bd1-83c7-ac9bd76a597b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e67692d-05d2-4382-9b4d-0b07663fe6a7", "sighting_of_ref": "indicator--bbd00299-8ace-4f40-808a-c0fd00849ee8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bf54a99-406f-4d5d-b25d-8cbb9c69bfaa", "sighting_of_ref": "indicator--9d0b78a5-d0bb-4d3c-bd07-cc25b24582fb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--950191af-9b19-407a-a840-141acfbb085f", "sighting_of_ref": "indicator--f0db6f91-729c-4ac7-826e-c5bd332a83da", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd1556f2-052b-4985-86cc-ed7d88215fad", "sighting_of_ref": "indicator--53303a5b-46e1-4e68-b457-00599e5590e9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59368c7b-bd6d-4975-bdd3-e0c194046ccb", "sighting_of_ref": "indicator--51b36fa9-d895-4276-a902-f0c91bd8f572", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98c2a60b-202d-4e08-8b4e-1c8501f63670", "sighting_of_ref": "indicator--3d1c240a-0e70-4819-af17-d8f09a8bf9bf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0891777-3120-4d6c-8336-d617958061b7", "sighting_of_ref": "indicator--d60062d6-5696-43b9-ab2d-1d40b2f73fa7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be34154f-53c4-4100-a446-34b58174920c", "sighting_of_ref": "indicator--1c4c2c56-0252-4c9f-957e-2a69946150cd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de0fde61-941b-4217-85db-0fd91a0a6bb2", "sighting_of_ref": "indicator--afd1479f-04a8-4ce0-82e1-f361edcbb801", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ad25019-11fb-489a-b2e4-2fcc6a9217c2", "sighting_of_ref": "indicator--5475360a-13e3-4d90-b091-8600c654208a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--664ff7d1-93b6-4148-93da-944c1bfbf30c", "sighting_of_ref": "indicator--5cb4c212-7d82-4942-88af-ae81691026ff", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2699864-0afa-4b5d-b19f-927a2993d456", "sighting_of_ref": "indicator--9e4b5b14-d934-41fd-ba54-1c46de8612eb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--750cbd77-f9f3-4bf6-916c-c3a80d8ba4c5", "sighting_of_ref": "indicator--b3307811-8111-4e63-a00c-0397defcf661", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79a2db6f-6971-44c8-9d09-b746285999fb", "sighting_of_ref": "indicator--be1eece2-496d-476e-9113-af070ce86d8a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75e796ab-c96c-4a67-b7a0-46bb5d92d74a", "sighting_of_ref": "indicator--3dd55466-8fc9-412f-9300-2bc8988736aa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85e9e1a8-0733-4f10-a4a5-3386471e139a", "sighting_of_ref": "indicator--7bd15955-25a6-458e-8bd0-691ddcad31ea", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9992df8-b6a0-4a46-ab1f-45ed4b512d28", "sighting_of_ref": "indicator--df05d8b3-0de6-4aa0-97ed-c2d60d7a2669", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb2de234-1ddd-438a-993e-9676b2671752", "sighting_of_ref": "indicator--c0cf765c-113b-4719-b919-cf1c23b254dd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b19a3d12-99a6-4652-9326-df68fb49649f", "sighting_of_ref": "indicator--dbb80d28-661b-4699-86aa-3650f38f4b1c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b183649-0ef4-48a9-8d80-1549332313b0", "sighting_of_ref": "indicator--8819b3be-0722-47bf-b12d-8564066ef606", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee5df891-d4a6-4b1a-bf82-96d70105731a", "sighting_of_ref": "indicator--5df7fd68-d119-4137-8b80-5e250fb8d627", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7af01e9-02c3-4b4d-ab63-36193d14aadc", "sighting_of_ref": "indicator--578b2e58-0a71-422a-8dba-4949f8a2e919", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40c05ad6-1753-43e1-be31-a96452284711", "sighting_of_ref": "indicator--20659574-7437-48e6-815f-928f72540e7b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af67b583-1998-413c-abc5-f5709ba7480a", "sighting_of_ref": "indicator--baf6ad07-c38e-425b-bd23-6f099f9dfbb9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--801840d2-7f70-42b5-90cd-76fd0739258c", "sighting_of_ref": "indicator--21373121-0f4b-41da-9adb-2c72285ed906", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75312bf7-6c5b-4c62-b1a4-7cdd622a711e", "sighting_of_ref": "indicator--5a043c7a-8eed-42d6-808a-a179ff3019e5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db797a52-e3d3-4bd8-8e5d-f967d722bc52", "sighting_of_ref": "indicator--41fdf0cb-97d2-4264-a9b0-a159a4428855", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d823c8c-4705-4053-9160-de9a7e12eb4f", "sighting_of_ref": "indicator--f149663a-7030-4605-a392-248a7c28f697", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e03040c9-4401-464a-b971-df24d6c05942", "sighting_of_ref": "indicator--bf561b9f-4a01-4c37-8c02-1c05374b62d0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--385b7265-5d5d-4170-9d1e-2a881aabdac8", "sighting_of_ref": "indicator--de9f5cec-6659-4373-81f0-843046f182a8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--880c4be1-58e5-499e-8a2d-2f4bfbbfafcb", "sighting_of_ref": "indicator--ada6e545-78f4-4145-9ee7-95fed50a9d5f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b0d7532-5be4-4729-9484-56c69d8b1718", "sighting_of_ref": "indicator--9b676bff-0808-40d6-be25-a263996595e4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cddd911-fe9e-472c-9f9b-632b96ddd3ec", "sighting_of_ref": "indicator--d21035fe-96c8-47ef-8dbc-3e2e5840caf3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff764294-7206-4dbf-9f4b-b09b37bf2a84", "sighting_of_ref": "indicator--978b00d9-9dc5-425f-bc1a-afc753bc37e1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dabf32c-8a7a-4a1a-b904-640b98ed7234", "sighting_of_ref": "indicator--3b740a45-e6f5-41f2-ac66-f0f13797564b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddebf2a3-c8d9-4cff-b206-1df2c7d382ba", "sighting_of_ref": "indicator--1d3443c2-1057-4efc-b51c-50a3a280931a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99747c95-23e9-4693-a5f1-9b82551e770c", "sighting_of_ref": "indicator--f266be44-b4ea-4d09-83be-c935004413ac", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a134f50b-9f56-4419-abf3-64ef495cd75e", "sighting_of_ref": "indicator--b2ff32ee-6fdb-4469-9b95-7a27fa14ea90", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d07acdc-bf4c-4699-a353-cf9ccca5ed16", "sighting_of_ref": "indicator--a76bcafd-0219-4aa9-a04a-113a0f808a5a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--489babef-3064-4562-8d54-279f1d627f07", "sighting_of_ref": "indicator--570171a3-63b5-490a-ab49-c32bb476223e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--642cac81-ee34-4540-a0c3-f7935ece46d7", "sighting_of_ref": "indicator--496e3576-9dcd-415d-a278-b59e749794a0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31cba8a1-4140-42fe-b59a-dd3b78263c5e", "sighting_of_ref": "indicator--f323c79e-e2f2-4358-9197-3d487015551d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66dcf1be-4bb9-412a-a7e3-f9af3a33050f", "sighting_of_ref": "indicator--0150d1f8-ea62-43c3-826b-d8cc4fe253d2", "where_sighted_refs": ["location--c8625a69-b7e6-4cad-99d8-76632a875c20"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67068f13-6322-4136-bdab-6426c4af81dd", "sighting_of_ref": "indicator--44106968-9f65-48a5-b1ad-6df5a3bde8c3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e391fc3-7057-4ca7-a29e-5b671df8c97e", "sighting_of_ref": "indicator--35cc87ce-c99a-424e-b9ca-4aa36ba29f7a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64ddd345-44b6-405e-ba12-3d04e812a8bb", "sighting_of_ref": "indicator--9ce50bbc-5f7e-43f9-94b7-badd6532bb01", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58a96d3b-dca0-4870-965e-17ed1cd025b0", "sighting_of_ref": "indicator--84c8b50f-ea01-40ce-8bee-89087e39b497", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c03503a-ab6a-43d5-8422-e94ad1ef5cc9", "sighting_of_ref": "indicator--4efc85dc-52e9-4665-a108-ba2ca87e2dc2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--955f1d8e-4e36-4802-8924-5411ded3807f", "sighting_of_ref": "indicator--21c7cb98-5d25-45f7-ac44-60467e046e57", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50d4195c-1381-486a-8597-489e7aed06e4", "sighting_of_ref": "indicator--0aba1f1a-48d8-4111-b125-713e6689e926", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--574bdfb6-33e9-458a-bc2b-a2fdbde1bfb9", "sighting_of_ref": "indicator--a655ca5e-8019-41f5-9d91-432867e671b3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fe2a6ef-9e0c-47d1-935f-e3271622db5a", "sighting_of_ref": "indicator--2af59f0f-d672-4b7f-acbb-c68832765948", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--440f1afd-2e5e-440d-b5c0-6304d8bd74f1", "sighting_of_ref": "indicator--12d729d2-0d85-4285-b54e-efaf8959596f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e45a6b3-62a2-45e4-8d88-5f3a11e448bd", "sighting_of_ref": "indicator--2e194aca-4c63-483d-9dde-ef2b03d49aae", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--514d92b9-a4c7-4212-8aa6-c0dab3c56bb5", "sighting_of_ref": "indicator--6fdedc5e-7b40-476e-8856-5ba12e42158a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e3aa270-b81a-453f-a3a5-d6b3b32911fa", "sighting_of_ref": "indicator--3e5b66f7-8f1c-4f66-b065-9c0f86f81bf3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ccec8c5-2196-4a1e-a835-3b57658850b2", "sighting_of_ref": "indicator--c1a2820f-87ad-4773-9862-60d7cadc48a3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2b5f130-4275-4b0a-b417-8d45718bf67f", "sighting_of_ref": "indicator--266b22d9-c08b-4ee0-b54b-f60888b27f72", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00f1b9c0-add0-48d6-9918-fdb3f8035e9e", "sighting_of_ref": "indicator--f51a7070-7175-4bb5-8918-53b48be714f0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3788337-e9de-47ec-9b32-aeae051808e6", "sighting_of_ref": "indicator--90eb2234-f7bd-4955-88bf-d74497b2fff6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b418eabd-3125-47c5-bf4a-1549c306da4c", "sighting_of_ref": "indicator--8f861b14-1c66-427f-9eb9-22b6823eed74", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1665a342-5780-4b7d-a156-91b63a2c1f1b", "sighting_of_ref": "indicator--1053335f-28d5-4515-802f-435d647acd42", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--471f81e3-a2d5-4156-802a-bfdedb0cf7f2", "sighting_of_ref": "indicator--5ddf4bbc-e09e-435f-8d98-6bc600ef8999", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13d80213-1088-4d2b-baa4-066ec206668b", "sighting_of_ref": "indicator--25c96dc7-c6e7-4966-a542-b25a7ad86849", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56e95a14-668c-42f4-8c44-10e0c402a6f5", "sighting_of_ref": "indicator--25174c7b-e4e3-4656-82b1-0ccc6a28afa2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dcf4138-cfe4-47a3-84db-f39d5a1d6f81", "sighting_of_ref": "indicator--87bb4ed2-a270-4465-82e3-16c0be604429", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79a62fdf-5c53-4ba0-a48e-1af52427386b", "sighting_of_ref": "indicator--825f8034-4044-4665-8847-96b26a799bc4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d23fcb2-a2ad-4b22-b941-82944c5e55bd", "sighting_of_ref": "indicator--645ced76-2145-4adc-86ed-727557e32f0a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7efcba2-d888-4d03-9853-2667e1bc78ff", "sighting_of_ref": "indicator--15301c19-1416-468b-845d-2d3a1abf274b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba608379-9619-440c-a553-a30578d64829", "sighting_of_ref": "indicator--f145248f-0b09-4ce0-9092-0aada3b3d643", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--696ac5fd-e4ce-457c-a96b-c959b3a81ab9", "sighting_of_ref": "indicator--c71b0a9c-b6cf-41e2-ae59-1350e303fecc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d0b63c4-884d-4a10-9f29-9d50323ba707", "sighting_of_ref": "indicator--016e0b04-ad42-49cf-9df5-d64610f36449", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3684237c-52f1-47b4-9c91-17cdc2463816", "sighting_of_ref": "indicator--5e34c3a4-37c3-45b6-ae69-269177e352f6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fffb2d8d-e798-462b-965a-d8a3712c0635", "sighting_of_ref": "indicator--db9c43f1-001e-4e89-883a-e114cfb6e99d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fefdbe6-7fae-4774-8cd1-37047e637432", "sighting_of_ref": "indicator--ee9dda14-95f5-4f83-b895-02ade690b4b3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9d17cec-4363-452a-9f47-18576e843657", "sighting_of_ref": "indicator--23cbf448-64b7-4a1c-95f6-04f5648a46aa", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42558555-d88e-4adf-beb8-bcd34f7e0c7f", "sighting_of_ref": "indicator--8ff5c6f1-28a3-4aca-b759-77f197be066b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f680db8-4158-4ed3-b9e9-82979b919be7", "sighting_of_ref": "indicator--f962e626-ce48-4ccb-8eaf-762a4d0ef6e2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca589f08-77c4-45e3-a7bb-263741c74621", "sighting_of_ref": "indicator--718d7795-8587-48c4-96e1-1f2454d22c8b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b92f1d55-d6b8-4e6b-9167-146c9d30cdc7", "sighting_of_ref": "indicator--de5d9217-2a9e-446e-a406-4a16713c9ce7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c161595-5860-4727-8142-23bae512591d", "sighting_of_ref": "indicator--69f688dd-2096-4570-86a9-9d14783a18cc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c48b27b-a815-4587-98cc-608f0e6d91a4", "sighting_of_ref": "indicator--9998201b-fe4b-43c9-a220-94022df55f0d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--667ecfe8-3653-4d0e-b0ed-fabbcc037346", "sighting_of_ref": "indicator--e555d0f5-cb86-4397-89d3-83bad3d100f2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26a579ab-2d05-4b68-a5ed-9cc0efa088be", "sighting_of_ref": "indicator--9673c94e-6799-4b0f-ad66-deb42762c2ab", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c36c951e-58ff-43d4-a126-b676b1ee61c4", "sighting_of_ref": "indicator--4bf578e2-939e-4856-bb66-46c4ff6c30e1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1df9eba-a88a-4d1c-9789-ad1c19c7235d", "sighting_of_ref": "indicator--74ff6f07-ac07-4a33-9604-7753a868ed98", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1437f935-efec-4ffa-baa4-30ba87859ffb", "sighting_of_ref": "indicator--a8bedc4d-dfca-4e0b-b227-7ea92722e171", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e7d5640-a5a3-4b6e-8332-e87ab83a5b10", "sighting_of_ref": "indicator--4d125a55-7b3c-4542-b515-a6e26abf543f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c4d4725-362e-4431-a413-f75afe256e35", "sighting_of_ref": "indicator--69b38f9c-d331-4e7c-b287-a8eec257b9fb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cba1194d-ebb4-44ea-8ef3-26902720b5ad", "sighting_of_ref": "indicator--30c4e3dc-49d2-431f-8ffd-5f59e18e755b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a04e020a-be7d-454f-b091-0e5fad13bb84", "sighting_of_ref": "indicator--01fed1b2-46bc-43c9-b1b6-2115f55a3f17", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa1efd5d-66d6-496e-8cee-e55c5f3fe945", "sighting_of_ref": "indicator--38072f8b-5d50-464f-8689-5494906409dd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--868951fc-eabd-4b81-9197-930fed6b576b", "sighting_of_ref": "indicator--c2726385-b0b0-463e-a114-74e77c59bebe", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fff0350e-aaae-4dfd-8bf2-ca4a6287eec6", "sighting_of_ref": "indicator--59188eb9-2f5f-47c1-a5b0-b188b02f48ea", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1733f97b-fb86-438e-9c53-3b110360fd43", "sighting_of_ref": "indicator--444b0ba3-b585-4eae-ac2b-69c5a945d559", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1440aeff-9eaa-4533-a8d0-eb4ff54d2fb7", "sighting_of_ref": "indicator--6232c64f-fc3d-4064-808b-ac7a86cc2205", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12f9d858-75bb-42fd-a15d-aabee590f1f2", "sighting_of_ref": "indicator--488dc3bb-e239-4b21-95ce-27bf17fe33da", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44be6fa1-dd2c-4470-b2bd-62abb105f9fc", "sighting_of_ref": "indicator--5ea4c2b6-aea4-456f-8549-52ef852ece97", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdd9d44a-8a6b-4d00-8234-0de70bc8d9c9", "sighting_of_ref": "indicator--745f96fd-df55-42df-9946-465ac3536088", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--011abd7e-71dc-41c2-a3f8-7a2205b5708e", "sighting_of_ref": "indicator--5a436681-de52-4a4c-bbdf-18b29887dcf6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2904e625-3b37-4873-a821-b8783a6502c1", "sighting_of_ref": "indicator--a96847d6-c3ae-4098-8b9d-7888417ab3dc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1d3cbac-2791-4a71-8bd5-483257c6d3ec", "sighting_of_ref": "indicator--7b56f802-f5fc-4d29-a781-9055eb5ee3d3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--398e75f4-13e5-4a29-93c0-7a01314235ec", "sighting_of_ref": "indicator--9424444c-b111-4f9e-a53c-a0b66bba2d35", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d0f2c2c-5a53-4a1e-8134-8a6c83be3280", "sighting_of_ref": "indicator--52c4d04c-f0cd-4258-ac9f-fc329047d2c1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--222b99a8-d517-4f23-85f1-f65aa5665488", "sighting_of_ref": "indicator--47708daf-34e8-4cf2-bd97-f6b68c456cd1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fce97f4b-7da2-4e89-9ad8-c86b58bb7234", "sighting_of_ref": "indicator--f27685f8-0611-4054-aab7-91963041db57", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b55a0ef8-342b-454d-b34c-33817d076279", "sighting_of_ref": "indicator--7e7ccfdb-398d-47d4-b77f-a1e2cf87db97", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e212b146-b2ce-41c1-bf01-82167f615c15", "sighting_of_ref": "indicator--71488eaa-c821-462c-aae2-1c972a1889a8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32c4edb6-41c5-4612-b785-29b0f8ea4d10", "sighting_of_ref": "indicator--19f0c0e7-e467-4716-948c-90358fc55ccc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e5e6477-5181-482f-9cf0-964bcb0788a4", "sighting_of_ref": "indicator--93669de9-e90e-4f20-8e48-81d2d63fac42", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da3b6de2-3d0c-44c9-9c66-14c2936862cf", "sighting_of_ref": "indicator--188392c4-1356-42b5-b24d-5ae12315d926", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b39c629-97a2-492e-af68-ff52cf171f1e", "sighting_of_ref": "indicator--7916d28c-c6bf-4b92-8fe8-2b8408b3c47e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--610f7645-7266-418e-a60d-3aa81f7b1ff8", "sighting_of_ref": "indicator--26510252-791d-4f14-90ba-887f7e2824eb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d449eb0-daef-4d9e-b94a-96425c454630", "sighting_of_ref": "indicator--e636d686-d89f-4df8-97b4-f9b98bb6a6e8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b4a3ea7-534d-4c83-ae54-a169bda8a137", "sighting_of_ref": "indicator--32635ad7-064a-47ed-8943-3239525407d8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc9eb519-582a-496c-a7bc-0d36e6da469b", "sighting_of_ref": "indicator--d7dce4b2-f16c-41f0-adaf-c4b2430e37e8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa712e59-586c-4c47-a7dd-6daea0ece0a6", "sighting_of_ref": "indicator--4482f98e-ec54-462d-882a-38efa3f6e672", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6adc632f-10bc-48e4-81aa-6ba0014b4134", "sighting_of_ref": "indicator--1454e2bf-001a-46f5-9716-56c56b679777", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6b991f8-9c05-4085-8ae1-edf75dbdd304", "sighting_of_ref": "indicator--77d7a890-40c5-4d90-9aa1-74c45ef056c4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--865d5318-72c1-428d-a6e8-b711eaaffc98", "sighting_of_ref": "indicator--73e2ea60-468e-4864-8be8-41d0ddc60335", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba8bbf7b-8a20-4d29-ad6b-ed80f123fb10", "sighting_of_ref": "indicator--8e5c0914-c943-4fa5-bdb2-1561d65d23e9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f10d7c54-860c-4fbf-8056-1bba698d423f", "sighting_of_ref": "indicator--85373dca-fae6-4205-a723-142ea275fbc0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e229997-d655-4142-94af-47f0e0d033b2", "sighting_of_ref": "indicator--25631c5f-6e84-4c24-a436-8fcfe4583ee1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90d688a4-5548-4606-839d-2f1c660bbbc1", "sighting_of_ref": "indicator--b37350cc-7e8d-4baf-b38f-963ac7f9e346", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ce9ae88-36d3-4691-92b2-e8bce1f94655", "sighting_of_ref": "indicator--d8f2593a-a8f5-49dc-aac4-0352d3980722", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be802d1c-4024-4e14-9d22-1817d4fe87e8", "sighting_of_ref": "indicator--9a9d7e8f-4dbb-4d5c-8fd1-4454f430ef5c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--566baada-1d36-45ce-ba14-c86718a78814", "sighting_of_ref": "indicator--f41d51c8-c74c-4f19-ad59-9a972447496d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c71e68db-e721-4ce9-bb1b-7283a63af8f2", "sighting_of_ref": "indicator--5fc7cc4a-8bf8-4d8f-bf8e-09907de8b31b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e60a7aba-a427-43eb-a5e4-5a65e956d8ac", "sighting_of_ref": "indicator--44c111b9-88c3-483f-8c40-1f62e4086dac", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--975d3864-3238-4e31-a2b2-cedf1b5aa9d1", "sighting_of_ref": "indicator--382060fc-edf4-42c6-a221-94c5d7bf7d8b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f750ddc8-f425-40e3-8996-70b80666cff6", "sighting_of_ref": "indicator--0d4b46cd-577d-4053-9ae5-71df4475ca11", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eacccb05-b11f-4f0e-a900-530e06358bba", "sighting_of_ref": "indicator--59417241-abe4-473f-81b3-815a7ee65592", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3d5439c-c42a-479e-8f5f-6662b58e42b5", "sighting_of_ref": "indicator--bc5a134a-29cd-4012-8535-1cefe99c973f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d36e8ffd-d7d2-42e5-b4a7-73960edef53b", "sighting_of_ref": "indicator--c353411b-f68b-4997-8776-075b2f872624", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7da78b5-f611-4bbd-b90a-4313152b467d", "sighting_of_ref": "indicator--6bb3cb70-87d9-408b-ad24-69989b595015", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a1150b0-7c06-48fd-88af-5fb8e7abb265", "sighting_of_ref": "indicator--5264e44b-73c4-4128-bb5f-faedf9dfe418", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eefbd391-3355-4daa-a3cc-38f557fb6450", "sighting_of_ref": "indicator--5bc5ce83-6ae6-44d1-8343-f758849ef15d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7b8324b-65b5-4ab8-aaac-ff51c9a5457f", "sighting_of_ref": "indicator--4540d9e9-091d-47a9-9358-0129ce33a5c1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--956a26ff-3456-480e-8992-71dfd18cdb0d", "sighting_of_ref": "indicator--e60a46e8-a621-45fe-baf4-e685545e7c3c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74bbee11-bf1c-4b00-bfb9-85b39622589c", "sighting_of_ref": "indicator--a4876eda-3566-4cb9-851c-741d663ce8d4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd9b6a87-b424-4621-bf3c-25377b703504", "sighting_of_ref": "indicator--d928659a-7160-49be-8744-6dd4f95a9b23", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--348e0f1b-8ea7-40aa-a45a-88ff4d46d0ca", "sighting_of_ref": "indicator--ed9f1153-b3c8-4d16-a7c3-43bdb13f244e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4e5ae97-5a77-41ee-954f-bc65ff481cca", "sighting_of_ref": "indicator--a25eb1dc-29d6-4eaa-87cd-634d6c07f9ec", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--510aca7a-57d6-464f-b2c0-c08bd42500f2", "sighting_of_ref": "indicator--3a34ea61-4b1a-4a1c-86e6-f07ba714e309", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b2aac97-f34f-4cf1-85d2-1fa0f1e5ffcc", "sighting_of_ref": "indicator--ee0bdf42-1b3c-4fae-9a4b-87f6c61af8c2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0af9ba2b-eea6-473f-9733-c2dc638c1377", "sighting_of_ref": "indicator--f272feb3-e1da-4105-b04b-e5128c7a8c51", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41e646b6-5cf2-412d-a9c5-590385701dad", "sighting_of_ref": "indicator--a1079034-d773-416b-aa79-879c7c0b4ca1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97ca9188-9a3e-4d63-b4b7-cc20a3a6564b", "sighting_of_ref": "indicator--c004d7c6-fb11-42da-a5c6-43e38221eaa5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f9b35aa-6031-410e-83d5-6bcb88a78b52", "sighting_of_ref": "indicator--6092b9a2-5ece-44b8-9b6c-bce1cf4be3b0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f04f9f5-ee8c-40c9-91df-d7e7b99b46ba", "sighting_of_ref": "indicator--ef5bcc42-a1c2-4319-b2ed-31cd3a10d340", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a49d508-bebc-48ed-9f7d-feb6eba5ea54", "sighting_of_ref": "indicator--8d1e58d7-eb61-44fc-87b9-9cdef48a74ab", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f1579a5-0fe0-41cf-8e4f-b77c0bdede9e", "sighting_of_ref": "indicator--1ee4704c-df4b-4bd0-aa5d-079f1c42e7cc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b308766-b2d0-4cf4-a596-4a9e7779aeb4", "sighting_of_ref": "indicator--6effa454-c887-49f2-afba-4d7108b28706", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--902a80b3-57a8-4c86-ba3b-8acc44b057ef", "sighting_of_ref": "indicator--161102bc-42de-4d02-8399-2a75280397f1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a69c1e9-55ef-40ca-948e-2bebadbb2036", "sighting_of_ref": "indicator--a71c78c3-b197-4628-87d9-85fb715eaca6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f86cccaa-1214-4fa9-b562-7b5c97a5701e", "sighting_of_ref": "indicator--8874e8e3-f106-4aec-9bd8-6e35e0c51dc6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d735214a-b036-4cd2-856c-b55d699a2a4b", "sighting_of_ref": "indicator--89925a50-7823-4c1c-a217-ff983b63c27b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bdde66b-4d70-48e2-bcbe-f6e2402cc2e6", "sighting_of_ref": "indicator--7871c945-2e8c-4d41-a330-5f8f470ce84d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--299f8fb3-6f57-430c-9c88-a7e3af3f7cc2", "sighting_of_ref": "indicator--f290a690-0c48-4c45-9701-9466f1d9434b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c69be4c-ee2a-44db-a7bd-aea9e6e5beb5", "sighting_of_ref": "indicator--a6ef72e6-161d-40cb-b817-503c2f16b5ef", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd379bb4-829e-4092-b224-27a1ccb158e1", "sighting_of_ref": "indicator--bdef5c0d-78bc-4a63-af72-f53be0f6f2ff", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed7baeee-8019-43e6-8872-3c19a5c24188", "sighting_of_ref": "indicator--0343b543-4d4f-4020-ad66-5310f5fdf2e7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea3d7515-1aad-4311-a5da-a035ed2a4fd4", "sighting_of_ref": "indicator--ac5f7f0b-fbb9-468d-96dc-b07a6a55b124", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9ab77e4-7f85-4861-9931-22353393ae37", "sighting_of_ref": "indicator--80920913-66a3-4832-a299-cd80d1d24a65", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69a3f381-af64-47c4-ab14-f9346e0c0f1e", "sighting_of_ref": "indicator--79c3d327-fb8a-4c8b-a03f-36b212811e6c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b4a1185-82e8-4aba-8e48-cfb79b4475b9", "sighting_of_ref": "indicator--75513ef5-5978-4d6f-a6a8-4d6143168ebf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6570c6ad-12ac-4398-8ae2-d2fb1d700591", "sighting_of_ref": "indicator--2d1eedde-85cd-45c2-9e2d-b3cf820df300", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dd67698-0313-4cf4-9fe4-3d28f3698502", "sighting_of_ref": "indicator--fc4a92b3-7778-4434-be7e-4185cdcc2fee", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b83cd36-d6c3-42db-ae1e-a8faf4616d72", "sighting_of_ref": "indicator--2aed6fdf-be15-45b9-aae1-2e1a016c2327", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb94b67b-3860-4380-aef0-3a2bb8bc9514", "sighting_of_ref": "indicator--56bab24f-7de6-42a6-bb11-165638c83131", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a473c81-e461-4f4b-b17a-33ef4aeba169", "sighting_of_ref": "indicator--c97bc3c7-67a9-47b7-9657-907bacc4fd1a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a050a10b-17d4-40ea-bbf1-3520c5c18a83", "sighting_of_ref": "indicator--64d3b77a-0652-4226-85b5-8c74be486bd1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99ff3341-698b-4fda-8c63-b5a478a14d7e", "sighting_of_ref": "indicator--69e2480a-75d9-4f6e-9210-4226d6054c18", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f63acb72-0666-4d46-8cc9-7712e0295132", "sighting_of_ref": "indicator--b23bcf83-d281-4334-a7a0-72ebbc81e74e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfb0645b-8df0-40ed-b206-429cef26a381", "sighting_of_ref": "indicator--3961e92f-7a88-46dd-8722-915e07edab39", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30143f70-c34a-471e-810b-9c170f24aa98", "sighting_of_ref": "indicator--3c32bdfe-4ced-4e12-bf2a-be47c5229e40", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c584f61-5bbf-4d24-b792-1860973c16e1", "sighting_of_ref": "indicator--a5673681-041b-4f1d-a72d-5c23bfcea405", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eb5b5da-4600-483b-9a73-f6c29bd8c1b6", "sighting_of_ref": "indicator--de3d598e-6bf6-46fb-8693-5e84bef0b2ef", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ec5285c-bdfd-4601-a63f-773e482b12b6", "sighting_of_ref": "indicator--f8f32465-7752-4c08-af34-c9b887d0c331", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ac332ac-0723-4f24-b49d-50de5f65998e", "sighting_of_ref": "indicator--dce417f1-80c1-4f23-bf57-7771a1522b86", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87d25cb4-abef-4b00-af69-f84a3342ff2a", "sighting_of_ref": "indicator--9cc5c74c-5a22-4392-88a3-119216a0fa98", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0043af1f-514f-43d4-917a-d02f9b90fcf7", "sighting_of_ref": "indicator--cdedb4cd-3465-4794-902d-0405c5c20296", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80df40d1-e140-4dd5-819b-40d04b058064", "sighting_of_ref": "indicator--fc4bb1d7-2003-45e0-912a-5d03ab5ecccf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2c7708d-c63f-4eb6-93e3-20981d1304f0", "sighting_of_ref": "indicator--bd3e2dd8-c486-433e-8d07-fa942bb67607", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--964b8284-4a77-436d-ba90-28406fe01de5", "sighting_of_ref": "indicator--5e34f9c5-295b-466f-8e8b-19d9c2f4217a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ade6c884-219a-4a23-a96b-aa51815c4555", "sighting_of_ref": "indicator--9636c5d5-f7e8-4736-b6ea-789e34304779", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b30e0faf-1339-4496-af6f-d2653482c110", "sighting_of_ref": "indicator--13277eba-090b-4545-af00-90f850c06f02", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7c72e07-c93e-4398-9d8b-2f8ede403b5a", "sighting_of_ref": "indicator--5c906317-93fb-4047-a09d-ffcd84ef3891", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe2b8c9b-e9e1-452e-9ac7-e6d2621688bd", "sighting_of_ref": "indicator--9dc75404-5561-42f4-af92-aec887600960", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--772c7569-5a34-4bed-9abd-5334fb9bce32", "sighting_of_ref": "indicator--dc7a784b-245b-4831-81ce-d96cc6a089b3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b9cf07c-e407-473b-92e1-d94158e81cbf", "sighting_of_ref": "indicator--3df5ec73-f0a4-4873-b0c4-18a1dc3bacb0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--114e6fdd-d730-4c96-818d-db0c66b6af4b", "sighting_of_ref": "indicator--75244b3e-2bc3-455c-859c-6e0233867401", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71b293fb-e140-4651-ae0f-19b72fcf414b", "sighting_of_ref": "indicator--0b267c35-e516-4f75-a73e-9173f50dbd4f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7711aede-81d1-4c63-b3e6-c243d634dd48", "sighting_of_ref": "indicator--9b2b3472-7e80-445b-b514-18788bb585e6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1b68858-e0b3-4fc1-835a-5f6a59745eaf", "sighting_of_ref": "indicator--2fffb7e2-0c98-4d92-a0b5-fc754434bd17", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ef9e7fa-44f4-4394-ae96-5559d323f454", "sighting_of_ref": "indicator--82be4f37-504c-4be1-93eb-3dce477b61f7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5083c101-414f-41a6-a22a-ba003711edea", "sighting_of_ref": "indicator--0881ae24-08ad-4361-aab7-8d545d21e8cd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dc9171b-6cbe-4df6-913c-da8c1f999d30", "sighting_of_ref": "indicator--193bfe47-c14a-49d0-af81-c70e3a0a143d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d86949bd-8d1c-40d7-81b2-50a6701f43b3", "sighting_of_ref": "indicator--d4eb9ef6-96d2-4e8a-a652-42064d63ce7b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c1cbac1-fba2-47ca-9879-15682a40baa7", "sighting_of_ref": "indicator--94574a31-7d7c-42e7-b1e1-e5f97148ae96", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45bd766c-5293-434e-bc3b-e0ceb0f7df99", "sighting_of_ref": "indicator--412bde2d-ed96-4e4f-9d4e-e67c84005aea", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50b353a6-7486-4ce2-a647-591a50225fd4", "sighting_of_ref": "indicator--f72c230a-f126-47df-b77c-82529a206676", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--585be0c7-946e-4a13-87cc-0f2d8f229826", "sighting_of_ref": "indicator--80d51ace-453c-4c7e-b610-fa8281c0d55b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--773e4e59-84ee-4478-a280-8cfae16af0f7", "sighting_of_ref": "indicator--8e439ba6-7862-4e74-bcee-21074bed5cd1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39fe4e4a-5d63-467b-8543-bd1a388646b0", "sighting_of_ref": "indicator--7ce4eab1-5aec-4f1b-9697-cb143141749d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11511000-643b-4aab-96c9-69076651cc9f", "sighting_of_ref": "indicator--7eb10767-957d-4c87-9f9b-d30021758c5b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eacae7df-257c-4030-a65b-2e09b3949c19", "sighting_of_ref": "indicator--13db6c3b-25cd-4c19-8720-566990824c58", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0ada725-5e3f-41e8-936d-42b4d73223d7", "sighting_of_ref": "indicator--f09bc852-17b7-4369-b6cb-281614924d0d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69d224ad-d26e-4e1a-a052-12ad60247afa", "sighting_of_ref": "indicator--fcdbf4d2-028c-4a55-94e7-759f2d4abc06", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3ce845e-d3df-45ee-91da-b17ca31e35f9", "sighting_of_ref": "indicator--e7db023f-1206-432b-be7f-eacd71876fa2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f265f8f6-ea6c-4f52-b1a9-af39b0029ed7", "sighting_of_ref": "indicator--6c56b127-7add-4944-aa29-d1cb95308257", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c10b345c-a2bd-4d8f-b4bb-d93406fd0656", "sighting_of_ref": "indicator--de701a6a-5b41-4795-bd5a-7bbd45f212b3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--977878a8-2b58-4325-83c8-71094f226555", "sighting_of_ref": "indicator--20fb6215-b07c-4fa4-aa6e-f31e211caf3f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6b5a020-c676-488e-9e07-90b8189beae9", "sighting_of_ref": "indicator--6da2a93c-3249-40bf-a69c-2b2fad798466", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65286bc6-ccf1-4cc3-a3a1-19d4127fb49a", "sighting_of_ref": "indicator--b6bb5a34-1089-4ba3-961d-04a9fdcdc053", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8092ce43-92ce-4412-8109-2ebfea054611", "sighting_of_ref": "indicator--c3ef967e-9fa5-4066-b0db-c81aa72c39e9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e45e5391-fa5d-49fe-a6b5-50dba41648b7", "sighting_of_ref": "indicator--632701af-0333-4c17-8a20-83f14a6395cc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60f8e162-7920-4bc7-82e9-471314a53d0c", "sighting_of_ref": "indicator--defc80bc-38b5-4cd4-8259-49a192690213", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67f76a1f-e5e4-40bc-8165-320c060172cc", "sighting_of_ref": "indicator--4f857350-d5c8-47f5-bf7f-8e94f7014ba1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdd8a784-0a70-465f-89a9-6e16dd7bda28", "sighting_of_ref": "indicator--0f29f1e2-3d3f-4f2a-869d-796830dbf2d3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4245ee79-eadb-4c1c-86cd-4e210c55d7e3", "sighting_of_ref": "indicator--aaa76a3a-3b0b-4095-820c-b7edf4b34afa", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b970ba9b-f06d-4c9f-8d56-4b9dfeb5a202", "sighting_of_ref": "indicator--fbaa42d5-5f24-4b24-b94e-9e1720b4c81c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4176213-6276-4945-8960-cab8909e125b", "sighting_of_ref": "indicator--b2d46d08-9148-49c5-b6ff-9c9a85c3ff3d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56b5683b-277d-4241-9416-136d80e2e376", "sighting_of_ref": "indicator--95f7fc79-368d-4e4d-83f9-8028fb63b246", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb795603-630f-4cdb-9f51-9fc210fb6fb6", "sighting_of_ref": "indicator--d52c408a-7bf9-4210-9238-837dc4ba9c6f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b89a0861-f10a-432b-9524-9cc9e280f644", "sighting_of_ref": "indicator--51d1ba02-cad0-429c-965f-8ebc3f8db706", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bb7d3d9-a91c-472f-852f-fade83cd6041", "sighting_of_ref": "indicator--11af89d7-9f21-417d-aa8f-20439a214f7a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c62cacd-55bf-4422-810b-80275350c0de", "sighting_of_ref": "indicator--c2c16e55-dbb2-4bfd-9c2b-72abbb36de8c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d29193ff-3082-4dc4-9229-6a1d1d23ec26", "sighting_of_ref": "indicator--276a0475-cb73-4182-855d-1863de1229d4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5c0f046-ad94-4b8a-bc8c-b08a793d7ca8", "sighting_of_ref": "indicator--16dc27d3-3821-4995-8e8c-a83d3f60855a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5578f2a0-0753-4a6d-a651-6102bbbafb34", "sighting_of_ref": "indicator--0839c383-e579-4497-9fb7-b21be0828ede", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--490c9076-9ca7-40ba-889b-8f9ea2249dfd", "sighting_of_ref": "indicator--d255c7aa-21fc-455b-9f46-f1f69aa6c254", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28fc084f-eae3-4eb2-955c-c1b653d8376f", "sighting_of_ref": "indicator--5bf4c51f-c40e-44b7-9df5-2942a9346a90", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9393fb0a-2850-4ea6-8a62-84d4bd54d7d0", "sighting_of_ref": "indicator--c104c13b-f50f-45c3-b774-21fbaaf3c01b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87b5abee-ebea-4dbd-90b2-4c8f6a4763e2", "sighting_of_ref": "indicator--7c807797-deca-4a71-b9ba-318774569803", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d074920-e990-4b5e-9ba3-48a22356168c", "sighting_of_ref": "indicator--c1321364-ac30-46c7-ac85-bde15652457d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbadc3e5-ef07-46c6-af0c-7162b33933f9", "sighting_of_ref": "indicator--7027b3da-57d4-440b-b349-ccb9543b70dc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48dbbe2d-17c7-4559-87a3-ef91c105bb1a", "sighting_of_ref": "indicator--03e10513-8c1f-4d4e-a0de-50d2051411da", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--822d95a9-5c24-4fa6-9816-bdebb3012513", "sighting_of_ref": "indicator--e9cfca96-586c-497f-b604-52a84dd71b2a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f06ccf9b-9a2e-4d4e-b61d-db42c12e0b1a", "sighting_of_ref": "indicator--9be8a38e-65bc-43a9-864f-ccfbf677ca54", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b7e6c80-ec98-476b-948a-85aa4b46aaed", "sighting_of_ref": "indicator--496f413e-bc73-466f-851f-9c37d2881a49", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc50ad9d-36c1-456e-b56e-f1b96ca807ad", "sighting_of_ref": "indicator--fc608659-cc74-421e-bb05-ac1b043a38e2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31d93a7d-d10a-456b-ab9c-b031ddd219b3", "sighting_of_ref": "indicator--0751073a-4140-485a-a236-57dfb8b49147", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d28de05b-4926-468f-a4a5-956373f7ba5b", "sighting_of_ref": "indicator--c8a6305f-3f2b-4793-a995-3a6cf9262b3c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5649a7ae-e423-4b9e-a7fc-d8f0308c55b7", "sighting_of_ref": "indicator--b1f3e5d0-140b-4f0f-9fc9-dfdb5a8a0052", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52f8a954-fdd5-4ed3-94fe-9daa8661db0e", "sighting_of_ref": "indicator--047c50a6-6330-4b98-a8d6-77a09edaabb1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ac5d392-7211-4d1a-93f0-b2d4e712ba96", "sighting_of_ref": "indicator--65f396dc-909f-46e6-9b96-cccc4e307701", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ebfd329-60db-42e3-99dd-f490a007ca68", "sighting_of_ref": "indicator--1fcd7c37-e3ed-4385-a7b9-864230bd91d5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e5d8a36-7e1a-4693-a7a6-7de295987454", "sighting_of_ref": "indicator--467ac19c-0790-47c5-82d6-f38a99cf864a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af7c9623-dfa8-4327-956f-68a7b6828b55", "sighting_of_ref": "indicator--8e9597e8-cbb3-4eb2-81a9-f3a9bc300372", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--601b0e08-ce8b-437c-bbef-6f0f34d5571f", "sighting_of_ref": "indicator--ffa8b052-fec4-4501-b00b-1beefcd43f35", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--659b5f86-f2a6-451d-8205-517c667ed578", "sighting_of_ref": "indicator--218786f1-5d6d-4007-a842-40d6a3623742", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dae36c36-2404-4e58-9e77-0c4848efeadb", "sighting_of_ref": "indicator--adb5b41d-946c-4374-8eb3-03856a5b2af4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--720be12e-629c-4605-9d5c-d9c37e0d5fd9", "sighting_of_ref": "indicator--56593fd5-7f01-47f3-a7f0-61e1a789c88b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39a1a75d-5ea4-474a-a3c6-252444df0c80", "sighting_of_ref": "indicator--c194e8cb-398b-4a9a-9225-02a4f71a41ae", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf759aaa-118c-4bc6-8597-f807a9e33027", "sighting_of_ref": "indicator--d0e391c4-adef-4b73-8aac-4a6b186db383", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--668bb94e-fb05-4690-a67a-52a29c143f70", "sighting_of_ref": "indicator--02c380b3-a47d-4e36-802c-801a61c05b44", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58766d9a-c29d-4394-879d-46b861ede15e", "sighting_of_ref": "indicator--77485ecd-e091-42f8-8fa4-17970abc0f34", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fab2811-d72f-48a1-8328-37faa87324a2", "sighting_of_ref": "indicator--3c46c6af-adab-4297-84d1-d7e9ded79016", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bec70a3f-7fc2-4228-9908-73a9830e47ed", "sighting_of_ref": "indicator--08e35703-2558-42cb-86e6-10e49bf21180", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae0e8085-612b-4510-bff6-bf91a290e5db", "sighting_of_ref": "indicator--437cf3af-3e35-4527-80b8-0144f78e83fa", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2613678-360f-43fa-a5d6-f20ecee3324d", "sighting_of_ref": "indicator--b23699eb-e2c5-4bad-b7e5-515e1a10e53d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24e8cb73-9156-47f8-ab94-17cf3dbf367d", "sighting_of_ref": "indicator--399411f0-5a9d-47ce-a380-17614bf33d63", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a02d8bcd-bfcc-44d3-b478-cb95ebb0bd0e", "sighting_of_ref": "indicator--c27940d6-6c76-44a9-933a-684887621c5d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--804d5192-84c2-4156-93dd-15803dd3fa8f", "sighting_of_ref": "indicator--aa65f270-3c04-41bb-94d9-7491a48d82a5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1723d42-edff-4699-b913-338115cdc9df", "sighting_of_ref": "indicator--1b66e974-1d32-41c7-ab4e-e5e39ad7bd13", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb0978c7-9c29-4ee6-aadf-cae185757457", "sighting_of_ref": "indicator--5e6263bb-069f-402a-bc3d-743af35d3176", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a2bc55d-0bc4-4dbc-89ad-f3adc4f6ad29", "sighting_of_ref": "indicator--86cc978d-c194-4bda-af69-209a88b73f88", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23262856-e2e0-4d7c-8b3a-522a8c845073", "sighting_of_ref": "indicator--6cb9ccd4-d6c8-4bf2-b87c-88caf845d166", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e205c90-6aca-43c3-bd1d-b1bc02190ebf", "sighting_of_ref": "indicator--648bdb62-7513-4692-bfa0-3efde1b772af", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fea27f4-30b6-4736-a269-0ec5d716b424", "sighting_of_ref": "indicator--7b49e569-77f6-428f-a518-963a7fed952b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39e5962f-fd1a-43bc-973b-354f5d7f9b09", "sighting_of_ref": "indicator--379f74d5-3f6e-487f-97a4-a38058fe81f1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--888c3eae-4722-4eaf-9d42-ba03dce12432", "sighting_of_ref": "indicator--215f8539-23dc-43e4-9e1f-a08f5188ad55", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15b32a44-e0ae-4c3b-a5f9-903d9234b63b", "sighting_of_ref": "indicator--322932a2-2518-48aa-a0c2-015f3d2b73a9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd940e51-fe0a-4ff0-a0a4-9a0f7074199c", "sighting_of_ref": "indicator--dc1d0001-726a-4e38-93fa-8b4cac53a6fb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fbdf66f-c2de-4782-bee4-a669556bee5c", "sighting_of_ref": "indicator--dfd9d3c0-589b-4f7a-8464-17131c2639f1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d11ed48-431a-4a54-9424-a84df29c89e0", "sighting_of_ref": "indicator--98843b74-aad5-4dd4-845c-ea00a271c583", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59eb4548-6beb-47ee-b32f-acb38760f4fe", "sighting_of_ref": "indicator--3602e437-89f9-468b-8474-8a258e112e4f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b98864b1-f3d7-4f15-a6c4-42b71f7432ad", "sighting_of_ref": "indicator--a42a3957-bf30-447a-b69e-a61c9b6a5ef1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc23e021-b7d7-45b7-b4bb-c6494e1a1d71", "sighting_of_ref": "indicator--58bee921-e5ee-4f22-b877-421c2dd3ff5b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22447b50-ac75-444d-9a90-15f9389fcbba", "sighting_of_ref": "indicator--edd42e13-db04-4c55-9249-211fdcf0f134", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd71dbd0-f313-4e01-b2d4-11f9a781ae79", "sighting_of_ref": "indicator--590fede5-5b0a-49d5-99ee-23fbcdd01b5e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e596a952-8c89-40f8-b7ed-6021fd4ebc45", "sighting_of_ref": "indicator--f5567dbf-b694-4203-b4d7-77831e86f0a4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54fc6795-1b13-4016-9874-f0df6f1ea29f", "sighting_of_ref": "indicator--efdd5260-ca56-40c3-965f-43b40f755690", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cd79b33-cedb-4189-8a89-8d9ce6f0f6b9", "sighting_of_ref": "indicator--ac894b68-69c9-4e37-9797-ad35d525b12d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae86ac23-f0ee-4e6f-bb6e-10c34cf4c557", "sighting_of_ref": "indicator--ae944011-8602-4cc5-8c32-430c93f71326", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abb452f3-f2dc-40f6-a6e5-8ea7807bd83a", "sighting_of_ref": "indicator--ab5c2f78-233b-44bd-a154-fb494bdd4911", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--578269e4-2b17-41ee-9894-e8d665a7d1c4", "sighting_of_ref": "indicator--f86d5bba-dc30-41b9-9ceb-63c4c9490af4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f213fdd3-b7ee-47ed-8fac-6acf6a2e2b7a", "sighting_of_ref": "indicator--9cc4f07e-154a-4ecd-a09b-e6dbf38eec9c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd68b11c-44cb-4e9b-a815-b910b40c41cb", "sighting_of_ref": "indicator--54a16cd8-b822-44ea-954e-c781defe134f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--155f9779-dd11-432b-a8ee-d9f45ad61485", "sighting_of_ref": "indicator--f88e8448-d5eb-4de5-bea9-2f4c2aa511d0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a50f5f8e-dc33-4616-9d79-546723c2f8ff", "sighting_of_ref": "indicator--22f4829d-0b93-421f-bbfd-0924527fa253", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b6b1165-80c6-454d-be4d-536ffec1e144", "sighting_of_ref": "indicator--49e5aa6b-5aa3-4d5a-a92a-c0430758a044", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3c064ef-2d92-4777-a916-60e3760615a4", "sighting_of_ref": "indicator--b8c8ab65-c94f-455c-ad0a-95abccfa2e68", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--557df23f-b551-4083-b3a2-49beaba0e110", "sighting_of_ref": "indicator--dea94e48-a674-454e-8e56-5744693a055a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee9c8cf6-8e72-4b28-99e7-c3fd13436c2e", "sighting_of_ref": "indicator--e70c032f-d637-427a-b430-da2fe787e72d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eddaba38-a9c0-43a7-b4ae-ab9dc4d1c3ec", "sighting_of_ref": "indicator--5d2853ec-d0c9-4917-b6e4-39fecf1782ec", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14d9c533-f26e-4e2e-b171-b0a98212ab10", "sighting_of_ref": "indicator--5040de04-6d0b-49a7-8502-42f2417196ac", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e353cc89-468c-4a4b-b244-fa1e0701b858", "sighting_of_ref": "indicator--37b2f038-a9f9-4f82-ac5e-bcddabfbefa3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f513f139-dcdd-4581-aef5-0fa12f6f163a", "sighting_of_ref": "indicator--935b6d47-bbc1-4c52-b795-60718128afd5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a416c4a0-e4fa-4e69-84f0-96fa57069565", "sighting_of_ref": "indicator--b7b70e89-ce59-4ca4-a009-52bcbc709c32", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dccbf64d-2ca6-4472-afc8-8dd8d5dc17dd", "sighting_of_ref": "indicator--9a1a6ae9-5c02-4dad-9688-e04c6f6f06c7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fe7e761-01da-4a61-8036-62ca26448f2c", "sighting_of_ref": "indicator--01a61f9d-0b93-421e-b34b-2df3af2aa886", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eab75d11-4f92-4cea-be33-71dc7a243a65", "sighting_of_ref": "indicator--36826538-cf06-4375-9502-714ae8d1c4e4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70f502eb-2bb5-4e02-aa4e-6712cb649017", "sighting_of_ref": "indicator--3c2021bd-a7e4-4282-b696-63d303c000c6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--533602fd-0313-4c94-88c1-d1933d3c9782", "sighting_of_ref": "indicator--b9e02d93-84b9-43b9-9ca7-1e431331a344", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa0fbab0-79c6-4df0-ac9f-a33dfa1cc3af", "sighting_of_ref": "indicator--1de9d32b-92d7-4d7b-a593-fa882c6f237d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfb690f3-55e2-4fd8-aa46-7f7e763efbf0", "sighting_of_ref": "indicator--fffc9d85-96c1-4b27-b597-7753f729bcd1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec507a2b-9baa-49f1-ad11-11f3fa8a66dd", "sighting_of_ref": "indicator--f0392cc7-66de-4802-bdcc-3c0124e8e4b5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7456b2a5-2de4-4d98-822e-f494d8defd88", "sighting_of_ref": "indicator--cd486d01-3534-479a-9af1-0901fec32286", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa751728-0d44-4b03-9270-ab3042b2cf76", "sighting_of_ref": "indicator--6fd4dd7a-cfa0-48dd-a22b-73d6db37a8bc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b67275d-05ff-4aff-bb06-89d62c2dc242", "sighting_of_ref": "indicator--d6e34be8-6cff-42cf-8b17-25462568eb91", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--609a1568-ccc8-4410-ae5f-acc92156b729", "sighting_of_ref": "indicator--b2c9621c-bc02-401b-a5a1-02bac50bbfca", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--363133b9-282b-40f1-ad8d-450e3e96ba70", "sighting_of_ref": "indicator--83e10246-7427-492b-a234-03d0c1398045", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--122cc509-6122-432f-a077-2fb2e7179124", "sighting_of_ref": "indicator--fce46367-426c-455b-90e5-1332e1ac4267", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53845c0b-bc51-4ef0-ab4a-e65714af470d", "sighting_of_ref": "indicator--f775c415-fe3d-4b2d-b4c2-5f66e1fd7fb1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48a192fa-78d9-4671-93d8-faf2c9a09878", "sighting_of_ref": "indicator--46670fda-450b-4ca3-8f70-f8c1a2508430", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8f92564-e115-4f42-844d-f2e160a5fc74", "sighting_of_ref": "indicator--20fac94b-882e-4a4d-b5f3-507831dea32a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cfc9627-9b7b-42ca-8aa8-059c80e0da62", "sighting_of_ref": "indicator--cefa1142-762e-4288-854c-ecb82bafeadf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea750520-27b9-47f5-9e34-2e2a87915947", "sighting_of_ref": "indicator--8b917d67-b637-4b4b-9a6c-b21a143b9567", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f383373-1776-41ac-9e4d-772e1addfaf8", "sighting_of_ref": "indicator--4ee284bf-a3c5-4419-ba56-24456024c98e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a71d0259-2791-4b0b-a050-d79fc357283e", "sighting_of_ref": "indicator--9ea5d033-d7a0-412e-a389-6394052985e6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c68c9c20-5495-4dc4-ba68-e606c66f524e", "sighting_of_ref": "indicator--9a174f89-8b9f-476f-ae67-d161ce42dd20", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--937b5a79-6eb0-415e-b108-260f417c91a4", "sighting_of_ref": "indicator--2ec61552-54e4-440c-85c0-e0b520771f61", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffef3465-3574-4f17-bb2b-11ad5785ac36", "sighting_of_ref": "indicator--03a8c4b2-ba36-4345-9b07-4a4adc1916c3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--017334de-73c1-4ee2-af51-92e641450adb", "sighting_of_ref": "indicator--8dc16bd8-18e7-402b-987f-a4f519275749", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34cc7192-6508-4c22-ac15-9f6a240fd83c", "sighting_of_ref": "indicator--b44a9164-87b1-4adb-afbd-c43da95fdd1d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ced3220-b84b-4ded-808d-552dabeef15c", "sighting_of_ref": "indicator--e9949340-0c39-4fdb-876f-273341fee7a8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d64db96-ca71-49e9-b91b-eb2242ca2457", "sighting_of_ref": "indicator--911813db-1db2-4943-977b-0d80b5604273", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--795c4374-486e-409b-803b-f848933a8c9b", "sighting_of_ref": "indicator--c4210e5d-ec69-4819-8181-cd38fa2c2571", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5629b1f3-afca-4ebe-b90b-9165d72918f0", "sighting_of_ref": "indicator--e968de28-0227-42c6-b2c3-ce3998919039", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ece7c7eb-723d-440c-9bfa-5f479a981c27", "sighting_of_ref": "indicator--95fe1bb8-12cd-4b08-bebb-7ac240c280b9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7150710-4ce2-4841-a67d-d6c1d6c3336a", "sighting_of_ref": "indicator--c9c8744f-579d-4366-8c59-c7fd270deb07", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d63d1ed-a315-4f9b-9f0d-092d61c31178", "sighting_of_ref": "indicator--9336d07c-2c3f-48c1-bbee-4f9677bd69f8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7b09b13-d683-4c30-a3b0-53b33c0d3773", "sighting_of_ref": "indicator--4cf64b11-7b16-414f-8b27-a9b52c20220f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfccdaf9-9435-4f57-a3b6-3bc41e4eaa4c", "sighting_of_ref": "indicator--fe6b0155-adc7-4572-9241-c12d370ce3e7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7848b265-0d74-415f-9ade-2290e8c947b4", "sighting_of_ref": "indicator--ece8c4b3-05bf-41f1-977c-178bcd8c3369", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79e2bd67-7bdf-4e47-962d-977a85fc1b0a", "sighting_of_ref": "indicator--f44986f6-08e8-4047-8b3f-1d784d7cc343", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6acdfe64-7b72-469d-b09d-c4b279a3c8f9", "sighting_of_ref": "indicator--42122f3e-f942-4d8e-b1bc-668fbf8f6552", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49a2c99f-9075-416a-9e4b-02168150d4a1", "sighting_of_ref": "indicator--ca04230d-4741-4954-a16d-e614ab978f1a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fa3db08-0070-4180-b52a-6883a15eb40b", "sighting_of_ref": "indicator--662d2575-8ceb-47a8-ae2c-00bb76463d51", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c7df2ad-7d45-47dc-b140-f6048529300e", "sighting_of_ref": "indicator--4e3e7e9e-1a2d-4158-b314-efbd1043fc42", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4d25033-c3ed-48a4-bfc9-a48e8c5e04d4", "sighting_of_ref": "indicator--01562dd5-f233-4c70-bd4d-e1c4556816f0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7f69d96-61c1-444d-afbf-33162cc0c03d", "sighting_of_ref": "indicator--e8226d19-bb0b-431a-bae9-990150fd7bfc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c983320-15a4-42ad-bb8e-7e1a1c803c02", "sighting_of_ref": "indicator--3e03f401-7d36-4003-b39d-a3c4509d147b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a27bb8db-d74f-493d-a21e-ab92e4bd121b", "sighting_of_ref": "indicator--5f1567bc-518e-4cf6-b533-d43d9c8bd22d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e0edfa5-cc33-4b6b-bdcf-2fc2cbc4d4cc", "sighting_of_ref": "indicator--7513c494-20ec-47b7-8c7d-8269a1f229ed", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9708ebdf-e833-4c1c-9e07-79d30eba52c2", "sighting_of_ref": "indicator--d5fdbc67-fd13-4465-890b-783329e73d48", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4879d6ab-077a-4d3a-90ec-253a6402d1fc", "sighting_of_ref": "indicator--481dbb3a-253c-4493-b8bd-5003ec8b1cf9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb7e0e90-5d36-405d-b7ed-eb248bbdc218", "sighting_of_ref": "indicator--72720593-1b9f-4872-ace2-2e361a7e24b4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51e282de-7437-46eb-a8b5-1cae301a6a41", "sighting_of_ref": "indicator--02ae3ae3-5d09-4096-a0e1-dcc08015a56d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8704ad1-e325-48b4-b85a-219a9c7f9529", "sighting_of_ref": "indicator--5eb9c593-2f93-4834-a3bd-74ec91831543", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d83fd98-94b3-4346-898c-97b1d33848d0", "sighting_of_ref": "indicator--7b23babf-1492-4b9f-80fa-5402819129ec", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33c61919-a105-4c92-8199-867b88ac49cc", "sighting_of_ref": "indicator--256eaa7f-a495-422f-be36-11d4d82f787e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96e84014-7847-4629-afbb-3344ee09337d", "sighting_of_ref": "indicator--27e7e0a2-4cc2-406d-8f70-22d423df6a5d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c384ccd-c09e-4fc7-a4c2-13dcf0ad9831", "sighting_of_ref": "indicator--f3b1c732-6ad7-44f1-bf2d-998f91b0cbbd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbc3778d-2f71-4191-9ee4-10e1ad885ba8", "sighting_of_ref": "indicator--3339687c-ed84-4475-b1c6-173581f67077", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b8d4186-149f-4922-a774-cacd96170744", "sighting_of_ref": "indicator--88286622-725b-4b48-8b4b-6a378814ea36", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0959cff3-0df5-46bd-a494-a835dc70f468", "sighting_of_ref": "indicator--ecec251a-0a17-4871-9f84-d499d900fe4e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--590cbc54-10a9-4c39-a319-acc280c2de94", "sighting_of_ref": "indicator--ce955ccc-fb8d-4163-b781-126e22875924", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--031438a5-c857-4a49-82ff-31b4a5ffe06d", "sighting_of_ref": "indicator--760fad6b-b3fe-4e16-b141-e838e9c7e5d4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af068282-9bfc-4487-8ce2-6c617451541a", "sighting_of_ref": "indicator--b586cf5c-f425-4000-9885-b835dfdbcb13", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d4ce976-31fb-4702-9165-08d25231161d", "sighting_of_ref": "indicator--001c5cb4-e8e4-438a-8b5a-00376f66d30c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f29b57b2-4249-465d-9c2a-76a4e73e1b97", "sighting_of_ref": "indicator--d046f62f-8c3c-4ad3-8134-8ea0edea3ad0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d326c56e-c601-44e2-b26d-f995ea82ebca", "sighting_of_ref": "indicator--be056893-5642-4b86-9b63-f1aedc552902", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07fb9f8f-ff36-4a2b-8b78-f39458002e0a", "sighting_of_ref": "indicator--08cd7180-adec-440f-8e59-26a1449718f2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a74d8c4b-8a13-445f-b137-813b692cae68", "sighting_of_ref": "indicator--9f20ad85-7628-4681-89fb-f0e668ae8043", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ced085a1-7c08-431e-9cb7-c268b0a31b3e", "sighting_of_ref": "indicator--b03e151e-0174-46af-9469-6869115e79f0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f3e3421-1187-45f1-9638-3e56c7bf45af", "sighting_of_ref": "indicator--3037aafe-b644-4cd5-a898-7cc23410c079", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--063c3830-e153-4574-83d2-cb7034066c08", "sighting_of_ref": "indicator--4f952844-2759-48bb-be73-a9b2957e664e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c88f330-9c99-4528-97fc-7b4847ccef29", "sighting_of_ref": "indicator--5dc57370-3407-4234-a3ef-69dbb1e16bc9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5036180b-29b7-448c-ad8e-fc4d19cf0290", "sighting_of_ref": "indicator--86b1b087-8aa0-48d4-9289-29a9a5ed5f07", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80fce71e-af6a-4f77-9729-980f4e7a0955", "sighting_of_ref": "indicator--25c8ebbe-3fca-4d34-963f-c84a77b088a6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e38a81cf-e954-4a88-9228-09eb69b2437b", "sighting_of_ref": "indicator--1cbc21c3-952b-4e55-a5bf-4856d27d6786", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f36abad-3310-4aab-93c3-fe19d47a2e43", "sighting_of_ref": "indicator--0895a5a8-1fe0-43d9-81b3-9db18f512a2a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6005ce5c-9b0c-413d-a66f-cc4758490698", "sighting_of_ref": "indicator--5fbdac93-6011-444b-b1b1-a4633f43e48a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15f2fd1b-6a22-46f6-95c8-af364eebcefd", "sighting_of_ref": "indicator--c1d31d5e-2cc8-4baa-ac29-5700b250bb41", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8410f5e4-4db6-4fe7-bcf1-681269a27858", "sighting_of_ref": "indicator--6a238bbd-867d-4fc7-938c-6214c9109c83", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08b04264-afab-46e6-83a0-331d5ab2a23a", "sighting_of_ref": "indicator--a8114fe1-66c6-4c0b-a3f5-299d039152fe", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22b73776-90e7-4404-be71-27f72d352122", "sighting_of_ref": "indicator--37134b20-e7bf-4ee1-94e0-31dd6c8a8d5a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ff304f1-d889-410a-9308-68e515d351cc", "sighting_of_ref": "indicator--54bf2b0f-f3e7-46fe-b2ce-48adb208a2fb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4371154c-8176-41ff-b766-d3e9907e2a0d", "sighting_of_ref": "indicator--1c29c660-d429-4b93-b567-70992e662b1d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36848032-b394-48bf-a78f-d18c1332c939", "sighting_of_ref": "indicator--41533380-a9bf-45eb-8ac0-71679933f73e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2ffd3ae-2c18-473e-b6fc-d395b4e45fd7", "sighting_of_ref": "indicator--0a3bb9a7-4a77-4862-ae27-bb21f9590557", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08b81216-b54c-471b-b1ed-180bdd438c5e", "sighting_of_ref": "indicator--90c59cac-70c5-469b-87e1-58421d947063", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ca46a01-1029-4fdc-9e08-68c75a57cc2a", "sighting_of_ref": "indicator--9f30dac3-6c08-4224-8772-2075b2b44c8f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acbf9689-a491-4520-82ce-03d7d694f495", "sighting_of_ref": "indicator--e58afbe2-4ad8-42a8-960b-e14687b3a54a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--503b9780-6289-4d54-beac-46a3a862511d", "sighting_of_ref": "indicator--325fb119-5e69-4826-8fb0-845901aec057", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c134d8be-3d69-424b-a226-bfdc89d23bb8", "sighting_of_ref": "indicator--2e5e49dc-88c6-4ee7-9250-686cc32612aa", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--accece21-687a-4d8a-803b-9011a0577fcd", "sighting_of_ref": "indicator--077e1e95-5971-4c64-a246-b16965fa91bc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b9faeaf-c0ef-4182-a949-ed0a90ac2ffe", "sighting_of_ref": "indicator--aeb13824-c243-4cf1-a297-8c444a2acace", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b34f59b4-59be-47af-a314-500a420a25d8", "sighting_of_ref": "indicator--3f5a945c-9c20-4ae2-a1ac-c5218b1088b3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e41fc07d-cd1a-464f-a6ca-d9aab187efd8", "sighting_of_ref": "indicator--a03a3db8-102d-4d8b-ae27-10c2c000ccf1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b56622d5-413d-4b09-8419-cb8cf6996c25", "sighting_of_ref": "indicator--349c3b7a-393d-4b9a-9695-5811e097a87f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef019f67-04ab-42de-bef6-264c7a06f200", "sighting_of_ref": "indicator--d86aef21-bdfa-4605-968b-1fa054f95f84", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c28b2ca3-ac76-412b-b3ab-243aedf85ded", "sighting_of_ref": "indicator--ec96ab5f-e574-4fd9-8761-51bb2af3e380", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd690959-4c02-49d7-ac3b-7e485df915c3", "sighting_of_ref": "indicator--649705ac-52fd-4b84-8269-8d070d091fa4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35734563-7ed9-48d8-99ee-8083b955d8e6", "sighting_of_ref": "indicator--71332f55-4d70-4d51-afab-3918002ad569", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0744e926-f9e2-44a3-9816-e187636c26f8", "sighting_of_ref": "indicator--860b7510-be20-48af-975d-66b11187d04f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3926155c-d34b-486d-b9da-e6ef5652e621", "sighting_of_ref": "indicator--b041fa10-4658-44bb-aaf5-9ecf413fd460", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2c82f01-5351-4ce5-92bb-58917ccf6d0c", "sighting_of_ref": "indicator--56f7290f-743f-4cc1-8128-be4a015c04b9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96f03023-3a0e-44ec-8b1d-d26f8c89304a", "sighting_of_ref": "indicator--9d9b9c4d-cb15-42c4-adca-84bb3f5587de", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb7a124c-0cd3-4327-90c9-ab2cdc2f23a1", "sighting_of_ref": "indicator--17163849-41f2-4e3c-99d2-6abe1b7fd358", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fd0a7c4-cd31-4bdf-a558-d03c0d04d440", "sighting_of_ref": "indicator--9a7ba721-28c7-4e6f-8661-b5310d2a8820", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1718f8a1-3780-4ed2-87f3-b984241560b1", "sighting_of_ref": "indicator--f8a1c2fb-3d4d-4fc4-9a36-03401d549a79", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b7d4df8-82ca-4a9c-9995-4ca431fe9bbb", "sighting_of_ref": "indicator--13af4ad7-d156-4ad9-933d-8e80a1e04f5f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--463d8302-c650-4bb4-a444-8dfb0b03fcb4", "sighting_of_ref": "indicator--ebdefc5d-8236-4c82-8d58-021dd00ffb8b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f98a8bc3-5aee-44ae-a10e-7d5433c522cc", "sighting_of_ref": "indicator--1f660373-edc7-4a9a-ab7d-acb5a7d436c1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bb5b432-9a13-42fe-a3c8-b02533fd2549", "sighting_of_ref": "indicator--c3f34dcb-10f6-4ce6-9555-7878194e0125", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac594c8f-5558-47f1-af00-ae7353c17aa3", "sighting_of_ref": "indicator--a70c1f2d-d257-42ab-b8b3-e30f0804b929", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63e57713-7626-4203-ab50-666268639d5f", "sighting_of_ref": "indicator--491860a7-cf32-44fd-8559-d06b32185289", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--088cd504-1c03-49fd-ac15-18d2c55d17b8", "sighting_of_ref": "indicator--fd5a37b1-bd3a-48a3-925d-d1aadcae158d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c12e840c-d406-459c-9399-8880a788f8fa", "sighting_of_ref": "indicator--f251bef9-849f-493f-8dc5-6f8e011783f9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aff57766-a671-49fc-86c9-1ab6b449b6a0", "sighting_of_ref": "indicator--254335ff-7dcb-4a5d-9b72-3d1334d50993", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c13375f-31c5-4a95-8983-0739dad6dad1", "sighting_of_ref": "indicator--75e695a3-6755-4a97-ba55-3d53b3e53198", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c70977e-9ba1-48a1-a7ea-66183bccda4c", "sighting_of_ref": "indicator--d6373ecf-3684-44f6-8a43-f721f4a372d7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1db76bfb-3c40-4c1b-87a9-c30273c006b5", "sighting_of_ref": "indicator--ef8b3fe4-acd8-4cee-a3d8-35eb50ffae2c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d319377f-365d-4c48-8331-944fd28a0ca1", "sighting_of_ref": "indicator--5b5fd2a3-f36b-43a0-90d3-af80b780acd2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf3ba139-3702-49a4-9372-e29f08ae2012", "sighting_of_ref": "indicator--e16aa475-643a-4eb7-9864-6e1b917f8537", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96c7c408-2b87-4936-84b1-4f181412306e", "sighting_of_ref": "indicator--e8c5f2f4-0b8c-4e78-9b89-59cec71d5b39", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fdb44d0-32b9-4bb3-aa5c-54b8fe3242b9", "sighting_of_ref": "indicator--7f42e038-bc45-4f9d-9304-97f021e4bb33", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5770e649-2ec2-455f-81cc-eb2c424b4a0a", "sighting_of_ref": "indicator--a39366e9-3f12-41f9-a988-94706b5fbc24", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9f0a2a6-7fe6-408e-9bd7-a904541b5be9", "sighting_of_ref": "indicator--81ccd41a-3a54-43a4-b245-5933432fb12a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a449098-253a-443d-b9a3-3287072c255e", "sighting_of_ref": "indicator--87267495-a950-48ad-a0c6-3232a23ff536", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b03bcf5f-d644-42ea-84ce-613186e4aed3", "sighting_of_ref": "indicator--5f4e1b2d-92fb-4b0c-8dee-a52821c763ad", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07f56fbc-5e89-4240-b8ea-36565300e7b8", "sighting_of_ref": "indicator--9b035805-d4df-4eb2-82a9-ca252402e4aa", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d83290d-1139-4112-80cd-0ea9bb2b1b89", "sighting_of_ref": "indicator--e004d8df-1578-4a8a-b516-f5b536d22402", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3bb6b85-7b16-4e86-97d9-b7905bbf8924", "sighting_of_ref": "indicator--d64a14f9-dc91-4ca7-886a-7b337b9cbf9f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--215cda23-1896-4613-a9f7-c56b01a65aca", "sighting_of_ref": "indicator--8acdfa6a-e3a3-4bfc-9723-1eea3780bb0c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dce581c-1450-42fb-911e-daa13c35c9bd", "sighting_of_ref": "indicator--90e42751-f5ce-4838-9cc5-9e862dca5ec3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ca175ae-b8e1-4ef4-871b-0b7b3a790ebc", "sighting_of_ref": "indicator--efe7cc24-eb68-4841-81f5-28e458ad7a04", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ffed0f2-12f7-4a99-93af-0816b2db7649", "sighting_of_ref": "indicator--7b5c58ca-45aa-4a76-8e4c-0acc1519da80", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24c38baa-30a5-4b45-9624-7e2a6b67f868", "sighting_of_ref": "indicator--e1e8a3e2-9925-4ca2-871d-22aedc71e15d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d20b8a5-ab93-4730-9168-eb928e4408b4", "sighting_of_ref": "indicator--3ca50c5b-3d57-40ee-84b5-4a87cfd8e3d3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84e40af2-334d-460f-aa0a-22ce03b1729f", "sighting_of_ref": "indicator--74b828f1-3ee6-4f60-85e5-64b4f9694a4d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d437d581-f599-44de-a9ff-be7c414dd88e", "sighting_of_ref": "indicator--2eb6dcd9-dc05-4c8e-817d-c640d115784e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aad09ed4-1639-4e18-8be3-a82bd4535250", "sighting_of_ref": "indicator--9892f525-2deb-49fd-b1a8-3a0b30814f8e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5173131c-38c8-44b4-9807-ca745486241d", "sighting_of_ref": "indicator--ba4f9ace-1634-4c49-ae20-4605dc957cb9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4702385-b6e4-4f14-aeb0-6b6ecb3ffd5e", "sighting_of_ref": "indicator--0abfec8c-7203-4520-ad1a-7708db70cdbe", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--513a64ad-3a6f-46bd-8ef0-1f4fc6ee68ad", "sighting_of_ref": "indicator--a5cf1154-9945-409d-ac5e-f9e5f67593be", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef467bca-19ce-487e-81c9-ba7eb7190d08", "sighting_of_ref": "indicator--8c180af1-1eec-414b-accc-c45d5a2c67b5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be16fffb-3290-499b-85a0-a0eabbc277f8", "sighting_of_ref": "indicator--b6772270-243e-46fd-a34c-495e68e5cf17", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--561374f8-ab92-4a4c-83e9-ad3b63d71dbd", "sighting_of_ref": "indicator--a60d66b9-c5aa-4b71-812d-c6deef34122f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21ce70a8-5077-4a6f-9a39-6e216a46f0ef", "sighting_of_ref": "indicator--2d4c4394-ecd9-47a3-be68-0657e50c09bd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ed943c2-ebf7-4c75-990a-058163aeede3", "sighting_of_ref": "indicator--1c6befa2-ec33-4392-9ac7-cb9cb4d09d56", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f074cf5b-1049-4a3e-993d-fc5bf6657933", "sighting_of_ref": "indicator--c2746c76-d80d-405d-bbbf-f9fe4060544c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25fbe066-7e41-4399-8d4d-0e030c419ac6", "sighting_of_ref": "indicator--c91e8648-0476-4364-81a2-a3d8cfa724bd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4a2612d-9c75-469c-ab42-1ef99a766617", "sighting_of_ref": "indicator--0c09360d-f868-49bd-85f0-742d2f839dda", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbdd61a3-3409-49f2-a4e1-c79fe577c053", "sighting_of_ref": "indicator--68270faf-9a1b-47cc-985c-1aa712e07db9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40d4548c-bece-428b-b161-2b76e0841a1f", "sighting_of_ref": "indicator--61a5b98f-3d47-411a-af1d-a102560c79ad", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db0b24d0-096f-469d-b4ea-1dfcb67f7ab8", "sighting_of_ref": "indicator--73dc9fdb-d252-4b37-a554-599a528e724c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1733327-687b-4d5b-8e87-39041cf46621", "sighting_of_ref": "indicator--4040ce63-05af-42f3-86e3-a4b911ef4753", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5629fbb-62b5-4f04-b51a-875c81a90088", "sighting_of_ref": "indicator--b316308e-aa05-4ce3-b09a-d903c8c8c1ce", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c57c8775-06ca-4bdf-b106-c9b391ef921f", "sighting_of_ref": "indicator--006bb4dc-1ebd-4aec-98b0-b82dd6527c07", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--248ca410-74c6-46eb-8523-48ff437ce924", "sighting_of_ref": "indicator--7525c596-7720-4ff6-a9ee-11738213da6a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deae5913-e820-492c-aac9-a28e40397e09", "sighting_of_ref": "indicator--b70dc0d6-7539-45d1-a276-5bbe1615c0d3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d562076c-2351-4a75-a76e-26cef1e93fa1", "sighting_of_ref": "indicator--04edca95-73ac-4639-8aca-1ce046d5def2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfed45b7-0151-4851-a7b2-1a733de32482", "sighting_of_ref": "indicator--54d6201f-1802-4fc3-977a-0b8782f746d8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31ef8025-9b65-452b-8b0c-4b20253c1d6e", "sighting_of_ref": "indicator--7eed0610-1c32-4b22-ad88-087d1fb936c5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f07e8a3-cae4-429c-9d05-08b8f86ac738", "sighting_of_ref": "indicator--bb102e33-7baf-4d9d-a5f1-a014172f9fb9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--610cb8ff-0d6f-4e82-9d54-ec574c9f8cc4", "sighting_of_ref": "indicator--469fb52b-7eb7-454b-ae99-338db9f43a67", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28b96675-6ea4-448e-81e4-62a5c3cfc963", "sighting_of_ref": "indicator--957e4b87-e770-4bdd-b9af-5671189f35a5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b00e4073-3d3f-4348-a623-a011364cd2fc", "sighting_of_ref": "indicator--1eb13d54-dfca-43c5-9916-e336c6220b98", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f06dbf3-d0df-49d8-ab12-526ef440b8a6", "sighting_of_ref": "indicator--f1a57c9d-9d2d-422c-8ba6-5ba30b46ab2f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8256832-a33b-4b72-a57b-ffa30fcfdf66", "sighting_of_ref": "indicator--a9bd3cef-0d3a-4b5f-bf1a-6642a4b47b55", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af8b2a06-20fd-4e6d-b53b-c81e7cc2480f", "sighting_of_ref": "indicator--bf1b527b-c702-45be-bf57-8f68f20162c8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c891f5c9-34c5-4738-a38e-4b3c0e5e91ff", "sighting_of_ref": "indicator--9b566801-b658-46fe-b1b6-7e7ef3704955", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--909796ab-ff29-4228-ba81-52907a02208e", "sighting_of_ref": "indicator--15429565-70f5-4c68-aea6-41da1fb4a982", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3be1035c-51b5-4f20-8375-8b0dd7a4d92b", "sighting_of_ref": "indicator--bd423f54-db34-4fa6-b03c-1b8db1a273c7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4089bb34-2c5d-494e-8693-7ce06fc2745e", "sighting_of_ref": "indicator--75dd8268-de99-4fdb-b070-0631a71966b4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac10eb0c-4d3f-450a-8095-dfd529896f40", "sighting_of_ref": "indicator--3a4b1f2c-b13b-4835-8a91-be7af4c4bd9b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--194ea2c6-c0f9-4b1f-9de6-1bb977b2ac8f", "sighting_of_ref": "indicator--890d95cd-60aa-4c8c-a08a-8a071402923c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5c3d519-22b3-4ab0-83db-d8825b1fe6bd", "sighting_of_ref": "indicator--b2258808-6d79-45bf-b11a-f6f79e531545", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2df5bb3-7d6c-464b-928c-449f11d51669", "sighting_of_ref": "indicator--ab210931-16de-44cc-8dc4-d0bbd62f67eb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc770b5d-d91b-485b-b437-572c0f1d249f", "sighting_of_ref": "indicator--14a261d1-1800-4bfa-9ff7-d51fcc89d62a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e13e4c4d-d2c0-42f7-80e0-3b1346c3f1ff", "sighting_of_ref": "indicator--dec1b372-4062-4917-806e-836478893efe", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--febce156-3a81-48ef-aaaa-a2cb0971365c", "sighting_of_ref": "indicator--650b7e79-f6c2-43f1-8dde-f3e197c177ef", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d10ae54-3ff7-48a0-9100-ed285c7a0e93", "sighting_of_ref": "indicator--158d17ec-9507-4b4f-b6ef-15107ef6566d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7444ac96-8915-46b5-9a75-1568ce7f2b07", "sighting_of_ref": "indicator--e5017c26-0acd-44d6-87ff-177007b28695", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdbd9921-1f13-4cbc-bc94-6a0f9abc7e86", "sighting_of_ref": "indicator--5c24cfbd-cb4f-4a7e-bd64-163bfd7ce5c4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d729ae7-8f11-4655-8640-fee380836216", "sighting_of_ref": "indicator--a9d429d6-5114-4cc8-ac99-cb782e9fcbd8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44ad8a15-67ec-4181-958f-f138767a2718", "sighting_of_ref": "indicator--b88bfa90-e6cc-43f8-be58-ad92cdf835cd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8214f211-a614-412a-a467-a36e6b1b955d", "sighting_of_ref": "indicator--9f18bf3c-fb7a-45b2-8768-750d80bfbcd4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39327629-91e2-436f-8cb8-92a84b8ab044", "sighting_of_ref": "indicator--77a0030d-9fe6-4eeb-9d84-fb4a3dee3364", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b8cdf22-6044-425c-9439-27a1c2a45317", "sighting_of_ref": "indicator--fc77f3db-5e8d-46cb-9c34-ce5a190f3a57", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a54105cd-7560-44d6-b9b7-5f6cf52d9c32", "sighting_of_ref": "indicator--b9b77e2f-9271-47bf-9c08-d792f16d1976", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c755a6f2-8b90-48e2-899b-9c4025657bdd", "sighting_of_ref": "indicator--a0defa40-6ded-4f3b-a1fe-734520cf78fc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6167ea19-a887-43e3-8dad-07faa23aff9e", "sighting_of_ref": "indicator--c0974c26-4a48-409f-b8b6-eb0d7135cab9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0effb4c-1adf-40ae-a624-73b762cd9c17", "sighting_of_ref": "indicator--0e374ff1-e845-4474-8d9c-9fae6b67478e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e04a3f0-be86-4e7d-a4b2-d79fd332dbf4", "sighting_of_ref": "indicator--d6ad8651-10d2-42bb-9ce7-6f9d283b7a62", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b51f4eb-1e9a-417d-a198-85c271f54986", "sighting_of_ref": "indicator--d59ddb54-b5bb-4572-8ba4-e22763ae5f1f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c76d58c2-f61b-4763-a8e8-c5f9293d830a", "sighting_of_ref": "indicator--7910293a-7a7a-4589-a675-a6b0a33cb708", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7e1b1b3-d359-4e69-b7d4-2a2e6ef0f85f", "sighting_of_ref": "indicator--a1a2535c-9aed-42fe-b686-f2331b265760", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4f9dae1-eab0-4d5b-87ca-c531aac9cc2a", "sighting_of_ref": "indicator--373c4405-ef39-4ace-854f-f06685442a7b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a6e7839-e7aa-48da-bb9d-df442ce7f92b", "sighting_of_ref": "indicator--e2c1547b-6c31-4418-ad10-9d5cc7376a86", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7744a28a-450b-44fa-8042-0b6a8423f13f", "sighting_of_ref": "indicator--0b5557ae-24ff-44d2-a57b-a54743514d9a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b16e1fa-564a-435a-aa0e-7c74394731fb", "sighting_of_ref": "indicator--74970dad-916d-48e0-b7dc-a6a0b264ad43", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a80083d-56c7-4420-adb3-9aa1c7a6aaa7", "sighting_of_ref": "indicator--1689e818-e88c-4c85-a9e8-dfc16aa3b218", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddd651eb-9bf2-45e4-9647-77f6cd19772b", "sighting_of_ref": "indicator--19121931-6930-42fe-a8da-732b0647877d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9b62690-8e1f-4905-a6a7-f997a26fdf28", "sighting_of_ref": "indicator--5f7632fe-c7e4-4f67-8dc9-93014023877d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec019c53-71b4-444c-b92d-ddb84458c407", "sighting_of_ref": "indicator--f5c9949d-7e68-49c4-9e18-7abcf79f7600", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e690f19-c49a-4a2c-82d1-c4af3cbaf56e", "sighting_of_ref": "indicator--86f01857-35a1-468e-97e3-39b1750cddf0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aa769e8-a923-47b4-bfb1-413f1efb1991", "sighting_of_ref": "indicator--41f1b581-8134-4657-947c-ecde213809c6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c4b8b12-293a-46e2-b51e-1072eb75d1b9", "sighting_of_ref": "indicator--ac14c56d-3254-47e2-8102-8a49dd0d6425", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88db7d84-4da1-4471-a417-349ebfef057b", "sighting_of_ref": "indicator--10e89117-ff30-4339-a4a2-7c4af5c73b3b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc7fce21-a65d-4f3a-955f-6ac858f595a6", "sighting_of_ref": "indicator--537c92c3-5ed3-4513-955e-4e85f1b76095", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c5c092e-5faf-408a-9f64-b6d045e64cc5", "sighting_of_ref": "indicator--65b06e3e-bba0-4d2c-b159-47ffdf09015c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f511a074-ddd2-48b2-95e1-9f62b7a23f0b", "sighting_of_ref": "indicator--96efbf61-aff5-4bcf-9a63-af3f96b6fe9e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80d693d0-37c7-4358-aada-e5473a1f7bab", "sighting_of_ref": "indicator--4428c9dc-3a73-4367-8609-eaac0b38f1ca", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c570aca9-13a8-4f6b-9f55-84b020f0b369", "sighting_of_ref": "indicator--29d649c7-54f6-48ef-89fc-00fca681decc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--807f0f5b-904d-4030-ab41-2016f15e269b", "sighting_of_ref": "indicator--fdec7e4f-61bf-4980-babb-ada3645a61ef", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03237847-be38-497f-a9dc-b0c690b89656", "sighting_of_ref": "indicator--cc5519f7-efc7-4468-9d66-03489454071e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12554d22-ff86-4137-a4fc-b79c930e3216", "sighting_of_ref": "indicator--ab61f8a2-6a35-475c-85cc-1c678e1215aa", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6af96d28-ba1d-4c43-90b9-c6a2639731f0", "sighting_of_ref": "indicator--b9157948-ab17-4a69-b98f-7a744900a20e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a93c0c4-e86f-4b5a-902c-7ed088a59f83", "sighting_of_ref": "indicator--200203f2-a33c-472e-b963-6d12c1ccaad5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09c087a5-dcb6-4e2e-a43b-517796c5e24a", "sighting_of_ref": "indicator--628763e1-3cbf-4037-a1f5-d9294ccfe1ef", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4f41e76-4e0b-4f9a-9944-04ed72d6cf8d", "sighting_of_ref": "indicator--cfdd172b-36c4-4e4d-863c-98f650653b15", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2aa2c36-2650-478b-aae5-12bb06fca52a", "sighting_of_ref": "indicator--f0edfc7d-79a6-4314-881e-2d194cc571e0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92c977a8-e1e5-4693-ac35-babe7fd05a4a", "sighting_of_ref": "indicator--a8654873-ffa0-48d9-99a4-5b5f7d5e9c1e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f434d113-f72b-4fb3-9ff0-a1e21bfd4110", "sighting_of_ref": "indicator--20aa87de-86c5-4c6c-a0fa-6b5017888754", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac5a9df4-5dfd-406f-bca9-e5f39ce1022a", "sighting_of_ref": "indicator--1bc79de2-dcc7-4d7f-81aa-a9a3bb928747", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--009675ea-acce-4e5d-a635-ea3bb07665d5", "sighting_of_ref": "indicator--2b26b648-cfd5-4a2e-84ee-1fb742e39c61", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47ce8301-30d4-4cf2-a43b-d89c7eaa9c68", "sighting_of_ref": "indicator--0836e51c-8fa5-48f9-9c5e-877349ff3e5c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--137ddb92-371b-4022-9ef7-976c2f492c55", "sighting_of_ref": "indicator--4442c523-a793-4985-9027-41d4046bc3d9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0cbe409-2c30-4f91-889d-9cd278676cee", "sighting_of_ref": "indicator--cd513fc9-f6e7-4632-bfb9-26709e6b41e0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85b5e7d1-9ac0-45fc-9619-c712606c971b", "sighting_of_ref": "indicator--0a95bc85-8e09-46b0-a223-a42ce774c166", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa89defe-8793-42ae-830f-a8d8ce612bd2", "sighting_of_ref": "indicator--98473b6f-0d72-4cfd-a4f9-7b524ead1055", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e256aa6-a018-4fb2-b156-ed62be0530ed", "sighting_of_ref": "indicator--b525410b-a2a4-4cd1-9572-bc32a6a66bde", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cc97f71-e8e4-441b-8514-57ecfdde4672", "sighting_of_ref": "indicator--4712348b-5afa-4cd9-accf-3b4cda8f0602", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcac12f7-55d8-42e7-b260-e6dedfa9ad73", "sighting_of_ref": "indicator--44fa9601-d2b2-4d94-b389-f544699dc74c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12e41b6a-98df-4866-83b3-c318f45f6d63", "sighting_of_ref": "indicator--3e6d8341-514a-4b33-9b26-f79a449cdc5d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbd07dd2-15f1-4189-84df-74fdb64f19f4", "sighting_of_ref": "indicator--f7a79efb-ecd2-44ad-91ae-164572d50f48", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61ca938a-7bca-49d6-9cc4-a32a7d224c62", "sighting_of_ref": "indicator--b32f1ea8-d955-4c77-84a7-3c61cb37a3b4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9e221ab-c966-405d-b563-16a02e3b238c", "sighting_of_ref": "indicator--dfdedf2d-5220-413e-b00b-5d4dbe833f89", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a481160-89f5-4adf-bf37-98cc7b88ec24", "sighting_of_ref": "indicator--de30d5f9-46b5-4529-a1ff-26387a40e0f8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68fd4de4-18e6-468c-9081-9bc3087394e3", "sighting_of_ref": "indicator--51c214e9-09de-488d-a3c5-ec2d767ed436", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--903865d4-418d-4afe-b2ad-da8a50b25521", "sighting_of_ref": "indicator--d38b1081-ef0d-4da7-96bd-397c6a2e88a8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae34386d-6c3f-4106-bf64-88559c251786", "sighting_of_ref": "indicator--7c9343aa-dc73-4e8b-b97d-23ac422956b4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f6c1692-7a30-4be9-a5d9-fefc4b64e7d9", "sighting_of_ref": "indicator--fe9b03d8-800a-482d-857a-2715fc7de6bc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09bf5623-0ce2-4372-b99f-578bbcbd9f97", "sighting_of_ref": "indicator--b6f99174-4184-4e74-ae00-c19c4105fe06", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73631fbe-4ffe-4d04-8b7a-f8ccd7ed340c", "sighting_of_ref": "indicator--9ba5f61f-e808-44cf-9c0c-3ea0da236868", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd7ccc49-c2ee-4750-9014-97135b3799c1", "sighting_of_ref": "indicator--0b0bde42-60c7-403c-bc48-168ff0c08967", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--273e95a8-5b5a-44c5-9f10-330b7991076e", "sighting_of_ref": "indicator--21a4ef87-e251-4205-897e-4d3acb276213", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a957195a-58e9-47fd-a8d2-b0507caa3354", "sighting_of_ref": "indicator--99631c3f-c904-4122-b0c4-d6f3b2e63cd7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b2c47d3-4b1e-4bf4-a6ef-a4aa0d7f3fc9", "sighting_of_ref": "indicator--ea4aba60-e685-4b76-8143-439558b15ee5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--952a60ed-deeb-4ad4-9930-4f44de3da6a7", "sighting_of_ref": "indicator--aaf95293-5adf-4d35-8a2d-3d1df2d55887", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6356f6b2-8f82-4c2d-8e97-b3ac53a2a66f", "sighting_of_ref": "indicator--9ef9f8f6-2105-486b-a15f-c3674be12fef", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--571fd91e-97a9-49e9-9831-996a800c663a", "sighting_of_ref": "indicator--4d9b0af6-7409-4dfb-abd1-3312e0be48ee", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60ae5b94-2035-452b-b9f7-da0c2f284c55", "sighting_of_ref": "indicator--71d6f58c-9e37-4419-87b5-08800fdaa037", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eee261cb-22cc-4e85-a4d9-bd2623118cdf", "sighting_of_ref": "indicator--949e71b3-64a6-434f-b7fa-cdffdd777a66", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efa3dc32-2979-41bb-adc8-1b45c7dab121", "sighting_of_ref": "indicator--ec864010-1ccb-4401-94c9-7b2d94e4f302", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43cb058e-8198-4e57-8a7a-68122ddacdbf", "sighting_of_ref": "indicator--2614223c-6ae9-4aca-96cb-fad086840f46", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--115a9d82-472f-4da1-8920-ed519ad56b73", "sighting_of_ref": "indicator--c625cc33-be16-4e7f-81e4-93a9220228c5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--939ee26a-19e2-433c-a311-055f4b290002", "sighting_of_ref": "indicator--0f5731c0-b18a-48f3-8581-d54758511c86", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f404d7a-b45e-4f1b-9c14-48786949bd1f", "sighting_of_ref": "indicator--974995d3-faea-465f-985e-7e7507682e6a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d47f486f-d5cc-4a8e-8679-0c8568b7b4d7", "sighting_of_ref": "indicator--50357909-0207-4b40-bfbb-9fab1dc614ce", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b1472b7-3576-4bcf-bbf8-e74e735bb789", "sighting_of_ref": "indicator--c6dc65e6-5457-49b9-a0b2-e51b7f824f0e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24db2fb2-e799-4c30-9a68-5428d59afb26", "sighting_of_ref": "indicator--c9be7d84-52e0-43bf-9b4f-099da13edfdd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd98f22d-2d45-48d7-850c-85a29384fbac", "sighting_of_ref": "indicator--477bb785-24ac-4edc-94da-ff3f5ab4754b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea361d58-973c-4fa6-87f6-cc18522246d4", "sighting_of_ref": "indicator--4d5a24af-2e74-49d3-934f-01a6eefc1f7c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eabf63c-8eae-41b1-a91e-fd4df43b9d14", "sighting_of_ref": "indicator--fe24214f-19a0-4b6a-9590-8caa4befdf1f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eceedb08-7a58-4206-8cf8-d9f1ae3efa2f", "sighting_of_ref": "indicator--e5dda39e-1861-433f-ac1a-b9f0eb211db9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bc2832e-e96c-4249-8b7b-327ddf27aace", "sighting_of_ref": "indicator--d98449cf-f214-4b18-bd19-e8b666d4c326", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66c36c9c-3ddc-4e12-9b7f-e4247b0e47e8", "sighting_of_ref": "indicator--119548d6-756d-4e5a-9675-0d04323e601d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5c98b02-0b47-4baf-b157-a46dc82c7c59", "sighting_of_ref": "indicator--be70d3ec-4e19-4b8f-b41f-ee824117ee42", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24c24756-0893-4143-8a5a-1c9c7bf92648", "sighting_of_ref": "indicator--dc9d3403-eb60-4da3-9ac0-59c48aec9185", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9e5a24c-529d-4efe-8f39-2a6f08f65507", "sighting_of_ref": "indicator--baad8939-5368-4b3f-9312-e5d8f183cf27", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbfab32c-821a-49c7-948d-94ca1df9eaf3", "sighting_of_ref": "indicator--33717896-631c-4b67-bdba-9eccbbd43e64", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad99a061-b2eb-45a0-ab4f-3f3df14bdae6", "sighting_of_ref": "indicator--b2d40a54-ffc8-4111-a310-14e606e94c26", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b96df80c-c5f9-4315-9afa-ac9c1b747e52", "sighting_of_ref": "indicator--89fe4709-487e-4331-a7f1-cdd8117ad01d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--863b0125-83b4-4002-a287-ad97a85ebfe7", "sighting_of_ref": "indicator--756bfda8-d053-4614-b080-6d94ee7d9374", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09a2fda6-f137-4d64-8c89-808cabe3de65", "sighting_of_ref": "indicator--f268462e-5248-486c-aef1-9dfd1fde7669", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a75d81f0-2117-4a46-b73a-57a68f5309b1", "sighting_of_ref": "indicator--998921c6-f5c8-4526-94a0-3d8494519ec2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c903b2b-cf24-44f4-b9f9-24d748590680", "sighting_of_ref": "indicator--38ae5954-5f35-4852-8550-a8b970e85d24", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--776d278c-aa88-478d-a28a-6256d0ad9f4e", "sighting_of_ref": "indicator--166c6086-3c41-47aa-bbc2-7748101ca57d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36b52409-329b-47f5-8b5b-5ce938e76d04", "sighting_of_ref": "indicator--0213d093-1548-415f-9664-569601f6e973", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce08f72b-deb6-4ee5-86b8-5bc26cbcf27d", "sighting_of_ref": "indicator--c0ce88ad-5402-44cf-baf1-a791a8dabc53", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--984a372e-c586-428e-a886-eaf79a0c72e5", "sighting_of_ref": "indicator--5d5b905b-d6b6-4583-afa0-2ce9b05cd8d2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a113435b-9eaf-4b9c-b7f7-65c642fcb9e3", "sighting_of_ref": "indicator--efedb033-c374-4539-b770-a8fe32c2102b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a02d7fe-0cf6-4a21-9bc3-d292b6ee6c0f", "sighting_of_ref": "indicator--691eefd6-ee24-44d7-adb0-afab4f1f6f51", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f31cedbb-a1e8-4ec3-9e45-339d4df121db", "sighting_of_ref": "indicator--c68d0aa2-5c1d-4f95-b685-f890fd6a5d02", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec7ff356-d22d-4c2c-adcf-0230fd921fad", "sighting_of_ref": "indicator--7aef45fe-39ff-47bb-9e33-70e2fef4476d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcb97ac5-2fb1-4022-ac6e-946febdeb4b3", "sighting_of_ref": "indicator--57d7788c-b391-44e2-aa5e-b57b65f8e7bb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55201081-1f66-47df-91f3-e7474d54026b", "sighting_of_ref": "indicator--b549d6fe-183a-49f4-a2ad-42ad73bab715", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--753f69ff-c7ec-42d5-896a-b70084236331", "sighting_of_ref": "indicator--ff4d9f9c-751a-4f60-ac53-ac9b830d0c74", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4199d0cc-4b2f-406d-b6b8-7c2595667a10", "sighting_of_ref": "indicator--3ca1edd1-0bac-48b6-9aee-20817c6b64f1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2d1da9f-11b6-4c6d-b62a-33f3fd72a27f", "sighting_of_ref": "indicator--526c24a1-8a76-4c7f-88ea-ba1b0dfe3b39", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5e2fb17-f61c-41c6-abf2-07d488d79c1a", "sighting_of_ref": "indicator--e9ae0fcf-fff6-439d-a4d9-74808d1a8e75", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8301ab2-ff91-4393-a5ac-781ab50da9f1", "sighting_of_ref": "indicator--42dfe6b5-5e15-43fb-969a-ff574373e1ac", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8bcb677-7e90-4a81-916a-4a3133626e63", "sighting_of_ref": "indicator--2377eb99-6902-43ab-b2b5-8466357faec7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f28d3f27-c3b4-4c67-8ed5-f2adeaaa3e29", "sighting_of_ref": "indicator--4136162c-8d91-4d34-9a7f-fdb8f0315208", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f8d47c7-9f50-4f12-ad06-3f5e3ece5e3c", "sighting_of_ref": "indicator--903b0a75-3d0c-43aa-aa0b-38f16274ccf6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04e33b3a-6373-4609-81ef-fba01415fad1", "sighting_of_ref": "indicator--ba91adb5-5580-43e2-b228-aace6690d7d1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07691fb4-8249-4a46-99ab-16616483fb89", "sighting_of_ref": "indicator--6dadf1f8-2337-4ea8-8980-bbdbc44a0949", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db1d93ba-7468-4284-871c-ac49fcf9c7d1", "sighting_of_ref": "indicator--9c12d4fd-28d0-4be3-a66f-bbfc81f00b0d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6430d089-6f95-4486-ac02-a1acf302e2df", "sighting_of_ref": "indicator--54f0315c-bc46-4325-96d2-46fd24d99469", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92d1778d-6681-4423-b4ac-0716081adc6c", "sighting_of_ref": "indicator--2daf27b3-f4d0-4b98-9720-e3cdbd60872e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--076420e4-531b-4e9a-8700-e508eeed09f7", "sighting_of_ref": "indicator--b9225928-afb4-47b1-a86d-e1ac65639bea", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--560e9bcc-a8e3-4985-93c7-4fbc6c8ef608", "sighting_of_ref": "indicator--1f667221-4413-4a20-8e3c-456a0f3b876e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd4657ec-8414-4869-9c39-20bf941b1dc0", "sighting_of_ref": "indicator--813c1f10-f09b-4db8-9d12-3bcd120ec82e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d355908e-bc50-4522-8af4-6c7334eceb6d", "sighting_of_ref": "indicator--4c00568d-1ef3-4e39-8456-45efd4dc5faa", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d0fe89d-ba7c-45b5-960f-8f0cc83c0128", "sighting_of_ref": "indicator--22a4135c-c5db-4b11-be72-a054593e8cc9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b627bfd-96ff-4f70-bfef-4ef743b80ec5", "sighting_of_ref": "indicator--67c360d9-8c22-466c-8c6c-56f1ded39cd2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--278c1157-2729-45ef-bf48-59bf6269f21d", "sighting_of_ref": "indicator--cb7dcf84-54a4-47a4-b175-cdfe09e2e33d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9e3c70b-bb51-4274-9ef4-5856186e947e", "sighting_of_ref": "indicator--aa5bf798-e458-4dcb-bbee-557376ec3a57", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d532557f-fe9c-4649-b826-b3a946303ee7", "sighting_of_ref": "indicator--a6737c8d-31b0-4dc4-9c9f-6d25b8791e1d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbcb6fca-52c4-40f7-88a4-3384afc9a926", "sighting_of_ref": "indicator--41c881ab-fb8a-4069-9d6b-6764dab5f537", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46fc7882-445f-4ff5-8453-1b42557617ab", "sighting_of_ref": "indicator--78b4d9ed-ae6e-4a31-af21-4a7364d6c9f4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0f7d042-cbd4-4e4e-a9dc-23e7817ddabe", "sighting_of_ref": "indicator--190766dd-0262-4d0c-8f5e-0d648e292345", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--411c30fe-f1e5-48d7-82b1-b368befc99c5", "sighting_of_ref": "indicator--6072430e-a2b2-4af3-bff8-61aafd98cc04", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c5e52ee-bfb8-4dd0-9f84-f948ea44c7c3", "sighting_of_ref": "indicator--c61076cf-982d-420c-b0ca-e5b9fb698c92", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bc3fb6d-b10c-4495-bd65-d276afbdf29a", "sighting_of_ref": "indicator--c164c5c1-386d-413c-8980-d726bc608226", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aebef56-9faa-425a-8fc9-a3af1a0e79c6", "sighting_of_ref": "indicator--294f257a-1a94-4c6a-82f9-f70a09643df6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15b25cf3-7aef-4229-9bcc-7d30afe0af8f", "sighting_of_ref": "indicator--abeed735-fdc9-4be9-bd2f-18ca41d7b82d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae53c74d-2798-4ecf-8814-1185e7cb3cda", "sighting_of_ref": "indicator--9c24aad0-bb60-42a9-a380-7079f5062421", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b49099d3-fb9c-4577-a448-b77247bae4a2", "sighting_of_ref": "indicator--f00c9e0b-ea64-4977-b860-f383cd5af53c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfc54403-1db6-4705-8f51-825754b87dd6", "sighting_of_ref": "indicator--c2fe8f61-3f8e-4d40-b410-59744c999b1a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f46ae65d-ed31-4e1e-af02-e956c1c4cd5e", "sighting_of_ref": "indicator--c078e800-cc42-4718-a8db-94c8e3414738", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7457ea58-b7bf-4d77-9cbb-5d28b62c0aff", "sighting_of_ref": "indicator--29f4d04c-0c9e-45ec-b01a-b2c019e55722", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c35859c-9c1e-4ad6-ace2-f57fa696b915", "sighting_of_ref": "indicator--54becd69-16c1-4826-9a4c-471e211b62a1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e237e4a-edd8-4307-9632-503203a1d0bb", "sighting_of_ref": "indicator--2c258db3-e2ca-41ef-b9d2-07db74ae1b25", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d15c1217-bf9e-47ff-a3a1-f3dbe42a4ee3", "sighting_of_ref": "indicator--5927455f-d5be-4cf4-ba13-61b480f3a7ff", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cba0ef25-8eb0-44b2-b831-b39d05487f95", "sighting_of_ref": "indicator--334d129e-3520-48ea-95c3-726d74743b8f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--134394b8-33ad-4408-a487-65e097eac36f", "sighting_of_ref": "indicator--aedae914-e30a-4b87-842f-2b422705a274", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca5f43e3-1f0c-4330-9339-7622691f0931", "sighting_of_ref": "indicator--c1c41353-5c1f-42bb-bace-a6e85406a8ad", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c8e2cc0-3073-48cb-8cce-a5bed70d6d5b", "sighting_of_ref": "indicator--44d7acb5-df92-4e0f-92d5-93c89f2b61ca", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--551e0e09-f68b-4bd8-b94a-1eec8e3f7f16", "sighting_of_ref": "indicator--c38b1579-e9ef-4302-926c-9d3ffe821805", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1bf1288-4db5-4a04-a49b-95050ade86bd", "sighting_of_ref": "indicator--c9faa7a3-94ac-4844-860e-26fb75e977ad", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d67fbc59-f151-4723-aa95-2814abd3b05f", "sighting_of_ref": "indicator--e1448582-ea62-46e2-8740-aecc5e0fab3d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa882a87-3a0a-4d67-813b-51dcc441cc52", "sighting_of_ref": "indicator--3b1980a6-c192-4a38-8af0-f891fe1049a8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b871e853-0588-408c-9918-b29503857d07", "sighting_of_ref": "indicator--bbedbaed-b79e-49b5-86f0-41b95a94bb1f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e659fe2-3dc7-4fcc-a4e5-57da19ac9117", "sighting_of_ref": "indicator--30030b64-d382-4ff7-9347-6d67e3496879", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bcac103-0ad3-4909-9790-1d4948996f25", "sighting_of_ref": "indicator--1566d6b6-5b76-4f72-86aa-f987a38b13bb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdf807b5-968f-4ef6-8766-7b6d569a4579", "sighting_of_ref": "indicator--917c0f82-ca44-47e2-b119-9412bf95e22b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6698e67-57f8-4c28-8093-f0740be22868", "sighting_of_ref": "indicator--434425cf-bd31-432e-b232-12445117b5e2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--132fb72b-84e7-4bec-bb9d-0581d2d8f769", "sighting_of_ref": "indicator--2e33b1d1-0546-4f90-88a0-b80a81c806f4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b5f91b5-1d8c-41f8-ad33-8a9dbaae1b10", "sighting_of_ref": "indicator--cd974db5-6f03-4039-aa32-5f4b2717f95e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87a18330-0bc5-4e1b-8f56-7bd0fd22f3dd", "sighting_of_ref": "indicator--0a80b757-d816-4cec-97d8-c2da7f8f4f5a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85075a01-cf66-4721-88bb-2918f0ec1270", "sighting_of_ref": "indicator--2947bbde-02ae-448f-ac5b-4fa55cbae7f0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ba8a190-0715-4ece-9902-e0a80a3b3a81", "sighting_of_ref": "indicator--315ecae0-e9ea-498e-9397-be99be265433", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15485a31-bb98-4dfb-bef6-1e4b3e843736", "sighting_of_ref": "indicator--83e24c23-3702-4cca-8cea-fc7751276c7c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c50005d4-8e0e-4c7e-9b67-44479e0a6b83", "sighting_of_ref": "indicator--bdd32144-9c8d-46d4-aa72-d02b9e662b31", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b264cace-8ad0-4e17-b8e2-5eb53894509a", "sighting_of_ref": "indicator--f9a42812-46fc-4275-8fda-7a0175a09dd9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3adb4a29-065a-4da7-8621-08a57f946f75", "sighting_of_ref": "indicator--f4063c07-9a3f-474a-b8e3-5778310525ac", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0027853-86c4-4d78-af45-651a614ecfec", "sighting_of_ref": "indicator--99d084f6-1a5a-4fc5-bdde-2ef14ed4aa74", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5029176b-4de1-4190-bfa1-b7fdf4bfe72e", "sighting_of_ref": "indicator--116f5b6b-4b89-4038-8c13-6aa4d9c5db55", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5994f9e5-ff48-4ad9-8b87-0e816ea128db", "sighting_of_ref": "indicator--ccc68ab3-d622-4bca-abe2-a02f40a90304", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--802c0d42-5bb8-4047-912c-8806d9cf2663", "sighting_of_ref": "indicator--dfebbf39-c105-4969-923a-4de49a319103", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cae5b7d-bafa-437d-a2a6-0c8e26789a5c", "sighting_of_ref": "indicator--6b4a9a16-95ed-4132-b516-920ce3454579", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e1ad9c4-9be2-400d-be41-f77d76528215", "sighting_of_ref": "indicator--669d5e9e-62d3-4f97-8f86-2f018fad8253", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62164b04-3597-482c-952c-cd4e915a42b8", "sighting_of_ref": "indicator--0a7314f4-cd8e-4e1b-a955-7af9857a5c64", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20aa2e09-c206-4173-a7d8-46ecff899509", "sighting_of_ref": "indicator--0984ee3f-c29d-49d1-a532-28b0ae10114c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--473538a1-2b92-4505-ae5a-4656f05dc74f", "sighting_of_ref": "indicator--aa766ca7-9274-4d86-b990-fe5675583779", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc847717-8528-4b88-b374-ddb18e1936cf", "sighting_of_ref": "indicator--f8d46172-27fe-4806-a608-60bc62b0960a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62ce6c59-aa3b-4e5c-92eb-9af0bb2649ce", "sighting_of_ref": "indicator--e20ed38b-332f-49d1-be5d-ed6800c9a5f1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bcedb94-6ed6-4cd2-b805-30b1924f18bb", "sighting_of_ref": "indicator--e2083d2d-0a75-48ef-a300-ecd1cefb4a86", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d7edf0e-556c-4a97-a98b-2e8de855a3a0", "sighting_of_ref": "indicator--a9f3fe83-3652-4d02-a83f-07d98bb33e36", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b616a0ba-1ae9-4c69-ab95-690643c152ee", "sighting_of_ref": "indicator--4c918c6b-e7e9-4091-b2d1-261738f0a672", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b8c813a-bd8a-4d6c-9b5c-b369ba007c14", "sighting_of_ref": "indicator--7a7ece9f-ba9d-43ab-8c70-48a6abba88cb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41698664-620e-43f6-9416-dc5ae2d03682", "sighting_of_ref": "indicator--db9cc94e-d4cf-4010-a5f6-39b54af34b18", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29e38335-99a7-4fc9-8787-5446e258ae75", "sighting_of_ref": "indicator--4af3c7fe-f16a-416d-9ad6-4f1d69071f72", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb46acf9-e8f5-4e11-b25f-8aa5aec731e9", "sighting_of_ref": "indicator--9f2371eb-a894-4d31-b20c-3f3115473612", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deae727e-2a7d-47a8-b775-e99f7811f554", "sighting_of_ref": "indicator--94173fe9-0a39-4626-b08f-693f5cf713ea", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e09b308-c343-416f-83da-0e5d151f0063", "sighting_of_ref": "indicator--55e8c86e-3569-43ca-8cbb-73ac92250abf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--709e091e-4d01-422a-9e5f-71fd65a8d42b", "sighting_of_ref": "indicator--1f32db14-4244-49a9-8ad1-dcc0366a5f8e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d81ecd5-afb5-4bd6-b8a6-e8452a4de137", "sighting_of_ref": "indicator--4e764fe7-f288-4bf5-9ce5-4c64f7397a42", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65f606b9-0604-43dc-ae36-c66cfede5c7f", "sighting_of_ref": "indicator--63cc6d13-b36b-4cf0-9cca-e1447014ac07", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ab3162b-93e2-432e-9df6-3acdc2f18795", "sighting_of_ref": "indicator--0ef1689a-769b-45d4-8cd8-f05fd5e7d3ed", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab091feb-92f1-4387-ab80-6c056114291c", "sighting_of_ref": "indicator--85c4f087-cfab-455c-9585-d1932b80beed", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf90e628-4a88-43f0-a886-cd402051d928", "sighting_of_ref": "indicator--34e2893a-10c9-4f0f-af26-db0a0e29d742", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccea3c72-e27b-4afb-9961-df53d70291db", "sighting_of_ref": "indicator--5fae3680-b23e-4c8c-bfe5-42c0e8f91ba3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--793505b5-2a34-40af-8896-1ed2b8efce4a", "sighting_of_ref": "indicator--f9109fcf-f9d3-44a1-8234-8f9362b740e5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a309565-5923-4a04-b489-fbd2255dfc6a", "sighting_of_ref": "indicator--f71f10a9-7352-429f-a5ca-5cb341dda107", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eced9af-03e7-4151-a95e-483348129504", "sighting_of_ref": "indicator--7e2da92f-8ea2-44c8-9254-9ff3aa7669c3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36c58a94-5e5e-472f-aeab-18903d55c8cf", "sighting_of_ref": "indicator--c1e27171-7673-4476-a415-2e8bd553ce65", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04eeee7e-1453-498c-98ad-bf4cde74255d", "sighting_of_ref": "indicator--d4f03e0c-54ad-4529-aa07-4a57e4ee2a7b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f8881e9-c280-4a2c-8e6b-2102e8f0465e", "sighting_of_ref": "indicator--25476aed-1bdb-403f-bf46-cb29a3de35b9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30d5ead1-affd-46bb-a531-dcc9beaccf63", "sighting_of_ref": "indicator--707eaf91-ad4e-425d-a3ea-dec4deffd0d8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ecce16f-81b2-4990-a544-2d028e8dea05", "sighting_of_ref": "indicator--05b25f18-fef8-438d-a3c4-06f6791c52a9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a74ddde-8c31-4b16-97af-f5b617959e0a", "sighting_of_ref": "indicator--0520a555-b418-423a-8e66-f7b8c735b17c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--556a1462-1509-42c8-abc8-d3b441934a4d", "sighting_of_ref": "indicator--38ce95be-cb58-4ca4-b532-296770afda87", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95b3f179-239a-4425-a69a-4dbd45e4c1b7", "sighting_of_ref": "indicator--110cc2d5-6e26-4daa-82e2-cf95f2193a98", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14df1e07-668e-44a7-980b-9aedbf948be7", "sighting_of_ref": "indicator--f4dedc57-d663-45d2-8658-cf67077eeba8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9a326d8-62a4-46ea-bd77-0b4b41937ff8", "sighting_of_ref": "indicator--d278698f-9709-4bc0-a730-74d38fc1447a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9588d761-e5b7-48a9-8c81-63f583118afb", "sighting_of_ref": "indicator--25f2c4c8-7f6f-4446-80b5-d6d4b8f4c1c1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--620838b0-f76e-4969-b479-a170591ff4c6", "sighting_of_ref": "indicator--fc391b41-02e3-49b1-b22a-3cbc77e830a8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cae41a79-53d4-4cee-aa9c-b5dc19882ce1", "sighting_of_ref": "indicator--f0f2270a-5dcf-4c79-bafa-500ade4e0e1b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42cca17b-176a-4f22-85d2-036f1ce1d855", "sighting_of_ref": "indicator--57c3f570-29e7-4611-a0e1-62c341d7b03a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d89241e-35d1-4cf2-b823-02c7a37d9912", "sighting_of_ref": "indicator--d67613e4-c677-445b-a923-521571b1a27b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ca7ac36-5230-4166-a6c5-56b79abb9587", "sighting_of_ref": "indicator--9bae6ec5-def2-4742-8b6e-f4b3bd747312", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--185330b9-0e94-4187-b383-d4b7154ff388", "sighting_of_ref": "indicator--a67f3bea-8c29-45cf-bee8-49005cc58e72", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0209d550-0442-461f-a88a-ab9be4aeee37", "sighting_of_ref": "indicator--43743575-ddc5-4c01-9905-b14835c63a7c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7a5137e-0a93-4663-b78f-e470846147a7", "sighting_of_ref": "indicator--2ee705c7-c276-471a-b9c4-805ca3f59017", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17e81598-2c75-43e3-8f9e-562db43da352", "sighting_of_ref": "indicator--8fc6b886-9b42-4ec0-a87c-a95521bf51ca", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbbc0d30-028e-4e48-ae53-e517e111191f", "sighting_of_ref": "indicator--793c542c-77a5-400b-a483-4e6d723cc7b8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c80d6148-accf-4a45-bfa3-8d72bcb60448", "sighting_of_ref": "indicator--4c8c63d9-c42d-47fc-be54-caed7c273308", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56069c0c-647f-446e-a657-08986f347f9e", "sighting_of_ref": "indicator--2419fb91-c461-433f-89fe-50e41759dca7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--631cf61d-cc40-42eb-9478-5eca7c296398", "sighting_of_ref": "indicator--71259005-14fb-4051-a7a3-18ed1e38a74a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ad7d56c-febd-475a-8b53-f6e37bbadbbd", "sighting_of_ref": "indicator--048c4315-e2cc-41ba-b5e0-7e2f39fd20a0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a91aa31-64dc-4969-a77e-c5c1b4302614", "sighting_of_ref": "indicator--fdff9f91-726c-498c-91fb-341a6d308788", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--372ce5a4-7625-4cca-b7a5-3e304686b40b", "sighting_of_ref": "indicator--9c985f60-b77f-4e45-824f-b058bc055bca", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c71b1ef-f285-4ab1-a238-fb33bcb15cf1", "sighting_of_ref": "indicator--4b4ad302-37ef-47d5-ad36-96a476c15120", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7bbcff1-faa7-4739-a5d4-a80c1bcf88e8", "sighting_of_ref": "indicator--fe8f0a53-b79d-40c6-b626-d98883d5a96c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ff2bae1-e046-4ae3-80c7-e940c81689da", "sighting_of_ref": "indicator--d4e93a5e-9861-404e-baa6-06d815161314", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d987a6c9-1ae5-4a19-b1cc-c16fef2bb5c0", "sighting_of_ref": "indicator--9cd53e21-86e3-4f60-abc7-fc357f94992d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba21e24a-f3dd-4a69-8887-af88ae8be873", "sighting_of_ref": "indicator--32494e66-823d-4bbf-a5d6-d42463438c5a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11f659a9-99ac-4f49-a3a7-6e3a625123eb", "sighting_of_ref": "indicator--a3e38585-6ac5-4e41-ad54-bdfe99feb1a3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a15cd13a-64fe-4329-b43c-cfd2307c2a9b", "sighting_of_ref": "indicator--40aef310-11e7-460d-98b7-adaecaab0eb0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18ad1d15-04d3-45f0-a562-6c0d3eb0bf77", "sighting_of_ref": "indicator--638a9d02-97fa-4221-adb0-27083fcfe663", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbecff75-aefb-4757-bf0f-e5db47e122fc", "sighting_of_ref": "indicator--d768394a-0f70-49f7-b3cb-d7e915cdb77d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afc66260-0c81-47b4-b741-a75fac667eb4", "sighting_of_ref": "indicator--fbb67f6d-aabc-43d6-aa61-cf6ced5c8f68", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1df6b527-4088-4d53-b747-d5cb99922947", "sighting_of_ref": "indicator--0fc4792f-4c27-4c39-b0c4-76095c03c66f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f9379ba-77be-4d8f-b32d-d3081efd2aa0", "sighting_of_ref": "indicator--9a8a6774-d5d4-4dcb-a137-81f988d65c94", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d18da6d-aa31-45d6-bea6-ac864a05aac4", "sighting_of_ref": "indicator--1d02ff8c-b19a-4be1-8df4-b7afdb188bf7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a75b7ba5-474e-4ab6-884e-99f388b57fa1", "sighting_of_ref": "indicator--7a88fde4-1020-4339-85f1-cd68cf318f08", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--237e2a76-cd69-45df-a42b-c049009dcb09", "sighting_of_ref": "indicator--11bf1d5a-9bef-4edb-9c7a-4d9ed07deda7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--431d0851-9502-47c2-b775-795e69f6edbc", "sighting_of_ref": "indicator--298a0a6f-dffc-4596-9e5b-d3abc8dbb6eb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20962efe-d9c1-4641-9ed0-fec18aee38f1", "sighting_of_ref": "indicator--ae2b6246-377c-4db8-864a-0f5970f344b3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fd1749a-0599-4f2a-8ebc-7198db901c70", "sighting_of_ref": "indicator--a399db28-9d79-4a70-8b85-8d8eca807ca5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e29d9d92-4e18-4148-bc6f-be62c10df9a3", "sighting_of_ref": "indicator--fddd5e72-e7af-439d-af36-df88487a66c4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc6c5ad4-8331-46fd-a6a9-aa3913622575", "sighting_of_ref": "indicator--4582fee8-9847-4cb5-a5a5-935fdaa0f61c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5121ea6f-d853-4733-a1d5-0c86e4a5c4f9", "sighting_of_ref": "indicator--03b37887-4063-4291-be64-f539e5044254", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f902337-1614-4f34-ba9a-430671282d61", "sighting_of_ref": "indicator--d182873c-0b0f-481f-9011-28672ac4d8c6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd4d0aad-9e4f-458e-b4e1-f700737665eb", "sighting_of_ref": "indicator--9ec88202-1aed-4c01-bac2-649cb22a7bfa", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f533c17-999a-4344-9045-78d9d61ed823", "sighting_of_ref": "indicator--954ae547-40b5-424e-9276-bf132dfcc6cd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87d4cea0-7d97-478b-afa3-96eeb52891f2", "sighting_of_ref": "indicator--a97ba4f8-aec4-4739-8e55-a474dfd8bef4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d64de5af-c136-42f0-9fe4-d812061287d4", "sighting_of_ref": "indicator--408b7536-bbcc-4bff-9380-7ef8cae683e0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02500c60-a9b2-4cb9-a0cc-acdf0f62e951", "sighting_of_ref": "indicator--75993d05-c112-4624-bb7f-77ffeb5cf0fe", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe8b3b43-c109-4c11-9d91-e22a751cff19", "sighting_of_ref": "indicator--40842b9b-f1bc-457e-8353-1f23630d2c6f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41eba484-64da-422e-b1ae-fd749a0d2dd6", "sighting_of_ref": "indicator--a0f041b9-8698-4ac2-9a71-7b2cf5020f81", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6e7e439-f345-476e-94b7-b7d6f167cb0c", "sighting_of_ref": "indicator--086a293c-96d3-4f15-ac7d-ea2ee94008ba", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5e155e2-081d-4c76-82ee-28f38efc47b4", "sighting_of_ref": "indicator--fbb70a64-234f-4b4e-9ff3-56c45efad2a7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--322d0976-758a-48e4-8c1e-9e9b4c2fc0aa", "sighting_of_ref": "indicator--7fd76f4f-7de6-45e9-84b9-6ac387edbf36", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1b3ab1c-cceb-4af3-892f-88e447faa1ce", "sighting_of_ref": "indicator--1cb1eaa0-5074-423c-9599-e6ade893f4ba", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e85de12-bac6-4db8-8a76-eea518e547bf", "sighting_of_ref": "indicator--5a394131-ca51-4fb6-a4e5-39982550a482", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ed5d7b4-60f6-4cda-a494-00135acbdb74", "sighting_of_ref": "indicator--61b10283-3077-480a-88d2-36f42a6a4f0c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afe1fab6-442e-4386-ab30-ffc6dd1ca56b", "sighting_of_ref": "indicator--139ad1cd-60a9-4816-962b-1b150e34a8c6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d22d1608-d70b-40d4-a977-2c77fffd5358", "sighting_of_ref": "indicator--5f420c4b-baf5-4fe4-9893-39e63f7b8d4d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af7c1d41-531b-4bf6-82ce-8569d0437d52", "sighting_of_ref": "indicator--618739a3-4a02-4437-9971-951f2325fa65", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c479645c-2bd5-4a26-bbf8-740f2e10fc79", "sighting_of_ref": "indicator--3f44d361-b900-4717-93c2-937ce1fb4c8d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64bd3ff8-ab00-4a89-a2c7-74fe8b095021", "sighting_of_ref": "indicator--acdaf6d0-298e-4b65-a557-965275e15082", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--314b3d81-d4ca-4bec-ae68-cd69d6450e4a", "sighting_of_ref": "indicator--3a200913-f41e-4b42-9b99-c2b996a94e83", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--136078a3-8b76-4962-8afc-65cda623d7e9", "sighting_of_ref": "indicator--d600e876-69a7-410c-8be5-302049e4f186", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ed3d1a0-e38e-43d3-a903-09cabd80ee32", "sighting_of_ref": "indicator--f566e07b-9f3c-40b8-bbdf-d6b6e73bc6d8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7874e9eb-76b4-48ce-8953-b51d52b62c9f", "sighting_of_ref": "indicator--4203262f-7881-4c1d-8a08-0c6100cdb8ea", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb23a6b9-0103-4fe5-ac30-7cb11f9d954c", "sighting_of_ref": "indicator--51f3f63f-f684-4510-8485-041391c21107", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19d74af0-4063-467a-a78a-2fd051bbcf67", "sighting_of_ref": "indicator--a3fd1d19-82ec-449e-bf6f-59aade308237", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58bd4e17-6f16-46f0-b22c-b3fbb45d8479", "sighting_of_ref": "indicator--f02facd4-bf59-4e56-9673-e2d67bf49b9b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df0b2772-1535-418e-81ca-14d3c770b824", "sighting_of_ref": "indicator--503ed7f6-c446-4d16-baee-c73474922841", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63f96bb0-3b37-450b-83ee-dfe2b6da0484", "sighting_of_ref": "indicator--1eba127c-3339-4e47-bac6-eb08090e7958", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--963dc926-8416-4f1f-a621-8447a665255a", "sighting_of_ref": "indicator--d12f4fd9-5e97-40b8-918b-ebaeadba4d55", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--052450ce-c05c-4b54-b4ce-359ab86453a9", "sighting_of_ref": "indicator--25205dd1-8a4c-4fed-b07c-cbdca494f3e0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aadc736-91ad-44e2-ab59-43f066c8c372", "sighting_of_ref": "indicator--9e39228c-ff67-49b2-9c9e-f2324d49b4a2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b760348d-ce09-40db-9ba1-d7c287cc4146", "sighting_of_ref": "indicator--9073536d-54ce-4ba7-a527-c9e0d9024ad9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc45db19-156d-468a-b58f-e09d56fdf4ed", "sighting_of_ref": "indicator--f2766a09-639d-47ad-82d7-bce73e57d463", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc03d1c5-ce37-4f7c-a94f-a995e517fa06", "sighting_of_ref": "indicator--1ec2cdf4-729d-43e6-a513-eeefc23beba1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28a39242-2d46-40b5-9552-0ae1ec3ebe7b", "sighting_of_ref": "indicator--cc2b85d1-708c-4e11-802d-986b30b7c519", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--946c969a-b8a1-4c7b-a05b-4642d385523e", "sighting_of_ref": "indicator--32de8671-8893-4a6d-a5e0-b83023618cb5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc0126fd-d272-491b-982e-f7b7ec5f1832", "sighting_of_ref": "indicator--0b8a0aea-865d-44cb-92ae-c35f6d4b81ef", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7da30e5f-a529-422c-87c0-ba638e34a261", "sighting_of_ref": "indicator--499be84e-fb4d-42e0-a5ed-a6d1a0750629", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1513936-8e7f-4091-be32-663b6fab7494", "sighting_of_ref": "indicator--9e70d5c1-403e-47e0-b3dc-d22121fea7bf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a345103-8af4-4b2e-8070-ae4b1b7c1ac5", "sighting_of_ref": "indicator--ee289ee0-7d06-4a40-8d3d-ffc054f930f3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95aea82e-ef15-4aa9-9a55-5e6142991399", "sighting_of_ref": "indicator--83f93aba-2854-443b-bbd8-c3cb61a4542c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5e4593f-3a4b-4175-9cb6-47b567ee16d2", "sighting_of_ref": "indicator--70407963-35ee-4932-b25f-511bbef6f018", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26e8c4b3-bed4-4bf6-ae19-90c289c8b790", "sighting_of_ref": "indicator--f3a73a03-bda2-450b-a565-c96bc04e808d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b95f5b0f-44a3-4248-b310-a8964f5e9ec0", "sighting_of_ref": "indicator--d86bed25-a296-47f3-95a5-2cb218ab3887", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4c3743e-491e-4f6f-80ed-ef93e7969e74", "sighting_of_ref": "indicator--05ea0051-1db9-4666-a0c1-1c27791507fc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ffb4d92-da26-4e77-b069-213283a326d5", "sighting_of_ref": "indicator--b58db6af-ea5b-486b-9a6e-186807b9c732", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--097d0466-9d68-4f9a-a722-abfdc54ce994", "sighting_of_ref": "indicator--15e660f6-f23b-496f-8c13-ff890c1ffb49", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cdd23fa-52e8-4663-9170-4c1e7e2e4a9c", "sighting_of_ref": "indicator--b09b4cba-be41-4928-b53a-63bcdd47bf2d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6958303-5713-4eae-a8a7-113f0ea6b93c", "sighting_of_ref": "indicator--f3bc7dbc-a08c-4993-a4ee-b7bd17faaf39", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9402bf04-3ed7-479c-b62c-c54b321c03f9", "sighting_of_ref": "indicator--f63b89be-01a0-44d2-ba2b-f219a110db89", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f970a4c9-8d0d-414e-aa45-dc7ba16d3350", "sighting_of_ref": "indicator--b9a04b20-6b3a-4b82-b1db-2fad27b61e61", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccc9d596-df5f-4593-b6ce-95799c239a06", "sighting_of_ref": "indicator--37346658-9257-4b04-b245-8d8ddd701c53", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ed32e55-617f-48bd-b2ab-d03eab18b6af", "sighting_of_ref": "indicator--94a21903-894e-419b-9270-7e3eeba87366", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4af223a3-62ba-49d5-91fa-06c052538618", "sighting_of_ref": "indicator--4deb6ecf-3a17-4b76-9bfe-8559081d6d6f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3baded9b-7a4f-4ddc-ba4f-caddee69a5ac", "sighting_of_ref": "indicator--70b25b4f-23e6-40a4-a0a8-b23dadb329b4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--286baca0-206c-4ec0-83b1-af77b0599351", "sighting_of_ref": "indicator--b62ccbfb-bf8e-4eaa-a2b1-a2c63fda3f7a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af12b787-f839-4394-a308-f2c92302d102", "sighting_of_ref": "indicator--4de4e510-7248-45bc-96bc-183a659f32e3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2933f12b-6d69-43b7-9157-5148504995f7", "sighting_of_ref": "indicator--12359b63-0d77-445f-a27f-f656fbd1ba7c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c7c9934-7047-4cf0-a715-93b7ea37f4b4", "sighting_of_ref": "indicator--ff7be909-a360-4d44-8fd8-127885eeb285", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac12c669-87d7-44a6-a84c-5b14a22f520e", "sighting_of_ref": "indicator--17965daf-d72d-42f6-82f6-6c031a99afac", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa02ac85-c1ca-47c8-8ff7-53f88d40623a", "sighting_of_ref": "indicator--9d38435c-5706-45df-9293-804f13764767", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a810a664-5770-4597-a6aa-0cbbe1721f00", "sighting_of_ref": "indicator--9a949806-160c-444b-9008-693234985396", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe35fabe-c8c0-4c17-8597-1d0faf90f05f", "sighting_of_ref": "indicator--7feca234-6462-4431-af17-3b7c7c96e27d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--984c992a-2bc6-4ccb-b6ba-145a1253f08a", "sighting_of_ref": "indicator--6d60ae1f-8427-43f6-9768-f8ba041713a9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3e37b9e-1336-482f-88ad-13005f99e77c", "sighting_of_ref": "indicator--01a6b791-eac6-4ace-a58f-e014a6477c82", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec1303cd-b1a5-4371-93c1-5d41971042b6", "sighting_of_ref": "indicator--2597b2b0-180d-4c27-b913-b7b05151f4c9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a406ab6-ba2b-4f04-bc9f-17224c9ba713", "sighting_of_ref": "indicator--2a3b2905-70e0-4c85-8c48-1f73c88ab8bc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9031f07f-5575-4b8e-89ee-cbbe6b450a11", "sighting_of_ref": "indicator--8c8e87d6-073b-45db-9f65-f16d313444dd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f53beb68-3419-4ab1-96ea-0520f6e0ee2e", "sighting_of_ref": "indicator--bfafb5a4-d53e-42ce-81c8-4109589aa2fc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a744733-259e-4fb5-a5ea-85328124d782", "sighting_of_ref": "indicator--9a4d72b4-6a97-406d-baae-8278e445ed07", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b98c9a58-b95e-4bb8-9d12-e7b71802fe56", "sighting_of_ref": "indicator--74446175-4568-4038-b6be-805506bf610c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0ec3d8d-a3de-45fc-88d0-cb15a8837765", "sighting_of_ref": "indicator--c9f66ec7-1ea7-4628-a7af-8944bd852895", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4071a650-169b-4baa-a5da-05d9b19aa2e3", "sighting_of_ref": "indicator--9554ce7f-8759-483c-bcc4-53f0c6b038a0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64617611-6fbe-46e5-8a1e-fc83420610dd", "sighting_of_ref": "indicator--cefffdb7-e874-4301-84e0-d37068f0dd2d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1565ae3-fe4f-4ff5-a79c-c01c487b931a", "sighting_of_ref": "indicator--8a146107-8563-4e6d-aa88-504258bb4aa4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a0b014e-9c9e-4334-8269-20ce48e1752d", "sighting_of_ref": "indicator--65568d77-4350-48a5-a3d7-6aebce28c726", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f23514d1-ea88-42fa-abd6-e34f4ec73bf8", "sighting_of_ref": "indicator--4c3dced1-3c3d-46b3-bf86-b6d495117a50", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46355daf-78e4-4136-97e6-6f3533b3a191", "sighting_of_ref": "indicator--f9f35dc1-57ee-4cba-8756-5d74ee6a313f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed4bccfd-3ad3-4483-8420-2a89a1b5cfbd", "sighting_of_ref": "indicator--d22ecc85-e2e5-477d-9cc3-3685a0fbf461", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d15a6726-fa3d-47ee-aa1b-92977b93daf7", "sighting_of_ref": "indicator--85653e95-138d-406f-be57-9e585a05ecc9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f0330fa-b22d-4697-b865-c05af20fdbb2", "sighting_of_ref": "indicator--d228e21a-4f88-4374-9305-fa7e44c33518", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffb03db4-44ee-4d94-82c1-cb6d2640d8ed", "sighting_of_ref": "indicator--89b64b82-616c-446f-976a-127ae7613d94", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b85f6ddb-0a40-4e79-86aa-6f7661bf8139", "sighting_of_ref": "indicator--c3ca1a7e-e024-46a9-b28b-2c9766629129", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--594b44c7-84fa-4ae6-8dad-b64b94e78502", "sighting_of_ref": "indicator--4211fdc8-b8f0-4fa1-84a0-57259053163c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--293fa478-f0ff-4636-a0d8-f3b453bbcac4", "sighting_of_ref": "indicator--4b7a8417-c902-4495-845c-6ee1dab58f88", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eecd593-1763-4b93-b861-450403a5cbfd", "sighting_of_ref": "indicator--546015e9-d81a-419a-90a0-e2a69905f06a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7f62873-ce07-4b7b-b237-a8c15dd58084", "sighting_of_ref": "indicator--267f27a4-d125-4fe9-91d2-fe47e4a9a7b7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--764b2498-fba9-41ff-b84e-54f9f9d83077", "sighting_of_ref": "indicator--15dfcb43-50bd-4fdf-b8f4-b10a9fafced7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4954d23-1333-4170-96ec-47fb3a6080a8", "sighting_of_ref": "indicator--ed74361d-9c4b-48dd-a152-892bb71d6c3b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a23466a2-4297-46d7-8f87-f0bf7e62dbbe", "sighting_of_ref": "indicator--d60a6ddf-4fd7-4542-9182-a87064700233", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e3a05cf-ba72-4a79-8a1d-dd58af2785ef", "sighting_of_ref": "indicator--ff009a39-2308-490f-ba20-91d8f76bf0fd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f6189cf-7f84-4ce7-ae1c-6d95afb7d177", "sighting_of_ref": "indicator--aea8cad6-51b1-48f1-be7a-51dfc28f0aa8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03f0ef75-3469-4440-a3c1-2b6656dc98a5", "sighting_of_ref": "indicator--bf99084d-a4c8-43af-a1b5-b8fa9423ae8a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56e1537c-cab1-4aa7-8d90-19beabc4389f", "sighting_of_ref": "indicator--f035f251-a4c4-4fd2-8245-db8e82cfdb2e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09d871a6-fee6-48b5-801b-f6d5d6c07fb0", "sighting_of_ref": "indicator--77551d01-5f8a-4135-a7b0-e59f9bd18ad4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f2c9a89-469f-4e3f-98d8-9dcb947df7c4", "sighting_of_ref": "indicator--24789a88-a45c-4bd1-8c65-0b0654d2e765", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8361d3a1-4834-4ab8-a3f5-d315aa48f0b9", "sighting_of_ref": "indicator--0c1fda80-ea72-4637-b362-7eccef17b6c4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d18ea053-d611-43e8-ba5f-a09d4a90aa67", "sighting_of_ref": "indicator--bcdea594-2f06-49a7-8b3d-901dfe116b74", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02be3a37-d042-4443-a3e1-8128a49e0ad8", "sighting_of_ref": "indicator--fe4f07b7-5aa0-4570-bddb-f1f6e2ea48a4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee5bb07c-2e7c-4cc2-8b7f-4d568399b4ba", "sighting_of_ref": "indicator--fa592c37-b60a-4ceb-83f3-37bd0e170e23", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91986561-3d87-4a58-be51-3a669042480d", "sighting_of_ref": "indicator--c116448e-4faf-4318-a8fc-8d829f3435f0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2346ea6b-e14b-45d4-8941-dff6643ddf85", "sighting_of_ref": "indicator--1063875e-7d19-4b81-96f5-f48dc6122b84", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f962ce9c-ae1c-4ac0-bdf5-379fd3e58278", "sighting_of_ref": "indicator--ccf32af3-3109-4242-97f6-6edc075fb3d8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53dde236-610e-4966-a564-e38298c6475f", "sighting_of_ref": "indicator--a4ccf1c8-3450-452b-93c4-ff9239f3c484", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23f51ed0-c2ee-41ad-ae00-3992f86b1149", "sighting_of_ref": "indicator--730d5b11-13d4-482c-8763-edaf9b31c396", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e0cf03c-8952-4c46-8137-c956e5528eed", "sighting_of_ref": "indicator--5718f8c8-79d1-4bd9-920d-b18d8000480d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dc162fa-b030-477f-8ab4-e81373bb4dd1", "sighting_of_ref": "indicator--73fcc05d-fe78-4b2a-aa91-b2291965f967", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f080864b-afaa-4c64-b7c5-0ec8de85f1a5", "sighting_of_ref": "indicator--5347db02-ef75-43a9-ac44-5583bc6e4e33", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08f337a1-8460-4230-b87e-cd96c368d202", "sighting_of_ref": "indicator--73dc8c53-ecbd-4750-8c0f-5977a97674d9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bda0089-678f-4705-b48b-a0a202fd392f", "sighting_of_ref": "indicator--acac78cb-1ae8-4d40-a067-29065c7384b5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a708973b-0e82-4b5d-9b7e-5f84dffcf4be", "sighting_of_ref": "indicator--02aebd54-2f82-423f-99ae-65f9d4079d2b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e935cf09-6fd9-4717-aafa-28fdb96fbcf3", "sighting_of_ref": "indicator--af20e8eb-1130-4dc8-ad5e-0734788f98d2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eec3dbf4-eeab-4a79-a01b-5b7420513b8e", "sighting_of_ref": "indicator--46706848-4545-4941-89cb-4aca6f911ee3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--777a0b77-8870-435d-9a11-fd2ecd15a06a", "sighting_of_ref": "indicator--725e05af-1d34-4b38-836a-d007d4d178d6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e876a7f6-9532-4576-87cf-d621fffd05c4", "sighting_of_ref": "indicator--f8dc14ee-b245-4142-bf42-540051b6a75e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c68cbc9-52e0-46f7-b593-30a5ef0337f9", "sighting_of_ref": "indicator--df297fdf-cea6-457f-a470-706c7cfb8b01", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57d98b9e-71d5-41f3-a91e-f6d13984f4b5", "sighting_of_ref": "indicator--0929c2f9-0e57-4c6e-867a-26bcf5a3cdc7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--251665f2-ee15-4f22-8f6b-fbd8f4d22124", "sighting_of_ref": "indicator--b14b1210-23eb-42dd-8137-b0ab84d01ea6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6ea0582-3d3c-4746-817f-a24a1c942508", "sighting_of_ref": "indicator--5f696bb6-ef14-4abb-b60d-604842ab5db9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15323be9-e21c-496e-9c21-5e155b85ec66", "sighting_of_ref": "indicator--1a065252-f5bf-491e-9605-981617dd0e69", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65dfbe49-1567-4cf2-94db-92caf6a9dbbf", "sighting_of_ref": "indicator--f6c9f4c3-31b7-4307-8ccd-aaaa347df7f2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--063ddbac-7f81-47fc-84ac-39ec6c3f503c", "sighting_of_ref": "indicator--cf5682cc-31c9-4411-8af4-aeb507549df9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56178b89-6684-4f5d-975e-d0ea9c0f9637", "sighting_of_ref": "indicator--19618ce9-1a2d-4948-b211-06ca358749fe", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--826e82f9-06ca-471d-b79b-95859dc41958", "sighting_of_ref": "indicator--623467d9-f2b1-4c9a-9f94-258e4f419beb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb19266b-f40c-46e3-951d-411d5d611a5b", "sighting_of_ref": "indicator--b289c942-ebae-427a-a028-838e583bc685", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3497765-b585-4240-be6d-3b59d41c4658", "sighting_of_ref": "indicator--fac1f1d6-e61f-46eb-a0ce-45ed2cca891f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2415338f-a717-42c6-a5da-4781916b3c32", "sighting_of_ref": "indicator--9bb41f8c-24f7-4175-a67b-f36008ff6477", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9634aa8a-90f4-4e55-922a-97438bb9f680", "sighting_of_ref": "indicator--ec8f641e-ce27-4f0e-96b1-c5cd569fc135", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--316e6479-91eb-4a38-bb30-26f3cf6b95b3", "sighting_of_ref": "indicator--bf95fb57-bb4d-4bc4-8a64-3f1699427a96", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dac15b6f-11b0-435d-abb3-7a3e8f54c678", "sighting_of_ref": "indicator--87a99a0e-b7e3-4ca6-adbb-800fabae9300", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2704d09-74d4-457b-868c-6be9cb1f3c96", "sighting_of_ref": "indicator--6741c7a7-1610-4378-b60c-071d26bec778", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9dea124-1b89-4937-b2dc-9b0e317bd69d", "sighting_of_ref": "indicator--36af69a3-20d3-4581-9eea-bffc7fa81aee", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4330b4d-e59b-4323-8bd1-da016bddd246", "sighting_of_ref": "indicator--c757ff11-3a0e-4249-a109-6281cd6adbbb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51ca07a1-a528-4237-a691-0978f3f3cc2c", "sighting_of_ref": "indicator--10dc6a36-cf13-4fc2-b219-205282890daf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af0a7074-d4ab-4cb8-8d11-cd53e872edc2", "sighting_of_ref": "indicator--37b54451-df61-497f-962c-02c77aa86004", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a00710a-75b2-46bb-8b87-82f7ff6a63c9", "sighting_of_ref": "indicator--afac5e55-00fc-4c7c-8265-cfb07abfdcdf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d3598ff-5c9e-4311-8244-c3dabad088a6", "sighting_of_ref": "indicator--10c9dfef-5b00-4045-8c47-95bace99749a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbf3fac6-07e5-424e-a7cf-6d33f0c3a24b", "sighting_of_ref": "indicator--c818d03e-0085-43e1-a113-0927b0217c85", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--912abb3c-e836-49df-85f5-243afbcfcdf1", "sighting_of_ref": "indicator--3da57221-dc54-4863-af14-77e50d22ada5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2df08d71-bac9-4b49-b6ff-e1b1a66d6909", "sighting_of_ref": "indicator--f5362be8-2cbf-4d49-ae9d-e9c1e24fb901", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeaec742-ab4a-47d9-bc38-e286f1f98163", "sighting_of_ref": "indicator--5dce8196-9318-4f2a-8db8-952f964c7552", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f6501f7-c8e3-4916-ae76-81d431e1d67c", "sighting_of_ref": "indicator--91fb364f-9d66-4096-9337-bfe8df01c022", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb231554-f503-4359-9a33-de9b13c44866", "sighting_of_ref": "indicator--eec75de5-dc4f-4550-88ba-523d58c5e454", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b819e9c-d667-4d85-8c65-a2eda66c821c", "sighting_of_ref": "indicator--137fee6c-e084-4d60-82e0-a3796df394c6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0f6b260-76f4-4e10-8197-03de4912be07", "sighting_of_ref": "indicator--6dfe9bd7-e930-4872-86d6-97c8c2ea496e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ea968fa-ddb4-452b-9f84-fab38c6fa824", "sighting_of_ref": "indicator--1be5b08c-5925-452f-af98-562e798ed17b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab6b3ab8-aaeb-442f-b467-e752a0916e37", "sighting_of_ref": "indicator--d7158e53-4606-453c-a2dc-32adbf509d46", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70de188f-c318-4ca1-82dd-ec1846e2884f", "sighting_of_ref": "indicator--7b2f18e9-b67f-4ecc-9768-925b432739db", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ba17c93-d9a8-4b8d-b4d2-c44f2f2c4062", "sighting_of_ref": "indicator--d6afbe84-3a9a-40a1-a563-9b37d34b17c2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bb7d890-9729-47c0-ba70-926d1bcad77e", "sighting_of_ref": "indicator--0cbfd4ea-7213-43cc-ae60-d69574d86758", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfda82d6-56e1-4aee-93d3-3b33fc3a6eeb", "sighting_of_ref": "indicator--c6dd9a08-457e-40a2-94bc-1a3c078fc075", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0ea0aff-937b-4a01-a2cb-36b9019007e6", "sighting_of_ref": "indicator--63ebaa65-63a0-4b6d-838f-de86672448cc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e49afd8-0865-4dff-9ae2-41a0ca077682", "sighting_of_ref": "indicator--5d8f0e1d-bc74-41dd-95ba-fc791fd867ee", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0646c9ef-975d-434a-9c0a-a6ab657056d1", "sighting_of_ref": "indicator--7a2f30dc-948e-4cfa-9091-340424d14453", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76b08b4d-b830-4830-a100-a3b14746778a", "sighting_of_ref": "indicator--b26fcee5-9110-424e-a448-67035c5d32a6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0183b21-ed5e-4050-bd60-b7a26c30fa21", "sighting_of_ref": "indicator--ba102eae-4cab-4552-95a4-4a695a887bd7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcd9f622-fa51-4f32-9b1d-a33f83d4d1be", "sighting_of_ref": "indicator--cbf8d80c-8670-45c3-b370-a10df6e81eef", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f111d7ab-7984-4d88-a110-e864261538d1", "sighting_of_ref": "indicator--746edcaf-8a06-45ed-aea7-844e95ec56da", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff120a92-fce5-414f-937c-2204f658de66", "sighting_of_ref": "indicator--d822a188-089e-4549-ae3e-8c76099e78aa", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62717eb2-23cc-4498-b778-3ce07a7e645a", "sighting_of_ref": "indicator--8e464a8d-8d40-4674-afcc-20998349dcf8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fe9f181-b670-455a-8bdf-07fb1b33847a", "sighting_of_ref": "indicator--992bf0d6-ba84-45c9-8179-c802ebf05437", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31f802e9-6a64-40d9-81bf-b89ec0731126", "sighting_of_ref": "indicator--40299da2-dcbd-4d0d-a110-bed93e81ba68", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc33d2e2-0a5e-48c4-a91b-6b393935d447", "sighting_of_ref": "indicator--e79c37ca-4fd0-4402-a007-bcdbabaad202", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31a5908c-6012-49ab-b500-140c2285cbf2", "sighting_of_ref": "indicator--1bccd019-1387-45b1-b56a-b77ed417a3a7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de5bdb89-035d-4a98-8337-97d25e0cc7f4", "sighting_of_ref": "indicator--770ca77f-5fb1-47f6-8395-0898daca26a5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fd595b8-4fff-42e9-838e-e6fc9a7f75e9", "sighting_of_ref": "indicator--c2b4eed5-b0a0-428b-8d8b-0f688dd390d7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--914cfe24-186f-4d34-a8b7-3d5ec7a1d3bf", "sighting_of_ref": "indicator--73bb4295-be93-4286-ae92-76dd929ab443", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a49c2747-8457-4c63-829b-3aff50c8a5ab", "sighting_of_ref": "indicator--b0de2c59-e0ff-462e-9a33-5d38d5cdb14f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6349e27e-bb00-4785-b2f7-1e9ac275c199", "sighting_of_ref": "indicator--45442142-e212-4ad3-9f9c-99126bcfb711", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10860e9a-b720-4aa9-828f-699f28f0417e", "sighting_of_ref": "indicator--77f5ad60-2c29-493b-909a-b89757f36513", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb7a4830-a82b-436e-b704-f89629ab9a0c", "sighting_of_ref": "indicator--b8011cd9-1c1b-4032-80d8-708c27bf397e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--444f98c0-6604-4d3c-8b89-9443d063610a", "sighting_of_ref": "indicator--1b1199bb-15d1-41be-90e9-3c867734f53f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--198b5eeb-38fe-4e32-9876-e070c24f103d", "sighting_of_ref": "indicator--c1e35270-be47-4b12-98ea-d4da929ea869", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d90e220f-cdcb-4bca-811f-3329ff49d090", "sighting_of_ref": "indicator--528bac50-9f81-45cb-ad3a-2ba815b1e4a4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e82145e8-dc2b-4659-b81c-4be438fd429e", "sighting_of_ref": "indicator--d231b4b8-71c9-4687-98b3-f59df3741478", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--488309aa-5954-4c1b-8e31-09a4247f8328", "sighting_of_ref": "indicator--66a18dd2-6413-45f8-9a22-f84d4bac2511", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--731e211e-b5a4-4e59-84d7-e76cc8338969", "sighting_of_ref": "indicator--cc097403-6af7-458f-93a1-fd7518fe7fe6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7575f313-53f0-4db4-90ec-45726531ea1d", "sighting_of_ref": "indicator--d19755ac-2cda-44c6-9ff8-01454f8be880", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e8011a1-7237-4834-9d1a-7ffb5f933996", "sighting_of_ref": "indicator--fcd39b4c-f364-4961-8fd0-72013fd20522", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7138a74d-8830-4dcf-ad98-cf54f8655c12", "sighting_of_ref": "indicator--99b79b45-2de4-4cab-8276-a35a65a65481", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fafab066-c6fa-4bcf-8e2d-2862872a2d1c", "sighting_of_ref": "indicator--0ae3bd57-3263-4d22-b544-1698be7d5bdd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bf10c58-2ab4-41be-8741-92f203909061", "sighting_of_ref": "indicator--a7e48b0f-373b-4d43-9c41-e1c913af6ab9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b61d065-fcf4-4a06-9b4e-04bb6464c3ca", "sighting_of_ref": "indicator--c6d6d708-7d15-4632-aad3-2e3b6d908359", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c109d48-7f56-468a-ac0c-94d2ef41be1c", "sighting_of_ref": "indicator--850c2164-b8a1-4f46-9943-8c1e3116b74a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f23a5592-e260-4447-b4fc-46ddb43c7356", "sighting_of_ref": "indicator--2084b9a0-f317-4ae9-b347-97b069d22729", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbfa4bb6-fdc8-496a-a4ff-00b77f9c954e", "sighting_of_ref": "indicator--ab62320a-0aa4-4075-bf7e-49fc4f28cbc9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--111beb9e-ee64-465e-a311-be2d0ab9bfc9", "sighting_of_ref": "indicator--966072f5-cc3d-4281-97c6-6caed926418d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e53708bc-b86e-43c4-9e73-bddd10e3cb71", "sighting_of_ref": "indicator--19759c7b-be03-4083-b9e7-004e7093d07a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--685ef321-3420-479b-bfa3-ae07a3211d15", "sighting_of_ref": "indicator--95d695e3-a794-437a-935f-d23d8498b980", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abb92e85-6fac-44ca-a100-b97e15ef42e3", "sighting_of_ref": "indicator--de0a3b36-8bdd-46fc-a1c1-4e062a457d9f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57ab27b8-d094-4912-b55c-9703314567a6", "sighting_of_ref": "indicator--3d484154-a2bb-4676-85c9-d2f0e1ef9fde", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a711a989-f37a-42a0-81d1-6ad5fdf87d00", "sighting_of_ref": "indicator--d7865301-3930-40a0-a287-7eb5284db363", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e99f20df-433d-4d40-a949-89703afd48c7", "sighting_of_ref": "indicator--64ecd5d7-8d20-4fea-b9b7-06c3e83e8259", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d9e224c-7042-484f-b4b1-de9fce20fc44", "sighting_of_ref": "indicator--b35f60ef-d446-45af-bc8a-8299a2b96eda", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36ddc862-3dde-48bc-a2bd-b7be1b631546", "sighting_of_ref": "indicator--6012be34-f976-46bc-a562-5960cf7fa726", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f18e640c-0d2e-47a0-b012-867a7317a738", "sighting_of_ref": "indicator--136998cb-3ba1-4f5f-8375-580ecccd3984", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dea2067b-7764-4499-98fa-213a35715b63", "sighting_of_ref": "indicator--d733b757-b1a8-499f-87cf-211c9f49c6a0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b08b3d25-7cff-4dc4-b497-710306035652", "sighting_of_ref": "indicator--e9992582-c55d-49a4-86c0-1da3a07113c3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33ba1af1-6fc9-494c-a785-0eb0864c364d", "sighting_of_ref": "indicator--4bec1730-5ad6-4928-96ed-ab0d2ccf035b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7be86031-ec36-4383-9161-3551c457525f", "sighting_of_ref": "indicator--d6322d4a-5b26-47f9-9f7a-d3641257c59f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd7eacc2-0d51-48e2-bef9-454af4c61db1", "sighting_of_ref": "indicator--25aa376b-cca4-4981-9215-a59316a8dd0f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f10c8ae-fab2-41ab-887e-056c730a374c", "sighting_of_ref": "indicator--4a3d16a3-c529-4e6e-a972-59555cd6cd21", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3930278c-9e30-482f-91c6-fc8283b80c21", "sighting_of_ref": "indicator--410114fd-a70d-4a75-9c45-c48f1bb99153", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4d7b64a-2ff7-4439-8c07-c3a7138552f5", "sighting_of_ref": "indicator--0dfed9e6-ae83-4076-8dcc-f9eaec331f4b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb090f46-38e1-4ac2-bfad-69aba879a424", "sighting_of_ref": "indicator--524a05e4-723f-412c-919e-cd2685fec1c1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cea71813-6404-46f4-82af-eb959509c79e", "sighting_of_ref": "indicator--fd59ae5f-95c9-4682-a9dd-c53bb0c14fd9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--202485af-c1c8-420b-ac26-7cb206349e0a", "sighting_of_ref": "indicator--bf2ef17c-7c7f-4fd5-ab44-5578f07bc052", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--935452b3-3b56-44f1-9b81-3cb96fe71bdb", "sighting_of_ref": "indicator--19645508-ee95-497e-8a2f-a2a4ba4cff2b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd81d0c8-107f-476d-b6f0-3b5395eac2ef", "sighting_of_ref": "indicator--09599555-dd77-4c12-b5eb-8563efa899b6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f6ae66e-7068-4dad-9073-d37c1db46ccd", "sighting_of_ref": "indicator--f5242326-a2f6-43b3-aa4a-8e33a6b7e57b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fb5a801-8552-4431-9ab6-f108b9e62f71", "sighting_of_ref": "indicator--79ef5d74-8554-4069-8ee0-737e354a75d7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ec2e6b0-c280-4fc1-81ec-777f32ce5c84", "sighting_of_ref": "indicator--29b51ba5-5097-4060-ad5d-cecdef341c20", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9b2ff19-c58a-4bd1-bb41-27d54210df6a", "sighting_of_ref": "indicator--12cd5a4b-e313-44cc-84af-504550f063de", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da09a46e-ad30-4f31-b195-1fef7d865585", "sighting_of_ref": "indicator--7a362fde-adf6-4672-ba55-bbb894eb70b0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0fccfad-7266-491b-af9c-599c8d19aa97", "sighting_of_ref": "indicator--e0a81753-8466-4bf7-b635-3d89484cf00c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dfa5c9c-3074-4a7f-8e9f-7f0eeeef7cfb", "sighting_of_ref": "indicator--4294c552-02b8-4cb2-82bb-74c2435dfe5b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fef9b23-94f8-4cf6-9251-ab33c6a2f843", "sighting_of_ref": "indicator--2e8902ae-6a1c-4c8b-b3f9-3626a70f56de", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e276646c-d863-41de-b1ff-23faefb55cc5", "sighting_of_ref": "indicator--e0a8b18a-3b07-4b44-9658-be8716613de7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc9cd024-92ab-43fc-91bf-b25e9a93303a", "sighting_of_ref": "indicator--cc8c5fd0-6e19-448a-93a1-07cba141a124", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d2632fd-e9e9-4943-a8ac-bb0e618dcf62", "sighting_of_ref": "indicator--d941386c-19a9-4e2b-861b-d014fe57e10a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90a5fa0b-a2c6-4f04-acd8-c48361fd3890", "sighting_of_ref": "indicator--a108f945-e445-4178-b278-66502b8376e9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eaa38c2-67d5-4877-86ef-18e727fec1a1", "sighting_of_ref": "indicator--b08c3ef6-05cf-4f18-9c7c-eed3bea753f3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bff85cb4-228d-4007-b683-6e4891e61693", "sighting_of_ref": "indicator--14723785-d5bb-4595-a238-fa6540d9f10d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a590de35-7bf7-4a9c-84e5-dfc5626cb601", "sighting_of_ref": "indicator--30a638da-9b2b-42fc-b8c9-083c29f05471", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aa658ae-3870-47e5-984f-822f9e60ac22", "sighting_of_ref": "indicator--5a90f0a6-c856-4872-967f-449484ed2cc5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c5a2a76-16db-4cf3-ab1e-a98fa712aaac", "sighting_of_ref": "indicator--40b1965b-bde1-4886-8af7-4bf1c5493350", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--185e25ee-687a-4f68-b0ec-c729916100e7", "sighting_of_ref": "indicator--bd8b18bd-f63e-4aa3-8199-fde85e26171b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0343694-425a-467c-b10a-9dbe66ecc1ad", "sighting_of_ref": "indicator--234df3c6-212d-41ed-a588-490b254bf4bc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2525f94f-5b22-469e-8a43-d1129d8d5268", "sighting_of_ref": "indicator--8703011f-4758-42f3-9e53-d7a507a74046", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93f35d84-be44-4b86-bd06-2e7365e94ea9", "sighting_of_ref": "indicator--c48545ce-9ded-4434-b04b-5f5869a20ea4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--700c13c0-f011-4b14-9444-d68dd2245e53", "sighting_of_ref": "indicator--c16d3e34-b533-4f0a-b4b9-8869980842e2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--302c44d1-cb9b-4b6b-81c0-49a0e827ae4a", "sighting_of_ref": "indicator--3d08766e-9029-4436-b4ea-349103ca6813", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--375d59fd-1d0b-43d9-90f8-1873f5d064c1", "sighting_of_ref": "indicator--10a091f5-4e56-4e4a-9146-cac9a26fbf80", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85b37566-ab84-411f-9a54-faafaff53d2d", "sighting_of_ref": "indicator--03424c79-a002-47b1-8093-d1fe608abcae", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3342f9e3-1611-4281-8a5c-0cebb7699086", "sighting_of_ref": "indicator--29d24d35-e93b-40b8-a708-4aac7126ed1d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d33ec56-f28f-4fe4-84e5-4bac1811154b", "sighting_of_ref": "indicator--14bebf11-24d3-447e-8a16-8ae2a7758ea2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb846be9-b20f-4baa-8e82-895e2affbcd1", "sighting_of_ref": "indicator--3b942147-7e4a-46a1-88b7-d43d2e8570c4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c1dd0f2-2420-4b54-9daa-cd7375caecbe", "sighting_of_ref": "indicator--f66f7bfd-d7cf-4262-87b3-1fd8cb23a685", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3d1205f-eabd-4aae-b874-b7092f858db9", "sighting_of_ref": "indicator--f66c0c34-6f87-4362-baa5-039e10a32628", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe09baf1-822e-4171-ad0e-5481a29a585e", "sighting_of_ref": "indicator--d357153f-daaa-4e6f-ae64-823b457ac9a5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--304a464e-edc4-4bc4-9366-041a14b56f56", "sighting_of_ref": "indicator--bcfc0c2e-aed6-4046-908c-3baae0ef74d6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06923388-905e-4078-a5f5-80d5a448b66b", "sighting_of_ref": "indicator--76aff7bf-9eec-4386-862c-806d2d560ae2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dec4618-3c9a-454e-9196-48f55c6877de", "sighting_of_ref": "indicator--c647b7ba-1ac6-4e0f-90bd-a4d58fc3efc3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ef0cfb0-e142-4c4c-90f0-bf86943f068c", "sighting_of_ref": "indicator--58b0cd70-738a-4052-83e6-ca53c61e6572", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19feb9ea-e41d-4185-8f93-114bbf8d5b72", "sighting_of_ref": "indicator--f0d32a19-55f3-4c83-8343-952feadc15a6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e5bc78a-3263-4634-883d-f82d6338b7b2", "sighting_of_ref": "indicator--f9037261-fad3-46f6-bec5-7b39b780777d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecda67cd-bd39-48e5-aa89-827979a8536a", "sighting_of_ref": "indicator--bca8f329-a410-41f5-8512-ad45ca595fd4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a786ae7a-4f75-4c07-8135-f943fa47cbec", "sighting_of_ref": "indicator--90b059ba-4aa8-46d3-8768-d384115f7ab2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cce79c65-9d8d-472d-b32e-c6e9d791abd0", "sighting_of_ref": "indicator--3ea92e05-f7da-4336-973a-eb5b40ff9637", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30ee76e8-1489-4ba4-b23b-5d06dda811b1", "sighting_of_ref": "indicator--199ba19e-84ff-4b2d-8735-c49ab114c8c2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a888aa0e-da65-4479-87f2-55f887425666", "sighting_of_ref": "indicator--6ef5a739-9829-451e-b72a-75c5f6cb721a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83a8e26b-8351-4db9-9aed-c0ab4eeeb6ee", "sighting_of_ref": "indicator--1f5bb736-a3ac-49df-b6d8-e3800fe78c0c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09cce997-ae43-4d25-82d0-3966d256d8fc", "sighting_of_ref": "indicator--af532f7b-8c40-40a5-a043-412477291d24", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4adc45de-cbba-4d1e-9d55-2e645738fcf5", "sighting_of_ref": "indicator--08614cd0-fcad-474b-96bf-7ee216d5ca57", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15796f0e-9604-4390-9659-6a28238ff87a", "sighting_of_ref": "indicator--2625f273-ea2e-4893-88a6-6d5adf3d9cb0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dfa5c49-ffde-48b3-9afe-06d45f2d8c37", "sighting_of_ref": "indicator--85a0f324-f742-463f-8aeb-fba0d63bf0b3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8767e39-d8e7-443f-afae-6ad6e65c213a", "sighting_of_ref": "indicator--d33b2e13-8ef9-42d9-9a22-72acb5d6c7f4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1c236b8-493b-419c-823b-3fd2507b3c1b", "sighting_of_ref": "indicator--778d29d4-1c1d-43d9-86d5-93d589325684", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1937f023-7831-4e44-b69b-a684c1d3cc60", "sighting_of_ref": "indicator--3f5b37f1-2b7f-4d04-8ec4-1bbbb5034858", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e6d9871-966b-4c23-a2dd-6f03979987fe", "sighting_of_ref": "indicator--d720a960-8c4d-41f5-b11c-a1e773e9461f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c6b9049-1c7d-4eb1-8d43-df2765cff974", "sighting_of_ref": "indicator--0ca7c581-b508-4b30-a532-b3e85f0d18b7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ce25466-ef4c-4c0d-9a73-754dd2376f36", "sighting_of_ref": "indicator--12b55be0-a837-42ef-930d-5077e7a6fe03", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcca1ff8-4c00-4886-ae48-c7d22999d4e7", "sighting_of_ref": "indicator--c828f16c-4257-4537-80b2-c80fa713b735", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6282912-0044-42a3-bf16-2705cf0706b5", "sighting_of_ref": "indicator--76402e5b-d8b5-4110-bcba-ba6b1b9388b3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eca7052f-821e-4ce4-84fc-ff8e0840e78a", "sighting_of_ref": "indicator--a225097d-ce91-468e-9ece-3fb45a100d65", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd7e9f8c-1e09-4e75-aca9-6bce429da46f", "sighting_of_ref": "indicator--5370f917-c98c-4625-81ed-d39d3ea0729a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--056df4b6-8b69-488d-9672-26dba1f9654c", "sighting_of_ref": "indicator--509d345f-2b46-4296-9cfb-e02f71956a76", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7f5de4c-5a69-4005-8393-1b045b20a22d", "sighting_of_ref": "indicator--f53d6a6e-4802-411e-94c8-2f1635622e5e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--102bbfea-0bf8-4dbb-b0f9-f23affd2ca36", "sighting_of_ref": "indicator--c8d8fa72-7cac-41ed-b3c5-e4213919eaa1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b55fb782-016d-44c6-87a1-158902d8ccf6", "sighting_of_ref": "indicator--373de089-7f4a-48d5-8994-6d55770461c6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42d8a62c-2e33-48cc-bdd5-83a71869f3b6", "sighting_of_ref": "indicator--63230f53-00c4-4dbf-99ac-0193bb7f9e82", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53de9078-b813-44da-8d97-f49041e79a5c", "sighting_of_ref": "indicator--849ff639-6b40-418d-9725-81b4d35c7302", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c5755e8-1280-46dc-9ccb-1adc8f0ca41e", "sighting_of_ref": "indicator--bd81030c-a444-4242-90eb-e029839b0c52", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02d277a6-3c00-4d90-a303-5ee77f9545ca", "sighting_of_ref": "indicator--549083af-952e-42de-b2cf-d6f9be7f483b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29d40e72-9840-49dc-9b82-0c24591059b3", "sighting_of_ref": "indicator--588f171b-d946-414b-b115-eda1b6719f6d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e1190c5-c147-4a0b-bed8-9d392ab4c900", "sighting_of_ref": "indicator--a3e5ee01-d7c3-41b0-97a6-c552aa7e22fd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f71b2d91-f385-46e5-808a-f27973e15b08", "sighting_of_ref": "indicator--0ca9a0e2-b943-4203-bc16-6391d14a9867", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf4f47ae-3e4e-41d4-bfb5-3d2aab0b92da", "sighting_of_ref": "indicator--240c9f34-6de9-4f86-97bd-a975db7f8ae4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--999c8076-2a94-4dd8-8168-df16569a1968", "sighting_of_ref": "indicator--d9dde8c4-08b8-46c4-8359-d66a99cea59d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2dd1e50-be9b-4c51-894d-3b0eb32791d8", "sighting_of_ref": "indicator--0cc649ff-22cb-4764-9811-30dd3b0dc34c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d4f62f7-0b43-4ced-9404-c77273f2acbd", "sighting_of_ref": "indicator--57e8c80e-a0ee-4ed3-8088-6df10da5f8e5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f100f4cf-8ffb-4f94-9b92-3ff2808b8ea6", "sighting_of_ref": "indicator--8fd70c8b-a6e9-4199-a6ff-48fafe9ffd26", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3340a14-4140-475f-854a-7fc2042d7719", "sighting_of_ref": "indicator--4065d8e7-4e0a-4297-9ff2-ecac0aaffab6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d725cae7-66af-40d5-8e89-9b54b31030d2", "sighting_of_ref": "indicator--9528c853-e480-45da-a8fe-92eab57ca451", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32b0db79-8d5b-49b7-90d3-fdc9e185e26c", "sighting_of_ref": "indicator--53cdcf34-22ba-4e68-8e40-95763a999e09", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--897aad52-1636-4c67-84fb-2870a31b268f", "sighting_of_ref": "indicator--385418f9-f7f0-4b3a-ae4d-c6b32f464ebb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b434cf3a-97b0-4d82-b2fb-36fe8f7e6000", "sighting_of_ref": "indicator--787a6857-a153-43c2-86ef-e67431a81298", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9f2366b-e2a5-49d1-9c52-1f06094e44a9", "sighting_of_ref": "indicator--d9f4a295-304c-4f93-b9ff-978c90408487", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1a9d9a7-daf2-475a-a75b-a47100e772f5", "sighting_of_ref": "indicator--315e86e6-4b1d-4410-9155-fbe5afa5ab6b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--748765e3-ce86-4caa-9df2-d9a68afc9e2c", "sighting_of_ref": "indicator--74194248-7ff4-4d56-b618-3042471e11ae", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c61637c-3962-4cab-a58f-f884611e2c1f", "sighting_of_ref": "indicator--3d6d4555-b081-4d98-8236-db174dfa64ae", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ba5bf4b-1f12-47a5-98ee-07b2f62990b8", "sighting_of_ref": "indicator--e9030b5c-e290-4cdb-a1b6-a547adbc34f9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5495fbb-6d14-41df-9a15-24d404db1db4", "sighting_of_ref": "indicator--d1b0bf23-8e86-4080-b5ba-12db17e044e6", "where_sighted_refs": ["location--c8625a69-b7e6-4cad-99d8-76632a875c20"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--990390fc-1cf3-49c5-b24b-18bb3e2b40f7", "sighting_of_ref": "indicator--2406bef2-a185-448e-8fa3-ee4d82db2ab6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74eabdbb-848f-4a9c-9e40-571dd1cd3d4b", "sighting_of_ref": "indicator--c1254269-6ae2-4a94-9fc2-7326dbcfc75c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--babbe60f-e586-41c1-926f-d9d72fa92142", "sighting_of_ref": "indicator--5c2caac2-a8e8-4220-98f7-519c2aba72de", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad5b55ca-160e-4182-8c02-b19f6b3b0efa", "sighting_of_ref": "indicator--26b6e69c-40d8-4072-b10b-9a87ef6d5d29", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6514d876-27f0-43ed-b16b-e7f4ab7ae2ab", "sighting_of_ref": "indicator--ad020732-869f-4a6b-a0e9-75cda59a476e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33a7b13b-6d2d-4822-b4bc-09a7b41f9019", "sighting_of_ref": "indicator--4e7a19e9-3786-4103-8854-f13f95eea12d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70d15ab3-77ca-497f-9516-3c3ef971d26f", "sighting_of_ref": "indicator--b8fe6ca1-56ab-4d3d-a2ac-4c7c4ff08f45", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8601a9ad-6f1f-49fb-9e9a-ed4971f23756", "sighting_of_ref": "indicator--a3a99d48-0c30-4ea7-b5cf-15b45234fb86", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4120e441-d54d-456f-8879-2e5f3be8f050", "sighting_of_ref": "indicator--8a30afac-248a-4c2b-8998-28d44d0d52d0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49e1a3e4-ee61-4c65-94b0-4fdc00f7e37f", "sighting_of_ref": "indicator--52f74ddc-a496-41a3-9a60-efd129bb6a3c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50860249-9195-4abd-bc1c-2599b8191d42", "sighting_of_ref": "indicator--eeec2840-b0be-4203-ba0c-bbcf8fdfa2ec", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2486087-7189-4873-96c4-bb2f16836626", "sighting_of_ref": "indicator--7841a7fa-89c1-4474-886d-9cbb59ea55e0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e769d9c-d7e1-4b5f-b871-6f7ce2ae4307", "sighting_of_ref": "indicator--36fb560a-3e83-414b-b2a1-e85d71937360", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--240b87b9-dd8f-4e56-946a-6c2755159805", "sighting_of_ref": "indicator--ac743315-77b7-4ced-9c30-d231ba779f59", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d9ecb5e-3f68-48c4-a544-30cf3bb88a0a", "sighting_of_ref": "indicator--e4197a62-74d8-49e6-820e-be847641fb6f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fea773fc-0e47-4c5c-bff2-0fb908a160ef", "sighting_of_ref": "indicator--de97d800-5fd9-4d5a-9847-aa17dde23b59", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1921194-2e1b-4a88-9d62-2c22ba498bae", "sighting_of_ref": "indicator--a274f7a1-5bbc-4824-935f-87b6e2f8a05c", "where_sighted_refs": ["location--c8625a69-b7e6-4cad-99d8-76632a875c20"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f083c58-b25c-4cb8-bf90-8b64b270c5b7", "sighting_of_ref": "indicator--b3a74877-07f2-45eb-9cfb-dbec4b8a3ade", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1803bc1-cb31-4d86-bbea-ded493ed65d9", "sighting_of_ref": "indicator--b3a74877-07f2-45eb-9cfb-dbec4b8a3ade", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d85dfcd5-8292-4f40-bc77-8fb09953069c", "sighting_of_ref": "indicator--1ac4eb60-b636-4c0c-aea2-e9b07d96580d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0ba6d7c-162d-407d-be29-387532442db5", "sighting_of_ref": "indicator--1bdbbe03-872d-4630-82f6-988613917774", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e19047fb-ccf7-4d01-aa59-0ede423a8417", "sighting_of_ref": "indicator--08711871-c1d1-481e-a776-adba2aafc183", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d24429c-8223-464c-86d5-a59e8e25c845", "sighting_of_ref": "indicator--a46d5f5b-5dbc-49df-8d60-67f5cf4d0746", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88f697cf-a0f2-4cb9-9dd3-6ebae24a8512", "sighting_of_ref": "indicator--b78e6120-3f68-4cad-8141-b897d1cd6761", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6850309-fdfa-4e71-b4f0-bf46430e432c", "sighting_of_ref": "indicator--a0609f33-0da2-47d2-ae28-ffdca558c247", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62aa292f-6eac-4a38-8ee4-a7b7fe359069", "sighting_of_ref": "indicator--d7f2dae0-6d71-4a95-9693-7be0a2507ed6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9c1c389-8a8c-4821-857b-d541cbc44929", "sighting_of_ref": "indicator--48ce8b4b-470c-43ff-a673-399756d6093c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27f72b97-a43e-41ed-afe6-0723495af196", "sighting_of_ref": "indicator--00be3cbf-f449-4522-908e-b8fd34a73a24", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ff85773-c243-45c5-986e-a156c997f675", "sighting_of_ref": "indicator--f57fb3a7-e34a-430b-94cc-e3fc5e0f3f0c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--972188fa-9e17-4d16-b56c-368d91f02601", "sighting_of_ref": "indicator--b7c1ed0b-8e38-47b0-ac40-6b636c25ec29", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4039c05-c517-4954-812a-5756060b6222", "sighting_of_ref": "indicator--374e555f-0f68-4006-973e-5b35136938cd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bc99671-22f2-466e-a1ea-78c992144adc", "sighting_of_ref": "indicator--71cdf1f1-7d42-48bf-81ae-9f84117c7a23", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd86756b-e744-4447-84c4-6f6332cce3e3", "sighting_of_ref": "indicator--1c7e6212-541d-4a40-bfcd-b197343d65e0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59c60810-dfd9-46a7-954f-8f4590b0315e", "sighting_of_ref": "indicator--ff953193-d124-4314-98b9-f7999e39b3b8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22da3011-714a-47d6-afff-a5e4d434d2c6", "sighting_of_ref": "indicator--a2a5e978-3afe-4fb8-87f1-ca6bbcdfc7f4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ea4392e-c24f-48f8-8777-7ed9dd00e197", "sighting_of_ref": "indicator--9b9b03a4-8f2e-4dd3-aeda-f556f62fadbf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1c9199a-6ca0-4c37-a990-9fd587a5bb5a", "sighting_of_ref": "indicator--16e3a249-a47a-46c6-8080-fb1e83f92efc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c92edb77-1149-4fe4-a9da-605e95901e5e", "sighting_of_ref": "indicator--356e4b90-37d2-466d-af02-355f1888d5d2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07678f5a-8a1e-4334-b0fa-d37defdeeee4", "sighting_of_ref": "indicator--f04b06fe-87a8-4270-9194-7b45b7c9c824", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e9734e4-4736-4781-844f-717f8244f9cb", "sighting_of_ref": "indicator--1536945f-5501-4a1b-924c-db582013ded9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8a65cba-88aa-43e2-95df-dfb83ce196cf", "sighting_of_ref": "indicator--de73faf7-4816-4e91-afdc-8ad8e4266938", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20635c08-5b61-4987-8ee5-14b4cf731ca1", "sighting_of_ref": "indicator--260e5aa7-60c9-4544-8a37-b1ad48216d09", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c418043a-30b8-4894-9348-f08580984449", "sighting_of_ref": "indicator--d85c45f6-bf87-474d-8990-90bb9530253d", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c3ec79e-1321-44b7-909c-58f4d066d207", "sighting_of_ref": "indicator--d85c45f6-bf87-474d-8990-90bb9530253d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28b3c2f9-29de-4212-873b-55f447ed63e3", "sighting_of_ref": "indicator--5a689ff1-d34d-4884-83d7-39232c547f7b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e5b76ca-0434-47f1-a760-3edeb9f681aa", "sighting_of_ref": "indicator--8b5421b1-73b7-4831-975e-e61db9c3f740", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bd4fe76-617b-4c84-84d6-307d42dfe5f6", "sighting_of_ref": "indicator--68e91188-e709-46d9-86ed-14168b3ee270", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aa9ff03-1b78-4d77-855b-9d74ec188b98", "sighting_of_ref": "indicator--a0b780e6-dcd6-485f-ac4a-19d94124d0eb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53196e69-94af-4a09-ba04-2e71c0c0181c", "sighting_of_ref": "indicator--5b3070d0-d517-42ee-9d82-d099ddfc584d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--118cedb1-48a5-47c1-ab44-aebad676a4c8", "sighting_of_ref": "indicator--ec0dcc00-e2da-4e8d-8bc6-181997c990c4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--747cd71e-9e35-4d5c-aabb-887277177994", "sighting_of_ref": "indicator--050651ab-c1c4-4c8a-8b0c-ca7a70c9cf03", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f948e78-bbd4-4a34-a92d-e54e1f60eac3", "sighting_of_ref": "indicator--0ad034c0-3565-488f-a39b-d9bccd339674", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03e366d9-d010-4ee7-9f99-985d29ea5f3e", "sighting_of_ref": "indicator--6a2ac185-3dce-4a84-86fb-cd55a3baef88", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8be6afe0-86e7-4a53-a418-3aa25b23a059", "sighting_of_ref": "indicator--2e40ffa6-8ed9-4940-b8d2-83b76c14e5fd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78e9fe2d-2b69-4bc1-8266-1b12a0b58558", "sighting_of_ref": "indicator--a40a76dd-ae17-456b-bbd0-a92dec660e99", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c06ddce5-571c-4642-93cf-b9db7874c814", "sighting_of_ref": "indicator--780b7bb8-5141-4647-8174-06de984a7882", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf9c2b68-9c07-4401-a54a-fee28931e8ff", "sighting_of_ref": "indicator--ea89d77b-fecc-4a2d-bfcd-58a278f62ac1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--643de042-d34a-408c-9926-ca3a5fc007fb", "sighting_of_ref": "indicator--877e25e0-525a-49d5-9b2c-39c273093b35", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--011f6f20-c209-4e34-9cef-966e145b3b2c", "sighting_of_ref": "indicator--0e45fa76-e782-4e3a-a8c9-f6123aaea276", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--169d284e-c9d9-444f-b659-e0ab1567b3db", "sighting_of_ref": "indicator--cf7ca62c-30db-45d8-8fbf-6c93f0c9b359", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b569e30-ad20-409d-8830-3330f3a99d87", "sighting_of_ref": "indicator--6419681c-d317-4ef3-931d-b92555d36a34", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b80a6c10-511c-4c51-87d2-eb8a6bd42a9d", "sighting_of_ref": "indicator--e53becbe-4d5f-4acd-a0cf-946627a9de5c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--698cc975-e620-4be6-bfcf-1acc272d33ad", "sighting_of_ref": "indicator--4d577ace-2a9a-4104-ba4b-4b2588cb12dc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f57e6593-7262-4492-a653-0519755111d4", "sighting_of_ref": "indicator--ced50bd7-0092-42b2-858f-1b5ac1250ae3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15cef3cc-8a0b-4082-aa67-46096512b662", "sighting_of_ref": "indicator--de898ee8-6908-4c6e-b453-bf8ca27dc6cd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6fd2282-d4f9-4844-917f-2d8fe8e4f548", "sighting_of_ref": "indicator--251e75bd-46f9-4e84-95fd-8034c357f917", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcc0c009-13a7-4ac8-9cfe-07c56c073ed0", "sighting_of_ref": "indicator--730ecbc6-93c0-4f33-9eba-17e808ae8871", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8caffbe1-b097-42bf-854a-4ebae9e63199", "sighting_of_ref": "indicator--ecf0714e-27a0-481a-a388-c1d4554d8257", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9a43bcb-b5ea-469c-a1a3-c0e28795f6fd", "sighting_of_ref": "indicator--c404d95f-b358-453e-86c4-91e6ac51c790", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7184ebcd-c7b2-45ff-b93c-1bbfaaa072a0", "sighting_of_ref": "indicator--33598cc6-b5ee-404f-9576-8f94d531524b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3633ea10-ee99-4363-bdc8-ade519e0d276", "sighting_of_ref": "indicator--bebfa10c-ed71-40a8-a04f-cd85f3ab2350", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d4c5bfd-a085-4b3d-bae0-d994eaa03aa3", "sighting_of_ref": "indicator--25ec016a-ff72-4231-889a-5e2b015bc6c9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--091a2b55-568c-46da-8ff0-587d336d0f64", "sighting_of_ref": "indicator--11a05801-1d10-435d-a9aa-1f67a7fe5b47", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7acc4da-96be-478c-8d57-536ce7045c3c", "sighting_of_ref": "indicator--b51c1088-1fe9-4b62-a96a-458d193dc5a3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--664f132e-191e-4868-a8a5-9cdfe8c59e52", "sighting_of_ref": "indicator--7ece2e4c-cb26-46ef-b930-27e5f1ecda13", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d50e7038-0638-46b3-8db1-f6a6a8201495", "sighting_of_ref": "indicator--a51bec27-2cd4-485c-9096-13372b792f92", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e94e46a-d5d9-479b-a280-87f337ec17de", "sighting_of_ref": "indicator--bc7fb715-8cd2-4edf-82bc-bf549eaa7f01", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08c60bc9-3aef-40de-9398-eacf5091dc24", "sighting_of_ref": "indicator--7e2f7a22-dddc-4f3f-8f36-dfa6d4cd40b0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff5bb566-1072-4570-91e3-fff8e5fc89d4", "sighting_of_ref": "indicator--0e16fb36-2056-4201-b0b5-06f6bd79a501", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--428d1f3a-df75-4179-ab8f-02877b725974", "sighting_of_ref": "indicator--320d1d2d-16a9-430c-be03-48499512195a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acb1cd3f-712c-4d53-9601-b4397b0d3e2a", "sighting_of_ref": "indicator--9f3356e7-57f4-4432-81f3-096eef1e4d2b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f78e9478-813e-447e-968a-a6389d876fe2", "sighting_of_ref": "indicator--c7518d74-5198-4227-8df8-2cc6356f42b0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9adb6fa9-267c-4e71-af73-9eba02f44c5e", "sighting_of_ref": "indicator--00803fbb-18b8-491c-828c-24961a0351fb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd4bff72-cc08-4be7-8dab-f0f83b2312e3", "sighting_of_ref": "indicator--fcff956a-83aa-4fbd-a04e-5e7a45c4094d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0b166f7-0a1f-4924-8d59-eaf8999cbb4e", "sighting_of_ref": "indicator--73a3ea9d-3607-48ed-843b-e7564dd6b269", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74881aa0-d891-416b-9eeb-6eb5f191b7b0", "sighting_of_ref": "indicator--54990b34-9f54-4638-80f2-8d95d399b5e2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09afedbe-340a-4bc3-adcc-743c3fe24ff1", "sighting_of_ref": "indicator--19aaa86c-b54d-485b-befe-148d7a263cc6", "where_sighted_refs": ["location--c71c2550-5849-4a8d-b050-635a93ef5467"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0cd21c1-fd69-4bba-b19f-18a5ad3b5f0a", "sighting_of_ref": "indicator--2916271a-6edf-4f50-a072-98c8a0d2fc05", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27585afa-4c50-4fdd-a6ff-a58d37c3871b", "sighting_of_ref": "indicator--d7e2b8c6-0451-461e-a271-8bbcb1bf671c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--933508d7-4ab4-4809-aaff-cffae4f71a23", "sighting_of_ref": "indicator--e08663c1-66a3-4324-a8a9-961e30dcc30d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77716266-2ad2-4524-8d70-95046fc513b2", "sighting_of_ref": "indicator--ad73f9af-7da9-425c-8014-999a9a5f675b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aedf2806-631c-4030-bee2-fefb37371c7d", "sighting_of_ref": "indicator--d898cd81-7eee-40ce-be10-8d400750ba0e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9d9a455-7d5d-4972-9847-94395f7c4740", "sighting_of_ref": "indicator--a84e1cb6-8d4f-4e32-867e-177c93212975", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--445c8be4-9298-4458-a52a-e5e552c2fda8", "sighting_of_ref": "indicator--687803e1-c62e-406c-aa1d-54b2bf8cd690", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7693061f-e900-463f-9e4c-179dccac8874", "sighting_of_ref": "indicator--a5c349ec-15b4-4e56-9b52-a9cf3181009c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--349c14ef-601b-416b-b039-46a61b34395b", "sighting_of_ref": "indicator--a689d148-3cc1-44db-9a7f-93f8d95d9461", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bc65c5c-3a93-4e17-84ff-efe12daa957c", "sighting_of_ref": "indicator--4ab0a1ea-a8ae-4d2f-9435-5c1076655a52", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4498fb9d-68dc-486d-b121-63e581c92ad6", "sighting_of_ref": "indicator--b1807826-3ef5-4245-bae4-4529f80f1814", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95e1ab8a-da84-4f82-8afe-f9060204fc17", "sighting_of_ref": "indicator--88214b46-3f77-4cb4-88e7-345a7baccade", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0aa5615-cf29-438c-8554-31b87a1cb86a", "sighting_of_ref": "indicator--0c907418-1936-48ef-bea9-1c4fce083609", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f77aa3b-3bae-4c76-a716-b7d8b5be4f1a", "sighting_of_ref": "indicator--7675ae79-98dd-4454-be21-fc1b865ba78c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60c6e572-a4e8-484f-9f23-538a91335eb7", "sighting_of_ref": "indicator--3f6090ec-4b54-4a1f-abd2-49032aafcdc2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecb33270-b8cb-4864-a48f-cc1e012041ea", "sighting_of_ref": "indicator--ff8dbaec-181d-4169-84ad-9f0aef06bea9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f440b2b-14a9-45de-90e9-d4ed59c70e0a", "sighting_of_ref": "indicator--d417c530-c521-44d4-bad7-029bb272dca4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4f8156a-9a2c-4889-b8a8-310fe8950d55", "sighting_of_ref": "indicator--031f9d58-e95c-402a-b804-4c9ab0d732e8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e0541c4-6dc2-449f-a01b-610d2e34c3d6", "sighting_of_ref": "indicator--3430adbf-1291-4aa5-8eb5-efd9fa6e8078", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03d48901-3d54-4be6-92fd-7034abbea87b", "sighting_of_ref": "indicator--eb04de00-6b32-40c5-b7da-76084ec13b2e", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84d21e78-e1ea-48ac-98bc-f28d2934667c", "sighting_of_ref": "indicator--b940e79f-5310-47f9-ac7a-becd46d54ca0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b6a4917-5bdd-463c-8ef1-ea1a794398d2", "sighting_of_ref": "indicator--fa810c7d-2682-40e7-92e7-b8cc922332a2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afdc0cfa-f3be-4731-be80-08c16f6b614f", "sighting_of_ref": "indicator--7788f207-9dcf-4fd9-a1c3-a4e38fada498", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bf3190d-1fc5-494e-8d2b-683e5d8ac6b0", "sighting_of_ref": "indicator--1a7cc225-9f4d-4768-89d7-973d72218569", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d63d2094-eb15-4f50-9115-cf02320c48db", "sighting_of_ref": "indicator--2d9a7ffc-2c76-4d03-bc52-e97b30d0f3ce", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--670562c5-bd6f-4519-9848-c5a45d4bb8d5", "sighting_of_ref": "indicator--6b41ffc6-67c5-47cf-9742-abed999629bd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d91892d3-37d4-4989-80c7-1eefa6538686", "sighting_of_ref": "indicator--f9e59185-5f1d-4a75-9b55-bb70f94a038f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f00ef715-1582-46ed-a1e9-7c55ffdec03c", "sighting_of_ref": "indicator--0ee35b81-3b31-45f0-ad8c-cc94ff6a476b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57ccb615-7f24-4d31-ad8c-cf26fc324aac", "sighting_of_ref": "indicator--048df853-e2bf-4109-804c-824158f1e595", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62d32e75-ee34-46e9-8f32-ab63d3b152bf", "sighting_of_ref": "indicator--c0c83d89-79e5-4ac5-b844-3679b4f39297", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a2e1a4c-816c-410e-8011-7bd7c9d6f273", "sighting_of_ref": "indicator--b38dca6b-dd37-4bf6-a105-74e15ca445e0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29f8a2b5-bef2-4d75-9729-7f621a21764b", "sighting_of_ref": "indicator--33c78ecc-b7c2-4034-ade1-dbb46078c8ae", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d84c8e60-e9e2-45a7-ba26-0c489e45aaf0", "sighting_of_ref": "indicator--1b42251a-ad2d-4966-a934-6084b430cb53", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7ea825c-c744-475d-a8d0-04e69d4f9a76", "sighting_of_ref": "indicator--01c7ccbe-3357-47d9-b63d-a72e6640f87a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5f29d43-1e9d-46d3-95d8-a5e747414512", "sighting_of_ref": "indicator--7dcdfa50-5e53-4f1d-90e8-312c78c6cfee", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--585f1114-efff-4dc1-bc67-d2e175602b53", "sighting_of_ref": "indicator--22a031fd-35e4-4176-b73b-e8c89e819e7b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ed5d106-1c7b-43dd-90c9-d6265aae2755", "sighting_of_ref": "indicator--0e26e1d3-7601-4ecf-9a45-24361d59edce", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--057878ca-30da-4c7a-b54e-61473c0069af", "sighting_of_ref": "indicator--bd6c3099-dc3a-40d6-b74e-0140b540e7fb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8e00793-14b4-49b9-bca1-8c6c7256fc99", "sighting_of_ref": "indicator--c4697acf-5615-49be-8e5e-f826fbe88166", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28eca07a-d208-48bd-8451-7312e3f86d75", "sighting_of_ref": "indicator--469e1fac-a053-4504-a6da-a5333f5908fe", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9377e18-6be2-4588-a7a9-fcebf1fc71ef", "sighting_of_ref": "indicator--9384e1ea-b984-4f76-b661-85ef92b3e8e8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57b633f4-11f4-4f04-8d3b-ce7d57ebcc07", "sighting_of_ref": "indicator--8660317c-c703-49e5-8bc9-666bc0e53289", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fb96dab-949d-4ac8-9c8a-fb64ed389b4b", "sighting_of_ref": "indicator--1d7d5020-2d1c-4b56-8536-5ac4c82f4f2a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68ec2fc8-616f-4c20-9227-8b96e487e131", "sighting_of_ref": "indicator--189950e7-91af-44c0-84d9-5494c5bb5bae", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--824fcda9-d4e8-456f-bea2-4f3298699e98", "sighting_of_ref": "indicator--51d52da6-223a-4ba3-ad66-b973fd059bf7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba9ab9fe-4e5a-4545-889b-cc925d48b5fd", "sighting_of_ref": "indicator--3a5b4a2b-1109-4157-b39d-db9ff624c509", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf5f4027-525a-4b94-b76f-90c2b6fd416c", "sighting_of_ref": "indicator--e3f162f3-2067-497f-ac7b-5b219e9da8ad", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7aa7351-a091-46b3-aff2-0e0c55db735f", "sighting_of_ref": "indicator--9d2ea282-dcbf-4c7f-997c-942efb51b5a2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d42a947f-18ec-43ec-b94a-076b55db86d0", "sighting_of_ref": "indicator--155afb5e-790f-4e2f-b76d-cd1f9c2a3884", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--658782a6-3c48-4f22-bc11-008d8d8f80b6", "sighting_of_ref": "indicator--3324393c-6e05-4063-a72f-fa64c2cba805", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b58834f3-7d02-4615-842a-9b1be8141d6d", "sighting_of_ref": "indicator--59e38881-d886-42c8-a90c-3b5dd9a00837", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b7b5b1a-8b97-4018-babe-85a9c39b35fe", "sighting_of_ref": "indicator--0e53a970-88f7-4b44-b49f-97262f4600b2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd018e5d-87f0-4675-ba4a-49ba2318193c", "sighting_of_ref": "indicator--6f41cada-b83f-4612-b559-988d9576d3ff", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3645db65-1831-41d5-a0b7-1d2892b259c7", "sighting_of_ref": "indicator--db924b02-6024-4fb8-8e33-572933dc07b2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47bcde4d-d17e-4389-817b-937d48ece417", "sighting_of_ref": "indicator--7056458c-fa6f-4015-bf3b-0236dc8e0bf0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3eaa0ec-a0f9-4cdc-8590-b5ff5c402b06", "sighting_of_ref": "indicator--def80a3f-84f5-4fe0-b8ac-fdf09bcc211c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da4de5eb-db4d-42e1-bdaa-dbe4239f154e", "sighting_of_ref": "indicator--84cf4919-e119-460f-a36d-5ac3c94069ab", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d0413ae-5237-4712-ad7f-902877b9709c", "sighting_of_ref": "indicator--cb4a339a-263f-4c16-afc3-1e4d6e7dbc8f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4cb463b-a681-40e1-accb-60a6ea0c6c09", "sighting_of_ref": "indicator--0fa3a341-ceee-407a-93bf-52d6817b5784", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e474b98-062c-462f-9026-9e803abb2293", "sighting_of_ref": "indicator--ec93a53e-988a-407a-a424-b77715688c91", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25239a87-1df7-4444-b065-91c0fda7acda", "sighting_of_ref": "indicator--fa287125-0fe5-4651-b5ff-b1ab5fdfc74e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--642ee7e3-4997-4fc0-a1f8-e1376205d1b0", "sighting_of_ref": "indicator--e0b55017-a32b-44c5-b984-6ad4d13da417", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42e00f01-f736-4a8e-ba37-5835717af1e1", "sighting_of_ref": "indicator--c9f0e8eb-2f68-4c95-860d-7b4a17d854e8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8774391-b294-4deb-899d-8949a81f63e4", "sighting_of_ref": "indicator--7fb6174a-ff3a-4496-9de3-c759005f2433", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0041cf40-c014-4dfb-ad09-2044c9d00d6b", "sighting_of_ref": "indicator--cc5624fb-8ddc-4588-81b2-8145eceac343", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d61c51ac-387d-4592-844b-76957d342014", "sighting_of_ref": "indicator--32095769-1bce-4c7d-98fd-c5b1ad7048dd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e0caeae-87aa-4238-888b-3edf34b5d26a", "sighting_of_ref": "indicator--c9442009-8a84-43dd-9564-2513e9d62ea5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d53b55a6-5e39-4b5e-8201-33110dbe534d", "sighting_of_ref": "indicator--55d85ded-9a25-47fc-857d-25d89d7acfec", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b88ce39-4000-4100-bfec-d1e514db6f6f", "sighting_of_ref": "indicator--9ce3f862-25c9-4226-8b79-d103faf4f908", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f892f2c1-23fa-4a73-b8f0-07b727c61cfc", "sighting_of_ref": "indicator--0d69c5b2-ffde-4e91-8ce8-28e01cd0d4aa", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f160ff9c-a54b-49e1-85aa-086e84433bba", "sighting_of_ref": "indicator--b32eb86a-3994-460f-a390-83fb682a9aa7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aafb844d-45f1-4710-925f-4d38ec0d9493", "sighting_of_ref": "indicator--15d1a48e-c8f0-4d2d-94a9-f525d6ed2c47", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c06d121c-4c60-4083-b35f-0884d8ae6ac4", "sighting_of_ref": "indicator--18a7002c-3761-4eef-9d05-c109963c3407", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--085056c0-3326-4aa0-88f9-a4409586f4f3", "sighting_of_ref": "indicator--6ed05c79-81ad-4ae0-80c7-f863177f3f05", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9d68c03-9b45-466e-8e1c-b2623a54ab2b", "sighting_of_ref": "indicator--fef5001c-0b26-4ab2-b120-10d4ef91ccc8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6a9d905-5db4-4c87-8004-bd9ca909c0dd", "sighting_of_ref": "indicator--73120aaa-21ef-4055-b2f4-ef2e4cc29cd3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e7a40b5-c9e4-4fcc-873d-f7e3d7413448", "sighting_of_ref": "indicator--c31df822-01bb-405c-8230-997f2d5f9a08", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--843ec6fb-13a9-4d4d-b243-52ba8186011c", "sighting_of_ref": "indicator--389c2991-8ee7-430c-9bec-55e64b58a4cc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5be79871-ca2e-4079-b68e-d82e60511d22", "sighting_of_ref": "indicator--af444c51-0fc1-44bf-b966-d48227db4162", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ef0720d-45cb-4a0f-b63e-f2d1443cdd05", "sighting_of_ref": "indicator--a6f5a5fe-97b7-454c-be81-cd31e5f7536d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e050322c-8b91-44e5-a668-e2de7d7770ab", "sighting_of_ref": "indicator--8bd8c05b-277c-45f4-876d-a1ccdc0bc7c6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fb94904-61b7-4c7d-a09a-6cb7daba8cfa", "sighting_of_ref": "indicator--df10bb13-1d16-430f-94f6-7ccc11e8c2eb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--232a4732-8ddb-413d-b1bc-88de948d9116", "sighting_of_ref": "indicator--66f21591-b7af-4e98-8c57-27b77c180d3e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--105c8846-9e66-4d58-ae4f-0d8cd7e7b1cc", "sighting_of_ref": "indicator--d6461062-1605-45c9-b11b-101bff279940", "where_sighted_refs": ["location--c71c2550-5849-4a8d-b050-635a93ef5467"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48c936da-66b0-406d-be45-2a03cec3c4a7", "sighting_of_ref": "indicator--c89e6da1-4369-477d-8035-ac889e81d54c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af08b4de-fc29-48e2-9020-92538a4aa75c", "sighting_of_ref": "indicator--edb75ec3-8d00-4cad-8053-7f0a29eef627", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa4c5fac-c568-4a9d-9e08-ba7e37044cf6", "sighting_of_ref": "indicator--73ba18c6-8ceb-4c70-8329-5792ae02333b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef8de83f-652b-428f-87ef-1fef06f1179a", "sighting_of_ref": "indicator--73eeaac4-70f6-49fb-b43b-4525f7443652", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7b4e02c-445a-4313-a096-0165bbaa8783", "sighting_of_ref": "indicator--561476dc-a6b1-43f9-b721-7271dfc2375c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a995144-a275-4206-bac3-a65c1d6cde08", "sighting_of_ref": "indicator--17f3eaea-d84e-4958-949a-adc9e2063865", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8514c97f-ac1f-4a29-838a-f2227371d9ab", "sighting_of_ref": "indicator--e1b95584-d415-4ef6-aae8-098f1bdf2301", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1acc2f2f-cee2-4090-af6c-afe10b53ee20", "sighting_of_ref": "indicator--5bcd5f52-7006-4114-97ec-44b1b4b3d719", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c05b44f-9591-43cc-bf6a-b7d38b830b20", "sighting_of_ref": "indicator--07e469ca-ab58-41a3-ac87-ac0b08ba7a8b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc752524-2af9-4bc8-94b8-64f2c88f1e40", "sighting_of_ref": "indicator--efa23b87-a609-43ab-83e5-4bb2380aa956", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19acb888-e195-4ad7-be40-1ab203662f74", "sighting_of_ref": "indicator--c4464f94-7829-4638-96ba-5bacde4c977c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9c8c84b-3960-4f75-a01c-177d147b0573", "sighting_of_ref": "indicator--035fb447-fcdf-41af-a7b1-904b6c9c75d6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3b68dcd-e0b7-48db-bfaf-222789f9fb46", "sighting_of_ref": "indicator--d032a303-de25-45cb-a921-ad44346445ab", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f023a0d-87c4-4370-bca6-bc5c3b2e3ff7", "sighting_of_ref": "indicator--20c084fa-e776-4ed7-b2dd-2d37b9d8d106", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4df5a463-577d-4835-93fc-0ae0bb72312c", "sighting_of_ref": "indicator--3f9db759-3623-4b58-9a4e-8b7ccd4f3912", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2484c73-87a0-4acd-8049-1ef5efb9eac1", "sighting_of_ref": "indicator--082bce3f-3de3-4865-ae32-ddcf4a10f1eb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02c2bc18-526b-40d8-aadf-3c38a819b296", "sighting_of_ref": "indicator--0b1be23c-b0b4-4f26-8d3e-72253545b272", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5064f439-4b30-42b9-8cff-c1167471cd89", "sighting_of_ref": "indicator--4cce8b4a-e693-4ecf-8cdc-3743dcf7572a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48a7d7a1-2eb0-4155-8a55-b9993f7d743e", "sighting_of_ref": "indicator--83b4521a-3467-464c-b327-c711995d8b6d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c705744-6413-48a5-b41e-f3864707585b", "sighting_of_ref": "indicator--58dc6b2d-2fb8-4b5e-9c19-bab909144ecb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02fbdb83-a469-45eb-830e-124e451afb04", "sighting_of_ref": "indicator--1313f3a4-74e4-4169-affd-07f046557ca5", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46963958-8a7a-43c3-b8f3-d37072c0f4fe", "sighting_of_ref": "indicator--1313f3a4-74e4-4169-affd-07f046557ca5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dbbabaf-65bc-4d46-a546-9ac2db3d4696", "sighting_of_ref": "indicator--3fa39170-8e6f-44f4-bcd5-b9908e3341d3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78e4e5a0-ff14-42ff-8885-adac62c358b9", "sighting_of_ref": "indicator--8104ca11-2385-4987-87d3-dc2a3b3e5ad3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a20d86ef-f0ef-495e-8d98-2f44a4a45785", "sighting_of_ref": "indicator--02e0e326-8905-4c33-a945-3882a96707da", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10215b9d-aa0f-4088-897c-b76b9e30f72d", "sighting_of_ref": "indicator--3d0b0533-7bac-4b3d-8930-0d3031dc677f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e8991e5-b7fd-4ee3-9f01-b4b1cb3c7f05", "sighting_of_ref": "indicator--dc178515-04a6-4050-8965-93caa9ea60bb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f76c1d3-493f-4bfb-9b37-19436e47c14c", "sighting_of_ref": "indicator--904e4539-7437-4998-ae90-8c010eba207a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14f841ec-eaa6-453f-8934-a1d1b5616da5", "sighting_of_ref": "indicator--b5492591-c511-44fb-ac20-70a6fd93f706", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6da7c0a-6c4c-4f0b-bb35-8f9f603f03a9", "sighting_of_ref": "indicator--1dc5826b-f493-451d-b045-6e744dbb8ba0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ed1c47e-f5ab-4e7c-9e18-474f9b8c69ec", "sighting_of_ref": "indicator--c7b93bec-faa3-47a5-a577-4f83cd98783a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ccc8cfe-9722-475a-b444-1ac356acc586", "sighting_of_ref": "indicator--8c077c11-5651-40d8-89e6-e67c8af113e2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d0f6ccc-bec7-4459-ad1f-96100605d31e", "sighting_of_ref": "indicator--cbdf48c8-6930-44b0-b050-b4ded5d65d5b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4b8b374-4998-4307-b406-5cc7cd5d6d2a", "sighting_of_ref": "indicator--f6b8e75a-63d8-4181-9ef1-546e952cceb8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2564aa2b-5dcb-446a-9c13-9f04bea050d0", "sighting_of_ref": "indicator--7806c499-6526-4013-a0f5-06de730b7264", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5cba2c4-d809-44d9-ad3c-4dae39e68a45", "sighting_of_ref": "indicator--d9757a1d-543e-458b-bb88-b2341dd28d66", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--991e8e94-2438-46ea-ac16-b0390d468634", "sighting_of_ref": "indicator--d3af7f74-71da-4577-8627-c549205d6c34", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c57005b9-7f53-431e-b597-c76240f962d9", "sighting_of_ref": "indicator--d7b8ef2c-ef0c-4c61-96d5-564185ca4d85", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68731833-b824-41fc-b505-bfed171fd46f", "sighting_of_ref": "indicator--6b1dae8d-02ea-438f-aad2-b0106169d324", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22483630-9135-4c83-8dd2-7881fcb52254", "sighting_of_ref": "indicator--93cd5f37-d685-4865-845f-9cec2c188023", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f459596-1646-4ed0-8c90-5c2329651846", "sighting_of_ref": "indicator--402e1204-6dd6-4f46-b0fe-0527e78fdf12", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b803d15-f557-41d2-863c-1b7b6b3f56c0", "sighting_of_ref": "indicator--b30f8468-6729-40b8-bdf6-a25ba8e85e36", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5a87d6d-2ab0-4dfb-8d02-895441992dcb", "sighting_of_ref": "indicator--635c7979-d902-43f6-8249-b0325c3734bc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5ad5b1f-346a-4032-9cb0-0d07ca9ef718", "sighting_of_ref": "indicator--fff11545-5fb4-4283-87d2-2a7ef6a81b0c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f92b2dc-5f38-4524-b406-b0d6ab6dfdaa", "sighting_of_ref": "indicator--7c3f1e8e-9921-4c5a-9ad9-da1ea419c612", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f49354cf-707d-422b-aaf0-6f6ed13cdfd2", "sighting_of_ref": "indicator--a72eb429-8b91-432e-a3a8-d745356e31f6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f28ea3b1-e65d-4bd1-a2e1-a2d0491f2f7d", "sighting_of_ref": "indicator--3d440681-1633-450a-ba7e-ae1d325b66d5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dff3a10f-a07c-4f79-a365-50b02e3e603b", "sighting_of_ref": "indicator--e305340f-4360-45de-9911-a850d9f04289", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a45add8-8cbf-4e2b-b9ad-9639358e6b96", "sighting_of_ref": "indicator--89b7b399-ea58-4b76-98ac-bcece3d36924", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f804773-7547-42c6-9662-c4424d55aea8", "sighting_of_ref": "indicator--fafa9bdb-4a7f-4576-91ab-9341e289698f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1e92f22-734b-4ac4-b110-d5b1676982d8", "sighting_of_ref": "indicator--7664c0d6-13e5-44c6-8019-b28054b2634f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f29d065a-e627-4a82-a431-846ab5553c85", "sighting_of_ref": "indicator--41cd32bd-97fe-4f72-9bcb-e81305e2a891", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cb3eb8f-5390-4fca-9003-4195dcbc29ca", "sighting_of_ref": "indicator--7c751ede-232b-4133-a48f-0c7c7fc50e2e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89d37819-420c-409e-b4fe-982470c60ba5", "sighting_of_ref": "indicator--e4c220e9-6e57-44b5-bd31-667cedbcc313", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c8202c9-27c9-49f1-9068-1a639bb29c47", "sighting_of_ref": "indicator--3298bfa5-243f-4d58-81cb-5bb6f1e73ef1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2529b713-73f4-4e20-9524-c5ca93a6fcad", "sighting_of_ref": "indicator--0bd51ce7-ac60-4bd2-b386-d206e23fa3db", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a46827bc-619a-47d4-803e-a0c860ac0595", "sighting_of_ref": "indicator--f86b2eb4-4b21-4716-a9d5-3f4645be5102", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8fd90f2-7a42-41f0-9cd1-2def63036f72", "sighting_of_ref": "indicator--c8a73dad-e02c-4d1d-aa47-e2758d20cd13", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a11f2cf-67af-43af-891c-e6c7462b495f", "sighting_of_ref": "indicator--33423faf-508e-4998-8fb2-276d8f4319af", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ffc0a98-07f5-47cc-aa4e-97954c1053e0", "sighting_of_ref": "indicator--71d9e1a1-58ba-4831-8765-1ac47a485143", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67d8da4e-343a-43ea-a7c6-5f2ec7133d0a", "sighting_of_ref": "indicator--275f644c-9e21-43a4-8970-f1507ad279ed", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4703a1c2-3a6b-455d-9189-d0e5f1598d5e", "sighting_of_ref": "indicator--56c70f14-8550-468d-83a6-f75e1d63e994", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14bb3d20-d85e-4e35-9a61-a558d6271d0e", "sighting_of_ref": "indicator--354389b1-58fd-49e3-825b-1a97658bc747", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cc4c27b-7953-4aec-99e4-137b663186b7", "sighting_of_ref": "indicator--caaa3db6-2887-4547-98a4-e6ec612774ce", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6e2cb5d-30ee-4be1-b6a2-8606c8e08d0a", "sighting_of_ref": "indicator--584d4dad-829e-455d-86cc-19214444702c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4c28f76-535f-4d16-b100-6c0e3f4c80a4", "sighting_of_ref": "indicator--09003a12-88bc-4f70-8e8c-fc64158b18be", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10f5b435-1fa0-4fe2-b144-3e51d10b580e", "sighting_of_ref": "indicator--c7007907-d917-4838-b32c-fcda82ebbcec", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6cc1b1a-4304-4f47-87a8-765df96e5a34", "sighting_of_ref": "indicator--5779bf7e-4ce8-4ed1-b13a-5c507a724b0b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d958180e-d219-47a5-928f-5a613ea8e844", "sighting_of_ref": "indicator--dc68151c-1131-4577-bf17-d42edad080b1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--396941e6-87e6-452c-962c-b91120035ee2", "sighting_of_ref": "indicator--00155a5f-d64b-4259-bab9-0ab996f98a2f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f719e0d-c54c-461f-b811-2512233945bc", "sighting_of_ref": "indicator--344f8b77-e2ee-47be-a1df-c5390e806d6c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d645204f-468a-4101-9e0f-39799ab03d65", "sighting_of_ref": "indicator--43c43695-7f21-40e1-abe3-35b3c91f99f8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85fbfdd5-6566-4e4a-93ee-c3a9b6670ba7", "sighting_of_ref": "indicator--9a5ff503-ff79-4005-94ed-eb2e1d314f76", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1c4cd77-ebfd-4936-8f57-62d142f8611a", "sighting_of_ref": "indicator--0fae4f53-5c3c-496b-860e-51f2d08ef129", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e1eed84-a1a0-4602-9d5e-c9b0074c4804", "sighting_of_ref": "indicator--c9d8eda7-0d53-421c-8a50-eed6adbae493", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0adc816-90a5-4872-b1a5-9f41e38ce553", "sighting_of_ref": "indicator--56dd65ae-f39c-4f87-8c99-fc72d6778350", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cf527b0-cce0-4181-8200-5cea80d5d1d7", "sighting_of_ref": "indicator--480128ff-0b0b-4fd1-939d-04136e0c1324", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0456b218-4889-4ef4-ad26-b919e4183ea2", "sighting_of_ref": "indicator--3b40665e-9d56-4d50-bf2b-3db3c42e084f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1da0c43-8888-464d-9cd0-b6f22395374e", "sighting_of_ref": "indicator--386f7a37-3a50-40f5-af17-05e595993a73", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5887759-02f9-4c79-b827-f49797634c15", "sighting_of_ref": "indicator--9e292f96-88f0-4d4f-9126-52a33c1a1b99", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce7727a7-f432-4971-892c-8ee63d3dd466", "sighting_of_ref": "indicator--927942ab-3b97-43b3-8704-3177ccf44063", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cce91566-55fd-4134-938c-445e281a9281", "sighting_of_ref": "indicator--d2ed036d-d1e3-4d72-8766-a41a73ca157f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66f01672-48ec-4ebc-9769-63e83d9e89f2", "sighting_of_ref": "indicator--87dc8bfc-60fb-408e-b604-235a3ef9dcd8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b9a0e5c-424c-4936-acdc-ab763139a862", "sighting_of_ref": "indicator--b8cd4125-fa77-42c3-bedb-f3581e49d1bb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d4a620b-025c-4e51-bad2-1faa3ce59283", "sighting_of_ref": "indicator--15525a66-9f61-484a-a3a4-a93aa61833b4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e994c8d6-06ec-4ceb-85de-6a5cc39e09b4", "sighting_of_ref": "indicator--d5f4f69f-a51e-4146-a588-3037bac2fc94", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22e3d9fb-7b04-4b17-8264-87968bac9d53", "sighting_of_ref": "indicator--fa88f1c6-9022-4604-9507-d1f33c579b9b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--371d9a1e-af99-43e7-b553-b39dbbe19836", "sighting_of_ref": "indicator--8982ba99-d2b6-4139-8c56-1544c3a3ec2b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d5affde-2c96-4670-b811-690f6f5a58ed", "sighting_of_ref": "indicator--f58ebd03-2198-4a2b-a2bd-4ca7929f7d01", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6778af2c-244f-4808-a4e0-ae76bc9f239c", "sighting_of_ref": "indicator--16782ffc-9a52-4b87-a161-ce8ac765e9e0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4a07345-850d-441f-90f8-57291ac25463", "sighting_of_ref": "indicator--9a2b7667-925b-4543-aa30-5928904c29e6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbe1f278-1f92-4218-8dcd-d7d22797e84d", "sighting_of_ref": "indicator--7185814e-04a9-425c-9d93-c16222c6bfed", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0a11873-f0bf-4675-b546-6bcf47553478", "sighting_of_ref": "indicator--13af4975-afbf-4404-93ea-0be53925db45", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81772685-1525-4c78-b484-3265b91960c1", "sighting_of_ref": "indicator--25988bfa-589c-4d97-bb9c-74e23960c761", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--793b807d-6f05-4943-accc-24e5194de11a", "sighting_of_ref": "indicator--5cd0463b-ac0f-44c7-9d8f-f40b5e60555a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7224578-ac3d-4d85-ae6b-dedc44e20949", "sighting_of_ref": "indicator--c3123c04-03f5-4786-a32c-e89400131413", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d7eef51-30db-454f-afe4-f6c179987587", "sighting_of_ref": "indicator--ae5a9c00-0337-44dc-8716-dc5a99f7b9bf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85f6728a-b098-491e-82d8-0f707b41f707", "sighting_of_ref": "indicator--26e69b7a-dbbf-4eb3-a2fb-9d59670b5c6f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fa42335-d8f8-47da-892f-278b984daaf7", "sighting_of_ref": "indicator--102ed959-9692-4f0e-ac7b-2ba065df44ba", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcd7d288-adcc-407f-826d-20ef7636374a", "sighting_of_ref": "indicator--80b6bf33-f6fd-4ba0-9215-fb37925abeab", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c229a5bc-e6e1-4bbd-884d-1d5eaa482976", "sighting_of_ref": "indicator--43497d60-a138-45d3-bade-dbdefd27b27f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1a32cea-2d9f-41a8-8f50-55041b5a93c0", "sighting_of_ref": "indicator--6aee1fe6-8768-4949-9477-5e850673d757", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8375ce0c-16cf-483d-a01c-a00c0f43f8bc", "sighting_of_ref": "indicator--544e8e3c-8b10-4852-95d2-14f0a483a5d4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eeddc69-aca7-4c6b-b51e-378fe4f394c8", "sighting_of_ref": "indicator--8988670b-a501-4f1c-abeb-cc04f3aec243", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3087d67-3c05-4541-bc6f-e513355cfe17", "sighting_of_ref": "indicator--9d09ffc1-969f-43a6-aef6-c8f0a90ff563", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e113366-824b-43b6-a436-c8ffb443374e", "sighting_of_ref": "indicator--1834e81e-a9c4-4a27-bc5e-2c33ba21fea3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa7a380d-cc23-432f-bdd4-0ce65ea53859", "sighting_of_ref": "indicator--45a6aa5d-f065-4bda-9c95-3baafa88c4d4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7de8047e-b178-4892-a100-660a93e72295", "sighting_of_ref": "indicator--023a52d8-d5db-4c4a-ae95-9fc4c394eb8e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e486904-d058-47e3-a4e5-68cb84702f98", "sighting_of_ref": "indicator--9645f2eb-1860-4712-a099-8dc256172606", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da0ba8f1-118f-49e0-a5cb-b02d75839ed5", "sighting_of_ref": "indicator--4eeaa5d3-e840-4e5f-b610-a3d89da31d3c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1642be01-39a4-4764-9540-6a191c41eed6", "sighting_of_ref": "indicator--c7722a97-69c9-4a40-9f5c-f3d1e12f0f23", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b710c3dd-ea5e-426b-822f-6f2404efcdf2", "sighting_of_ref": "indicator--82aec5d7-e310-4b09-88e8-502439ce19b7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d62eafe2-c4dc-4fbe-a195-246c23dbef79", "sighting_of_ref": "indicator--86d633f8-a8c5-4d03-95d2-eb7624bba7a9", "where_sighted_refs": ["location--c8625a69-b7e6-4cad-99d8-76632a875c20"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f16fcbe-f74f-4c28-a4ee-c953560fa8de", "sighting_of_ref": "indicator--bc6968b8-bfff-4bd1-adb5-4233d3900d05", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79e47fd5-0835-4f82-b9a8-78c9d939640a", "sighting_of_ref": "indicator--85cea1a7-da65-4f84-ba18-0c8093772835", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50912af1-e0a3-4a0a-a886-00a4e23cc40e", "sighting_of_ref": "indicator--e2c4eeb5-34af-4bd5-896d-f509fba13702", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74202fe4-875d-4098-954a-04e7a25cf44c", "sighting_of_ref": "indicator--aff26858-f6bb-4416-95d4-4ad1faa610fa", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c99b6e8-2adf-439c-8b83-b9f6b3adf52b", "sighting_of_ref": "indicator--57a58a10-b2aa-4691-9e63-a0b9b4c51993", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d6d5adb-824c-4013-9711-943bf22353ba", "sighting_of_ref": "indicator--dc8dce2c-52b3-4c14-a587-dbe68f015278", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e17a4cba-f790-4f50-ae2f-6f6a54f0acf1", "sighting_of_ref": "indicator--ab18a72d-750f-4cf8-95fe-27a21bae4bbb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9555f12f-9ee2-40cf-bfdb-6a2150222428", "sighting_of_ref": "indicator--d6c9f1cf-3b0d-4892-9848-5541f9f7072e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2582bbfe-5c8e-4062-895b-2c1055075315", "sighting_of_ref": "indicator--c6ff78bc-1c38-47c0-b112-48193c2012fe", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--652a12ac-5cc3-4f14-8323-80eb65fcdd65", "sighting_of_ref": "indicator--0bb49cea-1e32-44c2-9a32-0988013df9e5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b6b2d45-a788-4fcf-b559-20fceb729b96", "sighting_of_ref": "indicator--44021069-2705-4069-a484-4afb45559ce4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9456a258-6e4b-40c0-adb5-48e2ad65a048", "sighting_of_ref": "indicator--c988c00c-ab5c-4811-96e9-09034a530916", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--730dd57a-0e53-4cbb-b650-a2951202489c", "sighting_of_ref": "indicator--15ba198e-2f36-45e9-9a92-183817876dc3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31aac3d7-d17a-479c-9347-a47470b4a309", "sighting_of_ref": "indicator--774eb9fc-883b-4068-a1f8-24639ddc4b3a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c314f98-75b2-4647-952f-5787fa1db4c1", "sighting_of_ref": "indicator--83ad34fc-365c-464f-9ae8-f70af2490de5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7ac818b-62c2-496c-b97b-a2d9d735bf1a", "sighting_of_ref": "indicator--4e3b8610-f528-4790-af74-7f645e039174", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4002283-20de-460c-a8dc-6f0d1ace3c85", "sighting_of_ref": "indicator--a6e35008-a15d-4586-b4de-98a6758339fb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--facea323-f45e-4d56-b1fd-8b4323faecfd", "sighting_of_ref": "indicator--f0f3495f-0f0f-4ba8-886d-77b9883006d6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2de11d40-6352-4fa9-a8a2-eb59bfb15b1b", "sighting_of_ref": "indicator--4ab93b61-47a1-4928-8bc1-114a21710379", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00e5c2e2-f0e7-4247-91a2-e6c6f2fcd83f", "sighting_of_ref": "indicator--6e2572c4-c888-4292-90ec-b4c003ef7e95", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3b4a284-96e1-48f2-a368-6c850cf26cc4", "sighting_of_ref": "indicator--63b4f4e2-ca8e-41ca-b484-fdf099878b85", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf407658-b7dc-4908-8e1d-9d2678a828dc", "sighting_of_ref": "indicator--12773d8d-f93d-42d1-89f5-f40761a24bb8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cd47b3b-b1db-4311-8ed3-254c75b1c3e0", "sighting_of_ref": "indicator--3740d1a5-4465-47d1-a012-6b89b5844713", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8f2a013-5525-48ce-ad5d-e1fd13e79710", "sighting_of_ref": "indicator--d93d05d0-479a-4680-9169-1af8a8d6295d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5255d2d0-839d-4b60-bab7-652aec337f38", "sighting_of_ref": "indicator--318c54e0-0718-4c98-9cf2-c4f1f16e3213", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efc695e4-5911-43f6-8540-65a1de9ff2ac", "sighting_of_ref": "indicator--92f54175-39ee-4828-af14-19982de25882", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7de5186d-011a-404e-8dcd-8af9eaaef111", "sighting_of_ref": "indicator--4bf8d7c0-0f2b-4915-b751-b279bc4da2ed", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3d9af0e-8210-4364-bfd8-b16e8268b8b9", "sighting_of_ref": "indicator--263c0edd-f5f6-4a3a-9004-d2370a54ef0a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0864a79-07ac-4927-81a3-4b70ae9821c0", "sighting_of_ref": "indicator--e54a442f-77e4-48ba-8626-3f6aa5107827", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88ba87b9-7b9b-40dc-8396-208c90ea5392", "sighting_of_ref": "indicator--c7d2ff97-643e-4478-9774-138637afcb94", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6760b727-2b2c-43c1-86de-a461e212683f", "sighting_of_ref": "indicator--97854a4f-3582-4bec-a8de-3b4a29ee3d9b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01369d0e-24c7-4d14-8cba-1b495bce8f4f", "sighting_of_ref": "indicator--f8ab27cd-86b2-44df-8f75-0cfb0fca2da4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--344105bb-8ffb-4e67-95e0-3152231654c7", "sighting_of_ref": "indicator--d66d86a0-0be8-4d29-9cde-5a1821f00024", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b054cc0b-22f6-4fd4-90bc-56ce6e6cd8ed", "sighting_of_ref": "indicator--293c8256-9c84-4743-9178-d2c7d81d1728", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5614eb68-0a52-4e30-8556-79c4bb176de7", "sighting_of_ref": "indicator--95bcb95f-4306-4384-b373-d2ea89510d4a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d9a758e-70d4-4890-a275-0c3ac80cd122", "sighting_of_ref": "indicator--b4929bb2-75eb-4b73-baf0-376448f556eb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e25d31c-e244-4dad-a9ff-e12caaa9d577", "sighting_of_ref": "indicator--1431a9ad-6440-4fc6-a73c-8bdfcb51f680", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fc118a5-679e-4f5b-95ea-0198e76f57cd", "sighting_of_ref": "indicator--43f12356-9709-4fb3-8d05-23bcf925b169", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f012a369-e127-49f6-8d4e-06539af0ac42", "sighting_of_ref": "indicator--382270f1-b5b3-4832-a298-44ccc7e7c092", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--422dad0a-f9a0-4cf2-9460-c176b95025aa", "sighting_of_ref": "indicator--a1f5e720-8c49-439e-8429-1e84b7b0d7ff", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1002f741-6154-4a8c-bde0-f6fd961a52a6", "sighting_of_ref": "indicator--18ac00fc-354e-4218-a503-a04b489fd1f6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d78d736f-f494-4ed7-b4ce-54c12ae66a54", "sighting_of_ref": "indicator--cf641c2e-f340-45c7-b094-65de417d6dfb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66ba9571-1d42-47c4-8307-419f52af54f2", "sighting_of_ref": "indicator--135f733e-6e0e-4ff8-855c-dddee5a42969", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68c455e4-91e8-48d3-851f-94279eea7f7f", "sighting_of_ref": "indicator--b5080372-68b6-4a2d-9291-9aa2e0cf93cb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f4f6b9c-642a-46e8-a573-4b5216f55b10", "sighting_of_ref": "indicator--e4523150-3f53-4d5e-88a5-5af532f63e14", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b4b573c-5ad9-427a-98b7-07b2c29460df", "sighting_of_ref": "indicator--960b10a5-e49e-4545-9048-e58ed5233f97", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a85d9fa-4c82-44e7-9da5-23f0ac13f239", "sighting_of_ref": "indicator--3f5ef9a9-37c5-4082-8cb7-28b0c25f0ebb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c43037f-b155-4359-b5ca-517c3887feed", "sighting_of_ref": "indicator--82fb2950-cf7d-46e6-bdda-1eac1451b9d1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7d0962d-b872-4a50-b610-9db4c72b2667", "sighting_of_ref": "indicator--85ae32dc-df23-4524-b56a-55d7f3521dd7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac66f56c-5675-4291-9b58-31b4d7a44b09", "sighting_of_ref": "indicator--a5c1539d-39ec-48d6-b35a-b81aa765eb66", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85485293-a8e6-42fa-a227-a75abd49353c", "sighting_of_ref": "indicator--74de85ab-36ab-4ef0-9f84-74a8af6a8a75", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0145f2f-f617-423f-822e-61efce7f6233", "sighting_of_ref": "indicator--8b755ffa-d370-4fa6-9862-972a1f98b24d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3f801e7-670e-451e-94ec-a4c5a3257e69", "sighting_of_ref": "indicator--97c405ba-010b-4183-8103-12eb16bba6f6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1167fab0-33a7-4514-987e-2350bd8d73d5", "sighting_of_ref": "indicator--a9279a5c-67fe-486d-8e29-b8c8b8213d26", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ff3fa65-0955-4339-b827-5160a699d7cd", "sighting_of_ref": "indicator--0fcf145d-1112-4395-97f4-f4e186070e41", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0306efd-efc3-4fc5-b777-7fade1419efa", "sighting_of_ref": "indicator--c1a137af-d1ad-48a7-a15c-58b6cb021f5c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97bacd94-5618-46ed-aca4-6c61eceb22f4", "sighting_of_ref": "indicator--a74cc576-919c-4fd9-a2a0-14ded5694c99", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a5e4f98-766c-447e-932a-1d1f9e289eb5", "sighting_of_ref": "indicator--33a8d2c8-8d69-4a41-bc6d-c9dc6e4ece0f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ade205e0-7f8a-42d4-a08d-eda494ec16e2", "sighting_of_ref": "indicator--627cd178-ec18-4b18-9bec-3e126414e0e4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee1bbd05-7a30-412b-a000-867c081e88b1", "sighting_of_ref": "indicator--3c8cbc10-47f6-4416-97f3-684c8b8dc03f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--393e6ec0-6737-4155-a684-229bf99fe772", "sighting_of_ref": "indicator--43160561-9a15-4eea-9813-0d00292c32aa", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--783fba52-f932-46b6-97fa-dbb15ba52a91", "sighting_of_ref": "indicator--7965774f-62d9-4952-b85d-9ec2d2f49e16", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d7a6921-0128-4385-b854-39be6f4c92f1", "sighting_of_ref": "indicator--6ec32c73-f8bd-4bdb-9c38-7a18ec4f2f4d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--576adb79-8a6b-4e65-a1a5-33430b042fcf", "sighting_of_ref": "indicator--dd7584ac-d56c-4b88-a414-8e8bcdfc9fea", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af5ad45f-b2d9-4531-a6f8-737d9186e434", "sighting_of_ref": "indicator--f586c8ae-f2b9-4fae-ab2b-a0e1e3176404", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd672d2f-889e-40a2-9594-6c2aadda8117", "sighting_of_ref": "indicator--9bf9bf3a-caa1-4f6d-a58f-8a2720a066d8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba64a876-8100-4076-971e-5c3c23df9d71", "sighting_of_ref": "indicator--e8a96158-92cb-404c-9146-a2f1c24dd02b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aac54f10-7f8b-4289-83e0-099d1fa7390a", "sighting_of_ref": "indicator--0c9e2a16-b67f-43df-9140-11c0a569ff28", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7bb6c9b-c399-4977-9dd7-9882a2f5a36f", "sighting_of_ref": "indicator--d02cee04-b8e5-4556-b092-acbffccf46a3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a5656fa-f4d8-484e-8a4c-786db8a9ac91", "sighting_of_ref": "indicator--dd5f079c-dbbd-4ea8-a223-9821438af1b0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38d76005-33e7-4633-a86d-bdd6b06b038c", "sighting_of_ref": "indicator--6f886b2c-78f4-4f15-a668-0bf245c1f535", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22ffc041-8961-444a-9010-6a3be7f62aac", "sighting_of_ref": "indicator--fb518ba0-66a0-4323-b1b9-5da1ca04722c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7f31317-ccc4-47b9-8d12-86cce32c81bf", "sighting_of_ref": "indicator--86224b5a-29d8-425c-81f7-93bbcc9c8746", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c04fdafd-dded-494b-abd6-594ab7459298", "sighting_of_ref": "indicator--219bec3f-4848-42db-8f72-42374935e54a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4ce2189-df24-4111-a0b6-493d2ab0428d", "sighting_of_ref": "indicator--70107184-4cea-4f58-9da4-2d1c70e5fb91", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42054357-13af-422e-8d25-27875efb9a97", "sighting_of_ref": "indicator--ef9b8b12-296e-493d-8b03-e3ac2f5893a6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e7ee268-a296-4a9a-bbd0-4b5dccaa1686", "sighting_of_ref": "indicator--9ee3f6ba-6b9b-466a-b4b0-6f83d2a30a8f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daf90c4d-c2ed-4f8c-ad0b-40d9553effee", "sighting_of_ref": "indicator--0158d656-12d0-40c1-b065-aee886f59134", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3877e8e5-ddec-448f-baf3-94c7f83f5d04", "sighting_of_ref": "indicator--041ffb64-2542-4e52-9988-d3acc30880c8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39b6d1b4-8911-4045-8a5d-5e3b2bf7b838", "sighting_of_ref": "indicator--604af7c7-6bf6-467a-8b01-b36c4574cbf0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8adcbda6-b00e-4842-8a2d-3b3cd9e73a4f", "sighting_of_ref": "indicator--ec25d864-c844-4e7b-818e-7802d0a4d465", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70d4150a-dc06-4086-90ec-b19a5d1b788a", "sighting_of_ref": "indicator--c0b32405-1010-418c-a5a9-6375e992f8f2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7924e1c5-6ef8-4e31-9ee7-63a895338b31", "sighting_of_ref": "indicator--0a0ca42f-3682-4783-8776-d6b3bf2ab083", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--848b33a6-fa9d-4b3f-a554-e7ae46f8cf39", "sighting_of_ref": "indicator--acae8f64-82aa-4ca1-a099-a6a5af0c45d2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bbf04a1-c323-4995-868c-3403eed2dc1a", "sighting_of_ref": "indicator--28e1692d-e1d3-4469-9fed-f9766dda2037", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c45f05ad-070a-41a1-b64e-23fb9e53eb9b", "sighting_of_ref": "indicator--5b37ae63-6aef-427b-9aa1-d4951df3b853", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb95ab17-7d26-4d09-affc-8f1ae2d84cb9", "sighting_of_ref": "indicator--eb01a06b-c859-4f87-9d26-15ca112a6014", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c34fda5-83f1-4a52-94af-aca79121f363", "sighting_of_ref": "indicator--43ad2384-d463-4fb2-aec4-0a6921ce274b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aba3b0d3-f830-484e-8609-de2713ac2be4", "sighting_of_ref": "indicator--aadce70d-3d1e-4d01-a730-98bdef3a7075", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aca08790-eec8-4434-a170-cb75aeef2fc9", "sighting_of_ref": "indicator--dcabf447-82dd-4c1a-8220-78813673006f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88fb2814-8299-4487-81a1-38a1e848e39d", "sighting_of_ref": "indicator--f1972254-af86-4cbe-b4a3-f227f7ae6900", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50fb6bdb-7433-4d61-bc87-0e71fecd4597", "sighting_of_ref": "indicator--62ec8559-60e0-40d5-807f-c32dafb6ff9d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5b914fa-e642-43d6-809c-b2fc411856ce", "sighting_of_ref": "indicator--d814177d-6ec5-44df-9dbd-a12626c33047", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24c107e2-1728-430b-98e4-55fbf074c256", "sighting_of_ref": "indicator--4e5aeb24-1a68-4ad2-8384-5959a5079ede", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--842eb353-a6a7-4168-b115-333e45d7a392", "sighting_of_ref": "indicator--a8699865-d092-451f-9785-c8d0aa509a59", "where_sighted_refs": ["location--c8625a69-b7e6-4cad-99d8-76632a875c20"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f141e3e8-ac13-4a69-b405-132be2a4d790", "sighting_of_ref": "indicator--16517a6f-e508-415b-8786-fe66c5ea911c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dd2245e-3d4e-4dde-9327-ec74f0869059", "sighting_of_ref": "indicator--8389e46e-cf9e-4e9a-9493-193363dae45a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1960b15-a3c4-4ebe-bb5e-d9ef229dcbd5", "sighting_of_ref": "indicator--ee70db8e-55f9-4fa0-9583-bc5c4127059e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8628f9c-291b-4c07-b932-7fc30a71581f", "sighting_of_ref": "indicator--c118c9e6-824e-4a83-ac1b-0f5013f58132", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c12180ff-2433-42c8-ac28-da8292aad387", "sighting_of_ref": "indicator--293e01f6-9bab-4105-9444-d220ae16d08a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c1b8824-ee19-40e9-bd47-e2bb405d0a1e", "sighting_of_ref": "indicator--1dc1a944-ab9c-462d-a7d1-250e2d7ace11", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3af16566-84e0-4d97-9bd4-5ddb241b6731", "sighting_of_ref": "indicator--2fc71770-f00d-4aed-9468-b5dcecbd3f42", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55dd72d2-6552-4e41-90b7-cd22ad32ae76", "sighting_of_ref": "indicator--f9b36189-2474-4604-8c2b-51866f100c62", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ead426f-687b-4634-b09f-c10cf75f3a6d", "sighting_of_ref": "indicator--5f8a0856-5f5b-4b8d-9ec8-fe005b44eb03", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36c495e2-3132-4483-8073-ef17ce7f0365", "sighting_of_ref": "indicator--84e84087-533f-4839-a686-341bfe145ee5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4d332ca-f0b5-4361-a85d-c815feab2c4d", "sighting_of_ref": "indicator--85fb97f6-28ee-43bb-8616-32a48af9a0c3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcdd559f-c206-4976-a059-75007ccb6243", "sighting_of_ref": "indicator--9116ab65-7668-4c9b-8e5d-cef1e4f7aeba", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--233bed2e-edd6-4693-afde-2c15565685f9", "sighting_of_ref": "indicator--bcf76090-1414-4dd9-9cfc-6bbe09c16023", "where_sighted_refs": ["location--c8625a69-b7e6-4cad-99d8-76632a875c20"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8db166be-d2ee-40ce-a957-acdf985351ce", "sighting_of_ref": "indicator--c16af89e-b2cf-4a10-83cd-c77dff565a5f", "where_sighted_refs": ["location--c8625a69-b7e6-4cad-99d8-76632a875c20"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26a240c8-037b-407f-9b31-d53c2e145ac5", "sighting_of_ref": "indicator--60efc94f-6aad-4831-a6ad-a957637eb973", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ea583a3-4af8-495e-87ae-244318d88e5a", "sighting_of_ref": "indicator--de94b722-6d44-4aeb-8f18-c8671937360d", "where_sighted_refs": ["location--c8625a69-b7e6-4cad-99d8-76632a875c20"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b291540c-0df3-4000-8315-ce8da65a0dc4", "sighting_of_ref": "indicator--6c96c4df-ea7e-4c5a-b3b2-08bfb3e66351", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebca50c5-f8b1-4158-b4a1-03f59cbfa3aa", "sighting_of_ref": "indicator--27aa797d-031b-4633-8e8b-65bd0951c8cc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26b40c19-bc06-4bc9-8641-20e8f308c4d5", "sighting_of_ref": "indicator--78911ee8-3951-4776-8958-083be748df02", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83305449-4346-4f90-a139-b270bf418ef5", "sighting_of_ref": "indicator--9ce5c348-aac8-4fc7-9609-be9eedcf632d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32f6292e-07de-4429-9a10-1739c41f794b", "sighting_of_ref": "indicator--b559cce9-d3a0-4cb5-a183-f728f57ec6c4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be2534bf-b8c7-48d3-a40c-d6d35795cc8d", "sighting_of_ref": "indicator--830a714e-737b-4289-ba16-b4a425ad19e9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22743d37-5860-4ac3-a646-cdb4165dd28f", "sighting_of_ref": "indicator--ad6dc8a6-f2f3-414b-b9a1-981ffba53cc3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--070246af-d9a1-469e-90ed-59cb97b951df", "sighting_of_ref": "indicator--122e07be-43cc-4542-954a-7d63d3b9412f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e885fadf-5817-4da8-97b1-b2bb0cb4eaa9", "sighting_of_ref": "indicator--c9d63365-91e4-4160-bdda-2578806be329", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aecc07fd-530d-4e3b-9c2d-81192b8f6d79", "sighting_of_ref": "indicator--e44cc495-52b5-44b8-b98b-aa66d0708d37", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58cac76c-07c8-40b5-b322-22054b2f82ab", "sighting_of_ref": "indicator--ff9f0791-ba73-4a6a-bf98-63a0094bff0f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17e2cc82-6fbf-4992-a4f0-9d6e675ff46d", "sighting_of_ref": "indicator--6a4a2677-f1b8-4df6-b93a-cae0eb07722d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b04e66c-08a5-4a1e-9eab-de92131a8ce6", "sighting_of_ref": "indicator--dd0390cf-9763-4cbe-98f1-508dd58a969a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f889d46-58af-41b0-b907-b14eeb90deb9", "sighting_of_ref": "indicator--a9267048-52e8-4808-b712-d5ae57d8caf4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83d7d1d5-9b5c-4f94-8701-4eaa3f8837ee", "sighting_of_ref": "indicator--52bed67d-7a5a-40b1-89ad-2489e14d2b69", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e31988bb-5322-4ab7-adc9-2f1bfbb449b4", "sighting_of_ref": "indicator--da4957b6-5d57-4ed9-8756-2f02341cf10e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9780633-ee3d-4d2d-a771-6be4479b6b76", "sighting_of_ref": "indicator--3d24a687-9318-49f8-b915-1eb666cbff5b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3529fdf5-96e8-48e0-931f-55578049d9b7", "sighting_of_ref": "indicator--6b70110f-9d68-4137-a1dc-3732d7d21261", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87d33a86-8322-4deb-9199-618734fd43ac", "sighting_of_ref": "indicator--79d55e37-5edc-451e-b0a1-d7649d4e7978", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aab01f1-1151-44f0-af03-dbb280d19998", "sighting_of_ref": "indicator--63040676-76b6-4bc5-ba77-6afdd6770ff8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--415291d0-fa64-4605-990b-da268e979f00", "sighting_of_ref": "indicator--63040676-76b6-4bc5-ba77-6afdd6770ff8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45a37f7f-60d6-4dee-a14f-efd870cc65a4", "sighting_of_ref": "indicator--4c9787db-dacf-4691-a31b-52143ffc040a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83603aa6-95d7-4f8f-81ec-bd927fef3402", "sighting_of_ref": "indicator--9d16a4ba-930f-4c2c-94e1-7b7914811209", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d57c213-8a34-4428-ad8c-22db1c6ce3d4", "sighting_of_ref": "indicator--1fed7dd3-1202-4824-adfb-6797b8b5cfe7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7caa934-fc20-45e9-ad8d-c5e4f7bd2a5f", "sighting_of_ref": "indicator--310ea9da-5187-4bfc-906d-344e14b18000", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea4094f6-53a2-4952-8c6b-bfbbf970dc0e", "sighting_of_ref": "indicator--59973be7-6365-4584-ba9f-77364237c163", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8c83a50-186e-422b-9959-6802b0ff110f", "sighting_of_ref": "indicator--cdebaf87-6dc4-420d-bff3-4368468e287b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c73a8983-a632-41ab-8314-5b97deff9e07", "sighting_of_ref": "indicator--c6b6f583-e2ef-46d7-8165-b1bcdeebc1bd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbc18eb3-1f32-406d-8a25-58d7b80477e7", "sighting_of_ref": "indicator--acd827b6-92e9-4e6a-ba42-a4dc73825698", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a0a6af2-c184-4450-9917-008ce7b8d111", "sighting_of_ref": "indicator--f64e492c-859b-44df-95dc-a2b964305bb2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1bc3d28-a46c-497e-97a4-8e7880978ed7", "sighting_of_ref": "indicator--ae09ef57-6078-4ba8-96c8-998de2e4da25", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10ed5995-14dc-4b70-ade8-35fd295b900e", "sighting_of_ref": "indicator--80e518ce-5773-4c24-9fe9-3bcb6419c783", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db5583f3-c689-44e8-a309-4a8a1fb95ee8", "sighting_of_ref": "indicator--228a2430-342d-4843-ba38-5e3428dcd1fd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e40ca40-8587-4403-9108-85b578734056", "sighting_of_ref": "indicator--207c57ae-73d1-499f-b316-890b438bcc4a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0e244f1-9b32-45fb-8471-4ed390d7f194", "sighting_of_ref": "indicator--a9480b21-d268-43b6-9976-75d6042d9397", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c903afed-6487-4fc6-9079-d67b03281b8d", "sighting_of_ref": "indicator--3fcb85cd-6035-4431-9aad-abb2b076d96e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1bec310-ad01-4976-9bd7-d5650a75cc04", "sighting_of_ref": "indicator--e55e43dd-16db-43bf-a83a-452dd67b7538", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--040470c7-fd66-4e13-89c5-71b45bb5d2d9", "sighting_of_ref": "indicator--7908cd75-0563-47e9-a881-24911f14f8ca", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaa1e249-2ad7-4b00-9c40-52b4335d0912", "sighting_of_ref": "indicator--84f6b1b2-5411-4d8f-a9ba-c0b48c137597", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33436ead-3dfa-47ac-9d59-172ad1e0e381", "sighting_of_ref": "indicator--07cce374-bf10-408d-bd87-4f377d5cd610", "where_sighted_refs": ["location--c8625a69-b7e6-4cad-99d8-76632a875c20"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca52c0a9-1542-41ce-ba4d-6c9fa99e3c3c", "sighting_of_ref": "indicator--ae428275-62b9-40ef-b80f-03739b340581", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af51129d-68c0-4c70-85d9-4838fafc4cc7", "sighting_of_ref": "indicator--e7b4a250-06ff-419e-96ea-91bd442474d4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--350bef7b-6b0e-449a-af27-d1a2ab2731f4", "sighting_of_ref": "indicator--75e48f8a-d8d4-4517-b861-ad5b9b175ae9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6492eab-01ad-4fd0-a2e5-020ada4236ae", "sighting_of_ref": "indicator--097ec03d-3dc8-4615-be30-222945a575e4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c004189-7da3-4652-a8a7-af5216f2798a", "sighting_of_ref": "indicator--1b08f842-7961-45a2-b796-45ed4031909c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--196abc2f-eaa3-451c-99b3-c6f55a37f37e", "sighting_of_ref": "indicator--171a7f58-0942-4d73-9d91-71b1f2aadb73", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b064e07-6899-4927-83cb-ac328fa2f748", "sighting_of_ref": "indicator--f9fe0964-613f-4c5a-b57f-e884cb7245e7", "where_sighted_refs": ["location--c71c2550-5849-4a8d-b050-635a93ef5467"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cd595c1-89dc-47d6-ac67-a4cea1722b87", "sighting_of_ref": "indicator--f2443d1f-6bbf-4da8-9ca9-e2cc94a41bff", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0238f425-627f-49b0-b91d-03cdf4e5b084", "sighting_of_ref": "indicator--83565f34-c09a-4a02-ab42-e5d68bce739a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8a20b52-44e4-4b38-a085-14aaedb4e62e", "sighting_of_ref": "indicator--16b405e5-e238-4a86-ad65-adde97d4d070", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53dc0259-6a13-4d1f-8ca8-606f372cdf78", "sighting_of_ref": "indicator--70b6657c-1c8c-4f15-a98a-ff4a4f2410eb", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37b7a53c-9031-49fb-9a4c-b71847a507e1", "sighting_of_ref": "indicator--66a8c3d5-caaf-4729-b092-1ddac036b984", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6c74c97-3969-47d2-b29e-5131048e4235", "sighting_of_ref": "indicator--5142f0cf-9e02-48ec-9eb0-fcf4e03d46bc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9727630-2408-452f-8093-6e1892512017", "sighting_of_ref": "indicator--d3890460-c77a-4349-b946-19d565288a59", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58a8f369-747e-4ba5-b590-9ad5da8b59d3", "sighting_of_ref": "indicator--08d0395d-35e9-4b4d-a9b0-4bb572c06545", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--212605a1-8177-4079-9fa3-cbb7bcafd301", "sighting_of_ref": "indicator--968faed3-115c-4659-b010-3c6ab3e2e803", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af7ed6d2-f1a5-4120-a2db-4f59620ea763", "sighting_of_ref": "indicator--b8df4dbd-9ffc-4947-809d-b1421e0c262c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e6e82d3-59e6-4d43-9fa8-793f191c35cd", "sighting_of_ref": "indicator--a4a8d614-8a6a-48fa-8663-548f5cddcf54", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6c99b09-1167-4877-91db-596364600348", "sighting_of_ref": "indicator--e17e3234-301f-4644-9404-cc83ddaf26fa", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc15e19d-e586-45b1-b47d-a6cbd8af63a5", "sighting_of_ref": "indicator--a2359a72-b70d-439b-aa6f-86692f6d3b1c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e15fd5a3-766c-4f4e-ac43-8c3fe1e94468", "sighting_of_ref": "indicator--8dc3d66c-b22b-4bd2-bd9f-316b71873ba2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2273b3d9-403a-4236-b215-86f46f68c7ab", "sighting_of_ref": "indicator--737e66ed-651f-47f9-9753-b2af0916c7d3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b13c2caa-358a-4362-8053-7e414cf73113", "sighting_of_ref": "indicator--3218323e-2eb2-4239-ade7-d16a394f7925", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fd1777a-ef22-4c05-bc2e-7c54053f2f94", "sighting_of_ref": "indicator--14d84b06-665f-454e-9e1b-81fb44550614", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--304f8034-28e7-4282-ab31-6bdc3b18b6e8", "sighting_of_ref": "indicator--69c2e6d0-3545-425e-af60-0798a38edfac", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efad7095-e7c4-4fbb-a162-c552095d8873", "sighting_of_ref": "indicator--1da73df7-b387-4308-b969-276e7583ca14", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0697cd41-8b7d-4abd-8c2e-f8d9e4686f54", "sighting_of_ref": "indicator--209cc8dd-3578-4151-a35a-ee8201e058d2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1ea8515-fb91-43bb-8f85-f10540d3e5bf", "sighting_of_ref": "indicator--a5eb9af0-7c65-449e-bdca-53d292af4b26", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--260c714c-015e-41d3-aa96-4dbf08055eab", "sighting_of_ref": "indicator--dbe5d835-1658-4ff2-bd99-a728b74801ad", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ed54f8d-b870-4e5a-a632-a3a8825c3a4e", "sighting_of_ref": "indicator--c8049b16-d458-4167-9453-b7759525742d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c43f6cf-eae2-4ca3-be92-6663982003af", "sighting_of_ref": "indicator--25b7c3d4-55de-4d63-9f38-4667be9f8ef7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d354804-3fc1-4622-aa5e-609663a5d48a", "sighting_of_ref": "indicator--7137f3f5-e8e6-4cc5-a8ed-a73e927e565a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41915185-6ef9-4cbb-9352-61e053b50dc5", "sighting_of_ref": "indicator--7c65375d-a859-4b8c-a0bb-e1807922fc12", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88a77423-37c2-45b6-9c6f-3325b1b68920", "sighting_of_ref": "indicator--c0e7d218-d5f8-4747-8cf9-ff4f823d423b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--168911e4-4513-4770-8ab4-3a3a27fcf415", "sighting_of_ref": "indicator--a7e04c4d-0fb8-41d1-bfb8-553dae3d0fd9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3333b52c-a654-45de-a7be-907f809050a4", "sighting_of_ref": "indicator--f0a917a3-3b4e-4ed0-abde-21d4f795327c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e62a1f7f-0fe5-48f7-b540-5d79b473ea44", "sighting_of_ref": "indicator--ac2deab5-1765-4583-8ddb-265a572e9510", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01298675-445e-41c2-a542-d2c3c31ceba0", "sighting_of_ref": "indicator--4a62bb97-91fb-4e12-b038-cd007ed06125", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c84eca41-0e9f-4e93-bdaa-e458d051dddb", "sighting_of_ref": "indicator--8c12394f-afd2-466b-ac34-d20aa7d63d42", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2cfdeb0-bdd1-468a-a926-f6198194b3fc", "sighting_of_ref": "indicator--f7d231d5-b2b0-4e0d-8e44-0b09e36b1ddf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--901a193e-b5fb-40f2-86cc-b7ed12704231", "sighting_of_ref": "indicator--4a7d312b-d332-421b-9199-07a8240d25a2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ab0556e-4a36-4717-8b00-ad57374191cd", "sighting_of_ref": "indicator--880fce0a-9b5c-49e5-8e68-c0066159c5bb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c87cec4b-c45a-4c7b-ad84-3f26e9b66e3a", "sighting_of_ref": "indicator--8c2bdedb-6ebd-4aef-b677-bbe989cd066d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3df692ea-f56e-4609-951d-9e67a875554a", "sighting_of_ref": "indicator--f7de4e59-32f6-49cc-b3be-ce320cccdd51", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cf90fbd-460a-481b-afed-66d2ec887df1", "sighting_of_ref": "indicator--e774b83d-af96-4715-8826-8c5fc196052f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d1740c5-f824-4287-a447-83257a12e71c", "sighting_of_ref": "indicator--cb18bb93-096a-4893-b8f4-fa37657431b0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f351fcde-1ed4-43c9-a01b-467eeed8b1a5", "sighting_of_ref": "indicator--65dbca08-14f3-40b4-b531-183a2662bd99", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba6aee3e-79bd-4e3c-8bc4-eaf37d0c6e09", "sighting_of_ref": "indicator--3c29913e-f5d3-4d30-890f-ef5eb8535959", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9713b3ed-7c85-42cb-bd10-f7c4c3b338c8", "sighting_of_ref": "indicator--1a0b94cd-aaf2-42d9-a974-41705655220d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc758828-1c35-4a55-9d04-5979096992e5", "sighting_of_ref": "indicator--19bc23de-652e-463a-abbb-bcc9b7ae31ef", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23b39e25-ab65-4bc3-a1cb-b35e3a16315b", "sighting_of_ref": "indicator--77086f69-c633-42e4-a293-51f2596112db", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20e4b4da-3d62-42af-93a0-6beefc7c7c30", "sighting_of_ref": "indicator--6ad0cad5-b76f-4db7-b67b-26d73183fc94", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e514847b-0614-4c74-9b6d-9f63bbd70665", "sighting_of_ref": "indicator--e075b839-9d36-40af-9a6b-b149f9779835", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75d46d9e-7e85-4b0a-bafd-20b90776af93", "sighting_of_ref": "indicator--2901c0d2-de99-4531-8eba-2d95eb38f6b8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3ceef7f-166e-42d9-9a3d-bdd0ebd3ca40", "sighting_of_ref": "indicator--a2bff8a8-7310-4fc9-82a6-65befcd5d677", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--678d95c3-4c95-4496-bd14-ca3793aa0922", "sighting_of_ref": "indicator--6fd303c5-4e3b-47b1-8b4d-b19cec087801", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fa338ea-8bd3-43f7-b0b7-09380c178f8c", "sighting_of_ref": "indicator--ffb647fd-ad06-4f43-8f1f-99148f5a5479", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--128b6cb0-23b6-4789-b6f9-59e8bffce829", "sighting_of_ref": "indicator--d64df024-5ac8-4992-9396-32ffb1ded0bd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25d63743-42b6-4c2b-9860-716c3663151b", "sighting_of_ref": "indicator--7c974999-4a66-4807-bc63-9ba9474417e0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2243cfbb-c264-4d64-9089-c9cbcb0c8176", "sighting_of_ref": "indicator--41a944b9-e67d-4fed-be43-52a03d4cf9b7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b19045e2-8c33-4eb3-9d23-8e99a37ec66a", "sighting_of_ref": "indicator--77d46e72-3053-4dce-81a6-17157c8a3b07", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34de293d-4d2f-40be-9446-0da0e9de43c0", "sighting_of_ref": "indicator--6023c5eb-8ab4-4e48-82ec-99b24e92c232", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26f6e388-cb7f-4283-9c6d-28a254471189", "sighting_of_ref": "indicator--70827f84-6080-45c5-a83b-aaecb0f083d3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec24e33c-c533-4904-8449-2c27bf85a4ba", "sighting_of_ref": "indicator--a5584cc5-4058-4fa7-95bc-82f5510664f8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f09453db-a58c-410b-b196-269ebe6cd1f0", "sighting_of_ref": "indicator--7af06699-2cc0-4105-a046-6a74126dbe54", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbb578e7-5e6c-48e4-b632-fe16e78c873a", "sighting_of_ref": "indicator--62275789-188b-4856-bf12-47385b8a24f8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d34688ed-1bfc-4bd0-9235-5f12cd39b9fc", "sighting_of_ref": "indicator--15c6730f-fd96-4639-9c8b-7c226ba45c1e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9324ae8d-b943-41c1-9493-6d665dc5617b", "sighting_of_ref": "indicator--f9a26502-bc6e-4498-9637-9d858390de8d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0590617f-0f90-41fa-8f7a-2a64f503b215", "sighting_of_ref": "indicator--ded76e38-335b-417f-bb06-d90d778d8cba", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55a8780b-5b7e-4a88-aa79-69f1053b544c", "sighting_of_ref": "indicator--429ed722-6cbf-4bd8-9e12-07eff4cd4811", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d03cdb8e-3a8d-4609-abbe-0ca28a993383", "sighting_of_ref": "indicator--03d12f6b-3d5e-4d38-8fb9-9d30c64e50f6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e4b4b75-4770-473d-817e-1647d4bc72b8", "sighting_of_ref": "indicator--dd15932e-5eb9-425f-911d-3c1a705e9f07", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e058413-a6ad-485c-be43-483727a1795a", "sighting_of_ref": "indicator--3f7c0ed2-dc40-4eb1-afdf-d6fb1efe28d5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17b3e091-7c09-4653-b377-6eaf4438cc62", "sighting_of_ref": "indicator--36a3cf25-1be6-4c22-9b60-473e861a2f28", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34f7c3ca-7adf-4b8a-870f-40d3a494cdce", "sighting_of_ref": "indicator--f97ab067-8d27-4268-ab74-1ef0911262ef", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1780188e-542c-457d-8547-3e25e4f98e05", "sighting_of_ref": "indicator--357632a6-118f-4b66-920d-c357e44d3c56", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9c7e93d-f85a-4b4b-9e0a-60b71ad35a83", "sighting_of_ref": "indicator--d4c4abbd-35c4-4ae0-9ea6-c80b4a519934", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd33e068-35eb-486a-8f31-7fa09f370391", "sighting_of_ref": "indicator--9a964834-88d5-4743-8b1c-b93bc3b8114a", "where_sighted_refs": ["location--c71c2550-5849-4a8d-b050-635a93ef5467"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eba55d89-24a9-4a02-8e37-66df2b906f06", "sighting_of_ref": "indicator--3c350950-8557-48a7-8b12-8ae41e75029b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e404f7d-d8f8-4fec-9202-28166c809752", "sighting_of_ref": "indicator--9de03eff-ddeb-4865-a85b-0050745caffc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--721f5873-365b-4d84-b96f-e3e7128a368e", "sighting_of_ref": "indicator--f711d9b1-fa25-49cc-aff0-71d67c3ac18b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--080f00dc-c6a4-44ec-863c-5d7b23db41f0", "sighting_of_ref": "indicator--ff33c5fd-9a38-438e-98bc-3955f2e5cb24", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b65180da-8306-4c70-a154-33bee541a610", "sighting_of_ref": "indicator--14a2a710-7e86-4a4d-a4a6-ec27d934a7cf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94c656d9-f36f-45c2-b5e7-5be97e69ea04", "sighting_of_ref": "indicator--c8fc3595-79db-4f92-9e03-159786357a2f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eb0b9d1-1786-41d5-a28b-216d436d467e", "sighting_of_ref": "indicator--96bff6c4-facd-40cc-a5cc-7bc9b8386593", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5c17239-e6ee-4246-a6c6-f3a4cd73eae0", "sighting_of_ref": "indicator--fa6631b8-11fb-47f6-bcf7-f08c4b272d24", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebf0649b-69dd-4acc-89c7-67472b6311c7", "sighting_of_ref": "indicator--05e016a4-d1d5-4dc3-a247-3a25aa018009", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd65b826-babf-4ae9-ad98-9fdd32e3e068", "sighting_of_ref": "indicator--c932e9c4-2217-40d0-abef-1b8c00b7608a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adfbc67e-4bfd-4ca7-9624-e8bb73513348", "sighting_of_ref": "indicator--afa0679e-324c-4b9b-a19b-86f6e0c8fc38", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40397487-08f1-40c6-b05c-6c30031f0b02", "sighting_of_ref": "indicator--864c7c63-9e48-49a0-988f-b434af08797c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2f066a4-2abb-44ef-b04b-2959d2ebddc5", "sighting_of_ref": "indicator--6eeccc3e-c0d8-45f6-8ddc-5bd9beba30bb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3730860b-1ecc-4ab7-90aa-0d01b47c3e87", "sighting_of_ref": "indicator--17c7d5fa-6873-47c7-9e6c-4c4c1efd3483", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2f9fdaf-5fda-440d-b76e-76a8d2b40347", "sighting_of_ref": "indicator--5657a64f-b953-47ae-94d0-fc874cd34ac7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b4a2b41-0940-47ea-b8b7-e66543d1e4b6", "sighting_of_ref": "indicator--54b40c29-c185-4bb8-abbc-2683fdf5c00a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0510cf86-e14e-47f1-a111-56471fa5bccf", "sighting_of_ref": "indicator--c432f40d-13dc-48a4-801a-e4dd3c28e027", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6a123c3-c07d-4bf8-add5-39b021da5ae3", "sighting_of_ref": "indicator--d1f63960-7ed6-4cc4-938a-c2d3879417a9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33d4fa8f-268b-4d4a-9d38-8273653c7a8d", "sighting_of_ref": "indicator--73d7856d-4c44-4d77-9f76-2ba8f7391a20", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76b0d46f-9c31-44fc-850c-fa54aaf57b83", "sighting_of_ref": "indicator--d08dc057-8401-4116-ae01-c5214247b8ea", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3917fe8-86b1-4068-8f3e-9c6929793eec", "sighting_of_ref": "indicator--7cd19118-c26d-4863-a0fe-ced252af4ea7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2108a4b4-8344-450e-a472-cfb82cd6fad3", "sighting_of_ref": "indicator--d33321c1-15fe-423f-8a9c-ac2d5189d797", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca0d0c59-0e5d-448c-b6a5-14c54b72beb6", "sighting_of_ref": "indicator--bab670b0-7cc1-4789-ba1f-e689880dcbca", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37633f54-95bc-432c-8d72-b69d0a951ada", "sighting_of_ref": "indicator--47f67024-5267-410a-8648-b75673372234", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb2f94b5-284a-4882-a17f-7ea2e4fb81c2", "sighting_of_ref": "indicator--80d06a89-e94a-4ce6-b3b1-1fb081b1248b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ccc422c-0264-4f5e-98d8-0147e4f22c8c", "sighting_of_ref": "indicator--3898ed26-cabe-4f06-be2a-a35efbf7fcef", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1655b37a-9f46-4983-a057-a3667b928e2a", "sighting_of_ref": "indicator--c648cb2a-72c6-4c0f-bfca-5dc2b8d26aa2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da4aa42d-dcb2-41f9-9997-0975b67e03c5", "sighting_of_ref": "indicator--d0baa7b8-4f24-4454-aead-c1cbc4ad8050", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67361824-748b-4fd7-a6bb-0c7dff9a2b88", "sighting_of_ref": "indicator--8daa0bf6-2372-4d80-b6f1-112953a5d791", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c477a6c-2659-416d-8078-8ee84caecea7", "sighting_of_ref": "indicator--575f1e83-b625-48e2-bf2c-df5ad8e72e34", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8155df6f-10fa-4e1f-ae07-097f07fec62e", "sighting_of_ref": "indicator--38406183-a372-44a7-bd1b-aec3db12eb3b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58ea570f-2a06-4d63-99fc-236364960e32", "sighting_of_ref": "indicator--0ab561ed-d667-4360-8757-fbe43361b9db", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--816e53f4-ff4b-4ae8-9282-a517c6f022c7", "sighting_of_ref": "indicator--fad439b6-12e9-4a47-b8dc-d8ccde664265", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c44ebd35-8d7f-40c8-b806-61b775e69da1", "sighting_of_ref": "indicator--af531c74-1b8a-4391-ac16-b1e13c944aae", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f404509d-4d3a-4a95-958e-ee159added79", "sighting_of_ref": "indicator--a1d63f6e-ca7d-4adc-8453-55734a3e559e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d620d3b-dfc9-430f-aa35-b0f35dffbda1", "sighting_of_ref": "indicator--f3e48b4c-e394-4d46-9f13-fe818c0ce3fe", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1c05c1e-6e6e-4452-aa0d-d0bc54ceabc8", "sighting_of_ref": "indicator--90c7314e-2f94-4c6d-b529-124c391a9360", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50ba1de9-fea8-416b-80f3-9448ec91487e", "sighting_of_ref": "indicator--5cf48821-71d7-4f99-a176-364c19373f84", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b76e3d5a-edec-4475-92c0-c126bc5b910f", "sighting_of_ref": "indicator--978e99f2-4006-46ad-ad87-73f21c5e5ee5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--388fbbc4-03a3-412e-b5d3-b3bc5c37e20e", "sighting_of_ref": "indicator--3aa26387-edda-4880-8ee7-969b78d9eef7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a590dfe-b140-4a37-904f-00e716de4d42", "sighting_of_ref": "indicator--9663084e-a038-45c6-9481-aa3f495f21f0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66c20b1d-d7fd-4303-a692-71ec9ba75dcd", "sighting_of_ref": "indicator--a949f49f-e6df-4234-8065-8421d92029e6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--211c65bd-2699-4b46-ae04-148619192d6e", "sighting_of_ref": "indicator--56b9987e-7895-4a8e-a60c-b3ffe52938e4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0cf1ea3-1dc2-44ba-ada8-2b4eeee248da", "sighting_of_ref": "indicator--0ddced4c-e458-49b3-b3db-7c6c5768617f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b83af4c5-8d8f-44c4-a2ea-8ac21426ec2d", "sighting_of_ref": "indicator--05003739-1c78-47ae-bd54-fa46695fffb4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99da436f-c66b-452f-ae56-ad644d499e05", "sighting_of_ref": "indicator--5d265706-65d7-4e8f-a022-fecafb2f8453", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0777d19-35a5-4243-a03e-112381f36f6b", "sighting_of_ref": "indicator--59c49ec7-4cd2-4013-bd6d-8ed4e6cc15df", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51c579fe-4c38-4d94-8adb-60921e596adf", "sighting_of_ref": "indicator--2716adc7-5691-41fd-90ff-7d61a481d355", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45691656-d0d1-4ded-a009-77b5a758d0bd", "sighting_of_ref": "indicator--c964c89a-3b21-4be7-8e5d-1bd1477d8f3f", "where_sighted_refs": ["location--c8625a69-b7e6-4cad-99d8-76632a875c20"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81513cde-c65e-4014-ab43-59a59a0df58f", "sighting_of_ref": "indicator--2128a935-cf32-4010-a9da-7cbdcde66718", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85b07caf-502b-49c6-9064-99cdbacdbdf6", "sighting_of_ref": "indicator--1c03115d-2db5-4278-a054-24701eac8dfa", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--261a9fdb-4338-45e1-95b5-b189bf00edde", "sighting_of_ref": "indicator--437f9be2-dd3b-40e6-afa2-44c8eb149f19", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9dfbb98-284b-40b1-a612-ff08374f648e", "sighting_of_ref": "indicator--a91b696c-7c3d-4759-b708-9e6bda0a74fc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--527736f0-5482-45c9-8805-ba1724aa54e2", "sighting_of_ref": "indicator--91b7f9b2-0eaf-47a6-8864-24b09805d1f2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7846655-6f97-4bf8-99bb-3128e83a7fb2", "sighting_of_ref": "indicator--e7950255-714d-4dfb-9eb6-d7d22dccdfc3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7455c79-ad10-46c4-9722-87a750cf3d61", "sighting_of_ref": "indicator--036c1fd5-d734-4c84-abad-b77250735546", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cc32436-c9ce-4527-bb71-96e30457c8ea", "sighting_of_ref": "indicator--daa3f389-8403-4ad3-8cac-1d9d8e1d110e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1f45c5e-e4dd-4270-9a4b-12e155b29d78", "sighting_of_ref": "indicator--11123120-0914-4a20-9b02-74386ee734ab", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69c744d9-4fab-490b-a2bb-c96958806277", "sighting_of_ref": "indicator--134a34a1-1239-40f6-b1bb-bcb0703e4c89", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e56492bd-3464-4795-abfe-4c6e7d31bb97", "sighting_of_ref": "indicator--6d663086-3ca3-43a8-94fb-0c4cdbbb8030", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94e8b24c-2970-4ab4-aedd-caef03405a33", "sighting_of_ref": "indicator--4edd9c2e-1b11-42bf-bd7d-f14bc3f930a0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--682b58df-e0d2-4f29-b130-2d37ec8f5b32", "sighting_of_ref": "indicator--6dc26acc-2e5f-4189-8118-7a2435663def", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3edd751f-99ae-4600-bd2c-681f8baca6b0", "sighting_of_ref": "indicator--8a71fc09-fc67-4b90-ac33-a28445a7b057", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a25445a-c36a-4581-a273-c4221fe38787", "sighting_of_ref": "indicator--c15e16f5-f8a2-42b0-b19b-f8a0025545a3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b304bd55-8378-443b-832e-1c4c907c98c0", "sighting_of_ref": "indicator--c15e16f5-f8a2-42b0-b19b-f8a0025545a3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a7d4eec-f260-4822-9d55-026f07500b2f", "sighting_of_ref": "indicator--4e75fd86-7651-415a-8fd9-8ba7e8d0badb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f063a2e-2367-49bc-bbaa-345fc669286c", "sighting_of_ref": "indicator--32f77d29-6be2-407f-a86b-45dbb2e5c0a7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a71fe29-e80a-44a4-a72d-5d4741dadc2c", "sighting_of_ref": "indicator--f843f456-df57-4131-9a4e-1e1646dc2546", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d5a34b0-2d72-476d-b38a-cb895b03a8a5", "sighting_of_ref": "indicator--f843f456-df57-4131-9a4e-1e1646dc2546", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--327e8a1e-a916-4388-8919-8486fc13d8dd", "sighting_of_ref": "indicator--e6fbe0a0-72b8-498c-865e-9a81b95e777f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c65083c-899c-49bd-8c00-2cb5a7b524ee", "sighting_of_ref": "indicator--199cda95-0572-47b0-afcd-58d1d132cd1c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4f5a801-1345-4544-9d64-bfbf61a76d23", "sighting_of_ref": "indicator--75f41533-e03d-412c-a269-888c6a54ca3b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--379fdcc8-1624-4b86-99dc-c7023649d64a", "sighting_of_ref": "indicator--4df2f772-99a3-4244-98f7-3bf6a766d9ce", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12d9d9e6-f21b-4ab1-a334-e3a8adda1f52", "sighting_of_ref": "indicator--9f44e801-6c9b-40de-9bf6-c8eb6f9e0b87", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--507b5376-ee5e-4852-8676-4bad383c5fef", "sighting_of_ref": "indicator--6a202d91-6c93-4d28-80a9-0bb4e08d939b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0929f4e2-32b7-424b-ae58-c04da08b7108", "sighting_of_ref": "indicator--6a202d91-6c93-4d28-80a9-0bb4e08d939b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59b879af-3255-43fa-9c66-1f597179372e", "sighting_of_ref": "indicator--eef58084-a66f-4a0a-bc48-8abbf9793b30", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67e955f4-5b0e-4d9d-b189-d34eca613208", "sighting_of_ref": "indicator--b88963db-49a2-48b4-990b-97413428e937", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9aeb2f7-c39b-4e51-9ac0-4e20638d6be3", "sighting_of_ref": "indicator--8e79fca4-c253-4b75-bd4e-8f635e5ad7dd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b58a7a3-6bd2-4dbd-bd14-ceeb7edba1cd", "sighting_of_ref": "indicator--b482e2c8-a766-447d-8256-1b3b868ba799", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74beb37c-146d-4ba7-af79-5a915377e53a", "sighting_of_ref": "indicator--815dfb87-2612-4cbf-8714-18358ff88b1a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42f7b958-6bb6-483e-b965-c05656135362", "sighting_of_ref": "indicator--7c0d77dd-ffbd-4b74-a9e6-dd482b2ee960", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41721ba4-b9b6-4558-8635-0f5efc007c98", "sighting_of_ref": "indicator--c939d339-c3d8-41e4-b926-1d5d22ecb16e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c95ce35d-ca5c-4834-ba53-336d85e7d9b8", "sighting_of_ref": "indicator--7dc5d7a2-30e8-4cfe-834f-a52b3558c05e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--620e9077-e5a0-4a11-afa2-c66655c214b9", "sighting_of_ref": "indicator--8b9c3d56-a636-4270-9b07-0dc524c03598", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3284f9c-2488-4235-8e28-dcaeb5005b69", "sighting_of_ref": "indicator--978d9eb1-e2ef-4a68-87d2-3dbccef82764", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d3871f6-0a84-43f5-88e7-a9c466cf45ed", "sighting_of_ref": "indicator--bcd305b2-c106-43b3-9754-5c0eb05f3c3c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11f722df-dd5e-4ffa-ac94-488b8542079d", "sighting_of_ref": "indicator--b74c7207-d840-4ea9-bb5a-775b5989b784", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69f86d18-0d6a-41ca-8bd4-a6bae6cde29c", "sighting_of_ref": "indicator--949e955d-5a23-44a7-a673-37289c85da0f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bad4e84d-e0af-4bcb-af02-6f56537b2667", "sighting_of_ref": "indicator--949e955d-5a23-44a7-a673-37289c85da0f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dc06d4b-340b-4cb7-941d-01172374ad98", "sighting_of_ref": "indicator--65072161-12ec-4d31-ab3f-0138a034bfb2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--439c60fb-7644-419a-a208-92fb1bc96478", "sighting_of_ref": "indicator--4e826dd1-d019-4143-9e35-52e8cf94329d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--408c37b9-1099-406f-8572-4d68009d236c", "sighting_of_ref": "indicator--32bf2842-d1ac-49b8-8609-655c23b83c74", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--257efaf9-c488-49b4-9641-72e912bef806", "sighting_of_ref": "indicator--bc7fe3d8-b99a-413d-a017-c80462b731db", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72ce987f-741f-4714-b0cc-7310a1a9602d", "sighting_of_ref": "indicator--49ea164c-ee68-4abc-bcce-f430d7f65519", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abd0f9fd-36dc-49fd-9847-1c40cd2ab6fe", "sighting_of_ref": "indicator--2abdf40f-8497-45b0-b019-78e477d2bc28", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffc39c49-002f-4726-850e-a63bbc5d4703", "sighting_of_ref": "indicator--3747ee6c-0925-4157-b622-2dccd0b6be7d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f54ce1f6-2fc6-4e78-a10e-9f0b979e0d58", "sighting_of_ref": "indicator--3747ee6c-0925-4157-b622-2dccd0b6be7d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc00d95e-c04f-4430-8cd7-9642d6ae5b5a", "sighting_of_ref": "indicator--d6bda4c7-1bea-43ca-ab15-5d83007295be", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8070d331-abdc-42ec-b17a-d405a1a80d30", "sighting_of_ref": "indicator--2d2d6f40-a00e-46e2-9aae-1337b6359e2f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea42176c-5327-453e-bf08-eb0436a6b785", "sighting_of_ref": "indicator--2d2d6f40-a00e-46e2-9aae-1337b6359e2f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3054a175-0db1-4064-a980-cb651cd28de3", "sighting_of_ref": "indicator--d96ef9a8-a1e8-4b34-b16c-1427b5247b53", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65856033-e153-4683-a881-c40012659854", "sighting_of_ref": "indicator--d3def754-bc14-4da3-950e-5228f26c3eab", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1e8f427-71f5-48de-9890-b92ae4a966d1", "sighting_of_ref": "indicator--e0564d86-9ccc-4c45-98ae-7b6d6e69639c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7179e9ab-33b8-4a70-9fad-25488bf59f3a", "sighting_of_ref": "indicator--04fe8bfa-80b6-4e37-9547-b5f5005584a0", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ff2e229-13ba-4519-be3a-fb4390be0e56", "sighting_of_ref": "indicator--04fe8bfa-80b6-4e37-9547-b5f5005584a0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2163bf68-160e-4190-a055-3ea9e303b32c", "sighting_of_ref": "indicator--9fc6d0b7-5d16-47f7-8388-db64c5f3390f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9f3fedf-b99e-46e6-990a-04f904868033", "sighting_of_ref": "indicator--49c90fe1-721c-4de4-b4dc-47c9a265aae8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1b14c11-db1b-4e2f-988f-f251162d2517", "sighting_of_ref": "indicator--27104501-04c1-4c81-aba7-08ad9b110927", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cf25e1c-a8a3-4f13-9357-03a694bf3559", "sighting_of_ref": "indicator--27104501-04c1-4c81-aba7-08ad9b110927", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6a26045-60f6-4d9d-8548-5853b8e7ca00", "sighting_of_ref": "indicator--3a40ae0f-7230-4547-9946-d6cd480d1e30", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0737a1dd-43a7-4d00-88d2-9b06d2428199", "sighting_of_ref": "indicator--3a40ae0f-7230-4547-9946-d6cd480d1e30", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71c5495a-254f-4f19-b735-c7f479a32457", "sighting_of_ref": "indicator--b4f95496-06b6-4bc6-9627-c29e6602b3d8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5be6d730-38bc-4510-baa5-5b77d1ba3009", "sighting_of_ref": "indicator--54fc9d7e-6b65-481c-97a0-3919e52e0cb6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--299640c9-92a8-44cc-8ecc-18839b652f72", "sighting_of_ref": "indicator--7213f42c-395d-4b13-ae82-ce935c32cb81", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36c0f253-d6b2-4822-a750-2c48284e0d9f", "sighting_of_ref": "indicator--edcc3ce5-7ef2-487c-bea7-eff1038f6ede", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc68c625-8495-431f-bae5-78cd3f2b3c92", "sighting_of_ref": "indicator--e43fdc05-4772-4363-bd87-d81b13436705", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7266e12-0024-44e4-b369-c5b07fadabe8", "sighting_of_ref": "indicator--0665b28c-a2f2-4856-89e7-ef1a660426fe", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3bc19ae-13ba-4511-a693-0a5a7fe35a88", "sighting_of_ref": "indicator--8e0d164f-1b21-4b74-b83a-70aa8a23aee4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb029496-8f39-41ca-ae1f-fb3dc25e930c", "sighting_of_ref": "indicator--22a63e28-e794-49c2-b6cf-fb2a39f62a1e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cf21f1d-1fd3-48aa-981d-0283c89e2299", "sighting_of_ref": "indicator--215c71c2-89be-4ba8-9891-d4b560909dc6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--357d0be9-b703-4d8f-9200-c0bfabfdf673", "sighting_of_ref": "indicator--1d027e94-1b7e-41a1-9b24-03f76c5d6388", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f8664c3-4ae2-4a91-9e86-9b45e3b50ee8", "sighting_of_ref": "indicator--58470233-a73c-49b3-9855-a2fd4c67e857", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d483600-7339-493c-8046-75fa834901d3", "sighting_of_ref": "indicator--1a19a855-107b-49f5-88c5-7d3167231ca2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c996bf65-9b3d-4e9a-81b1-63f2022cadae", "sighting_of_ref": "indicator--1a7e7124-803f-4647-91a2-cb8f94704718", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99c606e6-ba79-47f9-860e-003756750ca2", "sighting_of_ref": "indicator--a863886f-01c8-48fb-9f3d-9f51ef87f46a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbc0320a-eea5-4bb5-80f5-b4dd3ef6c405", "sighting_of_ref": "indicator--8a779a04-81f1-47c5-8feb-9f52ede27653", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5149716b-3abd-4011-b1b6-d31c2f7fc46d", "sighting_of_ref": "indicator--09581033-b716-4cc7-90fc-84ce96b0ad30", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1616ab21-be58-496c-9ead-bf0a15f15d37", "sighting_of_ref": "indicator--ea5d36bb-0dcb-4dc3-af65-c2c2d32e0e17", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04d53856-5037-48cb-b763-149360e0740c", "sighting_of_ref": "indicator--07252e98-cfc0-491e-9522-c3ffcb33ae1a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5fcbf6a-b382-4a09-84ad-e3aa525d0c9e", "sighting_of_ref": "indicator--d5c1fb66-9ad6-4dd6-94ae-a848ec51bc22", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c20dd942-8c7c-447f-81a0-00df77cc9a1f", "sighting_of_ref": "indicator--d5c1fb66-9ad6-4dd6-94ae-a848ec51bc22", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee4d3363-2645-4906-85a3-ad85de85ae14", "sighting_of_ref": "indicator--d5c1fb66-9ad6-4dd6-94ae-a848ec51bc22", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f42c7097-f449-4ee8-9f44-183435fa1a8d", "sighting_of_ref": "indicator--89402272-4805-4f55-ae8e-ec39096a21c2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6974d877-d52d-4d1d-b785-4c4704fc42a2", "sighting_of_ref": "indicator--090c6663-1f1f-4717-8e83-71e360deceba", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d55c06e-d9de-46c3-8ee4-651e0be216d3", "sighting_of_ref": "indicator--01235d2e-2387-4934-b537-de0377477d53", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5fffe91-1127-43cd-88ee-4922dbdded08", "sighting_of_ref": "indicator--fb211051-82bd-4a68-a417-27cd74d82902", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ae73a8a-5d54-4481-9a1f-a2d998ad3e6a", "sighting_of_ref": "indicator--e360ac3e-5fcd-46d8-ac5d-83c030a32c8b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--327ba2fd-fddd-4cc4-9047-6085c3494f78", "sighting_of_ref": "indicator--98f41858-449b-4753-84cb-750de23c9dd7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07b65600-d653-452c-8d5d-31127313d9d0", "sighting_of_ref": "indicator--98f41858-449b-4753-84cb-750de23c9dd7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e9c1426-2e23-4185-8d7f-6988b248a79c", "sighting_of_ref": "indicator--c3f78b69-bf62-4fe2-b603-4aa5df5d7ad1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcbd1788-3e16-43fb-9c22-d06d6c1ff8db", "sighting_of_ref": "indicator--0972954c-ab61-4f79-87a1-65d5fbe0a48e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68d98a10-cba0-41a6-a2a9-5f7ddc555793", "sighting_of_ref": "indicator--ed9865a5-6fb6-4a86-962e-5fef29b3be51", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dc93e6d-bb13-4a16-bdd7-3fd4f8765eaf", "sighting_of_ref": "indicator--af2c7c46-0036-49dc-bf53-2ff473322768", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8caeeb0c-d2c6-463b-b87b-1bbe6a079d1e", "sighting_of_ref": "indicator--bc876b2e-073c-45c2-b4f0-4d600362b096", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14c71fc0-8fe7-4d2f-abff-2d8d611c4d14", "sighting_of_ref": "indicator--63cf8c5c-d28f-437f-b775-20c9e014636d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec56ebfe-587f-4a62-b831-cf36f37a0b94", "sighting_of_ref": "indicator--12409b51-6cd6-4069-9688-04f9e0cc8209", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c219c8a9-112d-469c-ab1b-369284a0088f", "sighting_of_ref": "indicator--0dea989e-5809-42f7-b203-55ec7a2dda39", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8762eed-7e6f-40f0-abb2-3fb7a9a3a96c", "sighting_of_ref": "indicator--e3649a46-3947-4117-b424-f1d741a7a828", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e031b1fe-88b7-4638-a814-7f6d26923f39", "sighting_of_ref": "indicator--b54d0870-7ee5-491c-bea8-3480f13edf98", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--732beb3f-a1a3-446f-8a73-0d5554303066", "sighting_of_ref": "indicator--b54d0870-7ee5-491c-bea8-3480f13edf98", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ebeacf2-8ec6-4830-b69a-ab2e2631bf75", "sighting_of_ref": "indicator--6d205fea-bb29-4518-ae43-9741be20c370", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97fbbf0c-344a-468e-92be-11b155433234", "sighting_of_ref": "indicator--27dd3ccb-ae7d-414d-93af-b00a660ebc1f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b0b7b82-a658-4520-938d-0bf54dc40df3", "sighting_of_ref": "indicator--b8a48450-6998-4190-9537-f0afadc7072a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12de9cf0-536d-4c60-8ca2-84bdc524c967", "sighting_of_ref": "indicator--4f0e9117-05e1-4781-bb59-94857b5404f6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d66adfbd-d4bd-46fb-a65f-aaff80ada8c3", "sighting_of_ref": "indicator--7146e94b-1ef5-4e6b-9db1-6897b05fcb9b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b909fb99-9dd1-453b-aad0-ff465b3eb548", "sighting_of_ref": "indicator--2255b919-39fd-413a-b04a-62890fff2c26", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c3d109e-0304-4528-ae13-8a40c37bd051", "sighting_of_ref": "indicator--ec87ea31-c07f-42d8-9d74-e3bc04711ddd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81e93936-4269-41ea-881a-1fc5043d8525", "sighting_of_ref": "indicator--a2482c56-c409-4677-b6d2-8fe34dd55bf2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6aeda49-dac6-4944-ae66-419281bae14e", "sighting_of_ref": "indicator--a8e000e7-a890-4764-971d-f9c5467bc236", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f0c72b4-a839-4009-8e0e-d763014fc169", "sighting_of_ref": "indicator--d5fecb6e-b6fc-4b0f-b03e-936f217049e9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b7082b1-e2fa-458d-ab7a-5362d2502189", "sighting_of_ref": "indicator--9f6b624f-0d3f-4a59-99e4-412c79576628", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9917dd33-356c-442b-ad32-798468eae801", "sighting_of_ref": "indicator--ba5fcc16-4f0c-4cae-877b-d747fbed365a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b11f8eb3-61d0-448f-b084-d79fd78388b4", "sighting_of_ref": "indicator--23b8e50c-5ecb-4e59-9336-c463fe4d286e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab051401-3d2b-47cb-a59b-f3f0d1ca43ab", "sighting_of_ref": "indicator--1c063059-f470-41bd-b931-b8a796d30bfa", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc28b6b8-e134-481c-b3bd-d07548f3a261", "sighting_of_ref": "indicator--d637df1e-beee-4122-9f95-638ecf3c8e14", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b629419-2dd6-41d5-8b9e-52a8c7517e4c", "sighting_of_ref": "indicator--46542c88-e007-45bc-a129-93d628299991", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aded28c-8b15-4ceb-be8f-7ba010f793f9", "sighting_of_ref": "indicator--23c36c78-9f7c-463b-9cd7-f6be3bd49031", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60fee37a-42fd-468d-ab62-6b20fe7e6d83", "sighting_of_ref": "indicator--a2e1c492-ee6b-4c62-824b-d458f22930f9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a3de66e-236a-41f8-9e1d-b234cd529e76", "sighting_of_ref": "indicator--a2e1c492-ee6b-4c62-824b-d458f22930f9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1208f701-24d9-4b7d-ab7f-d3c99a28fb58", "sighting_of_ref": "indicator--75d3478c-0903-4772-af11-35b451d0d882", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ceddea9-0a16-4bf4-8beb-b60b281de243", "sighting_of_ref": "indicator--75d3478c-0903-4772-af11-35b451d0d882", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a334b82-faa9-4402-9fca-aa18f6c05626", "sighting_of_ref": "indicator--d7d37d8c-55c6-4572-9f5b-479006bb3bf9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d47a6949-8827-4de9-875f-d0fee9b3d43f", "sighting_of_ref": "indicator--4bba1313-63d6-441c-9e9c-920015ea4baf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0436e6c-c7d3-4898-8d60-822f1eb90e6e", "sighting_of_ref": "indicator--4bba1313-63d6-441c-9e9c-920015ea4baf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--417f89ce-05d6-4b3c-a587-b15574a7b2cc", "sighting_of_ref": "indicator--abffcb72-47ac-410e-8cf7-b5c0e7eab6b3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee46baab-586c-47db-a4d3-6b59938c6cb7", "sighting_of_ref": "indicator--27d9cce8-7e3c-4612-9e86-c95a180e9271", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9800196-4a6c-43ba-9506-8e4ed7df41c2", "sighting_of_ref": "indicator--72fe006d-06f9-454d-85c9-06f2b4a86af4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f4be454-a2f1-480e-a139-fd7164123e43", "sighting_of_ref": "indicator--6da652e0-955e-4b13-a861-88f884a4658a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8085975c-ac32-4370-8437-b4a4129d0ee6", "sighting_of_ref": "indicator--50760d1c-b864-4df1-a78a-0d025f902d61", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc7a82ea-8c8b-442d-aed0-91ad5a1f93d3", "sighting_of_ref": "indicator--2b19185a-5e59-4579-8c4a-5643b7f7aa72", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f09df9e-8e8f-4e7a-bc18-fac20b308a83", "sighting_of_ref": "indicator--ea1de168-e9c3-45a8-85b6-c3bba9efc8ac", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--279e1593-bf9f-471b-ac29-4e12500ec2c8", "sighting_of_ref": "indicator--b4ce4000-2b33-427e-9a66-0d7f2edbcf96", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1360fc38-6faa-434a-b8c4-c7116efae722", "sighting_of_ref": "indicator--db8bec33-18bb-4862-9d5d-c13ecc0a2fb7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cdfebad-6696-4e3b-99ff-ace2aa2019cd", "sighting_of_ref": "indicator--29cecca6-e1e3-4b53-be06-b9f96152701b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05fc2abe-608b-4128-ae83-0043d80ed6a8", "sighting_of_ref": "indicator--7365e48a-317f-4e15-a137-52fa6c8e1ed7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7333f8f-849a-4e4d-95c3-45eca18df274", "sighting_of_ref": "indicator--ecbe1f6d-7ce1-4d24-9285-2f8258cb00bd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7124348-2e9a-403d-a7ef-365719c18052", "sighting_of_ref": "indicator--5103ef40-9377-475d-ac6e-56992a247c08", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45a10862-e111-4ce1-bf44-596a3b137558", "sighting_of_ref": "indicator--a00da079-e673-4baa-becd-0100fb5e485c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8ff9fbf-1000-42ab-8aee-c4b571b83ada", "sighting_of_ref": "indicator--5e4a16c7-9007-4a3b-a8a7-44904879372e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13f1d95f-358b-4bd0-b40a-5266dc921a8d", "sighting_of_ref": "indicator--778c2255-02cc-4d1c-a623-5ee3ac023c7c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5272917-362f-4216-a460-0019c093ef90", "sighting_of_ref": "indicator--9e02a034-f8cc-4067-b1a4-75f819d77633", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6250b61c-7dea-497f-91ac-ea4aaa5fdabb", "sighting_of_ref": "indicator--cd3098cb-8ec3-4fee-b038-3eaf91a6c5d0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c58061e-0ca4-41a7-974b-3ec283989219", "sighting_of_ref": "indicator--09143398-c6ff-4cdd-a717-f7c15d998998", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e497e8b-8b0e-406f-b807-5b11d5f8453c", "sighting_of_ref": "indicator--262f9c93-d84e-4506-b120-018dea50328c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3ec2d4b-95f9-45cd-8b9a-8e623c82cb8d", "sighting_of_ref": "indicator--cac99b15-e9d0-4b4c-a6a3-076a641c8de2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b7eb4f3-e728-4a45-a178-98a11b3fb530", "sighting_of_ref": "indicator--14e46302-2f3a-4c19-9d49-c2f63af05b74", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff33e548-25f5-4aaa-b450-985b3adf08de", "sighting_of_ref": "indicator--96e27a86-1995-4466-81ab-07e2991efe25", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08cb9de9-4bc8-4385-80d7-72a0df864fe5", "sighting_of_ref": "indicator--45538e17-207e-437a-b1a5-9c7326a27b63", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc04be58-648c-4f2f-a6ec-3367651c5195", "sighting_of_ref": "indicator--0fa021de-6a73-4fed-a2f1-2eeff4b5b859", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0476d342-7c0c-4708-b25d-0887c0d6d1bc", "sighting_of_ref": "indicator--55ac98c3-8ae6-4ed3-a40c-96b04dd092d8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dac2fdfc-a8d7-49c4-b14a-1e76bbe589de", "sighting_of_ref": "indicator--bad13dbc-06e7-4ea8-81c5-fd30fca79edd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d343cc5b-ceb7-47dd-b6cc-7521820ff2d4", "sighting_of_ref": "indicator--d3cf423f-7321-4ada-bee0-1db95086bca3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b42bb0d-e5dc-467b-a4ce-7a1b628064fc", "sighting_of_ref": "indicator--ad3ef79d-e1e9-4049-8d8d-5f130e527b59", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8484433-5fd0-4fe4-aea6-dea18b0ffcbf", "sighting_of_ref": "indicator--a62b4f61-cb51-4919-bf9f-2161643c70fa", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0623ab80-7b00-45a8-b901-2b3f0e9ce7e2", "sighting_of_ref": "indicator--bd7f80ab-df84-4a21-86bf-82d723e6383a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c269c9e-5113-4596-bd82-0c4733fa86a8", "sighting_of_ref": "indicator--b685d0f6-4ad5-48e5-8429-8a4218e84f29", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e245879-eef4-4eed-936e-6cde9364289a", "sighting_of_ref": "indicator--d6f9f94b-8e33-4956-8d81-a792e398fbcb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdc10c7f-842b-43b1-80b0-eafcb5f02b54", "sighting_of_ref": "indicator--162eeb5f-8687-4bea-b298-d540c81892c7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3513803e-4891-4d69-8513-9a0f08c7bc4f", "sighting_of_ref": "indicator--6e9f2ac2-8bb8-4c4d-8dee-482a532b3a14", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0f83a00-50a4-43e6-b7f1-1a805d739f96", "sighting_of_ref": "indicator--f3ad6abf-b771-40d8-a6db-2cf4c85c613f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ef85e63-a58b-408e-982e-89ff9ef2bde2", "sighting_of_ref": "indicator--386d4eea-8ef0-4e40-8705-2d249222cec4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2e1f867-84fd-4ed9-806b-ec624105546c", "sighting_of_ref": "indicator--6527e4bb-7be7-45b3-89d4-273cc9496f19", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--788d3c7b-c04e-490e-b312-da32b489969c", "sighting_of_ref": "indicator--583a5a4f-cb64-4a41-b4ff-5469423ac80b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dd3f061-544d-4b4a-8c0e-becbd6c8595b", "sighting_of_ref": "indicator--15c54e1b-5cf7-41f4-a423-80f8e00203b6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8b1a96c-ddce-483e-9ec1-e774e4efda3b", "sighting_of_ref": "indicator--5ff85184-fae1-4190-9a4d-64b19eaff6d7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a48f73d7-0ac0-420e-9950-59193da7fc16", "sighting_of_ref": "indicator--d092bbda-4e7a-43d5-be36-1dfd2b973fb1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cda3f8aa-788d-43e7-8f53-44eae00086d3", "sighting_of_ref": "indicator--650b37f1-d6da-46a8-ba34-b5724e488460", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97a504b9-59f6-422f-b4b4-e8dffcae8883", "sighting_of_ref": "indicator--377b832c-e237-4537-acb9-ad3c3e4667ea", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef600c2a-dae8-4d22-82bd-06df7fc611fc", "sighting_of_ref": "indicator--9aa261db-c112-42e7-8eb6-b5e02c61f175", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--343d56c1-dd00-42eb-ad11-dc7a3d75d2cf", "sighting_of_ref": "indicator--9323872f-ef37-4b3a-ab56-a70201f98eb9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0bf0dbb-eff8-466c-a267-00d814d77e13", "sighting_of_ref": "indicator--57c78575-3d20-49c2-9773-1551e4babd5f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edb1f421-691e-48de-ae9f-4a997f52d991", "sighting_of_ref": "indicator--a771d914-9a2f-45de-a2b9-2c76dab9417a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82b16716-849d-491c-8bc6-ddfad0038bab", "sighting_of_ref": "indicator--06c2984f-aec7-4b59-91c6-032e5fdec9bf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb3cd68d-5dbe-459e-86dd-9b0ac3416777", "sighting_of_ref": "indicator--5042d5b8-af36-4da6-bf6c-ef60e3db9f63", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9421e95f-f36b-4f66-b90b-1e64e93ccd0a", "sighting_of_ref": "indicator--9c722474-5f37-4da0-bdc9-f9a812006d58", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--532e6d20-bd23-45eb-b632-92d5ac4913c3", "sighting_of_ref": "indicator--ededa579-9f59-403b-8ff8-113a97af8d77", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3e2fc8e-c94c-4dd2-a637-ad656144d8fb", "sighting_of_ref": "indicator--c1fadd20-14a2-4e6b-8577-7ed2df54f066", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8bec73c-032a-42f8-aa40-afa3ff328a23", "sighting_of_ref": "indicator--9f4c916b-5c1a-4291-b556-e6e3b0ccf736", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--307a6309-6036-4ffe-b2be-e0d4d6d13614", "sighting_of_ref": "indicator--d144e003-644d-4537-8259-a40f477d01a3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2fc7ff1-fbb1-48bd-b92e-fb54e0291f20", "sighting_of_ref": "indicator--825715ea-fb1c-409a-889b-0e73686a0aad", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4966d635-fa90-4755-a582-d1ce46110dee", "sighting_of_ref": "indicator--480cec9a-9723-482b-881f-d78126ff77b2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d54607d-393d-4735-853e-34d867d4d5e3", "sighting_of_ref": "indicator--d4e221cf-8e60-4718-92c9-14564ea2f5d5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2909d155-9a9e-4517-807e-05dbdf11dc41", "sighting_of_ref": "indicator--af2a1637-f9c7-40f0-a7ea-ae1f3238795d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd3cb29c-c93d-4857-abec-e9e213045a7f", "sighting_of_ref": "indicator--c454d27d-3b60-4e3b-9810-dd4bc7371f93", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--511e93ac-379d-41d8-b3cb-e6578e679002", "sighting_of_ref": "indicator--db1de61f-65bd-4ffa-a36a-e7f02faaa8b9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80b55a52-45d7-458e-882b-8e8b57696923", "sighting_of_ref": "indicator--8ce14fec-0ccd-4a38-b9c2-12a7a0e6eb74", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e2d9f33-4663-4049-9d0a-01c2d6f0e066", "sighting_of_ref": "indicator--b1aed024-8267-4d76-92f6-7fa767c2c5af", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71b96190-c80f-495a-bc71-e12111c22d02", "sighting_of_ref": "indicator--d4b0dcc6-6e38-4b4e-93ce-64537f2056cc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9df91e7-ec3c-47b5-8409-2ce813e53dbe", "sighting_of_ref": "indicator--f2fa5789-c209-4022-9c17-8d46e95ee395", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49acafd4-38a8-4bb0-a7e9-77dd6c29acf5", "sighting_of_ref": "indicator--a2b2b02e-abd5-40d6-929f-1f883b101cbd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b0e9d76-f121-4c68-a5b5-c29ef7a01303", "sighting_of_ref": "indicator--b59761a8-6aa3-4a24-bb68-5fa481e360fc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aeda5fe-9836-46a7-9257-283c27b79284", "sighting_of_ref": "indicator--f79dfff9-33f9-41e0-a298-9fbe031e0240", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e283f64b-a794-47c0-8cb1-7a5f5592b05a", "sighting_of_ref": "indicator--df98f5a8-8304-4073-8263-760e83bf1e89", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d42b33a8-b9ae-4488-8e4a-bc8e54aafcb3", "sighting_of_ref": "indicator--5c7af3a1-27c7-46d0-816a-d60f5fcb0c96", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fde75471-166c-4e23-9d36-f0e56fb12dab", "sighting_of_ref": "indicator--80377602-e8a5-48a2-ab99-f06ed6fe3cf3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5e46fc1-ee65-4e5b-8ccc-ffc1791c1636", "sighting_of_ref": "indicator--7973305a-f14b-418b-9ec9-c863945146e0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b5b2dba-e5a3-4d27-b76c-b6bdd9b147d7", "sighting_of_ref": "indicator--47691f5d-b9c4-4206-94dd-bc74076fafcb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8870f8a2-d52e-447a-8580-7c4bcc267173", "sighting_of_ref": "indicator--1d97388f-6eb9-409a-9c8d-b8d8515d3362", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ae9ceab-8021-42c5-a7a9-d70df9954eda", "sighting_of_ref": "indicator--01be04db-acd9-42aa-b8e2-84f5771845e8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ea5bf70-f9ea-4ffa-9d8a-3dff740f6db1", "sighting_of_ref": "indicator--f02f260d-6b78-453e-a63d-42e5da142cb2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20f00031-3155-4cf3-820c-8ce93b5e9137", "sighting_of_ref": "indicator--cb46402a-f654-43a4-ac40-f0a0aec00dd1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3521e16-ef5c-47cb-94ed-a094c2db2fff", "sighting_of_ref": "indicator--7998eee2-2fa3-483d-af57-945ce17bb560", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97531fc7-f32f-43ff-a1d9-d9c1853fa713", "sighting_of_ref": "indicator--4c896424-a8d7-4fe7-aabd-480c0f9b9bd2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--784e7819-4767-4663-8f0a-810a0787c43c", "sighting_of_ref": "indicator--d620a324-d4b4-4288-ad05-b6e5faf46326", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46064cdd-5915-4f8f-b3b8-1735b2c93e1b", "sighting_of_ref": "indicator--1ccca45c-cc40-4d56-be38-b2e29c2ba9a3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b9f1921-fc2e-4693-b4aa-eb013b5b9e95", "sighting_of_ref": "indicator--1d81c10f-e0bd-4267-ab55-ab072571a279", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32e92350-600d-4b09-8070-cdc2d58504eb", "sighting_of_ref": "indicator--ce2f7769-c13b-4ff6-9025-d166c4ef4d36", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--152c3741-1a8d-4c08-84c1-db2230b881ac", "sighting_of_ref": "indicator--d899df2c-1723-45b4-8948-ef563ccf7eda", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2b74204-8c13-4ee3-88a4-bc0e918f35d1", "sighting_of_ref": "indicator--cae90e6d-e08c-4ac0-92d7-d43a98c060df", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--868c263c-4518-40dc-8499-233720c045e0", "sighting_of_ref": "indicator--20df6a31-536a-463d-850a-4ce731914729", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cccbadf1-9736-4b2b-abb0-2bfe3d120381", "sighting_of_ref": "indicator--1e5a4c10-e1db-4416-a71a-e3d0431b11d7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83f646c2-6b7b-4637-befc-d950dcc329d6", "sighting_of_ref": "indicator--7d5acd14-a44f-4efe-a35f-e9d7544ecf61", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1d31cb7-3d91-4f70-a3e4-35ec7304fb45", "sighting_of_ref": "indicator--1117661a-5371-4443-a7d1-cc19132ea792", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c48a74c3-f2ab-4bfb-8add-97689958ab4b", "sighting_of_ref": "indicator--9a727ef6-092b-4f18-b262-2e3a9aa90464", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d72e9b38-947e-481a-942e-bc36680ac815", "sighting_of_ref": "indicator--1d37b6cd-2797-4986-82f0-adb3abb53bbf", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7e24493-ce75-415a-940c-60178bbc1cbb", "sighting_of_ref": "indicator--10d28625-1aca-4c9d-bf2c-eeb0232fa86c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a10a327-3466-423b-9341-cf2215e3b411", "sighting_of_ref": "indicator--8248f6cf-6c81-4c93-beb3-f03bfcd3c275", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--249b334e-2e4e-4f3b-95d7-552a9ac0878a", "sighting_of_ref": "indicator--9d726f28-ce07-499d-91ef-a86f1a8b2ffa", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc40e9d6-c790-478b-8313-f7edca7a7452", "sighting_of_ref": "indicator--cacdda26-6d7c-4bb7-a6c2-8855ffd0b2a8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae2a0c13-b8c3-42b2-a6e6-b2539bb52736", "sighting_of_ref": "indicator--85950b3f-aeba-424f-a632-1492472e07a1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3abd38b0-0520-4b40-81ea-dd3073dba3a1", "sighting_of_ref": "indicator--8b847853-9350-4afc-97be-f86f85e5ea95", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9c583bd-808a-4b47-82d0-7bc83b5f714b", "sighting_of_ref": "indicator--073b5d5f-a93e-4552-98d9-295aef3b1a8c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e541dce9-72fd-4c04-b41a-f905444d3f71", "sighting_of_ref": "indicator--5251a0ea-9538-418b-af81-67f5ae6c4cd3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9076b15f-9469-4c7d-89e1-63111c0a49b5", "sighting_of_ref": "indicator--12ca021c-6868-4ddc-8bdc-ce8fac4c0aa4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33ed4e52-207a-4057-a302-0bb9887061c3", "sighting_of_ref": "indicator--c8577847-806f-44ec-a8d5-6789885d0639", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--461f319c-e00a-4763-8e92-5ff5cadc2eba", "sighting_of_ref": "indicator--f9f93d1b-d5c3-4a60-be8e-c2ba8866aa6a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--665f7211-d2e3-4739-94e7-1b575bdcf020", "sighting_of_ref": "indicator--53677223-380d-4fad-a768-347880271c1d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--320805f3-6a49-4212-b6dc-1133a48d20d1", "sighting_of_ref": "indicator--4324bc60-63c4-4bb0-bf71-aaf970d00906", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbaaa5dd-3b78-49b5-8469-ee349ac1baf6", "sighting_of_ref": "indicator--b052fc5a-6943-40ea-9c9c-54c8d83f7d12", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8ebb707-b645-4f8e-aef0-6dce0e9f378d", "sighting_of_ref": "indicator--c1b1c153-37c9-4b00-9729-bf3c2066b463", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d946035-2c52-4d14-9a1a-db50daf470b7", "sighting_of_ref": "indicator--6efed168-1050-4aa1-9a5f-84c298cc1929", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e598623-4324-4fd6-a909-a1de15124ac1", "sighting_of_ref": "indicator--579e89e7-4aa7-4726-8f46-0114a5f8dfe2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c44dab0-29be-45e9-a6ae-102fef0cd972", "sighting_of_ref": "indicator--d1d7029e-d650-44ab-b02a-4cd782a492e3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--424134c9-d505-46d2-9a17-e610459dcf48", "sighting_of_ref": "indicator--a92140b2-4661-4838-b02a-c322fc1e0302", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baebc121-498e-42af-9d11-a618f16b6871", "sighting_of_ref": "indicator--ccbf43a2-68c5-4590-a00a-5df1758ee414", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37732f03-fb3e-4b5a-90ce-d6e796816ca5", "sighting_of_ref": "indicator--4344bcd6-43a8-41f5-babe-599a20f812a0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--034d69da-8aa7-4438-9507-27776955ad92", "sighting_of_ref": "indicator--54d127f6-3441-4f23-a36c-c26c52e2f7f8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ab2f5db-f0bb-4009-91d8-98d7076e69fc", "sighting_of_ref": "indicator--365dd2b3-842b-4033-86ba-9cfab3eb226b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ce6de60-397f-42ee-8988-6a27b0a9f021", "sighting_of_ref": "indicator--acc8516d-fc5c-4ef3-96bc-959ebf6cba54", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f014261c-9725-476d-87ef-22df5115182a", "sighting_of_ref": "indicator--469642d0-a8d6-4404-9e33-c2f0df8729bd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26acdc6c-7a36-4f71-b96a-fd73edbf967b", "sighting_of_ref": "indicator--e98e2659-3579-4c67-a6c7-8dbb6a7189fc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a65a5ea3-15d4-47e4-9d16-3ede3fd036c7", "sighting_of_ref": "indicator--34d73682-7b3e-4836-b276-ba168d81d37a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--932b3f9b-fc99-4172-b34f-13dfad07a8ca", "sighting_of_ref": "indicator--0e402b97-4fff-4105-bd9d-65f878253d04", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6c2471a-ac98-4cbb-8865-facefd3a9909", "sighting_of_ref": "indicator--b8942152-48cf-4fd6-a88b-c6a95e828bcd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37cf3951-a464-4c4e-962b-d34645ce6dfb", "sighting_of_ref": "indicator--f8c51e19-f504-4290-9bfb-35bc66ed4ead", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f95ce67-9d3a-4f9c-b8a5-0b1316f7ddec", "sighting_of_ref": "indicator--a6d8df12-10cc-4edc-a8d2-2220b28acd65", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71666333-f8fb-4c17-9b42-ed1d370f16bb", "sighting_of_ref": "indicator--328f1682-928c-41e1-9666-2f8593183c44", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f806d3a1-2182-4c8f-8be6-9f3992a1e5d4", "sighting_of_ref": "indicator--7f9fee4e-d4bb-4ae4-a67d-dfc95956300d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9f10d14-940a-44e5-8bcb-6a91f89d1e01", "sighting_of_ref": "indicator--cf471c5c-1038-45b3-96af-f8d8434acc24", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0fc80c8-1cf5-4193-9e49-03b33dc330f8", "sighting_of_ref": "indicator--c55710a5-7f02-478e-9691-835212a3f6e3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3289c16b-86b5-4205-b5f7-6df8ce066572", "sighting_of_ref": "indicator--5ae982f2-586b-4e09-b3da-ef26e0606139", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e39ed337-1e76-4d6b-a64f-d5fb298ae7f7", "sighting_of_ref": "indicator--152ca983-c260-4562-b9f9-34890d6b7124", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e5e2255-3b21-483a-966a-ab031282cd3d", "sighting_of_ref": "indicator--0072d540-45c1-4fa7-abb7-607f49bb0e52", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00dcb0f4-18ec-47c5-b0f4-c6c15daad3f9", "sighting_of_ref": "indicator--37da378e-b5b1-4b41-8162-9480a2d5b7f8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d33ee723-c92e-4615-8c62-7e5e0fbf4846", "sighting_of_ref": "indicator--70ec7713-30c1-45f9-9c8c-764392a8cf31", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44193684-fa00-4aba-96b7-479868369150", "sighting_of_ref": "indicator--b08f3312-dc5f-42d2-8460-fd579d4afdb5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35d46ee6-3e3d-4cfd-be94-e045f744ded5", "sighting_of_ref": "indicator--0aaa196a-dfee-400c-94ba-57d27e3e8ac2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3a82d50-fcbc-41c0-880b-498de98b69ed", "sighting_of_ref": "indicator--2089dbba-57c4-4473-bd6d-2f5adc6d7e55", "where_sighted_refs": ["location--c8625a69-b7e6-4cad-99d8-76632a875c20"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67bcfd32-9278-4387-b522-67a719df2767", "sighting_of_ref": "indicator--af137565-549a-4191-b54c-0c2fc99b38ee", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50c9c715-842f-4731-b50f-6f741c27c0a0", "sighting_of_ref": "indicator--434fe1c1-f800-4122-b7e8-9638f492a296", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dda179d-09b1-4eb3-a16a-d692febad3ea", "sighting_of_ref": "indicator--2f260ed7-98c0-4b28-b2e3-809bedae12fc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76026219-dbb7-41ec-96f6-b1e8cbe574a0", "sighting_of_ref": "indicator--976928b2-4743-4847-99fd-52435f5b633d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e819182-2bcf-47ed-8924-0faec9fa2d02", "sighting_of_ref": "indicator--586a45ab-1c21-4a35-981f-73635077fbeb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c03a625-81e0-423d-a685-5685337e4d67", "sighting_of_ref": "indicator--2b122bce-ab84-4a0c-8c7e-80e517f97a12", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--789e1716-86b8-4ad8-8762-9f553b48bf91", "sighting_of_ref": "indicator--3deb3ace-bb66-4571-bdd1-a8cd89d8918b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ef5d950-66db-4e55-9050-e8b91f0b9564", "sighting_of_ref": "indicator--1389650c-46f7-4bfd-900b-5a5d1912debc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8151c10f-3151-42a0-8a64-d08ddde8c013", "sighting_of_ref": "indicator--c3abfdc1-109f-40bf-9c05-5ae31f64d171", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f2f153e-cbd2-4a18-9d4c-a57be9c46c9c", "sighting_of_ref": "indicator--fc8b5d6b-11bb-4af2-8916-9ac24ec1d849", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c83f931c-7097-4032-af91-7055933b5ead", "sighting_of_ref": "indicator--3af1af8d-e5a4-4050-9fe1-9919f879270a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c96c875b-1926-4186-858a-bd56545fca0e", "sighting_of_ref": "indicator--cfd22410-c81c-4783-a2b7-cf02ad7584b5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26f9b94e-2635-4d5e-8b80-e72c7f57d96c", "sighting_of_ref": "indicator--867034c4-ab1c-4305-89bf-891e0724a329", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--317386c8-1df2-4bc2-9c22-0d930caad9b4", "sighting_of_ref": "indicator--1a8e055a-a6c7-444d-87df-a8a235558409", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b580deb9-4d38-4a5b-83fe-d76f18915cbd", "sighting_of_ref": "indicator--f0d49c93-0129-47a8-8c6e-d583b6074707", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f287b6f-9819-4088-b70b-5fc464859e82", "sighting_of_ref": "indicator--f2165143-cb67-415f-9345-f75737c4a894", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed88ab41-05b4-45c3-808a-68e902548eec", "sighting_of_ref": "indicator--f2165143-cb67-415f-9345-f75737c4a894", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f95f243d-2818-47cc-8938-4920cfabc46a", "sighting_of_ref": "indicator--b80b9938-4cfe-4d3a-b22a-0463fa982194", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c81f95d-46e3-4844-871a-a609ac633a8f", "sighting_of_ref": "indicator--5b403797-5679-4abb-be40-cb537e9f0abd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4c8272e-c146-4f3f-8caf-76be5759a553", "sighting_of_ref": "indicator--4e84ed63-e97d-421b-9d66-c663cd391485", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69df4b76-620d-4bce-a96f-691bb1e27924", "sighting_of_ref": "indicator--5338538b-831f-4af8-9b64-21597bb2c4a8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e1a0fe6-a30f-4d1c-b3e7-95019ed03514", "sighting_of_ref": "indicator--99b415c4-a3b0-4d1b-a5b5-b084c4455a32", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f2e3d2e-4bfd-45f7-8545-9c7d42ec7390", "sighting_of_ref": "indicator--f71cf083-76cf-45c5-b1aa-3d63085dda0c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8c35ef6-0e32-4451-a7df-dd3ce50d6c23", "sighting_of_ref": "indicator--fa40040f-e88c-4533-a47f-41e71b5124b1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8d6eabf-41a0-412d-aa57-efb9d7f872de", "sighting_of_ref": "indicator--5bac524c-3327-49da-8938-ff8b3c9320c3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--875e8d7e-0354-497f-9f22-05ef9433f0b1", "sighting_of_ref": "indicator--ba818bf7-a6a8-42d9-878c-14ec3d788141", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e1f496f-fdda-43c3-b573-e5db7b903722", "sighting_of_ref": "indicator--39b0660e-03c3-4f16-9fb0-e4ae183d0f41", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d312d930-918a-48c5-b63a-ba914ca34fd7", "sighting_of_ref": "indicator--67a55c6e-70dc-4e51-a4e2-da80717cb8bc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53db6024-494c-4aa4-af24-f27ae75a9541", "sighting_of_ref": "indicator--6a9db144-2855-478b-8687-72851ff6874d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c2e8857-c664-4714-89c5-ca7a8615799e", "sighting_of_ref": "indicator--3f362cbf-241e-4ef6-b314-7576578af922", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6b6a569-9e25-4c37-8ba0-6a04ca48738d", "sighting_of_ref": "indicator--c277f28f-3fb3-4520-acff-142723fd6db6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8ad897f-6351-47fa-99c4-abfd6ca7a06f", "sighting_of_ref": "indicator--8aaeb49e-ee9e-4237-9d44-b801afdc6f52", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3be87bd8-b55a-47b6-a5cf-0a439e70c997", "sighting_of_ref": "indicator--70b29448-8746-4ba1-a5ce-8501903ffc73", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9969c2d-3648-44da-b616-ac14ec5ba396", "sighting_of_ref": "indicator--5979edc5-2ec5-4960-b728-3aa6f6b563e9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eed4e286-e2ed-4976-9571-a5f63bca7963", "sighting_of_ref": "indicator--3ee43ba0-15ad-4772-bec5-c463be448587", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05170d3f-2555-437a-b333-53c65b3dc0f8", "sighting_of_ref": "indicator--ad11e8d3-fb03-4ca3-abbc-d1390fb897c0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15a34207-fc0b-497c-87c5-8578b8007f61", "sighting_of_ref": "indicator--12065d04-b39e-4834-88df-d842b5ce95f8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a623a16-7288-44c3-966d-6b8b422e270b", "sighting_of_ref": "indicator--33a75244-0cb1-40d5-a69a-87743ee77a9b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a665224-5ff9-4a45-97e0-6ebcf39cc287", "sighting_of_ref": "indicator--a56a572f-0f7b-465e-bf1e-2aff758e252f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cb8ba64-53ed-440c-b27a-6d91dbd7a9bd", "sighting_of_ref": "indicator--837a17ba-d8d4-4c30-93d8-2f68212fcd2d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90c58785-8125-40ff-89f2-d2361ca4105f", "sighting_of_ref": "indicator--31392abb-d639-4ebf-a48c-5e4f4a9881a1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acee4df5-31d7-4e4a-8d47-037e5991964f", "sighting_of_ref": "indicator--63b89c0f-ec7d-4b79-9a4b-8cd999b1262e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f27b8507-1e67-434a-8023-09b9c39df192", "sighting_of_ref": "indicator--af862ef2-f863-4f3c-b998-1512796c940e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5b81cc7-fb93-4397-be84-49961cb12e09", "sighting_of_ref": "indicator--9a71391e-60cc-42a7-86e5-704ba26f29b9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9068d8fa-ce20-45a0-b8d9-d6c85d66856f", "sighting_of_ref": "indicator--827bb8f5-fa61-49dc-9ac2-948d51b0c36e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7eaa1ec-18d1-46fe-bece-86530e801dce", "sighting_of_ref": "indicator--7ac7bdd6-c549-4992-bfd3-394c28c9dc6b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bef9750-1f21-4d62-903d-91ca0cfb76ed", "sighting_of_ref": "indicator--2297c3ca-bf22-45bd-b820-500b396fc5e7", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--508b206a-1dd2-460e-a76b-3bdeaffeedd7", "sighting_of_ref": "indicator--1c872b48-0864-43ac-af28-f1e15fc8dac1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06ce93dc-807c-435d-a885-4718683b5030", "sighting_of_ref": "indicator--fc3f2580-19c7-4035-b532-7bf3079c8b90", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4ce7478-9c19-4d7e-9d87-e496310308e2", "sighting_of_ref": "indicator--e96b3508-3a5c-4e58-a519-51479d5ef50d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--887f9c98-7312-4534-af93-33c4cc76fcc7", "sighting_of_ref": "indicator--a8adf642-a51c-4e3d-b217-6562bff5bb14", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--587480ec-c789-40ba-af2b-b854a4fa5700", "sighting_of_ref": "indicator--f98844e5-9411-4d21-bf0d-7188c3622361", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88a989eb-7bcb-46a8-bbd0-1429c3729f93", "sighting_of_ref": "indicator--a07e0d52-756a-425a-807d-b6137e250ae4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04560a9f-9d24-4b58-9f3f-421c8fc68006", "sighting_of_ref": "indicator--93b8e8c3-964c-4841-9ac3-f29934abec51", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4473453e-161b-4930-a57c-027ba3f67fef", "sighting_of_ref": "indicator--d3c1d44b-80e7-48d1-a759-789f8892917a", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--499fbe6b-7f06-46df-9640-6f961051d500", "sighting_of_ref": "indicator--224e257d-7134-4e21-bc84-90567d10be67", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05bf1fa0-6db6-4dc5-bf3f-16f967fb140f", "sighting_of_ref": "indicator--33aa9ce4-662e-4ec2-be29-0a2777647529", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b779bf9a-1a8c-4b93-8f7d-2d91d2c17ef8", "sighting_of_ref": "indicator--204a3219-49ef-4a5a-b38e-c593c5c89c67", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27d4aca8-b220-443c-83ca-594929d8c064", "sighting_of_ref": "indicator--1a6b4686-59f7-4f21-8472-1599dfad918c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d23e78da-0414-437e-9ce2-b0c03a3a9a6f", "sighting_of_ref": "indicator--b6513cd8-a486-4374-a294-4ef76b0311e4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1554b1a8-8ed8-46b6-9bd4-85e1900f3e81", "sighting_of_ref": "indicator--a5a89f69-00c4-47ec-9ea6-39a6559882c0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b6212d5-d2d0-4ad2-8059-7a03bf92dfae", "sighting_of_ref": "indicator--09938acf-4c3e-41e1-a4aa-af51d337b640", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--173460c7-e886-47af-9495-e9df7c0692cd", "sighting_of_ref": "indicator--d5ded76c-62ee-4bff-a516-545c99f4ef83", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f903a2ea-92ab-498b-b8e7-0b198ec9dd39", "sighting_of_ref": "indicator--608b5f52-a690-4bc8-a662-b5d63b9321d8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--749e8c1b-35d6-4461-81d5-7da2407a2f40", "sighting_of_ref": "indicator--20fa0a79-7d86-4168-9f82-3b358452d0c9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ccedfbe-15c5-4c1e-a5b6-427f8ccd1868", "sighting_of_ref": "indicator--32be140a-e188-45a5-8ef8-4d599fc3a219", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc0e954e-ef9f-4ebf-a677-542ef7e20955", "sighting_of_ref": "indicator--90dfd771-e627-49d7-a939-1f273e41515f", "where_sighted_refs": ["location--c8625a69-b7e6-4cad-99d8-76632a875c20"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e45bc3d-9781-45e8-a686-5c8b6da56883", "sighting_of_ref": "indicator--0131609e-6593-4f10-a27a-c71b533b8c3b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7de42d99-2e0b-456b-ba1a-405006c7e319", "sighting_of_ref": "indicator--0724b649-a4f6-4268-a7ea-aa359f12836d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf866d59-e243-4fd8-85f1-04ebbedc2d1a", "sighting_of_ref": "indicator--341099f9-be68-47d3-9cb0-3abba542f8f2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47b66f23-79c0-4ffd-895b-af03d4600fe0", "sighting_of_ref": "indicator--9f44745f-c579-40ff-a9ad-b10e8334565f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9368fe7e-e014-4427-bcc8-87715d6781aa", "sighting_of_ref": "indicator--0883a817-7e09-4070-a3f4-9033bae28814", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--affe0ef6-d508-4cab-ac2e-a98687575447", "sighting_of_ref": "indicator--bb32a72d-db68-466d-a609-6a644c56977a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--329b9a31-5fad-40bd-8957-83069dc10850", "sighting_of_ref": "indicator--6fe5d014-a780-4bf0-a349-e6adf17665f8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58fe1ff7-8efa-4bf9-af00-c464faf6f3d4", "sighting_of_ref": "indicator--b98d8df0-3591-4c81-91bb-86f82e655364", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c08a35d4-f1b1-472f-87a6-980b7b2bbd7a", "sighting_of_ref": "indicator--ed44f27a-dd64-4ca3-8cef-f68db5a408e8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1ddbb1e-a270-4325-b084-6ff4c4d8f09e", "sighting_of_ref": "indicator--a7d07d56-2469-4cac-b347-9e9066f779ea", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f224be1e-138f-4d51-b570-b1079d7bee91", "sighting_of_ref": "indicator--5cab535b-1990-4d2d-aade-61ac3bffc4e1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c473495-a9a3-423b-ab24-5e7a3d02aeea", "sighting_of_ref": "indicator--53505450-5bd4-497a-b69e-6ba6877c72eb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ef3e285-96a9-4694-83b1-f35584b783b0", "sighting_of_ref": "indicator--7f83c727-5a2d-447f-90d0-bd5cfdb388b6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b6f2230-8a27-4159-ae94-909e344c29a6", "sighting_of_ref": "indicator--627f6f4c-525a-403d-939d-63799030ebf2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16407060-3c24-4b9b-b3c1-328547d24c7e", "sighting_of_ref": "indicator--14848ebe-d19d-4195-9736-02982963a684", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e69f49f5-fbcc-4772-a5b7-7d9d912cc2a7", "sighting_of_ref": "indicator--d3a3edbb-7386-41d7-95f6-4e630064b1d7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a9df69b-da90-4a89-9bde-42ac5a6eba4b", "sighting_of_ref": "indicator--dc0b6c17-3110-448b-9655-9ed531c4eb5c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--552e5700-d76f-4524-8ba0-1d282e7b524d", "sighting_of_ref": "indicator--264ee053-8224-4eb1-ac18-959bca972a26", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--137794cc-5c1b-4a2b-808e-17f745d94c8f", "sighting_of_ref": "indicator--20d512c2-1020-4e09-aa81-31f369c00549", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcd4eae8-a0cc-4d3a-b624-ce722c06c332", "sighting_of_ref": "indicator--c8ca9361-41d7-459b-9c35-67e19d8f7289", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff715f4e-d4b6-4cd7-b04b-7cfe0f0be698", "sighting_of_ref": "indicator--77ebabfb-a0a4-43c7-8d8b-a5241da2eb6c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7438b349-2067-4783-9baf-80e9d0efe53a", "sighting_of_ref": "indicator--39f9017a-2651-4e64-b86e-2ff86ed772d5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6640d9d-34ab-4d8f-866f-70aa9de8e84a", "sighting_of_ref": "indicator--6752d9f1-1c6d-4207-8311-5ada1d52805e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6a99655-3e27-43b9-92a0-0d7e84ce4417", "sighting_of_ref": "indicator--636ff874-62b3-41cd-8fef-69f18703d392", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04327e3f-e079-44e1-9041-602becc23c9e", "sighting_of_ref": "indicator--3682c87f-8bce-48a0-b348-55e862826896", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90340a7b-08a0-41d4-8343-d6a87d583a21", "sighting_of_ref": "indicator--fd9f2e02-926d-4875-bb88-97f21f2ea524", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f313e1e-c77d-4f3c-8b8b-6c2642fe3c6e", "sighting_of_ref": "indicator--6e0c38a5-d8b3-48b5-a51c-fa363f42010f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a28e1a5-9beb-48ec-bea6-40a234194a29", "sighting_of_ref": "indicator--c2a54510-0cf2-4a23-9f4c-3ab4d90cd61a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fa7106a-2580-4af4-9403-7fc7f266f82d", "sighting_of_ref": "indicator--fcb18285-91e5-415d-95e3-ad64c6648e9d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3cda84b-dbd1-461d-b110-d5261da46ab3", "sighting_of_ref": "indicator--1753b5d3-2c97-493f-8dab-2eb754e47024", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--186b5047-0f8c-4361-9ef5-c27bcef6b7ee", "sighting_of_ref": "indicator--30f86c80-5fbd-4420-a942-f3f9ecc13fe9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--085969f9-8d30-454b-8f28-454c61bd6a8b", "sighting_of_ref": "indicator--bc59fa8a-37b3-42a2-911b-94b64250c493", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffa06f57-08c9-46d7-8525-babb02324997", "sighting_of_ref": "indicator--53bedcaf-e44d-40a2-b05e-546cc0d1d7a1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--002ac75f-8584-4dc3-8e27-756feab269e6", "sighting_of_ref": "indicator--f55613f7-602e-43c8-9489-018034934d43", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24061533-50de-4c60-9f76-3170023b79c0", "sighting_of_ref": "indicator--8a3d9cb1-b073-4410-892d-184cbb3fc6ca", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24a6535b-5f01-4a62-9285-af70cb2daae3", "sighting_of_ref": "indicator--281e0c29-8f93-4a28-8867-7beec1fa160c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8b06d52-7084-478f-bb65-b4e5603e33aa", "sighting_of_ref": "indicator--dd1b312e-17ec-42aa-ab45-1cfafdb69cfe", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e06b36ec-ca94-4937-91ba-d12f22a9fa48", "sighting_of_ref": "indicator--259e94a7-5c2f-4201-b658-0f32d242a0f0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17364361-0519-4ca5-b694-998deeb2ec92", "sighting_of_ref": "indicator--f434678a-57e5-4096-8b07-99d8307ef535", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4876322c-d5f1-4b8f-8844-9f9574b55a0e", "sighting_of_ref": "indicator--da6cdd1e-4b95-452d-b6c5-e6cbd3d34806", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f50e87d-f4f3-4050-ab1f-544917c00e3d", "sighting_of_ref": "indicator--73cc2b63-801c-4627-8c16-29f529088e6c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ce2c39d-074e-4276-933a-9e33f5adf962", "sighting_of_ref": "indicator--ecb0ac51-0777-412b-a4aa-5fcae5720d26", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2adf101-b684-476e-9a22-74dcc145f86e", "sighting_of_ref": "indicator--af7db436-96a1-4de1-98d9-402c8ea1f86a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e6a3a18-4053-4397-99a3-6941d9405689", "sighting_of_ref": "indicator--a336a8c1-1c90-4514-9ed1-db596c6f251f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ca6b311-134d-4d19-9926-61c5ce1c14c6", "sighting_of_ref": "indicator--2418d8f0-060b-48d4-a1ae-af7a4eb6780f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1488dfd8-bae5-4be1-bc4b-4e6a55e4fa90", "sighting_of_ref": "indicator--c3388023-24ef-44f0-bd49-e007d679dae7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1dea5a5-6422-4f96-bed4-6764099e4877", "sighting_of_ref": "indicator--4c831c76-285d-47ac-aa4f-059158bd2b8e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad897fab-38db-4af2-8b6e-4e6a15707c6b", "sighting_of_ref": "indicator--c2a34816-ef88-4bac-9140-18cf43658ad3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1d812a2-fc52-40d6-b0f2-afd621164c94", "sighting_of_ref": "indicator--93005ac4-906e-46be-b4ae-6d3948dbc64b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6307ea9-2a19-4884-aad9-4d35ea12045f", "sighting_of_ref": "indicator--6e1d2c77-e0d2-43f5-93c3-b66089aa9c7a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b73c46fb-a5b7-4f91-8756-e0a2046d981b", "sighting_of_ref": "indicator--d21dc03d-d330-4652-82c0-13c72324e7ee", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2d5efb5-0713-4d50-8b74-ee791ad36faf", "sighting_of_ref": "indicator--8db58c0a-adda-4d2f-a634-359eebeb2b49", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--049acdab-209f-4061-b7be-ce7f46cdd3dd", "sighting_of_ref": "indicator--ad80250e-6f7c-471e-8524-87340a80b0cd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cb9a363-3c0e-4458-bf79-75dd24052b26", "sighting_of_ref": "indicator--e0d3e831-43b8-49a3-9177-8de79f6ba827", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--360f02cb-9f3c-43d3-b00a-3a4820dcdbdc", "sighting_of_ref": "indicator--a32f19ee-dca3-4631-8b99-df7c2b46faf9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8c4deaf-4e16-46e8-a7a5-4f9a60dec0a7", "sighting_of_ref": "indicator--fdc7f319-9f29-41a3-98a0-675ded9e2789", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72aa08d0-745a-405f-9d40-dc4401ae52a7", "sighting_of_ref": "indicator--fdc7f319-9f29-41a3-98a0-675ded9e2789", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eee4a4a3-463e-4c2f-b326-9ee3c56d62d8", "sighting_of_ref": "indicator--b8fedcdb-a1c7-4450-ad38-38e704275cba", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2563a198-3ee6-44c1-91ec-b64571855b73", "sighting_of_ref": "indicator--9095835b-a0b8-4af9-a6ac-df1643095d54", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59a8eaf1-7a76-40ac-9cca-e108ebd396c5", "sighting_of_ref": "indicator--a5136395-0581-4cdf-9b8a-15852a4b380f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e1e1ca0-e654-4356-8dbf-14e233bac83e", "sighting_of_ref": "indicator--677f156a-043c-40d5-935f-343ac1a494bb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7b95950-63cd-45dc-b094-d9a319c8afa3", "sighting_of_ref": "indicator--e675dcaf-643a-4275-af7a-72396c686674", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a57d415-1c3e-4e38-8db4-de91c2b8e48a", "sighting_of_ref": "indicator--a53dcce6-3885-405d-ac17-c33fef21c278", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--994c32bb-c538-4f05-972f-41bcde1cdaad", "sighting_of_ref": "indicator--08325066-9e8d-4a25-8a08-7b7cd5bd3ddb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76d977d7-732c-48cb-aed0-06ac327c8c3a", "sighting_of_ref": "indicator--8dea46e9-b55a-4e0c-a139-63bb1b58a5b2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3fcfe8c-25c2-46b8-9bd8-3b7a6f0189f2", "sighting_of_ref": "indicator--69f0f15d-252f-4de9-909d-2317fbb6e3ea", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--630a35b8-3d05-4e20-9b81-dfa075ec65cd", "sighting_of_ref": "indicator--819a17f1-ad9b-474f-8b8a-258f5e15fa8b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5220ede9-4d96-41d2-b381-ac74504cd8d6", "sighting_of_ref": "indicator--3b0fdbb3-bab0-4f88-a7af-de2fff3aa09a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f253bf7e-9f53-44a0-b90e-6344e622b604", "sighting_of_ref": "indicator--d6695533-24e5-423f-9839-4871f2f233bc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41dff346-3fd5-4606-92aa-5ab0e7dba6a5", "sighting_of_ref": "indicator--dd650e86-0c7c-4baf-a394-73a240c2a423", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c984f94-0ffb-4aa8-a0b0-4faa81063b54", "sighting_of_ref": "indicator--7de2751e-1b75-48d9-9afe-5422a196cc85", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3588191a-6f45-43f4-9c7f-b11976d1c4a2", "sighting_of_ref": "indicator--2acb6f8d-0ada-4d70-9d56-c54d79db5f06", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2f358a6-6c8b-4aad-98b1-86fae932f97a", "sighting_of_ref": "indicator--9d8f1793-10ab-4ed5-8244-ffb5bdd3b4f8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51097013-ef1e-4c50-8d8b-04611abc6a4d", "sighting_of_ref": "indicator--30fe5092-2270-4411-b7a0-750ba0cd097c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--276e2852-3180-4423-b093-faf3c3d2eaa5", "sighting_of_ref": "indicator--bed177bb-4739-437a-b090-1527670a960b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6ee8d71-cddc-4b5d-b3e3-66080cfa9a72", "sighting_of_ref": "indicator--e56f3344-8409-42e0-8cf1-da6ded249a89", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec53d07a-8ad3-48e0-99ed-2e03df5cb208", "sighting_of_ref": "indicator--5a22175c-49ff-4518-a932-79d360e1f7a6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0244654-b2df-4087-a041-a6162c718a80", "sighting_of_ref": "indicator--4a71513f-9ea2-4e67-be99-0657aa1c100c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a4bf931-6106-4f02-9870-1209441f3656", "sighting_of_ref": "indicator--2a9f634d-2754-4b5d-8007-25db793886ed", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--226091b6-4384-4427-aa79-b34dabf4053d", "sighting_of_ref": "indicator--6f551b5b-5549-4fa9-acdd-2a89e2d5fe3d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b68178f9-02c9-4044-9b24-9409ae2e1443", "sighting_of_ref": "indicator--51acadb2-16fa-4a4e-b6a4-7692e2a3cec8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6927e01e-5e96-4b96-8a20-3c81e50519b3", "sighting_of_ref": "indicator--a1e444d2-798c-4358-b4f9-32b72993a2e9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db644be9-5d8e-47f0-af37-491b859f66e7", "sighting_of_ref": "indicator--4f6245a2-5357-4629-bebd-bedffa7231b5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd654b50-6cc9-46c9-a84d-d1d4afe0cf44", "sighting_of_ref": "indicator--3685fb03-123d-4453-8f91-176f223e3a86", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43f16da5-f9b4-44c0-9be9-a139d5ed467e", "sighting_of_ref": "indicator--0dc6fd36-20fe-471b-be12-c9d15fdc6c88", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ee6e066-c3e9-408e-a71d-ea83aacfd6e0", "sighting_of_ref": "indicator--b5249692-a43b-4706-833a-f9fc4ff87158", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9480358e-4fca-4b1d-b40c-e96d6fb201cf", "sighting_of_ref": "indicator--fde523de-afb9-4156-be0e-977c300f8de4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbe85578-1318-47a1-9624-7624b16a9372", "sighting_of_ref": "indicator--4a81b284-612a-46cd-8044-6314853ba024", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ae9287f-9525-4c34-93ef-6cd805b9edbb", "sighting_of_ref": "indicator--ef8ac7b4-72d9-49a3-9c06-130506a48fe5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96a1b12e-fa24-4926-b687-7be6115fd849", "sighting_of_ref": "indicator--63420af1-cae0-40c9-ae26-7148e8b97373", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e52f6eea-8b5b-49eb-aaa3-70a220100dda", "sighting_of_ref": "indicator--c5b0897c-93d1-429e-b7c5-535a55c36c84", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d73ee855-e4b3-48d4-9b6b-85edc1ea6099", "sighting_of_ref": "indicator--67141a42-47c5-49e5-b190-c3595cb06d50", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc883e99-3573-455d-83ee-a2eb5d52488e", "sighting_of_ref": "indicator--69ae33eb-ee74-4498-90f2-94f375dc77d6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dedce486-f938-49a4-9962-ffb00fc4de8b", "sighting_of_ref": "indicator--3f1dc238-852d-4bb9-8e3a-647b30098bd2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b72e2932-b3f7-47ff-836e-15da7205c62e", "sighting_of_ref": "indicator--3fd112e6-3350-46d4-a389-3e379fbcd355", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71c28eb3-55c3-4c3c-80f3-17eb0102c298", "sighting_of_ref": "indicator--3dfe3697-cd1a-4668-974c-7fb7081758bf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--838a9d8d-bf24-4179-a102-902cfb384836", "sighting_of_ref": "indicator--b24bab59-6105-4a51-af56-7e561dba4c64", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e274231-aba3-4dc3-8d22-8b0ef6162d07", "sighting_of_ref": "indicator--40f2c13c-10b7-4ec2-9bb1-5d8a09b15e6f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9e04e68-91b5-4eb5-8dd4-f98b0b755637", "sighting_of_ref": "indicator--d77bc04d-26a6-4ca6-ad72-4d7b3e2785ca", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5ae8560-c349-4c34-b1ee-cee5a8198974", "sighting_of_ref": "indicator--25f8304f-e67e-41f4-a20b-46c1395edbce", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a1f97e5-e2b7-498e-9788-5e71897b4cb1", "sighting_of_ref": "indicator--9f147402-73e1-4366-8e92-9ab0b43dc554", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f451a26-1929-4ffc-9803-803f04f54f74", "sighting_of_ref": "indicator--9795c5e5-6be1-4a7f-acd3-0148dff22c6f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93e61971-e05f-4fd1-9f8b-9996f40aa5de", "sighting_of_ref": "indicator--69bdb019-78cc-4df1-aa39-5058bb72bdb8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ea6cdc5-4ffe-4331-9e3d-3f7f3426bcd6", "sighting_of_ref": "indicator--94b2aeef-a5ac-41ed-9678-efcc868a9c5e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9742ddd-9963-43d2-96d0-3d8478a0db7d", "sighting_of_ref": "indicator--141ea6bd-1c8c-4559-9603-1590a1cc1520", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e45c69e-800d-41a3-8e2d-369fae740f17", "sighting_of_ref": "indicator--d58b958a-ea48-4454-8123-ed726367053c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6288ac8-4f95-42f8-9c48-7204d33c46d9", "sighting_of_ref": "indicator--5987085f-e133-4273-9f66-50fad862741e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--794b2734-801e-4cb3-9622-34d6e61c75fc", "sighting_of_ref": "indicator--e4b16842-ae8d-404a-8bd1-5bc8cb8f620f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9436ebc7-8247-4a2e-a5c7-7371ae051869", "sighting_of_ref": "indicator--62585118-6598-4f64-9a50-5d8f05699801", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c52671a7-dbe6-41ab-9c93-000e7390d4cb", "sighting_of_ref": "indicator--0c08cf55-28d3-4df4-ae9a-5e33b8bf9895", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2506276a-9c4d-43a1-b184-827457f6f487", "sighting_of_ref": "indicator--a5184835-e841-4d5a-85ac-6a89ba3bf90c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bee68d1-5fc9-4b7f-907b-6456d9b83df3", "sighting_of_ref": "indicator--e1f6d843-93d5-4a20-a1f3-4d59ed07f1a9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3128f3ee-36b7-4ab7-95c9-47cb6a8d986a", "sighting_of_ref": "indicator--676584e7-c3c3-4043-8a8e-89d6997f3eb3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6444b468-5eb2-4ccf-9229-882a9e2513d4", "sighting_of_ref": "indicator--62388d71-ec30-4da4-a609-6fe61c477580", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72f6369f-e02d-49ea-b9eb-238d393ad67f", "sighting_of_ref": "indicator--34d7f5e3-36c9-442b-9ceb-795062ebc20b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d69b028-a12c-4639-a1d7-d5bb551207c6", "sighting_of_ref": "indicator--973673c4-34cc-4249-88a1-2763ead659f2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--603726b3-c496-405d-bbaa-0ceba925cd38", "sighting_of_ref": "indicator--e2a316eb-3c17-4982-9569-44a411bd558b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2affe2b-fdb2-43db-a360-a6f5ae11c644", "sighting_of_ref": "indicator--ed174a80-8968-474d-8494-097cc0f5cfe5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d8546db-d0ad-4ef3-bdc1-0d827edc38ab", "sighting_of_ref": "indicator--5a2f550c-409d-487e-8686-3a54959b092e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74f63e34-a1b1-4401-845f-96293ec2a4f8", "sighting_of_ref": "indicator--ceabd657-aa88-4c0a-825b-d714a5bb56da", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89808b8f-6cf6-44e8-a6e0-dd0817d5adda", "sighting_of_ref": "indicator--2abceade-b48c-4c63-841d-870594e4708f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37fbc575-05fc-423f-916c-7b571b747a56", "sighting_of_ref": "indicator--59c499f6-e60d-4b20-adb1-314aa2b97018", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2edac141-8ec0-46d1-bb8f-f7186260b827", "sighting_of_ref": "indicator--c4706753-496b-42d9-a586-e22658c6960c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d42c081d-55a0-4bc1-a43f-0541858330e7", "sighting_of_ref": "indicator--66a03e2e-da20-461f-a0e2-7b0a84e9d0f7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4264453b-f497-4037-a5bb-a4ee26d59755", "sighting_of_ref": "indicator--c6a71cfe-4523-4320-8289-97632e2709dc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--036d62fe-f073-497c-83f2-9f6cff5b8c8b", "sighting_of_ref": "indicator--21618037-ee69-459c-bc2d-e63386f1dd2f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be38aa46-16d4-4b01-9e80-d19f26d4ee4b", "sighting_of_ref": "indicator--b15eaccc-63e7-4a57-8f6f-03e3a0fddaf3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5148df09-3f0d-4593-8264-16229b4d3bd2", "sighting_of_ref": "indicator--c09dbe13-5a0b-41ec-bd11-7d93075b1d5c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baf9adc5-9d67-4082-9a6d-9f352b15b4e6", "sighting_of_ref": "indicator--be494e39-5b73-4c07-ac3e-eff8dcfbbca1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d73c004-95f1-4fcb-b854-71625ee7ed53", "sighting_of_ref": "indicator--e0f09c1e-d86b-482a-abbe-c7475d9c8a71", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52f70dfe-7705-4fc6-80f5-c1a2991f1313", "sighting_of_ref": "indicator--d5a98401-ca69-48d9-ac7a-3b2046abf092", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3c0d4d4-491f-4c24-b9c8-ed23f95910ee", "sighting_of_ref": "indicator--08884bff-5d40-4702-9b65-13d0cb4f9cce", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e06780ed-57b5-47c5-93a6-e6ff982b419d", "sighting_of_ref": "indicator--157a47dc-8e5e-4853-af5b-043552323fc4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1724f58f-e076-4eec-849f-8278fcc97260", "sighting_of_ref": "indicator--75effd03-271d-402a-ae3a-8a6986f06f70", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9d19cc5-6af6-4022-bb42-1fd84d12387d", "sighting_of_ref": "indicator--f84cc501-e4c0-4c34-941f-043cf96618f4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97afb46e-99d9-4ed8-8871-ed3294cf694f", "sighting_of_ref": "indicator--e3dc08ea-e320-4bc4-9e44-9c053bfe4dde", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04a66036-c389-46cd-a9ee-ddf461f57864", "sighting_of_ref": "indicator--de5592b1-d8b6-41ee-b1ce-26be07b242ab", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b126395-bad9-456e-868a-9c443ba67b52", "sighting_of_ref": "indicator--cf45ed65-057d-4265-9a72-f18925a9fd1c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4617581b-448b-400c-a0a0-40c0b4e43461", "sighting_of_ref": "indicator--6c588f1a-3939-42b5-a891-a072bd528b09", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e114eeb-7dc0-4d23-8679-6d904d569e19", "sighting_of_ref": "indicator--dafe01b7-c952-4a5e-a25c-7063269c15c5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d134395-1227-4035-ad22-adce07012f06", "sighting_of_ref": "indicator--d14ba35a-7988-4539-8cdf-80919a5c8247", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e4977e1-67bb-43d9-b47d-4777b6079248", "sighting_of_ref": "indicator--8d502a4d-a025-45d5-b0b6-c823515ee6a9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7ad8842-4fd1-4c58-a75a-c16e73f8cd66", "sighting_of_ref": "indicator--3ab66c97-c7c8-4ab8-8672-b048b067a527", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0043186-7bff-428b-b67c-1e7365aba58b", "sighting_of_ref": "indicator--b418941d-df1f-40f8-a3a7-ea3b990b34ae", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76b463a5-8028-4f95-ba1f-a89dec02ea1f", "sighting_of_ref": "indicator--319c4b57-ecc8-41fb-9da2-7790cdaadfc2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3132275a-be14-455f-84b5-532cf7e8e36f", "sighting_of_ref": "indicator--59ad3e72-94d9-40cb-a9bf-740a8e6233d6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f7783fe-ed1a-49d7-b837-faf5b40851d7", "sighting_of_ref": "indicator--333af4b0-c014-4c16-a34c-538abc110517", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf769118-e661-4841-a992-a7c52e5d1696", "sighting_of_ref": "indicator--5e8235ad-4ab1-431a-a09c-80d06b5f5553", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3cc52aa-9e78-4f87-888d-dcacf7902941", "sighting_of_ref": "indicator--5e8235ad-4ab1-431a-a09c-80d06b5f5553", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ef960c1-c085-44c8-b556-389db410d1ec", "sighting_of_ref": "indicator--9f27e849-bd23-4869-8f2c-91e0bb5713d6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8177044b-0c76-4645-a602-a297d2ab9677", "sighting_of_ref": "indicator--b3fa163b-49bc-4c15-aeb4-5bde9dbf0738", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--463a109f-22ca-4c90-ab40-653e00853a1c", "sighting_of_ref": "indicator--9db7a702-0ae7-44fc-a0f6-ae306b955474", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffbaeb12-27f1-4301-a68c-46a7e25b479d", "sighting_of_ref": "indicator--c71df0c8-1a0e-4332-bdf8-fdfcddfdd020", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--286be479-8bd7-475b-9c85-598d2b00f093", "sighting_of_ref": "indicator--3e44375f-7697-4733-be8c-7c0576eb4b98", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef0adfd3-54da-4f06-bb84-d9307303f4ec", "sighting_of_ref": "indicator--280a16b7-3688-46d2-991c-b7e781b826e9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0da89ebf-e476-4bb5-b23f-531db54d73e2", "sighting_of_ref": "indicator--785e096a-9b76-4ed7-b752-9c2fcc1333a2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49a1a755-a292-47df-86ad-1c6cd760671c", "sighting_of_ref": "indicator--3b0a1277-42f0-4922-894f-373db8e3b22a", "where_sighted_refs": ["location--c71c2550-5849-4a8d-b050-635a93ef5467"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8100603-d135-414b-b551-712f0ef38ebf", "sighting_of_ref": "indicator--4de962ed-23d4-4bc4-9ead-475b9821f17c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--428223c6-900f-40ce-b965-64c342952c6b", "sighting_of_ref": "indicator--89ea6fdd-eb4a-4595-86b2-e86c7fe73153", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d571915f-0dc4-4747-b9ec-69b25c0df7ad", "sighting_of_ref": "indicator--7b1db35c-6d2e-4701-a188-09589db2c3a5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5954f35-d337-40d1-9084-5a22805fdf39", "sighting_of_ref": "indicator--cca8a813-ddc3-4bf3-8d5c-e663e798e7c4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9bdb1ec-f6e1-4c55-b297-27d41c39bd30", "sighting_of_ref": "indicator--45ad9965-0d41-43f8-82bd-c75f04bfa331", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--679847a0-2eb9-4df2-8ff7-13be6c1be21b", "sighting_of_ref": "indicator--1886c8d6-d25d-4253-bd39-a78858fa2992", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51037cc7-ee2d-497a-ad8d-8d4eb3dbdd21", "sighting_of_ref": "indicator--86014c9b-35c6-40e2-a7bd-5c19e61f3c70", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--319da980-963b-4f8a-85dd-bedf1e19adfc", "sighting_of_ref": "indicator--9b4ad513-55ce-4538-b43f-6ede618e2afe", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43fa24a4-3d8b-43f5-b41f-88d370679609", "sighting_of_ref": "indicator--29bb405a-da80-4b52-b31f-93e7b151ed1a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72bfd7f8-8921-44c9-9ba1-5176aee8cdc4", "sighting_of_ref": "indicator--77165593-162e-4125-bbf4-5b539bc962c6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dd775ba-e322-4257-9d7e-c83cc1c5fc30", "sighting_of_ref": "indicator--56089fa0-182f-4cc1-b061-86b5c537d1e7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--697823e0-8d42-4e83-abc9-bdfe8ef5c9e2", "sighting_of_ref": "indicator--d2852189-db3d-43ac-9afa-b6c777068148", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c6501a0-a691-4756-83bf-f4a5d3f79928", "sighting_of_ref": "indicator--c0bb6281-3ae4-4a3c-a58e-b4e6b379be2f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b3516ba-c3e2-47c3-9882-8113aa771635", "sighting_of_ref": "indicator--ab7f7d6b-16f0-4a16-8bd1-da8756894ed2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72ddf020-c262-4cd5-81b4-574bf59f643f", "sighting_of_ref": "indicator--9384833c-6fcb-41f0-81d2-c5f4cac974a0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59708832-0dab-43c4-b41d-9337844ec451", "sighting_of_ref": "indicator--8b95a1dd-da1f-4e87-b044-59afb038e5fe", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cb65fa7-694c-4675-8b5a-e7da090ce7f6", "sighting_of_ref": "indicator--363b0183-fcc8-4e48-ac8a-dae1d9a2628a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--175fbabe-8bb2-4493-a3d0-716c3e7776c6", "sighting_of_ref": "indicator--106bf5fa-0b42-4336-b2a6-39e1fbec8cbb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--016395dd-65fe-491a-848b-4f1692c05a94", "sighting_of_ref": "indicator--f7c09d55-a4bd-4faf-b275-b0b2d1361211", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--176f0555-f5e7-4c27-b0c2-2a088c1a03aa", "sighting_of_ref": "indicator--1fec6c09-676b-4d66-85c9-4b84dc8d3dfb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea8c0f5c-4365-4bab-a4f3-b8639f002cf0", "sighting_of_ref": "indicator--723c11a8-114b-42a6-a23a-d88063e27629", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e7e19c3-b1ed-4f06-a28f-63710d041745", "sighting_of_ref": "indicator--350e93f1-0a5c-4255-a15d-cd5e7da65d03", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8368a3ca-e72a-4a67-a0f3-dcccc7caae06", "sighting_of_ref": "indicator--373a955c-58d6-4a18-a2c5-dd9c4cc5d28d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f114979-358d-45c9-8f1a-2d863cba2859", "sighting_of_ref": "indicator--fa6f6c33-d221-4f5b-a137-6f9861c466eb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--001506e6-4e2a-4ea4-90ca-d4c6d2eb129a", "sighting_of_ref": "indicator--bdb7ae56-995d-4a03-8db3-de92cb68b202", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--127d4535-e795-43de-a907-78dccee66b82", "sighting_of_ref": "indicator--3b8a8710-a2f1-4467-bf8f-06c12e06635a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de211832-183a-4325-aa06-e363ec46a815", "sighting_of_ref": "indicator--514ff097-73f0-49b3-895e-dbcba3af0806", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ede6e3c-0cbc-4b50-99bb-0667e4798ef2", "sighting_of_ref": "indicator--34ede16d-fdb5-49a6-b871-74946f409b69", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09c7f77d-a052-406e-b60c-2fb977c8a20b", "sighting_of_ref": "indicator--db06e91c-a6e8-44c7-8a54-507266d18261", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f98d1d40-24c8-47c3-815e-5a6233d8bcf4", "sighting_of_ref": "indicator--2d60f670-bc87-4afe-a490-55553dba1ca4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ac6a001-e4c8-48a9-a770-eef5c91e9966", "sighting_of_ref": "indicator--711f022c-808d-4689-b2ea-11148ba20754", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02607acc-829f-4d84-a022-e130d02490d1", "sighting_of_ref": "indicator--1a51b4b0-2de7-4c34-890a-632d2058d2be", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccd41458-7095-4322-b02b-7c277219b39a", "sighting_of_ref": "indicator--58e9ed23-ce39-4ff0-bed6-81a5feb2ad86", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f811bdf-c2a3-4150-9995-187a4294c08e", "sighting_of_ref": "indicator--9d78c5b3-afe8-447e-949f-4f1435c37ba5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb7b4dd7-f67c-4dd6-b02c-bf1536c9c54b", "sighting_of_ref": "indicator--3648bd81-7cc6-4fec-867b-3850cffa9acc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8baadc4f-3c8d-4626-b4a5-c8166febeae7", "sighting_of_ref": "indicator--3f07f1a2-1a93-41a3-8a68-e5162099c93d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d16560f9-c56c-41e4-99cb-0eb08341d00f", "sighting_of_ref": "indicator--e8868f46-5251-4337-bad8-2ffe2d46bee9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cb89e28-67f1-48c6-beae-75d45bec5938", "sighting_of_ref": "indicator--a6424bd8-8084-4343-ad8d-c8b007b6bc6c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--875ff086-3f92-412a-8161-f68c1f364547", "sighting_of_ref": "indicator--fb3fb54f-ebb6-48e1-b04b-deef798d93ff", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc8ba915-dddb-41dd-aa36-df8a3e406eca", "sighting_of_ref": "indicator--73034a89-8b86-4528-b5c1-3a15ebef8bca", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62cbc8b6-58e4-42ff-a38d-19dbd91dd2a0", "sighting_of_ref": "indicator--9a0964ee-33d0-45a6-b5fe-3d282f9a367a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--427d284e-67e5-4954-a58e-2accf2ef6a85", "sighting_of_ref": "indicator--86cb783e-ac6d-4a88-be65-1ee30e8c38d2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b8036dd-6450-474f-8b28-83ee7640a5ae", "sighting_of_ref": "indicator--9824a62f-14db-45ce-bbf6-c5874a57df3e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63079049-d28e-4902-8169-65899753dc3f", "sighting_of_ref": "indicator--b210a017-c1ce-4013-bebb-1eff92929b42", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b68a02a9-c656-4003-b9d8-a68b552f3daf", "sighting_of_ref": "indicator--53ad1c25-66f8-4c1b-a377-66c1e35cb86c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c322c38c-ed50-4f0f-bfdf-d701d1daa3aa", "sighting_of_ref": "indicator--b752027d-e78f-4fb1-bb6b-b243309b5257", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf4c65b6-978d-4630-bdad-9297af06d459", "sighting_of_ref": "indicator--7cdb73aa-1abc-4b02-9ac6-2629bd1737b7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3062613-80c5-4e3e-807d-ae1feef58b7e", "sighting_of_ref": "indicator--9d146b55-2c46-4ff4-9824-58e68e331d11", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aff00d13-7b36-4f2d-9da1-5a4c59174d27", "sighting_of_ref": "indicator--dc362052-a514-446d-8bbd-d0b029a5abb6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--175b79ad-2fb3-4a78-adaa-14341470aa42", "sighting_of_ref": "indicator--8addabde-624e-4005-a772-8c39f5c48e92", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d439dc89-083f-4a67-afef-98fa18888c0b", "sighting_of_ref": "indicator--8d7dd4e1-d106-42c6-835f-5971634c5c29", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85d54403-4915-4bd3-bdb8-f5bb691125ac", "sighting_of_ref": "indicator--ee8db7b8-2934-4faf-95d2-f37a0dac84af", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a29c11dd-fe6a-40a2-a241-8eb568098892", "sighting_of_ref": "indicator--cce275c2-2c8b-49a5-8ce9-cc0d095eb6d9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--837d251a-5cab-4a11-a1cd-d3b4503c3c61", "sighting_of_ref": "indicator--aea233a8-6f35-4dc0-8676-d9801bdd8b8b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84ec1eca-2360-4261-af62-1d9eebb23059", "sighting_of_ref": "indicator--fb1e261d-b919-4797-8204-8fbb4a895d43", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--737e3787-33cf-4f61-83ef-8a997c18bd95", "sighting_of_ref": "indicator--0f2a228c-668a-45a1-8103-f7075c5ae69a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f8a8673-79c4-4c92-8cd3-10f4cb5a8ca8", "sighting_of_ref": "indicator--68344871-55de-4fc6-9c45-8b2df25fdd1c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--203d776e-03f2-49a2-ad72-dcbc9f646d98", "sighting_of_ref": "indicator--b8a021e2-3eef-49f2-8f1f-b483bc9d608a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba4db573-e7b4-4bde-a9f2-9082badb468d", "sighting_of_ref": "indicator--e4b706a2-0717-482d-99d2-fbff22b758cf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbab85df-ce73-4b10-8bd1-1327679a1c09", "sighting_of_ref": "indicator--06a194f2-61c4-4f9c-baf5-48193bbe0919", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc2fa56a-923d-48c4-b864-f8308818737c", "sighting_of_ref": "indicator--39a04853-99b8-4403-bd06-2caf5449b9fd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02e1fec4-fd05-4603-b775-33339fba53d7", "sighting_of_ref": "indicator--24e903b3-777c-4341-8c93-3085a90a0b07", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14889a70-793b-4590-9fae-858b7a53ae75", "sighting_of_ref": "indicator--02cfc7bb-bb1d-4153-80fb-7351ae0d9ff7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4847d682-b7c2-4270-ab07-b11acc33794f", "sighting_of_ref": "indicator--076a7b3d-fd04-4394-b854-36c7df2755a1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81ee903d-5e29-4097-b5ca-33d8d446e76b", "sighting_of_ref": "indicator--a80a7934-6182-4d27-a55c-503150f05676", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df9ae4ea-1793-4a0c-a471-c946946e0a06", "sighting_of_ref": "indicator--166b0b81-cabf-4575-9981-59eb89faecfd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--299b5e36-1337-4380-9956-6989bdb1869a", "sighting_of_ref": "indicator--0d265872-4875-49e0-b0e3-ff2278a68af1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--651e9df9-4051-418b-bfc6-b83fc44d7954", "sighting_of_ref": "indicator--141f6eae-51c4-4ff8-bcde-b4d037e474f8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd8d44b8-c6d2-4cd9-ac0c-86463aa03377", "sighting_of_ref": "indicator--21dc76b6-ed8d-41fb-8f83-95555815205f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd2ac385-a51c-4b94-90e2-564336f4dd43", "sighting_of_ref": "indicator--5416c12c-2eed-4f1b-b507-362db82fb2c1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--338748d5-0574-4a38-a5b4-d4b631a73d3c", "sighting_of_ref": "indicator--24b49508-97e0-4787-a742-3466bfe032e6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--440d8929-f552-4ef8-8ff4-717b225fdc4a", "sighting_of_ref": "indicator--38eed770-e46f-4e08-b5cd-0490e1b5a966", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ca85e6e-ba7d-4912-8b86-7a94840b2d36", "sighting_of_ref": "indicator--aab1bebf-2489-4be8-8f2a-72e84f565d9a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b69e6b58-f826-4d9e-bfee-61a9f8ef8002", "sighting_of_ref": "indicator--17949ba9-f8a2-43fb-8c02-4133a7387a00", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0c11a0c-2e1f-454f-b76a-7ad3dfc43899", "sighting_of_ref": "indicator--f3062aac-c9a4-471b-93c8-3ba4c19b3a3f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fcc2f90-79d6-406f-96ff-8ecbc8a27bce", "sighting_of_ref": "indicator--911946da-bcc3-4100-9896-b4b3045d8a2e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4824a2fe-d88e-440d-bece-4531f12f66ae", "sighting_of_ref": "indicator--1fa1c983-8b88-464c-b0b4-2c7084ae7f22", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54c43fef-a03e-400c-a83a-b9036cd00d6e", "sighting_of_ref": "indicator--02e4f5c2-c0e3-4b77-acde-a5d69b649dde", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e9048c9-ab66-43ce-8116-1ca0429c22ca", "sighting_of_ref": "indicator--205c8b3d-cf0c-4b11-b429-57dc522926a3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56c78581-4d63-4d24-bfb8-37f099621c3f", "sighting_of_ref": "indicator--c2fbe025-2a71-4174-9930-17b912f13ed5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5467c65-1f14-4276-871f-87249a437c5a", "sighting_of_ref": "indicator--a191ac07-869c-4839-b354-819b190ee9e9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ed15ac3-195a-4986-a6c7-9370b17e1711", "sighting_of_ref": "indicator--c409f7e1-43a2-4f3d-86e5-c1b172cb6009", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f7dc36a-2854-4474-86ef-0117bfd4d95b", "sighting_of_ref": "indicator--9ee9429a-a52c-47b7-aaa5-7051b47923d0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--330fbbc4-a679-4d14-a9c0-425f6dd476c2", "sighting_of_ref": "indicator--2c06c246-dd87-449f-a15d-2cce3bab3d62", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--434e80f7-c8cf-4a0c-990c-a232cd0efe14", "sighting_of_ref": "indicator--8f6f249b-db6f-4bc4-af23-b222e6480bab", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19f0de1c-ab06-4115-862e-b98581bc2e03", "sighting_of_ref": "indicator--bc921b3f-c09e-4040-bf74-aed7bfea6d44", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47c42893-45af-431c-b7c3-251d7915dd67", "sighting_of_ref": "indicator--d654f2fd-8388-4c19-b0cb-82bc368b59b8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b94e4b0-0d56-4d2b-ac14-75df2b7d524b", "sighting_of_ref": "indicator--e8880a4d-c216-462f-8b6d-4938611f2255", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88477bbe-0474-4f65-88d5-6e4255e9ca65", "sighting_of_ref": "indicator--f979bc67-bf95-45b6-ba39-ecd350b5bd09", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9902f97-768a-4f1b-94c3-f68d3f1e52e2", "sighting_of_ref": "indicator--e05ea380-a726-43ad-82ef-771b642eecea", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7736c8be-8e15-4314-8767-ca7ad1e44f55", "sighting_of_ref": "indicator--99ea2f72-c475-4c51-828f-f371b0ca4c64", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b4d17cf-e480-408b-9452-e29714283bce", "sighting_of_ref": "indicator--6576362f-d4be-4687-bdf4-00f144ffbf6b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e08435e-08ec-402b-b9b1-984a813ca959", "sighting_of_ref": "indicator--ee3ac251-e765-4a5c-b17f-b40d6b042e3f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c0a76aa-434d-4877-bfff-2cdb4ce1dfd2", "sighting_of_ref": "indicator--95c83e24-d13d-4d9e-b75a-33bea673b0be", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1f0222c-b742-4ea5-867b-6b7f889b9d99", "sighting_of_ref": "indicator--ab3ea1bf-daf0-47b7-9120-ed3cae2ebd41", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7668924-cb2a-4d4c-a4d9-8dd260f307d5", "sighting_of_ref": "indicator--ad0f9a89-7b32-4ab2-89bb-07ef84966d39", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba4b1845-c046-460a-b1e6-f21bf1ac2464", "sighting_of_ref": "indicator--e524cef1-a9a5-4f31-8f6c-58af6147d28d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--740a1483-0706-4745-8838-d7278db5ca66", "sighting_of_ref": "indicator--edba8f20-7847-4ec3-b68a-dac04a93edbd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a547d8ef-9e9e-4ec5-8988-f4f630920e0f", "sighting_of_ref": "indicator--7f95122e-5d3b-4edb-b29d-46785c9a6684", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4012328-2f5f-4b9c-8a2f-64056ec7def7", "sighting_of_ref": "indicator--54e7deda-74bf-4881-8dc2-ead4aea2c040", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a3e969e-1c45-4411-a894-a8dfb17ba013", "sighting_of_ref": "indicator--fc4cd197-9d37-4e9c-91cc-e1fe140a5edf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--751cb3fd-9855-4a74-b80b-84e135ab688c", "sighting_of_ref": "indicator--25ff6795-d5cf-4bf8-a8a3-2c91f84e151f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06f021e9-e79f-40b5-a8cb-3b52f48baecf", "sighting_of_ref": "indicator--ae5b356b-7f87-4e9b-9830-888ee6d79841", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f5e4771-4186-4f04-8f08-57a6432dc20f", "sighting_of_ref": "indicator--750cf3e9-ccbb-4bc0-9b00-76c765e28561", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b62ee136-5389-4278-a704-3f7df2b0427b", "sighting_of_ref": "indicator--8937cdc9-7328-4c37-a652-be0142c9334f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21d6ab43-5ff9-4e93-99a4-09da49c15d31", "sighting_of_ref": "indicator--2af629ce-d1e5-42ab-8e18-dd7e70a9f68f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb60d113-a6a8-4f20-85d8-0de7ae62af3d", "sighting_of_ref": "indicator--6511e667-961f-4e52-902f-2b10d936be34", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b434bc0-e514-40e4-bb9b-e97c39084740", "sighting_of_ref": "indicator--1799c98b-4b21-4705-bce9-9d2a13ec2186", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fca798b0-4f83-4ab6-8735-0fcd9612366a", "sighting_of_ref": "indicator--f4324014-5cae-4a06-86a5-8b183a6d5ccb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--303cfda5-19f8-48ad-8476-5f978de6a971", "sighting_of_ref": "indicator--50fa6364-d7c4-4f25-bf3c-64c97c74816e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--276bf0df-92a8-4964-8b64-31f6b55a4ce8", "sighting_of_ref": "indicator--c868ca91-4b4b-41bc-b898-b094dda7017a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e34604f7-fe6b-4953-a3eb-8cb732ff7fab", "sighting_of_ref": "indicator--59d5c289-8f4d-479d-b401-20b132f56c52", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--541aab39-4ede-4094-8aa7-d1e053ca9142", "sighting_of_ref": "indicator--969af3cf-cede-4360-864a-89df3385c3de", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45191df4-cefc-4741-85c5-68ef9980038f", "sighting_of_ref": "indicator--f61f3cc2-d6ac-45ec-bc87-a4ae3e5184c3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e913c72-d378-45e6-8de5-cd7803a5c323", "sighting_of_ref": "indicator--e9506710-8a0a-4636-ab72-df7d7c9d5acc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05f23b7e-02e8-4f57-9e7d-4a01c2b6c8fb", "sighting_of_ref": "indicator--24d094ec-7132-4fbc-994f-8f237929806c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d93fc32f-6e97-4bbb-839b-21bd631f6255", "sighting_of_ref": "indicator--3c903cc8-7205-4fa5-91d6-db7be17e2328", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--685f5532-2649-4f33-a0e8-9911105392fb", "sighting_of_ref": "indicator--89768306-eb79-4eed-b021-d331f3fc2de1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b460839f-b353-4f36-ab87-eb4c1632f440", "sighting_of_ref": "indicator--295fa1f7-7ea7-41c4-bf5a-671824274b23", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b14d95c1-83c3-4c74-8912-2bf3ed6ca853", "sighting_of_ref": "indicator--19502bac-f653-4c3a-b970-4cca905cf926", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49fbaa9a-8f56-463f-a38e-9b7c27b205f3", "sighting_of_ref": "indicator--a9f05b40-3eb8-49ae-8171-d2e3fb532859", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aea68d29-ef03-42ea-9f17-11fa7d1a569b", "sighting_of_ref": "indicator--e429d402-0296-46af-9faa-92fe05bfa8ac", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--175e3866-d0b4-4fb3-8594-949478308099", "sighting_of_ref": "indicator--1d38dc0e-a048-46b3-b2fd-072e521c549e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5175573-0b07-4671-afde-4ea4bb7e4482", "sighting_of_ref": "indicator--4994a994-addb-4e13-adf6-a7c17b431f7c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04545b12-6266-4922-8e86-2b6cded3dc05", "sighting_of_ref": "indicator--b6eb4cb7-c29f-42eb-9ffa-6a7834060764", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f047d39c-fc83-41c2-a244-919ff6693daa", "sighting_of_ref": "indicator--62cd2b26-ffe6-49a9-8388-d1ed7070ba31", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69836824-d896-452e-ac80-9439015c6f6b", "sighting_of_ref": "indicator--6a1a5fb9-c1d5-4161-b9ea-b59d845937be", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06fb09eb-462f-4ad3-873a-cf3b42365808", "sighting_of_ref": "indicator--101e62b8-2aea-4fde-bb1a-5d873eecdceb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cff829cf-2b3e-4819-ac5a-89e91ef492db", "sighting_of_ref": "indicator--43586933-325b-4dc6-aa18-5dbc31fb0322", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd2934f0-01ef-4b06-bf0a-dd464697894c", "sighting_of_ref": "indicator--93e60bf3-e319-4ff0-89a2-6150a0b73cf4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--866406e4-8239-42c1-a458-535bd2d8f061", "sighting_of_ref": "indicator--a2e491a6-8d51-4daf-befe-48eda861b54c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02b083aa-2a20-4100-b93d-a8faa5bbb7a0", "sighting_of_ref": "indicator--715b4ee6-6059-476d-b902-e0804a8c4ca4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed42eddb-d67f-49ec-9114-6c2a37025bf7", "sighting_of_ref": "indicator--4a068dad-4657-4cb1-818f-de49810ad195", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6b16e35-5d29-4339-917a-a9e91248b183", "sighting_of_ref": "indicator--bbd56617-d4b9-4538-bff9-0299bd22155a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37b37b88-0ee3-4929-93c9-5e681394dbb7", "sighting_of_ref": "indicator--5926b77c-5ce8-43be-9673-4e2d4c6e7304", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6681cbfd-4ac4-4bbd-9c22-ecb941f07a06", "sighting_of_ref": "indicator--90a99771-51a4-4947-8039-8d4f1d5127eb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbca31d6-704c-4f94-9d8f-60e5b79e2b65", "sighting_of_ref": "indicator--54ddfdd6-82da-49bd-a3e5-ddc5a0f1cc89", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68533ce7-52f2-45ed-a207-3ec97bcbe06a", "sighting_of_ref": "indicator--68eba7ae-3901-4cfd-a043-4a2901924e26", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--001af1d6-6f95-47ba-89cc-0a059b900c89", "sighting_of_ref": "indicator--b4214424-1a2a-4f65-bf4c-22c336033f59", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32cf47b6-e66c-40ce-b28c-4f21daf143cd", "sighting_of_ref": "indicator--6e2107ec-41aa-472c-aedc-5bc6590e464f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01eb560c-8bc9-4995-ab5c-f99fe4c0efa3", "sighting_of_ref": "indicator--2dcf8529-a6a3-4808-a5ee-938cfb5ea3d6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--978fa4be-2add-448e-b45c-65a0854a69c1", "sighting_of_ref": "indicator--30dd54d0-260f-4d76-b725-4f7566dfa43e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3998b390-92c2-49fb-84bb-b46848e0c6b3", "sighting_of_ref": "indicator--af2fe98a-8f51-4cbc-a815-ff3ca7a1f6da", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fab1c83b-667e-4bfc-9628-a096ea236473", "sighting_of_ref": "indicator--b57c57d0-fb5e-4ac7-8c42-ccd7f8faea9f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85366b35-d1cc-4850-b524-a9ca772d45b8", "sighting_of_ref": "indicator--e6686681-ee32-46d4-a384-5e31a143fbcb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f51599c4-4f79-44a7-abd8-6f25b6c140c7", "sighting_of_ref": "indicator--d1318af2-68bb-4f68-936a-c9ffb36a2445", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a00524c5-117e-47e5-8252-2011ad5f127f", "sighting_of_ref": "indicator--ba82e2ac-36bb-4580-b7a0-5f7dfd737f5e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99e28a63-3b82-4020-87e8-d5ef80452de7", "sighting_of_ref": "indicator--81bffc9e-3fdf-4305-83d6-c45dafa89270", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6e0a2ac-c7fb-4d4f-ba69-aaadae8f13eb", "sighting_of_ref": "indicator--52316299-8a01-44c9-b1d2-9a68fdb5752f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a2c448c-a862-4889-8a3a-8fa2dc2bccc5", "sighting_of_ref": "indicator--351f9a39-04c1-4bd4-9d09-8c3aba5cd007", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e847bbdc-4564-4470-b0f9-df6f60a13310", "sighting_of_ref": "indicator--8679c99d-2166-4a27-9bf5-c0c3bdee7562", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf4b871d-834e-45f5-9ab2-9a37e9158beb", "sighting_of_ref": "indicator--dbeb4b16-7e2a-482b-84a4-c8e2b3c835e5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be815c18-d733-4260-ba50-516fea314dff", "sighting_of_ref": "indicator--fe2c4a01-b7a0-4700-902f-f7678c84b4be", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66cd989b-ac56-4307-ad27-360de6ea9db9", "sighting_of_ref": "indicator--425ab5bc-931f-4da4-bbd9-216c62ad9e11", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b5133e2-68b9-480d-8719-cca0c14e92da", "sighting_of_ref": "indicator--987958f4-39f3-4601-80f3-3f34d4599f83", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b7e98eb-c0c0-4d85-9047-842d28f5d2f2", "sighting_of_ref": "indicator--6be73638-1eb0-4bd7-9bab-92877d2f4191", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80620540-8832-460d-94af-5e6c170d010b", "sighting_of_ref": "indicator--4aa073f4-718c-4ed2-b3f0-d79c38c43efd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--045027f8-3be4-44c6-89ca-f0981bb8c10d", "sighting_of_ref": "indicator--b8324c77-a9f0-419d-b27c-b6200b8bcc84", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfdef48e-caec-4939-809f-2ae838132ccc", "sighting_of_ref": "indicator--593d2a1c-5365-43f7-b871-9ba387bbdd99", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b4f100c-714f-4576-9dc7-75ac0626bc5d", "sighting_of_ref": "indicator--06169441-5f44-4ab4-af92-7883a30142dc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70dd25a0-6609-425c-a67e-93cefb21af66", "sighting_of_ref": "indicator--ead91dc4-50fe-4f83-9991-36940fcf7bda", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49a21786-3c3a-4da9-96f4-ae73fea64e0d", "sighting_of_ref": "indicator--ad6cfb50-5dae-480d-98f5-4ed0bdb117e1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c217093-5176-4be3-838b-5d565336d3b5", "sighting_of_ref": "indicator--39e898f0-b74f-45a1-903d-620a472a5dcf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ee15863-c9ff-42d0-a5ff-2383bbe287ab", "sighting_of_ref": "indicator--db1c4d86-0164-46cd-be1f-69d2a073dbe5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1157af21-2a55-42ce-941f-e31e596df2e5", "sighting_of_ref": "indicator--b44b7d5d-866d-4972-abd1-f3af7605b882", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b4b6e71-0e5c-49ca-8d3f-db62eed00e89", "sighting_of_ref": "indicator--0c276abd-d5a4-49b8-b58e-a932a76d35ab", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d491b6e-72f2-4e6e-a5cb-9a331f881859", "sighting_of_ref": "indicator--9780f31f-6c73-4e70-bcf0-87326ea2fe26", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df3793fa-e407-4ab8-b601-c224cc2806c4", "sighting_of_ref": "indicator--acd3a023-99e5-4ead-ab35-056ba03370ef", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9d6904b-73a0-4422-a6ef-ac027b7e3b71", "sighting_of_ref": "indicator--56dffb63-0cbc-4c3d-b4a6-35d2e59bf89f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34d41dbb-fb9c-48df-876c-66cc22fd94e3", "sighting_of_ref": "indicator--dd326cf9-3153-40a1-8cfd-64a3630e6942", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f289e5c-72b8-43d6-b717-e8e9002d3324", "sighting_of_ref": "indicator--b00001c1-7101-40e5-abce-5a47eed949cb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d68b7bd9-f300-4456-aa69-75269793316e", "sighting_of_ref": "indicator--8d90a50a-8948-4af7-8fa0-7d26c732bb55", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--294f217a-025a-4fcf-b4e5-2aa88cd7f7ab", "sighting_of_ref": "indicator--addb4235-9601-4080-86a8-fa57d1ae219f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39de1be2-84e4-4685-85d1-0a592e0fb5eb", "sighting_of_ref": "indicator--92a175d9-966b-44c0-ad7b-d2f84c45fbaa", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ab60e45-2286-443c-bbf0-97a7d58ed2a0", "sighting_of_ref": "indicator--0dd73879-249c-4161-ad9f-9b57bcc14e1f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f85b04f2-ad21-4b4f-ae0d-fc0d08e52478", "sighting_of_ref": "indicator--799a3b18-ce92-4f3b-b796-cc08b01bc6c1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--159b6df2-96d2-4290-a81b-ae51f46e2028", "sighting_of_ref": "indicator--853e3b17-b252-44df-b8ed-bd5fd5f4a697", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be0e8800-78a6-4a05-87ae-76cefd6f6edd", "sighting_of_ref": "indicator--dd27d12a-cf4b-44d1-a0c5-64a669365b52", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c1c8420-b469-47c2-bca9-d2e116470e94", "sighting_of_ref": "indicator--a9e02f12-9b3c-4d2d-9e0c-2b9f0389cb9d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a01e980a-d6b6-42b4-bdd7-4de79b7f66f0", "sighting_of_ref": "indicator--83a05743-476b-4f26-ad10-e611cc61eaac", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--212bf497-2a0d-4370-9b61-39c290b4fab4", "sighting_of_ref": "indicator--0fe271e3-cecb-408b-ae7e-40de2ab85a6b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0929baa6-73fa-4753-aeee-c093e4af371a", "sighting_of_ref": "indicator--d2960ffb-ca6f-4d48-b012-da59a7ec0774", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08cceecc-9aac-4a2c-a27e-d714c91f22d6", "sighting_of_ref": "indicator--66a04b58-a6f1-4807-91bc-b3ad794f48eb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--505159a5-c26a-44c1-9e76-e5e841b8a537", "sighting_of_ref": "indicator--e00448e3-3b1c-4973-a3e9-e2418968a6c3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2abb94f1-0a42-4530-a2a3-1250e3fe84dd", "sighting_of_ref": "indicator--ac4d2fd0-b5e6-4115-8eb5-48f74e2371e7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba3813fa-1e53-486c-bc2b-03bcb35ed6d3", "sighting_of_ref": "indicator--7f179019-1821-4578-a2c3-67fbc70fc71c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef874bc7-cafa-483f-92d9-5d7affb61822", "sighting_of_ref": "indicator--cfe75c03-7797-4452-9525-ef750d71836a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57d8a4ba-2f1c-4d5c-ac7e-f62b4069531f", "sighting_of_ref": "indicator--fc1e10c0-4aac-4d9b-b0a6-3357e0ab0e2a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd1236c1-0591-429e-8a1e-5c220638bbfb", "sighting_of_ref": "indicator--a253a494-784e-406a-b25e-f5dceaa96ae3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2059092-f585-45bb-8e0a-4c864b5b75f5", "sighting_of_ref": "indicator--fb4be809-6081-4faa-9c73-e1a8d9cb94ba", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67a86eac-528d-4e18-b37a-0f5c5a2b8c60", "sighting_of_ref": "indicator--697003d7-8562-488d-896e-cddc3c07561b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2037a82a-7bb0-46f3-aea7-da8a4f354a24", "sighting_of_ref": "indicator--439dd39f-120c-483b-8e46-8a15fcc13c0b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e67e811-c7a5-4fd4-a80a-e3b9c441f700", "sighting_of_ref": "indicator--2ff735cd-3820-4398-97c7-8f253cbc793b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7729ac1-8c96-4f02-a462-0671084e0fe2", "sighting_of_ref": "indicator--37035992-7af3-4870-aa96-c65e74c42f8f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fe507cb-fe23-41e1-b169-25a764d3d752", "sighting_of_ref": "indicator--5c420ec9-84f8-47ca-a2ee-ccff35f896d3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34fdae8c-8747-4245-80a3-e1422fed7316", "sighting_of_ref": "indicator--7f964cf6-b9b6-445b-a371-b9b617b60509", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c7d7f0b-552d-4fd9-9c7f-32ee608fce4c", "sighting_of_ref": "indicator--5f058d5d-2146-47d2-8e24-999098330411", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24b3f131-93fc-407b-b4c1-9d1af9c4e72c", "sighting_of_ref": "indicator--5c97f83d-6592-401b-848f-93437b0f4f41", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7df3108e-428f-4037-bed7-c5a50fbebd15", "sighting_of_ref": "indicator--b11bdb20-dad7-4138-99dd-fd02acf74e9f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12bdfced-5948-4311-a97f-561937c7660f", "sighting_of_ref": "indicator--7539d660-b3c2-4f74-815d-347c8c89f42e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a801fd3-0d32-4fed-a386-32e00cfff814", "sighting_of_ref": "indicator--93ccf7ed-1d95-4c3b-9309-d71165d011b4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60cb3080-f35c-485c-a742-c2c3b48bf668", "sighting_of_ref": "indicator--ac5a77a0-dad0-4a0f-8a88-0f18374ddbd4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0194b22-8f63-4a61-bbfa-32a04e254741", "sighting_of_ref": "indicator--8223327f-8f60-446c-bc45-046eebc58bca", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb470a43-3fc7-405e-a0b5-5e0560aa65c0", "sighting_of_ref": "indicator--f14f020d-8f84-44a1-a3a0-ef96f28983e3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61696daf-8cf2-47a6-80fd-b80d63dc5c4d", "sighting_of_ref": "indicator--d0bc9eb0-051c-458e-881c-57e8b3fb681f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83e53385-e6f3-420d-8f34-88b8bef99105", "sighting_of_ref": "indicator--db3396e5-94d7-4cf4-9af8-3ca394d20d32", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d82a5c3e-49c7-4309-ad20-ef36a42b9b7a", "sighting_of_ref": "indicator--ed4f2e3d-b9c5-4bb5-b765-b6dc76771489", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe22a88c-a11b-4d10-b0a6-d5ddadbdb553", "sighting_of_ref": "indicator--55523b50-c9ec-46ca-94cf-764de8237b1b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f20509d-d636-4ec3-9786-f5cb2fa7085e", "sighting_of_ref": "indicator--d742e3c6-da27-4366-9128-fcf62d2719d7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--184d7dd8-1106-438c-94d1-f031791a5d06", "sighting_of_ref": "indicator--4e24d73e-6472-4256-a953-0c218324fa8c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--704c77c6-7a42-44b4-8dc3-7e8b2c723b07", "sighting_of_ref": "indicator--f05f329a-a921-498f-9037-6b6dfc21883a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d66655b-1f15-435f-917d-6f1a43206bea", "sighting_of_ref": "indicator--08cba809-a248-4ddb-a93d-8e94384a1b0a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23bd1b12-53e4-4a92-9041-3c718f4fe166", "sighting_of_ref": "indicator--0008132e-1012-450d-940e-b9d9ec77336a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9167ce2-b5a0-4dbd-a6f8-f555b26a22fb", "sighting_of_ref": "indicator--3a0f00f0-2c6b-4bed-8f7e-461178eab10b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb581b2b-74fd-486a-a167-f1598864924a", "sighting_of_ref": "indicator--c108c93f-3921-44cb-b258-2b1ff1a81fe6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c46ec5e8-5c4d-4f2d-9a22-81965cbdc6e1", "sighting_of_ref": "indicator--263364b1-62ec-4de5-a82a-c66ce4c2e132", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--370c0a17-49b5-47e3-a71e-9bae758e7906", "sighting_of_ref": "indicator--7c713eb4-7fc6-48ea-9faa-e764743fe413", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bc80b7c-40b4-4a3f-9805-548d5554955e", "sighting_of_ref": "indicator--313e7184-0a4c-4b78-9807-a6df84008eac", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0706a177-9f22-45bb-9e98-2f0f8cc734a9", "sighting_of_ref": "indicator--5fcd4457-4d65-4025-8e23-a332f55a0476", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26c4c77d-c691-4025-8b3f-5ad3781a2c81", "sighting_of_ref": "indicator--4c797618-d58c-40a3-a029-080447ed2331", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90012d0d-51c1-4371-8338-93862006e6cc", "sighting_of_ref": "indicator--1af08553-fe89-4d06-bf5d-c6ff92c290c4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7ed4b84-286c-401c-b022-d7a974a2141c", "sighting_of_ref": "indicator--d38aa218-2937-4dd7-9d3b-537765bec2f7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efbbb8b1-0a05-4bfb-8d14-6605171b5c92", "sighting_of_ref": "indicator--588fecd6-700e-4900-aa8c-5096b083776a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3c4c01a-f263-4772-aecc-7754e0fc183c", "sighting_of_ref": "indicator--4c8aa941-22f4-49bc-ae94-579931ef709c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1760fd2c-6c5b-464c-b6df-584ae4dd0ce9", "sighting_of_ref": "indicator--a8755958-cc83-45e2-b195-af23ee0829a7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6157990-ff0b-4048-a1fd-bb6c887ea267", "sighting_of_ref": "indicator--f72b2c7d-6844-4f58-bd89-e651f0e80219", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--190440b9-7537-4483-9e17-d1db5ca0178b", "sighting_of_ref": "indicator--31db2d18-d65d-440c-ae93-777e364ed26d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b4ea562-623e-4493-bd2d-d79bb39a4e13", "sighting_of_ref": "indicator--fdf05383-046d-434f-a8b1-c45c93a0e68e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6add40e0-ca85-452a-a100-76b0e61c7eca", "sighting_of_ref": "indicator--4c4e0441-6844-423b-a5c4-ac498aff1366", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd6d653b-530f-4fec-8356-edb21c46e95a", "sighting_of_ref": "indicator--e7d2ce05-6990-42ea-90e0-5a23b63a8d1f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--761c6e6c-5529-4297-8c5c-8a32bceec116", "sighting_of_ref": "indicator--a3dd3415-add0-477f-aee8-6ca430f8c744", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd5b0c2c-0130-42c6-aa26-28e993263719", "sighting_of_ref": "indicator--44e4cf8f-962f-4eaa-9a7d-05bd0789ec61", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--478ae67d-0b23-4992-ad5d-b8551551d7e6", "sighting_of_ref": "indicator--c3b2b3b1-f66e-4053-9eb1-c9c906201433", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f250070e-bf59-4c6b-8d53-3d2448165618", "sighting_of_ref": "indicator--b11c7eaf-2123-4251-b3e6-3a10a7d60031", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f37ffda2-121a-4743-bfa3-5804fc177c25", "sighting_of_ref": "indicator--060d9071-483f-4ed9-b966-95539959643f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85df4212-9bc1-4bf4-ab56-f6ec0927840d", "sighting_of_ref": "indicator--e365230d-155c-445c-a004-ccadf6f27695", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23efb573-731f-4fce-b600-cdc6bbb4a462", "sighting_of_ref": "indicator--6ca80cb7-93d0-429f-b530-c839dee42d7f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84115fcf-b0d5-4f15-a7ab-32a706fc1b3f", "sighting_of_ref": "indicator--6616d599-fc4e-4a5d-b53c-e2ff9360bc49", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff4983ea-94da-479f-b8b1-92540967b710", "sighting_of_ref": "indicator--76125703-aad5-4a84-8e29-ee113c89def9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f8c98cd-ccf7-42b0-aacd-0f3e04464663", "sighting_of_ref": "indicator--d593f19a-2256-4331-9d77-e7b59800971f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08490ed5-fa17-4fb5-97f9-175b97c6f528", "sighting_of_ref": "indicator--c5202801-bdea-471e-9c50-9a387e5710c5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6df6106-469a-4200-8acf-95ec1c64f03e", "sighting_of_ref": "indicator--9770d508-cfd1-485f-88fc-13d85dd5d193", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bec64f6-6d99-4560-b108-eee90158c771", "sighting_of_ref": "indicator--a686164a-cc58-4b1f-aa66-13268398c907", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fea96212-f904-4ba9-8dc2-4adcd36c6530", "sighting_of_ref": "indicator--6251fff2-588e-4f7c-8ab2-9be853a35c1b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ee24c7e-22c9-4097-8b35-680e5da56992", "sighting_of_ref": "indicator--91dec1fe-5371-4bdc-8f13-83886cad34ea", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41044d27-d0e2-41b1-9545-c2f6881ac2ee", "sighting_of_ref": "indicator--09d6f628-5f84-42e9-943e-9a2769447c78", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a39af990-9aed-4241-a04d-5ccf3f0014b3", "sighting_of_ref": "indicator--be8802c9-d42a-49b7-a093-e04cf7a2d958", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--723cc874-9975-4151-a6be-3fab4c795f07", "sighting_of_ref": "indicator--d3222e62-e6ad-48ee-96a8-5dcd1ad847fe", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2569ee5-09ce-46c1-ba89-1b0d7330b34b", "sighting_of_ref": "indicator--c4f082e3-50d5-4535-9290-e34886a2aa11", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e2be32d-7cc8-4703-97db-fb7d145a06e3", "sighting_of_ref": "indicator--629e9be9-ce71-4e98-82ec-7ccb3941b459", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd096304-c887-4300-aff9-0f115c8ca599", "sighting_of_ref": "indicator--dd6129ca-91de-4192-8838-656d3511f40b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--760194ff-4d42-450d-bbff-bb0e4bd5ac43", "sighting_of_ref": "indicator--cdbc0562-ee4e-4bd2-b139-531affb46954", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f0de1b6-ec32-4ddc-b2d6-6c3f5af60f1c", "sighting_of_ref": "indicator--1d749059-4612-450b-a6a0-5f0e5964c4e1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99c1e350-1cd5-4c8d-bccb-02ce005fff64", "sighting_of_ref": "indicator--6f80519d-55cd-4dc8-839b-5e339d6a2ba3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--def0d26f-e79a-4254-8b73-e8887050d581", "sighting_of_ref": "indicator--a491fc75-c438-42aa-ace7-ff52d18e0579", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5b244c3-63d0-465e-9fc3-bdf9c5f7e214", "sighting_of_ref": "indicator--1c909094-ed0b-4201-bd26-c131f46a189a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f4ba00e-3ef3-40fe-82de-281cfbca3427", "sighting_of_ref": "indicator--b085e8c8-ce94-4c27-b788-9f8200e30b3f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35d8dbb3-cfd6-40d9-b9a5-8b031806a141", "sighting_of_ref": "indicator--185bb718-1b4c-466b-8fcd-91911015975f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcc29144-280a-4744-83b9-c4a9e6d17f6a", "sighting_of_ref": "indicator--9490cbc0-7f54-43b1-9603-5242a9953446", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1354f90f-0464-4440-914a-db8e45e4dc38", "sighting_of_ref": "indicator--619cd57f-0dd5-443d-9f58-29eabfbc79b8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3c3d43b-d3ba-45bb-ba2b-94c511294d15", "sighting_of_ref": "indicator--5c31a268-f864-494d-aa13-10954edd4f0d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99dad1f9-818d-4c9c-8338-fc104fcfd3cd", "sighting_of_ref": "indicator--d85a0ae2-9a7d-4237-b99e-a316124bc8e1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b814c198-2267-42bd-872a-169090302c33", "sighting_of_ref": "indicator--ef5174fc-318d-4a32-933f-384d67b41684", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35629c7e-80b3-4301-9c06-c906cf6456f8", "sighting_of_ref": "indicator--abf7e752-9b98-41bf-bd5f-78d90f605be6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ab92fb1-bee4-43a0-a218-5e808c55fbc8", "sighting_of_ref": "indicator--50977fd7-7117-48d5-83e2-2d05c9a0e340", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a484c41d-3c1d-4043-9660-73c5979878d3", "sighting_of_ref": "indicator--c64e24e8-3bf7-4161-9361-a411eadc2e3c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--604823f5-765e-430a-8fb6-3b4f3120936e", "sighting_of_ref": "indicator--55f3d57f-1b00-4f29-bd67-1bec8ac97a70", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f5a603e-216f-462d-aa45-07e0b9d81eee", "sighting_of_ref": "indicator--566b6f66-ecd9-4095-ad31-e93461387636", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e818693-702b-46f7-9b43-980e52621792", "sighting_of_ref": "indicator--aeb0cb7f-e766-45a1-9b3a-451aaa0328ce", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aa347ad-8d53-4b17-99d4-34943dd475f6", "sighting_of_ref": "indicator--c2099361-ad88-4744-904d-e226a4f79cd0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35d35a50-45fb-4324-9bc0-95944e71e565", "sighting_of_ref": "indicator--4dc3671f-4fa0-414a-a760-aa012c69c9eb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91f6391e-178b-4614-ad75-e9386c1c7794", "sighting_of_ref": "indicator--9a12f8db-1077-49fa-b31f-f22bdca51044", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33185cc3-87f9-4bf1-b4e4-9fc7d3905bb0", "sighting_of_ref": "indicator--7fefc0ff-a23c-45e1-93d7-c0ece7b820c6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe03e811-6617-4510-81fb-bd01d13f760f", "sighting_of_ref": "indicator--bbd0a3de-c9ab-4a99-9989-165483287497", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e08d341a-d8b8-495c-a58b-6f41186536da", "sighting_of_ref": "indicator--5c67742d-af8a-44b0-b723-eb934ae67cee", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39a1c570-137f-481b-b142-8dfe03b0deed", "sighting_of_ref": "indicator--e0a349a9-572b-44ae-9250-c88d6ba4397e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2f88a44-b4c9-450c-b79d-c056928fc12d", "sighting_of_ref": "indicator--b5dfd2a7-80e6-479b-ab23-223a40d601f2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b522154-6017-48e0-a76f-dffdde75bde4", "sighting_of_ref": "indicator--ee6a3512-6807-46b2-adfd-4e9c01ed230c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae60ad0c-c470-441a-8b1c-67b380f36c7b", "sighting_of_ref": "indicator--b6cf4cfa-cd46-4acb-a8d9-61e547219ecc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4da6d9a-6e2a-4827-a2db-6ed40226ca06", "sighting_of_ref": "indicator--c8fcaf0b-c63a-416c-a58c-3a3bb37f3847", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a2d5247-1444-4aec-be0e-7995d21986d4", "sighting_of_ref": "indicator--dad2eb07-0432-497e-8f35-a730c6f76d73", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c92d1c2-f88e-49cd-a663-31d63053f3d0", "sighting_of_ref": "indicator--871d961c-504a-4c65-9837-f1a2e04f8761", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d833919-dac4-4b0c-b6e4-76b85bfed9dd", "sighting_of_ref": "indicator--5b2843ad-4806-4c07-a365-073a6b84244e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00825385-0192-4313-9af4-2c2df31fd781", "sighting_of_ref": "indicator--5417d8a0-1cc2-40e1-b482-222e66626cd0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaa97ab2-ce38-4857-bb5b-2e27cde85cd2", "sighting_of_ref": "indicator--ef1ecfe9-2104-423e-9f21-717f218ae880", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c39630db-2496-4704-a5dc-58f846c278b0", "sighting_of_ref": "indicator--a73c7d12-1654-43d6-950b-1430ad281364", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc39701e-9120-4039-a97f-ab1d29ca0159", "sighting_of_ref": "indicator--e7d0bc65-8f42-44c5-ac89-1917def7e576", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--601d8202-8091-4162-ba61-0563db34406d", "sighting_of_ref": "indicator--23218ba4-c233-4229-af6b-28ba64f92de9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a767252e-2274-457a-a488-ebc588f6d4d5", "sighting_of_ref": "indicator--c260cf06-f1b3-4a11-8a74-38510f9b50fc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcd90ae2-d2c3-4679-9217-ced604abcc4a", "sighting_of_ref": "indicator--30253f7d-8dff-44c5-821b-42739af90018", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4db86ce7-e252-4a09-9bef-f6b694d22094", "sighting_of_ref": "indicator--2a011554-4f02-4e96-ba98-9444d5aade79", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e650629e-f7cc-4b09-84cf-0e7a6d797de5", "sighting_of_ref": "indicator--4f9c956d-c8f1-48c0-8427-097840d21825", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ece0211-8a1f-4c0a-9bf8-ad080e3b38a0", "sighting_of_ref": "indicator--ba2afc74-83f3-46a2-9ae9-a9c4bfb6a5fc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae65caaf-cd58-4407-8cf9-d4119e697140", "sighting_of_ref": "indicator--e2fbd675-e9f1-40c1-bbfa-b42fdbe74c1d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--984a6df2-7738-454f-8e12-82ecd29fd566", "sighting_of_ref": "indicator--3e05577b-beb7-4328-b600-320dfee24df4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76dac7e0-5ebb-453c-b9ab-418c9d0363d7", "sighting_of_ref": "indicator--a409f506-b141-4841-83f8-1655d3b8f0dc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e192753-ee6b-408e-94c6-f270c6b9b310", "sighting_of_ref": "indicator--f6ee3031-75b0-459f-8858-9214f3751929", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2507d8b-fc74-4437-98e7-15ac86f32741", "sighting_of_ref": "indicator--0f2bfbae-3649-440b-8940-b74c7037daf2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a6b4934-dbf2-45b5-960a-a8d886f1e1ac", "sighting_of_ref": "indicator--1dd1cfb1-ba7a-400e-ba05-8d8260ed13a7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f81914b-e3a5-4c6b-922b-bed6c8026028", "sighting_of_ref": "indicator--f1402305-9f64-4568-81dd-6f92c6e421fd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8af6a8d-2920-44ff-b88c-0d73186c24b9", "sighting_of_ref": "indicator--94d0e364-7048-4efc-bbc7-5114c8bffb91", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25249b32-6e2d-43e6-af9b-aba7022965b3", "sighting_of_ref": "indicator--df798ec2-83ef-43c6-8a2e-a6f7faaafdec", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11fc5342-0137-40d4-8b62-64170fc263cc", "sighting_of_ref": "indicator--aba7a9f4-7297-4fd9-9099-6527274c5b19", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14a0e841-a54f-436d-8cec-468fe95f4646", "sighting_of_ref": "indicator--db7af443-47b1-4ebf-9c42-250f47877b57", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76e0767d-1fce-4053-bc70-13415b596a2a", "sighting_of_ref": "indicator--947e7359-e0ef-4d95-81cb-5b73f5f0ab00", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88ed508f-d551-4b14-9768-1a86f958704e", "sighting_of_ref": "indicator--74a909c4-3302-4ba8-bfa8-f2a6e3095250", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d123b3a4-4ba9-47ff-a973-1eac7ccf8ac4", "sighting_of_ref": "indicator--7165993e-6707-4b3f-912e-5ac18b596801", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c8440af-018c-4fe5-adeb-75b06d2d18ae", "sighting_of_ref": "indicator--425cc185-3211-495b-92a3-d2276cc13a4b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05d16fcd-9f0e-47d6-bf79-ebfbe054110b", "sighting_of_ref": "indicator--a0f44ddd-2856-4e87-9a2a-510e84a3123d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--926ab1c8-f6cd-4981-b9e1-07e8d0e88394", "sighting_of_ref": "indicator--17b68d47-c145-4e3d-832a-e545c511bbae", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24c15b1f-63a1-440f-bdea-5e981c318957", "sighting_of_ref": "indicator--7982b6c5-08ff-436b-869d-be97cb0f8cd6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b155d34f-c914-4cbc-92ce-a90f4339f54e", "sighting_of_ref": "indicator--5d1e479e-f66e-4791-b80e-88da2b1ca4ee", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fd02636-26a9-4a22-adf8-4fba167df604", "sighting_of_ref": "indicator--35634f60-fb89-4b55-89e7-869fada9270d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58c47650-e4e1-4957-8b1a-4d48ecccde1e", "sighting_of_ref": "indicator--c1b936c9-d4f7-4551-9f0d-db090000621f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0541e213-7a9d-4e86-a499-02ef6d1cfee1", "sighting_of_ref": "indicator--fbb8967d-d639-4ce6-bc33-ae3da80594e3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0a0c0a4-8295-49eb-807e-94a0f78503d0", "sighting_of_ref": "indicator--179e06dd-91a4-4608-9102-517211bf9b28", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c953c8af-4aed-4c86-b3ad-3ef844387db1", "sighting_of_ref": "indicator--e38bb5c9-f039-4874-b9cc-14df166070a6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecb95a21-f234-4908-a30a-1d3901b73537", "sighting_of_ref": "indicator--3d14158a-57a0-4789-84b2-02efcbfa7d03", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52551c1c-f4fa-412e-bae2-7bfb7df76001", "sighting_of_ref": "indicator--fd12dd84-c074-450c-ad2a-123c961ece12", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--336454d5-2ca1-4cad-9b3d-158f74d886a5", "sighting_of_ref": "indicator--b26afe2e-25d7-435c-a827-cac30e721a58", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fc2bf91-c02c-4dae-89b0-ef9eb28165b6", "sighting_of_ref": "indicator--4445e8f7-a1fa-4a17-a27c-8b6ffdeaa48c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42e2db10-1d79-4c77-a921-f95793fa6b6a", "sighting_of_ref": "indicator--587d2bbe-f338-4924-ac90-ed9eb114b2d5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93f18126-ab82-44a8-8d7a-bb11dd240524", "sighting_of_ref": "indicator--102845cd-c8f4-48d9-8689-ceba6a4c96f1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--018efb8c-0e54-445b-a667-d9c804153959", "sighting_of_ref": "indicator--33189a35-4cf6-4b58-b237-6d66c7ef26a8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--545cd8ed-e9b4-468c-9c45-c0bb63e68935", "sighting_of_ref": "indicator--062e9fdc-2db1-4c77-8b3b-7f6a288295e7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c35ee91c-7799-44a3-8ead-d6bd5c73edb8", "sighting_of_ref": "indicator--e9667461-acf2-4d9a-8741-3b6ce082e43b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bc14be6-da62-442c-a2c8-8f3f05395edc", "sighting_of_ref": "indicator--811b1b5b-1a9c-4d3f-ae5a-5edbdfd395ea", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7301843-c842-49c8-9c04-d56b69f08130", "sighting_of_ref": "indicator--cc317082-c210-4c00-8e83-04036390bd67", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce7bea4a-4473-428b-8190-5d290764ba61", "sighting_of_ref": "indicator--28039ca5-d803-45a7-b645-c52455fcc245", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c52f6a75-fff5-4b10-9c2b-bb869034d189", "sighting_of_ref": "indicator--e841aa46-65a0-4dc4-a8dc-d66547345881", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5102d570-a013-4af0-b154-ec101feba0c8", "sighting_of_ref": "indicator--e4417ed5-e084-49e5-9c08-0cd59730063a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--018ed886-0369-4f84-ab04-f93cd4aaef49", "sighting_of_ref": "indicator--21985d0d-3896-47b1-81d9-ffa390eb0b45", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c9c1320-5331-4a9e-b5f7-6c18870a0198", "sighting_of_ref": "indicator--63d448b2-e817-44ec-86c7-86c8a9fd5bf5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ff13108-d1d8-472e-9900-27beaeae4c46", "sighting_of_ref": "indicator--b4f65a7b-a896-42aa-9390-e475057207e9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3579ec6-2ab2-43cc-be06-030fd70af528", "sighting_of_ref": "indicator--6ee4fb6f-9ed7-4dc6-ba3d-f97bccdbfd1a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84f01453-5d49-4717-91ec-108da52976e5", "sighting_of_ref": "indicator--35073cfe-649b-462c-a57b-e6e4c3a3cd6d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35138d9e-15b0-40fd-85c2-e666b7109eb7", "sighting_of_ref": "indicator--9f1000a8-8ed4-4605-b795-5de27bc4bb5c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4012d1f0-4074-44ad-a040-506b11e28d4d", "sighting_of_ref": "indicator--7b1591ac-5dae-4fb0-9e26-9df5558032e0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb6733a5-cab6-488b-b01e-958bd693ba8e", "sighting_of_ref": "indicator--af7a62a9-d473-44e1-9b84-5a973b837918", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d4d46c9-083a-4a34-a9dc-d4f0e28a612d", "sighting_of_ref": "indicator--e7f971be-5c56-4e32-9331-3265a6b8b379", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a579d5e8-a72c-43ad-a52f-e5dd0931d956", "sighting_of_ref": "indicator--a3b40bfc-2ba1-4fa0-8dbe-86fb3fc6ea28", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f518eaa8-74b9-4fd6-a347-4f17ad04828b", "sighting_of_ref": "indicator--80f7ccbf-a941-4cfe-84ea-2b1dca09e11c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fab9ce1b-3a85-4b80-a5c9-1f0b2a6da033", "sighting_of_ref": "indicator--d8dc8f4e-7521-478b-a7ca-61053e8941d8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--213197b6-16f4-4159-a275-9905a8f134b8", "sighting_of_ref": "indicator--923c9b26-3612-457e-aefd-657be37e8b16", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--328e82a8-0089-4609-b6e6-ac4f26945cec", "sighting_of_ref": "indicator--5d01c034-dff8-4c84-83ca-eddb0bacec49", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--131a73ad-aa90-4317-85f6-5d92dedec309", "sighting_of_ref": "indicator--223ab007-ae97-43e1-b624-2c2b10dd653c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--868f5368-6318-4021-9e96-f5de4dec9a24", "sighting_of_ref": "indicator--fa4b6c7a-6c38-4a90-b120-858bc6c32cce", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d89566a-7c51-4d6c-835d-f2ec67e77ada", "sighting_of_ref": "indicator--290d2b28-471b-4783-bc48-1e5ab60e1559", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--636c890d-77f0-4e2c-89b3-a26dd045d8bd", "sighting_of_ref": "indicator--6afe3a6d-2a61-4909-aea5-9932e96aa8ea", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ac8d281-e103-406b-b8fc-6ba1379fdaad", "sighting_of_ref": "indicator--b1919149-3f3a-4d99-8cd4-f96758fe1e8f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bd1c5f3-2bd1-4fe8-be16-c85571eadc71", "sighting_of_ref": "indicator--ca109584-2e13-4527-aabb-6ef48e580cc3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94459e2e-949b-464f-a3f0-a25086768ad0", "sighting_of_ref": "indicator--fbd06da2-7f48-499c-b4bf-00cebbc75908", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc3fc107-b4e6-43a5-9b58-4c1cd4419ad6", "sighting_of_ref": "indicator--fb67fbdf-628f-4a2f-b97a-7c0f8b076edf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d69c7f7f-d26d-43d3-ae6a-6e6d4d00c139", "sighting_of_ref": "indicator--e09e504e-e7f9-450f-b41c-585ee6306d44", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53e7bd59-3372-4225-af00-56b29850a893", "sighting_of_ref": "indicator--fdc66de8-2819-4e0b-81de-86acf24f7ea9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--505b8a7e-4e97-466d-87c6-dcd5ed5164f9", "sighting_of_ref": "indicator--2ba656e3-802a-4053-9de4-829230533b79", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf424849-ea42-49bf-b415-e33aa9c81df9", "sighting_of_ref": "indicator--04217500-d084-4221-b573-df1a32149c34", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18e11ec0-889c-4d8a-a062-bfa6ebffeac1", "sighting_of_ref": "indicator--7ea1d49f-768d-4b4a-8765-536f0ed43ce7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bac62b5-39ae-432f-86b8-f1c0e1162ca4", "sighting_of_ref": "indicator--f75bfaa2-a97e-4794-bcb4-22fbddf8adef", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--500703fd-470b-499b-8531-98f1d6366c5e", "sighting_of_ref": "indicator--a8f74c53-b2ca-494d-8740-86a05cd0302d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f05b38ca-8985-4fd5-9529-24f6f72af384", "sighting_of_ref": "indicator--b078ffd3-e33a-4444-ba84-f0ca05480824", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--121fb32c-14e2-48f9-b3bf-caf5012c6688", "sighting_of_ref": "indicator--5cbe11e2-c13f-4775-9a23-4d580ebc3109", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--182ee72f-640f-415d-be22-8b6ca5377d0f", "sighting_of_ref": "indicator--cf05dec5-b6f8-4a4d-b09c-4ac366b6c24b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--141aca10-fb05-4e1e-ac86-8b1db2cfe829", "sighting_of_ref": "indicator--7011cbf3-4623-443e-8aa5-9f4a243f76d6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e42ab768-92b5-4b59-b307-1a05d686dfa8", "sighting_of_ref": "indicator--13186aff-6e38-4f22-9eb5-d28b94b8e5a1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75ad2e5d-9de2-42d2-bc90-fffd78bd048a", "sighting_of_ref": "indicator--67a3339a-fec9-498a-872d-9138b4c13350", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59af0978-0f55-492f-9f95-27c1ec13e5d5", "sighting_of_ref": "indicator--b5fc1791-611b-4ca5-8e96-2deacd000aaf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55f205e3-2b00-4be7-9a8a-30f30bcad872", "sighting_of_ref": "indicator--098859fa-82af-4834-807d-0d03fe665e32", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64b12fa4-1bcc-4582-b21a-b3e39adbd793", "sighting_of_ref": "indicator--838523e3-4c78-4f17-809f-7b7888b22b5b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--024edc9f-5131-4153-ac99-3826ca40fd3f", "sighting_of_ref": "indicator--478602d9-c4e4-4f08-ac56-eebe2c72128f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e567617-4ec1-4d5f-8cdc-1a4bdb0b8d59", "sighting_of_ref": "indicator--fe576e51-5433-4571-ba03-34074915f4a1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5c72aa2-93e5-48e5-9f73-5d3359e6bec8", "sighting_of_ref": "indicator--1782815b-bc69-49c8-8e3c-91ea59712fda", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8089147b-2e3e-448d-8dd5-5f465b2b6c3e", "sighting_of_ref": "indicator--0fb0985c-e432-4f91-9624-385f1e96c3f3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f8464f7-b92b-4468-9e86-9cd58729ae95", "sighting_of_ref": "indicator--a7b6d708-1ca1-433c-81a6-984bc085cd5f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--720ea46e-9496-4217-bfc1-f759cea64337", "sighting_of_ref": "indicator--fb9fa1b0-5b55-413f-a1b4-0cb12724247a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba1b3f5f-2e38-4e47-bacb-8cd36171e9eb", "sighting_of_ref": "indicator--96c9db34-0f13-4904-a848-5fc68ce04eec", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be9c7a84-72bf-4d28-b0a4-540e5259e6d2", "sighting_of_ref": "indicator--ad940f90-551f-438f-a045-2da2644f6b71", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9f2d2c9-03e8-4ed6-8aaa-3e2807daf7b4", "sighting_of_ref": "indicator--f66a5ecd-1f64-429a-9ce2-77c04c3e4499", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44d3ee5c-a3fb-4339-9cf7-8871f5dc7d9c", "sighting_of_ref": "indicator--89d93a1f-d0bb-4372-b13d-7980be314a57", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00e58eb9-015c-4115-813b-24068b15df34", "sighting_of_ref": "indicator--f64c052b-1e60-4f32-9277-2bd03c0c1f5c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1118439-5dbe-4ec6-b5fd-8911e7410be9", "sighting_of_ref": "indicator--c9f1cbea-7d3a-4fb4-a3fd-99ad1d695740", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70a95f96-3382-404b-bb0f-96434a09804a", "sighting_of_ref": "indicator--ac46fa53-24de-4af6-8ec2-df10e22c6ac5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f089926-e953-4b05-a430-d482de1af78f", "sighting_of_ref": "indicator--5ff39432-1d61-478a-babe-8232c913564b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d2e4613-6013-46d0-acb5-1cdd03aa57b3", "sighting_of_ref": "indicator--20df93bc-3b6f-4cdf-b03d-e720bdff9aa6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad1406af-3613-4c5d-9c74-5f81660118b0", "sighting_of_ref": "indicator--c45c5725-8d95-4611-840d-e17c31fa01b8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3a7a895-16e4-4ed4-96be-05af457cea96", "sighting_of_ref": "indicator--720dbd85-1bb9-453b-8f52-da0e699a603b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ebebb92-0d18-46c4-aeb1-a68187a06a9a", "sighting_of_ref": "indicator--ad2e326d-5333-4c25-b508-46e7fb06e908", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c5c9182-2f26-4117-bbff-75d875a88996", "sighting_of_ref": "indicator--8efecaba-4f4e-4eb4-b18b-be7d9a06290c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17e2148c-ce46-4801-bd7b-f426ba4787b1", "sighting_of_ref": "indicator--9bc4b9d5-3cc2-492a-9a6c-a33b7dd82853", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a23b24fc-49fb-4c7f-a42b-3e14540d25ec", "sighting_of_ref": "indicator--0bd72b13-f252-4146-a112-e23d8d549d83", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e80bb890-6e7a-481e-8ddc-38bed8b4582a", "sighting_of_ref": "indicator--bf6a7eb8-46d4-4645-aa9d-897cbff4fed9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9839b86-a375-4d60-b288-d296119ef9a4", "sighting_of_ref": "indicator--7d3f53c1-30a5-4f93-a224-21c6a26f7521", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--126daaa1-edb0-4498-aeb7-5f1005d759f7", "sighting_of_ref": "indicator--b2d8b8cc-ba8e-4ee2-a998-f7e083302834", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2729080-e2c0-4329-82e6-e11c5c6105b1", "sighting_of_ref": "indicator--4fc1754b-7af7-4bc9-b80c-c8cb81cf9ead", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3af3b792-4f3e-44d5-bd37-104fd964f60a", "sighting_of_ref": "indicator--d0168faa-f9f5-4c28-b399-2044fbf9cd13", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03afe7c4-0361-4870-a3c6-f6a9ea3e4f05", "sighting_of_ref": "indicator--f3eff6c5-4d80-4250-aea1-83156515644d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4086dcf1-ddcc-4740-afbb-e470797bf48d", "sighting_of_ref": "indicator--fe167564-2aaf-47b0-95c9-e809f4448fb6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6333e66a-f43b-4b32-ada2-13d0c947b7b0", "sighting_of_ref": "indicator--e55cb278-6fef-4181-bcde-a22ee04728e1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eda1abb-2a8a-4a90-b1b0-f7d3d9e6f4a6", "sighting_of_ref": "indicator--8e596e5e-2d62-462e-a66b-7789eebb318a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--745c51d0-ca84-4137-9f02-3c3848cbdeba", "sighting_of_ref": "indicator--8248f850-15f9-494b-8139-d2c8c6c5b3d8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84349b0d-f72f-4c8b-b7b0-3f2d6d2ea3f3", "sighting_of_ref": "indicator--9f0ac88a-dea4-4b00-9459-bf217b5921b9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f3bc4be-23e5-49f3-9a0b-e71c09044ecd", "sighting_of_ref": "indicator--197ef5ed-4de3-4003-b84f-720bb71b3380", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf668428-79ea-43c9-a470-e3b8937ed493", "sighting_of_ref": "indicator--4dbf779c-5724-4811-aa45-ad308ff3a93c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7501270-5868-4f3b-99f3-6c30d00d8ec8", "sighting_of_ref": "indicator--104d563c-82e5-42c7-8e49-f74a8d6418cc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b8b18da-6f7b-43eb-808b-119073fe2724", "sighting_of_ref": "indicator--e7eca756-8c71-4754-814f-76d731cd8b1b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cdb5292-718e-46d6-ac26-1939a86b332f", "sighting_of_ref": "indicator--c13c1841-8882-4dd1-b669-6bd56f01af5f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdae3a21-1ec2-4409-ab7d-8ad31c688210", "sighting_of_ref": "indicator--4fe12eeb-ca64-4fab-872c-7fb76b89905d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b48329a-0e46-48f5-b02d-9d424de86158", "sighting_of_ref": "indicator--a640b8db-1423-4ad6-96f8-3dbb3ea16417", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70d3b164-204c-4cb7-8ab5-e9cb7647a9eb", "sighting_of_ref": "indicator--322d824d-e176-4857-ad9d-7418b07b6cbb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c206466-730f-4846-ad07-459251d05725", "sighting_of_ref": "indicator--3b4cc5c3-edbc-4897-b10d-d092dfff07a1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3e46e9e-4d90-4f1f-a27e-73f8b51dadb9", "sighting_of_ref": "indicator--3baed8a1-ccba-48fe-9005-12282b0259e2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ffc23f3-8122-48a7-81db-19fc59af05c8", "sighting_of_ref": "indicator--b2d8afe2-f598-4439-a5b1-84cf7e83c036", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2243b8c8-3589-41d2-b29d-d62fe52fab76", "sighting_of_ref": "indicator--4a8ef7de-b256-4197-b1ac-3c2c94be6c54", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ed66837-f90c-4704-830a-52575e7cf4f1", "sighting_of_ref": "indicator--0f0019df-5d41-4cfc-9173-8e6ec4a739d1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--420e992e-733b-496e-a917-e30ef93ebc25", "sighting_of_ref": "indicator--eaa32fb4-b0cd-4291-b117-dbef6b23bbcb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df0cfd48-baa2-4a25-82a8-cae144f8bb07", "sighting_of_ref": "indicator--d22e9a38-e1b7-4d93-a102-24d1688d068f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d7ac289-3e7e-4a68-92a2-4ebd80e3c1e0", "sighting_of_ref": "indicator--30c02b6b-6e88-4f5c-80a1-85e1d462c886", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f74eaf91-5b44-446b-a01b-4d8b9d229fab", "sighting_of_ref": "indicator--1daee4bd-cf1b-446f-98c4-e1630c899c9f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f756dbad-44f8-4448-a3a5-7d2cdf55436e", "sighting_of_ref": "indicator--f9fa4ce5-6c15-4f5f-8b94-4ccdf2bcbcfc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa564f5d-58c5-4d2c-8c57-5e766b6f3006", "sighting_of_ref": "indicator--1b78da36-7d1d-4734-ad1d-4cbdedbec644", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3852882-98f2-461d-96dc-93647983c5ad", "sighting_of_ref": "indicator--334b47cb-5650-4bbe-8279-7baed2b55e4a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--544fcb37-bafd-45f7-856b-ba5593c86277", "sighting_of_ref": "indicator--0da3a03e-ef0b-4199-ac29-e0f2170bc331", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--058267df-2a7f-405b-8bbc-248f0017f091", "sighting_of_ref": "indicator--6112022d-9312-4f6c-a54f-a9fde12268b1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--972e2bdb-106c-4983-8ab4-8cad4ec0d9d5", "sighting_of_ref": "indicator--f7f2d36c-c142-4caf-9bf0-4e8bed3d6a1d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d32ce249-f129-4200-aac9-22abf694a299", "sighting_of_ref": "indicator--87fea6a5-3c31-461a-8fd9-87af0409409f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03d55676-4367-4131-a121-abd1495a8902", "sighting_of_ref": "indicator--1fe66ba0-27dd-4fda-9048-c15c87633b5c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5369720c-145c-432d-8d38-e807300081ed", "sighting_of_ref": "indicator--81dd58ba-84b0-4557-908b-4eba7cc4b9eb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90dcc533-9ac0-4576-b1ec-874230f227f4", "sighting_of_ref": "indicator--61ec0e60-b3ac-4766-8c64-3ff42cbf8d83", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a515df2-5b7e-4e77-82c5-4398a8748069", "sighting_of_ref": "indicator--a5c3ef56-aa33-45f6-8886-0a5c6d25efa4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dca97fa-4995-49a9-9f7f-9c2c50ceefc2", "sighting_of_ref": "indicator--ab29a155-355f-45e7-b55e-02e54ae9e35b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--151a7e79-1bbe-4fb8-896e-c85a54e77b5c", "sighting_of_ref": "indicator--ccd072c1-5b1c-4b55-8ab2-73a23660375b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f882e5c4-98ce-4587-bf1c-c4afddea23de", "sighting_of_ref": "indicator--f34aca5a-b7db-44f3-b94e-d9a7e0f80b71", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be66e3b1-8873-4a50-ac4e-e2a2d86df07c", "sighting_of_ref": "indicator--5eb57d15-4429-445b-9341-e03bd2439dc7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--305b5f66-ef0c-41ed-8a52-96d739443d84", "sighting_of_ref": "indicator--1295feb5-44b8-4915-89f0-e2991a08a310", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a33e9ce-fbfe-4f7c-a066-108af0fa9ba6", "sighting_of_ref": "indicator--803fb9d2-0e12-40e8-849d-7770a0df8dbb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13c5e1c1-b7ac-4dd2-b3dd-2ac7984fe78d", "sighting_of_ref": "indicator--e7bd0c4e-914a-49d0-9ea6-8d2b0e8c1bf1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--138831ec-c620-4e20-87ec-ccadf9b7cb45", "sighting_of_ref": "indicator--2a056197-53ff-4bc7-a690-fbda50396b63", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd428f68-f1fe-4f13-96ce-01371afb207a", "sighting_of_ref": "indicator--a18a725d-3c28-498b-93b0-fb0959d0f644", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43421ca1-54a0-477e-b1fa-2904d11551f5", "sighting_of_ref": "indicator--b75cd1b0-0af0-4e42-a509-74d4d2999f92", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fab6667c-ee4a-4ad3-8241-988a929506a9", "sighting_of_ref": "indicator--a07975e3-f950-4733-b5fa-816031358ef9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a16cbf2-f2ef-452b-84e2-ba7d665213b3", "sighting_of_ref": "indicator--2a49fcc6-a495-460b-a22e-8c95886b8002", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcebb178-5388-442d-b0e0-bbc6dde65251", "sighting_of_ref": "indicator--c15b75c3-ae7f-4f00-8f24-fa2604cd972a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84d3ff3e-7aad-4c6f-b283-ae7f5f044f31", "sighting_of_ref": "indicator--f1467197-f086-4a6e-af98-08ee4a78c4f0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02871764-8de4-4475-8af6-f821a7f6abfc", "sighting_of_ref": "indicator--72820e5c-5be8-4a6c-a9b0-bedf1240c204", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b1a823a-9618-422e-8298-e680334e3ecb", "sighting_of_ref": "indicator--0dd3311d-f563-4279-9b2f-9ccd60d7a48f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c095099-5934-49d6-93c1-cc04c4eed256", "sighting_of_ref": "indicator--e88df09b-3eab-4e90-9fa0-89bc4a3cceab", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e854f498-b809-4ae4-8af8-b09701cf6ea8", "sighting_of_ref": "indicator--23cd77f7-c340-44ae-820e-9eff7151fa8c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a537bce0-f3a6-496f-94bf-35ca1028b995", "sighting_of_ref": "indicator--1feff941-70e9-486d-9c91-12916c3c1e9c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35b38c81-ada4-42ef-b778-719e303c07df", "sighting_of_ref": "indicator--c6ad9a22-3be4-47c0-82da-f2296b0b30d7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7902651-ff78-43e2-86bb-2ee359323b81", "sighting_of_ref": "indicator--21f39a53-9983-404d-932d-9716a3a43f11", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05ab2285-5035-490c-9e79-9eda06d0c002", "sighting_of_ref": "indicator--02bb8c1e-12b7-4f79-9f83-1bb085653c26", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cfd8a99-14a2-42ec-a496-3b05f17ba0f3", "sighting_of_ref": "indicator--8d9a3b09-e5f6-4693-a784-c6f63db20924", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e474f0a-f34a-464b-8a76-8ebd20b807df", "sighting_of_ref": "indicator--9697fbc5-e06c-4bc1-97c3-17ea912ccc51", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6da55373-9a95-4b86-bdda-28bd9a6968f6", "sighting_of_ref": "indicator--a1ea19f1-d181-4e99-9f8f-ac1a40ce7b5a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffcbe579-6984-4ee7-8051-924cf22c0e13", "sighting_of_ref": "indicator--791ef747-c3d7-4a11-b02d-79a133edb184", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a3ba289-d944-44b7-a8c8-dd429859d077", "sighting_of_ref": "indicator--94e74beb-d04a-41fa-8b3f-aedc32b56d6a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a2234bc-ce2c-47db-b264-72c885f9ef4e", "sighting_of_ref": "indicator--f24905ec-a274-4e51-96d0-6244913babd0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9552809b-c4b8-4672-b525-529a46fe1bba", "sighting_of_ref": "indicator--c4e83cd3-deb4-40f1-bfd1-466d010c046f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e224d92-e323-479c-b618-9b8cf936edd8", "sighting_of_ref": "indicator--13602e21-5187-4468-9502-ce28892e4d56", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0907da8-c0d4-4a0a-afef-20334a8027fe", "sighting_of_ref": "indicator--a4f9257b-2678-482b-8d8c-fe9bde855f42", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37d4e8ce-e029-4faf-992e-7c08ed7f1784", "sighting_of_ref": "indicator--8392a708-731a-4a5c-994b-df947ce5e29b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83eab53b-4e0f-40b1-8e77-7dc60cea2a07", "sighting_of_ref": "indicator--bcb44480-c5c3-4322-aca4-b5924a38b0a2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f12680e-ef22-4e9d-9819-e819c7cb3df4", "sighting_of_ref": "indicator--2fd06c76-9886-46e2-a50d-1522018e36a8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8e3dab0-1edb-427a-8393-c94040e52c04", "sighting_of_ref": "indicator--f1a51c44-43c4-4eda-86c0-9052275bab65", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29c63c82-2a96-4e37-b15f-8629dd45823d", "sighting_of_ref": "indicator--5b78b049-3d68-404c-b0c2-9689d7439272", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2c65503-2800-446c-a9f1-bc66d1ad46b1", "sighting_of_ref": "indicator--32032470-d576-435e-a7ca-5e8a53d367f9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--171d86c9-b886-4774-b611-3a95b6b08fe1", "sighting_of_ref": "indicator--373bc4ee-1b65-4afa-91a8-b59f88232c0b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--700ecfdb-b616-4d66-9e87-3b803f48230c", "sighting_of_ref": "indicator--853b99c4-e8fe-4f25-ae91-65572c291601", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--365ed916-d88c-421c-90a6-5bcea63176e4", "sighting_of_ref": "indicator--92fd2475-dc4c-410d-b52b-688071ef76f3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93745105-6f12-4819-a4f3-254a541870b4", "sighting_of_ref": "indicator--926a4c0d-de3b-4e7c-8460-5b5b430093fd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44af32e1-4ba3-44ca-972a-da2ad5c84be7", "sighting_of_ref": "indicator--d637f08b-949c-4c92-8fb8-bab288fdbca1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccead0a2-9b77-4bf2-9213-4e4f5757430d", "sighting_of_ref": "indicator--75f9c886-3430-4af3-9cf8-112420421b52", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2e29092-c61f-4579-975e-4de4a0e54cb6", "sighting_of_ref": "indicator--acb0c454-2a9b-4bf2-b27c-a3e0d5f60943", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39992fe7-d202-46a9-8e6c-2b9dc1c78a58", "sighting_of_ref": "indicator--eca16d6f-b662-4947-926a-4c15d74c81ea", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c8a724c-7d41-424c-b79e-61d7f7777761", "sighting_of_ref": "indicator--f9eca8e2-7c55-462d-a220-6d1738bcfdff", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d1795a4-e0d0-4e32-8915-bff3c401bd24", "sighting_of_ref": "indicator--5ce8df7a-6c68-4c1a-b1a1-ea75b9788696", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23693afb-ad41-4a3e-b110-c80754bf3875", "sighting_of_ref": "indicator--ab0df928-73cf-49c1-8490-5d02d8aa5013", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24a33e10-e0a2-42a5-a3b2-e063104ebd6a", "sighting_of_ref": "indicator--cf0436b7-acd6-400f-8cd0-fc45435ed536", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6840e6ef-8333-4439-b8f2-a4a8bb92e7fd", "sighting_of_ref": "indicator--1ead0ec9-4edf-4873-b8ac-5023b5b8887a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fce92d9c-28b1-4f99-a71d-08af5e72ddda", "sighting_of_ref": "indicator--7c8198ab-ea5a-42e8-8544-ba4226051426", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dca1213-a192-492d-96af-06508f27450e", "sighting_of_ref": "indicator--80b8e1e5-a182-4690-b291-2b0cb0b2d064", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--724d099b-be6e-463b-afc5-0d8cde2d88ab", "sighting_of_ref": "indicator--d1034f77-61db-4464-9a3d-e1a44ef163dd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--436814b8-15f2-406e-8089-a5ebb0969073", "sighting_of_ref": "indicator--b24bd063-aa45-4484-b458-3a9bdef5bc6d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a705820-68c8-4611-938f-c3407494a0d6", "sighting_of_ref": "indicator--67bed9bf-14eb-431d-aa44-c9f0ddda2f5c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbf9b647-3fa6-47c5-986b-9ef8795915af", "sighting_of_ref": "indicator--aabe2814-96e5-4df8-b86c-469ffcdf28fe", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23e429e3-afc9-4d7e-814b-0dc7e9428184", "sighting_of_ref": "indicator--bc42e895-fb6e-44df-8acd-5150a42dc7fb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a873def3-252f-41be-aa4e-1f6bde51426c", "sighting_of_ref": "indicator--5c964fac-5807-4ff8-ba55-af4d2c9758fc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c32d73fb-97e2-4927-9335-dff32d920209", "sighting_of_ref": "indicator--4a175d00-5709-4c84-9d47-2e2d8e5a7e4e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf30d16e-7e8a-44f6-abe9-811bc5551e2b", "sighting_of_ref": "indicator--2fca32ab-2ac2-46df-9505-299efd22e6b2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ec5d08f-7031-43ab-a92a-edc900de7b72", "sighting_of_ref": "indicator--83503b6c-c6f4-4abb-a03c-a6e4e54719ba", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--222338a1-7881-465c-ad28-cf5310562a93", "sighting_of_ref": "indicator--b12baea4-c1fd-421b-91e4-9cac9b325bf2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40d85cd8-c5f7-4480-b303-423f521e2118", "sighting_of_ref": "indicator--eb582316-d261-474c-8a98-4cd0c0ceecae", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e511258-1bac-4da4-a068-952a716844f1", "sighting_of_ref": "indicator--02091891-6cad-40a4-b7b4-0a040d091c99", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--535e1d30-88ef-4b1e-84b7-61a98cfe25c5", "sighting_of_ref": "indicator--10c15673-1be4-421f-9968-cda90fd47dd4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e098ce9d-27ac-47bf-9744-d6306f65eaa2", "sighting_of_ref": "indicator--26db6f4e-481b-4c05-a646-ec5fde72c599", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7cb1d0d-0f2d-4369-bb26-22da3b2daaa8", "sighting_of_ref": "indicator--41a28eda-5f67-4bcf-80d7-7cfb86affe40", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--717c323a-1723-4078-abff-3b89de3f673b", "sighting_of_ref": "indicator--b13f325a-b2eb-4d6a-8148-c2df23aaa878", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03d2026e-e3bb-414f-9091-3c3953e5d193", "sighting_of_ref": "indicator--c26cd157-7ede-4557-8911-24efe34c6353", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3818a825-6a66-4c77-9a1c-5a2fdda3a76b", "sighting_of_ref": "indicator--f8e69c6b-f732-4e6b-a147-72e33f44ce08", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eabfc5a-2339-4ace-b3a1-8e87b582cb97", "sighting_of_ref": "indicator--54c44e5c-fa9f-4de4-943a-8aa9aaba22d8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d25c3973-94d3-410c-a7b4-a326028650ba", "sighting_of_ref": "indicator--1ea468dc-ea14-47b9-9a59-fe2441460847", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dd09650-9a58-40f0-8824-65366195bf15", "sighting_of_ref": "indicator--f7dee493-a9a7-4351-aa96-49fd1c08ce48", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c676e0fe-8835-4b61-a46b-4408af626855", "sighting_of_ref": "indicator--bd812f8e-ae35-4462-890d-673d14209b7c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a9223fd-e5cf-4058-bc15-d303a6404a28", "sighting_of_ref": "indicator--1c65ab07-6bc8-4df1-8146-6c8e0db788da", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deb8553b-6e95-40ac-a55f-d6290a0136d6", "sighting_of_ref": "indicator--fa1ad1b4-f95d-465d-8111-e4eaeacb17f9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10c65ab4-0c53-43a9-9061-1af506e88394", "sighting_of_ref": "indicator--a3f1856c-b23c-413c-8810-e6ae64fb665c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dd42c4a-6ea5-4f50-95aa-4cf4d547d162", "sighting_of_ref": "indicator--c1b2d2cc-6e80-4953-8e46-f8c0fdc4feae", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da079021-d70b-41f1-8d8b-f7854d543d33", "sighting_of_ref": "indicator--45d69fe7-f4a7-467e-8c57-f3bdb5f3c467", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ba1217f-21ff-4622-aa15-20c0dcd8020d", "sighting_of_ref": "indicator--7826ada4-70dc-419e-9cda-a183a9877a68", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a28a459-0e7c-4a99-afd3-80a0ec0d6de6", "sighting_of_ref": "indicator--466c8281-e81e-49bf-866f-97987310df71", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a477ce2-2c1e-4e56-8952-b15ff3287677", "sighting_of_ref": "indicator--9b32d6f4-5b52-4ec3-af65-44862b5536e5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c9ed044-41b3-40f3-9495-90c9c197fc5c", "sighting_of_ref": "indicator--bcda3a5d-ebaf-46b2-aba4-c34f9b83d0e0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0028a44a-071b-4842-b177-248054d74c84", "sighting_of_ref": "indicator--f19afced-03b7-4f0a-b908-a51897c4565a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c115048e-25c4-47eb-b68a-26c864d581aa", "sighting_of_ref": "indicator--0d44d124-b130-442a-93c0-23dcce62922c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--814381ef-5050-4b9b-92ca-bdf3f82613e8", "sighting_of_ref": "indicator--8ff7fb52-14b9-4817-95a4-4d0717ea4de2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e5170e2-94ba-44a0-b77a-beabecc04b41", "sighting_of_ref": "indicator--4f31c538-037c-477e-ac73-1f770e51240d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be5a393d-1ec6-48ff-af8d-4a58b1b31fd5", "sighting_of_ref": "indicator--b97271e7-7f78-4da8-9b5f-fd36d933764e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b91981e6-7b6a-426f-9ccb-e9a70e6ff42e", "sighting_of_ref": "indicator--e9c73229-6233-4393-8e4b-e3065bd808cc", "where_sighted_refs": ["location--c8625a69-b7e6-4cad-99d8-76632a875c20"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6db76e3-2010-47b4-a4be-889aea251bdb", "sighting_of_ref": "indicator--157b1875-871d-4fba-afca-096c76c581bd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88837e03-8585-430f-b1d4-3e216d52ec36", "sighting_of_ref": "indicator--68c57a84-37e6-4b93-961b-b0082b555af3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b64294d-0e5f-4f6f-9a5f-55c8bacce3a4", "sighting_of_ref": "indicator--f44ffd37-c6ca-44d2-bfa5-0a20120d7257", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e2a014f-21d7-4b9f-a703-0720369588cd", "sighting_of_ref": "indicator--abacc809-94df-42a6-9538-7addf2a378a0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df9df28b-3930-4fbf-a329-5049fddd1e84", "sighting_of_ref": "indicator--f25d8b03-4a3a-4aa0-91b6-73ab7bbaa05d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7288bae6-0d92-4b63-97ed-504d50373c29", "sighting_of_ref": "indicator--c9611b65-4647-46d3-83e8-72a1478d99db", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59966be5-28b6-46f1-ae5a-8bd0e03eccc6", "sighting_of_ref": "indicator--84468d5c-8d77-44a9-bd32-dcb67b1b4dc6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--269414a7-6651-48db-a6fb-13499250a736", "sighting_of_ref": "indicator--482e4ab2-4bcd-46b9-b3a0-38bf528d63d2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcb8fe2e-b732-42f5-8af7-88b0cdec65a7", "sighting_of_ref": "indicator--099da05a-0578-4602-b56c-649e7cb72841", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e39b5e4b-c585-47e6-a424-19c423c9b442", "sighting_of_ref": "indicator--37732e98-591f-4229-a5aa-1bb31f45c670", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a195643-b54b-42f0-b38f-d0b3e1f70d9a", "sighting_of_ref": "indicator--d4a39c01-307e-4fe9-abb7-4cc0b5e9045a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1748b720-830d-4d1a-84f8-7c9abf1b6239", "sighting_of_ref": "indicator--849e4f20-fced-44b8-b826-3c2a854e4069", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67c01132-66b9-463f-a6b0-63fc96add54a", "sighting_of_ref": "indicator--0d912374-2a9b-4193-8691-99dd481ce26f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbd02427-89a0-4b86-9546-df0ee3fe14ba", "sighting_of_ref": "indicator--29bfebe1-1433-4f29-8b94-adba00f83465", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9311844-1c4e-42d7-b233-dfc411e4035e", "sighting_of_ref": "indicator--af262124-6f44-4876-9a45-a7fb157cad31", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cee6a074-d5bf-42bd-896d-bbfce293109e", "sighting_of_ref": "indicator--00ac4659-6019-4b1a-b788-7ad185eaa97c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb81f1b8-9332-45d2-8081-f5cc4b98ef3e", "sighting_of_ref": "indicator--2d2e870e-1bf5-48c9-9894-9a688b5dc9ee", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec3fdc99-08ec-43a7-91e0-435918bf6a6a", "sighting_of_ref": "indicator--333fe4c0-d759-4bd2-a064-0af560cea5c6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cf2b25f-6610-4d50-b61c-f39e00acfcfa", "sighting_of_ref": "indicator--333fe4c0-d759-4bd2-a064-0af560cea5c6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a55a0c7a-2496-41a9-9996-bb1c6d007e2c", "sighting_of_ref": "indicator--eb3dc6f1-64c5-454d-83d8-0b607a2b1d2f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--604d6398-6ff8-47a4-9203-16e58dde2ac4", "sighting_of_ref": "indicator--7d33450c-197a-4c22-a491-3036f3f24862", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e91326c9-c80e-4eaa-9289-06815f3a8e20", "sighting_of_ref": "indicator--7df897de-56e6-404b-88d8-5343ceebc4ad", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62b3ebe8-6036-4dd1-8488-862705549542", "sighting_of_ref": "indicator--bee32ebc-092f-43a8-a3eb-241a6360b87d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a018a0ed-367f-479c-a5c2-77f7c6bfbeb5", "sighting_of_ref": "indicator--f14f13de-4b8d-4372-8a16-1d1e0a106906", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--942daac7-0ec2-4159-a0a9-d4272e0f8639", "sighting_of_ref": "indicator--27b1110e-e8db-47bd-86fa-3a02ddec01c1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fb3eeae-ef36-4af7-b156-783a4849793d", "sighting_of_ref": "indicator--15a2da3f-c229-42ea-be05-228098de2c54", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00a09c71-b4f1-4530-9f4d-36e804a8578a", "sighting_of_ref": "indicator--1a3df7f0-c30b-4ac7-a5bf-6f0038aa346b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--745b3df5-0d22-437f-af74-b1bbf6bc7132", "sighting_of_ref": "indicator--cf482533-6573-4681-88b5-c594e8ceb221", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fea5899-0c27-4b77-a6e5-0173d1c6fee9", "sighting_of_ref": "indicator--43d9887c-ffcd-4434-a8a3-70f13eccee6b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ecaa0d6-4bbc-4d1f-af1d-b3f8bb7870f7", "sighting_of_ref": "indicator--c9d2f069-9d96-4f3e-860f-62d6b9c11487", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4ca6ce6-22ad-4a6f-a1a5-d135d272b772", "sighting_of_ref": "indicator--2a49d981-83a0-4189-8411-9d7cbc850e0a", "where_sighted_refs": ["location--c8625a69-b7e6-4cad-99d8-76632a875c20"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9de65a03-09d5-478f-ab14-67cb7059b1de", "sighting_of_ref": "indicator--ba26908c-adb7-4dde-8cb9-9d8bb4fc74e1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--265125c9-f738-4d36-b3c3-9c2b1a863a2b", "sighting_of_ref": "indicator--461f2faf-cbc5-4452-a094-42a1be1f103d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b52876f2-f1c4-4279-8171-875f2070b9a0", "sighting_of_ref": "indicator--ea68646d-dd6f-45e8-9473-593315e8a7ee", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70e74bdf-0cad-4dc8-a24e-2ba08ed25e54", "sighting_of_ref": "indicator--34f95cc1-41c0-443a-9c79-72b6bebfb921", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--957b01d7-708b-47f7-b146-04a3e9fcff8e", "sighting_of_ref": "indicator--ec6bd907-7f02-4334-b350-5ece04e456d2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a84ec89-f923-4db1-974b-f4bf019d132c", "sighting_of_ref": "indicator--7d863306-b6a6-465c-a9e9-1d156dd14fe2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1f20be8-cdcf-4391-b268-d055b4e687a9", "sighting_of_ref": "indicator--2f89d6e4-9497-43aa-bf91-e02a8d5c969e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20b20e74-0724-4fa0-8b6a-9d69cad2f7da", "sighting_of_ref": "indicator--4cae73b5-19d4-4d57-a871-59ee15df4e5b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54da279b-c6ef-47c8-97c5-7957dfcfe892", "sighting_of_ref": "indicator--b6325463-ca05-4bbe-a8e4-a0116061d711", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--925bee29-603b-4bfa-a34b-3e69dd1f38bc", "sighting_of_ref": "indicator--4438160b-694e-428f-be42-8470e5275f1c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c19f475c-6cf3-4e04-92ca-7f69c900af90", "sighting_of_ref": "indicator--518d5161-d500-49b6-9b1b-b7f87a8480ee", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee978013-a5fe-412f-b64e-beb4acd63e1a", "sighting_of_ref": "indicator--710c84aa-cb8c-4375-b29b-b41be023dc8f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a3e7ca8-80ef-4b94-98ed-f65ce75ddeba", "sighting_of_ref": "indicator--c5533d9f-0691-4622-8263-26362a8479ce", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd871b89-49df-48bc-b76c-8f318dafef20", "sighting_of_ref": "indicator--a6d29f3c-3c09-4910-b820-2a9ea4a8bbf9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9632099-ccd8-48c9-83e7-ee8faeb85cab", "sighting_of_ref": "indicator--7ebed609-cb31-48e0-b481-a382ba2e4dee", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--380973c4-2d02-40eb-8ab8-54c72b79e819", "sighting_of_ref": "indicator--40db187e-d1cc-497c-b9c3-cb37cbfc95a8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6019799-b69c-4b8c-aa52-b900e47e6d38", "sighting_of_ref": "indicator--a8ee8e03-d476-4b9f-b4e1-aa150c2e558b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78a47355-0732-43aa-a5bd-4797724d734e", "sighting_of_ref": "indicator--e6152e4f-4352-4e41-bbec-549be1b5bab0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83bc34f0-6de9-43a5-ac9c-8f87422c2733", "sighting_of_ref": "indicator--b9820a57-d8d3-4433-a011-8d5a7e47d137", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2a4fc20-dfdf-4e46-b5d1-f916365591e9", "sighting_of_ref": "indicator--3d5a14aa-bfb8-45a6-883b-df9ab2600232", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d88eaae6-c25a-4039-9d88-78d9fd7db904", "sighting_of_ref": "indicator--6658abc9-5b35-489b-a5d4-af71a6f2a02f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31c05b9c-f532-4b02-910f-1c107800ed86", "sighting_of_ref": "indicator--d3bfbe89-f26f-4b0c-b1d9-cf97f793525f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5e35b18-cbb8-47d4-ba55-cd064b2e9d90", "sighting_of_ref": "indicator--026d97d7-3c5f-465a-bbd9-acf41c6ce4cb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5aa0057-af5c-4b57-99c7-98cadf28f9ad", "sighting_of_ref": "indicator--63b60f4e-30f7-4fbd-960b-bbeedd9288ec", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2d968b5-880e-48ed-9d92-2471b3bc16d4", "sighting_of_ref": "indicator--5ef287d7-662e-4c43-a284-f36384568f39", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e29dcbdd-15ca-43a4-913f-38dc7d88b339", "sighting_of_ref": "indicator--4ba2fd49-4bbd-4765-91bb-1a76e6aa7acb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6618c06b-e25a-4fc9-8af9-bae42e053696", "sighting_of_ref": "indicator--8d78a775-e16e-495b-9f23-3117d0a76760", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba39ce8d-2b96-4748-baa1-882af7552c16", "sighting_of_ref": "indicator--ae7369d4-9f94-498f-9d22-77ed37a3f32b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82783a86-39f1-436b-b083-e830f7eea7d0", "sighting_of_ref": "indicator--d68b8631-5ed1-4863-b4de-d1437a13c3a3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8c9d0ce-7151-49c1-b250-e4ac5e394cc0", "sighting_of_ref": "indicator--32031c65-7d2b-4eb9-bd4a-dfcc9aab3d5d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33f90b04-88bb-484e-ade9-697ef28edd0a", "sighting_of_ref": "indicator--8f3cca60-ccbb-4b29-a5d3-21f9cbee6cf7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--382b53a8-76c4-4290-ada8-32b699cdb40d", "sighting_of_ref": "indicator--85e239d7-627a-4960-83bd-19437ab6eef1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce9d3418-c694-404d-9e8e-8a71dcea2e9d", "sighting_of_ref": "indicator--cbeb3130-49e9-4a20-a830-b278183dea8b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcef3319-565f-490b-94b9-06dc4ae6cf18", "sighting_of_ref": "indicator--c7b949e1-6278-456f-9852-2a016c081a4a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e35a846-763b-43b3-b88e-47bc997bd7a4", "sighting_of_ref": "indicator--2a2b9666-9510-46d4-9240-6d2e5e734ec6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab3cb05e-9ae5-4ad0-a924-5bb720431893", "sighting_of_ref": "indicator--5cf896bf-6a05-4a37-b930-1f8c5eb12742", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e67ac6fc-2fa0-47d6-b601-382f83fd81aa", "sighting_of_ref": "indicator--02bba528-aded-4fc9-ac4a-84788bde57f1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50bb2408-af6f-4b1d-b5cc-0579cb467487", "sighting_of_ref": "indicator--ea7d83a8-d295-4eab-9f50-98ac023087ee", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eff9b5b-999a-46d2-bfba-6d33b7f7807d", "sighting_of_ref": "indicator--ced02a32-f1dc-4b00-8de3-89289a24efc8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bb5ce00-b208-4ddb-89b2-4ebf54baf55d", "sighting_of_ref": "indicator--0a112e09-091e-4bc5-9565-b214cb82d300", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf07ed95-b10e-4964-8dae-5c793d1990e8", "sighting_of_ref": "indicator--dcb0a390-c359-4221-8dd0-17f6a99acb73", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1b36d0f-7c7e-473b-9b4b-00b19343e395", "sighting_of_ref": "indicator--fb51b66f-3a5c-4205-b3f1-71133d5f11aa", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1556f191-ff79-4b9b-90e5-cf56be0c4e4a", "sighting_of_ref": "indicator--96a9a6b5-a2f6-4989-977f-ce7b8373b472", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56a9654f-b650-448d-abae-47f1fa837b6e", "sighting_of_ref": "indicator--b504d841-e729-42c2-8cda-16c6f4620abe", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78e64176-c6a4-425d-9c2b-e7bdb4ec8a33", "sighting_of_ref": "indicator--cd1ce07b-6c3e-44dc-ae56-02e6d46bc0ea", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec963fa2-7be9-4714-b42c-f6850f73e855", "sighting_of_ref": "indicator--b2b83179-d78a-4f09-bb8d-1210d735d31c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c1daaa6-c33e-4650-9ee4-2674983abaea", "sighting_of_ref": "indicator--c5a3f4a4-5822-4578-a215-52c178dee8b4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--496917a2-cbd8-4475-97d5-c6700baad899", "sighting_of_ref": "indicator--34bcc7aa-c90f-4c0e-81a4-b8acfb57500c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e853802-deb6-40d4-bf39-4c04cd499c45", "sighting_of_ref": "indicator--055723fe-3ba3-46c1-a202-b0cf840913f7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5f524f5-ab31-4d79-89e1-e1761925f359", "sighting_of_ref": "indicator--38342e98-8140-4156-b24e-2cda209b8c62", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdcf49c8-a394-4fcf-9720-4f55b39a17c3", "sighting_of_ref": "indicator--20f6f22d-2c29-4055-80ac-9e7d4d04be93", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de9cb6ea-7690-4144-a3fd-5e3664834ae4", "sighting_of_ref": "indicator--a9016922-6790-4918-a4df-4b132b5c2ee5", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c00388a-f44c-4147-bb4d-ba34edae805e", "sighting_of_ref": "indicator--00e8231c-cdc7-4681-b5f0-24a077e2d0ce", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63894f0a-1241-41e6-ad73-18c47469a062", "sighting_of_ref": "indicator--1e73ed18-0c59-475a-84a3-37758280729d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6d6c647-8c12-42b7-b12a-0078ee2b524a", "sighting_of_ref": "indicator--b94ae50e-4e06-4383-9dc6-56765c0f9f97", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1717ab0-6a76-42ae-b3ff-135c39f88877", "sighting_of_ref": "indicator--1b3375a7-48a0-4107-bbb0-5d3657c3e124", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c84f3386-83b0-41e6-bba3-da8ddf71ab69", "sighting_of_ref": "indicator--5b1d5a00-68aa-4eb4-a270-0944f3c75857", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b58a469-7a01-40c9-87d7-2fedf3606cd0", "sighting_of_ref": "indicator--ffd8ac6b-773c-4ff8-9eff-2adafcb03d3a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fa79579-c3a0-42f3-96df-6c80a21a1ef5", "sighting_of_ref": "indicator--f79962f5-c295-4a91-a5e9-c8492a9befc5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20f1ec08-38cf-48ca-8b0f-a47fb5b95511", "sighting_of_ref": "indicator--9de73d91-322f-4fa4-8c86-09fedce65171", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66005a9b-2095-4a97-8f74-6422c39cca8a", "sighting_of_ref": "indicator--53a34583-06cc-415e-949e-3a345d4c0da5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9777f27c-e757-4a0e-a3fb-e07b8c395c62", "sighting_of_ref": "indicator--0578f92a-d9a6-4c33-a972-e03c3d121975", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3b04d7a-0f3d-4f1b-9461-9fcf1ea361d7", "sighting_of_ref": "indicator--a934d59c-2d51-47a2-a876-914b5cfd8fe7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee809ddf-90fe-49e4-8bec-de0ac8165073", "sighting_of_ref": "indicator--ddf0d965-deef-44f0-b643-b5b623346909", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15f69936-35e0-4944-80a4-784d309abaa9", "sighting_of_ref": "indicator--28a4a0e0-cf5f-47f2-a624-60719a65c5b2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fe8b14d-21fa-40ee-85a0-eb56784bac20", "sighting_of_ref": "indicator--48650825-cb29-4c64-9f6c-57b447aeac92", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94738617-6797-47f3-9170-0001ad848e6e", "sighting_of_ref": "indicator--8d7ad4e4-6e3a-4fba-a2ef-16a12f3c1135", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02418f2e-5858-4216-a59d-eac8dc86a37a", "sighting_of_ref": "indicator--fcc9a5c0-8f83-45a2-ac38-4d3aad0e4c52", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83b7a4a2-f3a9-427b-b975-695efedd0fb2", "sighting_of_ref": "indicator--fcc9a5c0-8f83-45a2-ac38-4d3aad0e4c52", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bef50aba-5562-4cc2-8967-340c7f250d72", "sighting_of_ref": "indicator--6c21acaf-baab-448c-9ab6-5629052fe90d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00882727-e087-450d-ae30-567677f3d909", "sighting_of_ref": "indicator--35b2dd26-fd34-4d27-b3e0-871bcda7832c", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06e121ad-044a-43d8-babc-8ce0db0ad447", "sighting_of_ref": "indicator--4bc8c5a1-c2ad-40c5-81a3-1b1680d8501d", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3831a8c-593d-41c1-a9c7-10d20d658d68", "sighting_of_ref": "indicator--803d6418-09d0-4e66-b286-185c9da32b3f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e421179-4492-4144-98c8-a8604e8f3b0e", "sighting_of_ref": "indicator--c28e289a-43d7-49d8-bfc1-30cd1f1bf2b2", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1593b9c4-1dcb-4905-931c-dd6c995c5ccf", "sighting_of_ref": "indicator--c28e289a-43d7-49d8-bfc1-30cd1f1bf2b2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--269e42d8-fe93-413d-b415-df1ee76fbcfb", "sighting_of_ref": "indicator--8cd7eae5-e4c8-4aeb-9a68-ca24a07b3866", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15724c66-9caf-48aa-91f7-9a86bbcd4d2d", "sighting_of_ref": "indicator--f026bd37-9890-46cb-93e5-af3204cefdf8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1d0ef6e-2ed0-4f7a-b1b4-37ad685c90b5", "sighting_of_ref": "indicator--9cbf3407-a14e-4103-bf94-621a40f50909", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2cf4c4a-63ab-406e-aa26-cb873f111c95", "sighting_of_ref": "indicator--3a48e076-b0a5-466a-a162-6c0a1f76ad9d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c793952-5a99-4198-b118-aaeebb1bf66d", "sighting_of_ref": "indicator--1c485469-2f1e-4abf-9cf5-01f5bb26791c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab4b2d37-db3b-41e4-9285-5869166d0387", "sighting_of_ref": "indicator--ce5ad88e-0eca-4b84-a26b-ae9d3df7bebb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8139dc1-12d2-4829-8dd0-82d1998f3dd9", "sighting_of_ref": "indicator--1ce905ab-7834-4d35-a387-1cf1139634a7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13ae2547-9501-4ee4-9c1e-d3ca7571ccf6", "sighting_of_ref": "indicator--c7b65ded-c7fd-4096-b7fb-399e8a00241e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1884f74-e2c4-43f4-a88b-479cceb2b6e9", "sighting_of_ref": "indicator--4d96ab74-6816-449c-b8d8-8175e7659828", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9186dad-cb1f-4818-8087-f8966b17269c", "sighting_of_ref": "indicator--14acc0c7-d8fc-449e-829f-8baa151f8b37", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ac975ea-d0ad-442f-8b69-29798ff4739b", "sighting_of_ref": "indicator--45c62e0a-a989-4500-9745-4a52d456af90", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f892c88-41ba-49ce-83d5-78c7ec0d03fb", "sighting_of_ref": "indicator--4250822e-f58a-49b4-b0e5-18ee6e4c6c36", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3aa411e-e12a-4f19-9c86-a11a365a7038", "sighting_of_ref": "indicator--917e1255-f9e1-42e6-ac11-a825b4e4aa95", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--379b10e3-1b3d-474b-bb4f-b8118c5ed311", "sighting_of_ref": "indicator--46fc71b2-64ab-4104-a322-aeaf80055d55", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d01fcff-21b4-4d0d-8dc4-a6639a049ab0", "sighting_of_ref": "indicator--2629f020-a87c-4172-ab8b-f66cb900f638", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0db08ece-0c99-40a8-9266-960083e2765e", "sighting_of_ref": "indicator--9bf0fae6-947a-41b7-b533-c7901f8bb02c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bbc796e-0f10-49ad-91a0-912d812339f7", "sighting_of_ref": "indicator--77ecfc2d-fde5-4321-8545-1213032f570a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f109052-b4dd-4c06-9737-5dc2f1e127e8", "sighting_of_ref": "indicator--a8f7184f-a212-4f6e-9529-0d5b26a987f6", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e053f00-9ccb-4394-a633-97659ff78866", "sighting_of_ref": "indicator--5045a812-22e4-4c2e-9aad-7126efcb24da", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd81b06e-673c-4962-9859-4ce119ea87e0", "sighting_of_ref": "indicator--a334d94e-d8f5-42fc-881f-89303d19dd1a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c363f816-9bcc-4580-a704-26649bf8c014", "sighting_of_ref": "indicator--014f9666-e477-4822-9080-c262158269f4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bea16b70-488c-4b1d-a86a-9f6bc09644df", "sighting_of_ref": "indicator--71fe661c-b258-4c86-9f67-7593156d8aeb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85aafd51-368b-494d-a6df-c62e06eb342f", "sighting_of_ref": "indicator--c68ae0ec-b8b3-4e2c-8447-4619c0783aff", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5f73e37-38bc-4fb1-8f4d-bb07e8dd501c", "sighting_of_ref": "indicator--8791a30c-3057-419e-8d2b-f8380808b8b0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86d8956c-3d3a-4774-9341-b0e813176123", "sighting_of_ref": "indicator--f3aca009-7bfe-4e12-981b-1d396c94c54d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dc38ad3-20a4-43ad-8bcc-6ac453bd8c0f", "sighting_of_ref": "indicator--3abb877e-45bb-4c88-8b59-fdaf6b135deb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf3b7c20-321a-4431-aa10-cdfe9bb9c278", "sighting_of_ref": "indicator--3b5f4e02-f9f7-478b-945f-52498e9686d1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81c34ea7-7c7e-4684-89fa-8872726f64f0", "sighting_of_ref": "indicator--becb7f8a-acf2-424e-be5f-f8d7e65bdc2d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50e12fda-4c82-4172-a19f-a02286bfa333", "sighting_of_ref": "indicator--3f487517-f609-408c-83cc-fd14d85e639f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e60e2867-c5da-4cfa-aaca-204ace5083e0", "sighting_of_ref": "indicator--e7b23b83-c3eb-48b8-9bcf-60912db34424", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0869ec54-0f4a-4b0d-bb8c-1f0b866d259f", "sighting_of_ref": "indicator--300cd89b-7571-4246-b111-91fefe3545e7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76fd4c89-fcc7-4873-83fa-745b27504278", "sighting_of_ref": "indicator--e2bba776-c455-4300-9e63-c7cdb6569a86", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56b18b9a-9f2f-4067-92cd-46e5a98ccc62", "sighting_of_ref": "indicator--5633b88d-2276-4231-b4ce-f0e151ce198f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e34541b-51df-4f3d-88ed-b5542b5fae86", "sighting_of_ref": "indicator--5828dd6b-5d77-4afd-9b01-acd049afa59f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b802aa1e-e2de-4b43-80f5-2246c4789776", "sighting_of_ref": "indicator--7e8c2544-4795-484d-95e5-0892d742ccf4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40bd4b78-b65c-406f-ac3b-1ece2487237f", "sighting_of_ref": "indicator--8a458747-406e-4245-bdc8-4164ff4ed5ae", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5728d8ef-7d6f-46b4-a81e-72f8a6585365", "sighting_of_ref": "indicator--d6052475-8e2a-4bf5-a3e8-9d4e6ec4786a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63a938bb-c1c7-4753-a659-3846e7f36e76", "sighting_of_ref": "indicator--a08af1c0-aab2-4096-b9e7-0c951a32bd6a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c86c8806-df43-48b6-93b0-79f984c8eed8", "sighting_of_ref": "indicator--3b686b7e-fc36-4282-8d23-b4e2fc3e5f3b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0289712e-f0ea-4dbb-b79f-615cc51d25c4", "sighting_of_ref": "indicator--ae191c18-721d-40bd-99d7-a043cea8a16c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d7a289a-be18-4c2d-bacc-cceda9b60ef4", "sighting_of_ref": "indicator--529b6b3e-1356-47c1-b89e-b8e12ac7dc21", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c6ef309-a08d-4292-b3bf-667ef8e9ae56", "sighting_of_ref": "indicator--be313eef-99e6-4ffd-887a-e5ba20f67456", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--384ce6ff-340b-4c32-8bfb-f1bdafcc4f41", "sighting_of_ref": "indicator--9e4039fe-ed89-4a09-b104-99f91e79831b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0afbb83d-efc6-412d-ac8a-b385e416e1bb", "sighting_of_ref": "indicator--50d0e51c-075f-4efa-bebd-23cdf1ae3d60", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c7697fe-412d-4461-a553-9218d3f2d338", "sighting_of_ref": "indicator--c868f937-dc18-49fb-8139-ff295997782f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76e467e9-c839-4e3c-99ab-d6b623045ac1", "sighting_of_ref": "indicator--aedb8708-b0fd-4da8-b9d0-a9332e3c2e19", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93aa5fde-fe39-413a-9eaf-5b31d3a434d7", "sighting_of_ref": "indicator--200bfc07-7dc6-4510-872e-5a4610b80a77", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc7c9729-b5d6-43d4-9713-9cad3b830b0d", "sighting_of_ref": "indicator--668fe7fa-e530-42f4-b1d7-843fab08f46e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fcd7dab-ad04-4e7f-864e-97ed1d8e2c2a", "sighting_of_ref": "indicator--437c2bb4-d010-49fb-8098-bd93e85cf597", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdd40506-228e-4797-894a-29d03b1acb3a", "sighting_of_ref": "indicator--0361dee7-8ace-48eb-8ac5-ea4078a2f390", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02ad20df-38b2-42e4-a353-12f7f6f19b0a", "sighting_of_ref": "indicator--f6241817-9777-4ed7-9cbd-89c83c797f72", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28d258fb-6db5-422b-98ca-584f0f6a7957", "sighting_of_ref": "indicator--dc2ad909-0a59-4b21-aaf3-aca47cf7e9a6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbb92bff-68eb-4d2b-a931-8f8380cd0828", "sighting_of_ref": "indicator--c5af2276-d813-42c9-942c-d626097cecc3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e878adaa-c2e4-4f97-848b-19303754a42d", "sighting_of_ref": "indicator--2684aec2-5499-4aaf-a598-7cf5352dce8d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65bbacd3-02cb-4c3e-b7c9-a85f7d229fc6", "sighting_of_ref": "indicator--5bf51c6f-7b4a-488d-b109-95eb0faa9280", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb47bd95-1357-4b45-9f60-72692ed585f5", "sighting_of_ref": "indicator--a200271b-4ce0-4597-9e3f-2daea838b25f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b907ad00-49ab-45cf-acd9-d9363cd031f3", "sighting_of_ref": "indicator--df9c02b1-f96f-49bd-8d73-4f7784bcf785", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--817e680a-6f3b-478d-b752-57521b60f10d", "sighting_of_ref": "indicator--a68a4a7d-6412-4a43-af6d-11575da2ad71", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ea5acb9-c6a0-41de-bd70-1d69e14e0e27", "sighting_of_ref": "indicator--d5422085-8048-4680-ac38-96e2a0df7836", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2018f2c9-c07d-4c85-b198-0b169c0f7a33", "sighting_of_ref": "indicator--2cdc7ccb-ffa3-4498-948c-2368bba88851", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58381c46-66a4-4088-9253-611037b3c6b3", "sighting_of_ref": "indicator--e674aff1-2012-4af8-8759-1a7e1ca08700", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77890fb2-f5ae-4f15-9d1a-2a9f18806f8c", "sighting_of_ref": "indicator--6e9b09fa-f355-4a41-96e9-53faa346cdb7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9feda932-111a-42a8-8f64-ed3bb4bd2ed6", "sighting_of_ref": "indicator--a1daade0-efef-4bd2-acdf-44b691e164f5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34d9d50c-098f-4190-bbd3-4a6ca403f57e", "sighting_of_ref": "indicator--a3e69fea-6aaa-498a-8cf0-a9048a9d1dc6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30ed763a-f280-40e9-8e19-fa2eec7dc6c9", "sighting_of_ref": "indicator--e59fcf53-cd0a-4a8e-8272-47c9bd9c5fcc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a8a8819-a0b0-40f7-a61c-05fa9106f85d", "sighting_of_ref": "indicator--09d50879-6fd1-46e1-9dca-410f48f84e4e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c3b8065-e8e9-4ed1-aa7d-8e594d39e0ec", "sighting_of_ref": "indicator--703fa3db-8262-4316-8202-a89251c3612e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--471f0403-14f6-43b3-add0-7fc57095b562", "sighting_of_ref": "indicator--e9748173-430b-4515-a80f-9b323d4ccf9f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bed2dcb-2375-46a3-987b-3849164f1eca", "sighting_of_ref": "indicator--0ae83e43-82d6-4ca8-b061-c104ba5b8114", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6f7d1ca-5739-4656-a672-cb4423e2b1e1", "sighting_of_ref": "indicator--139baa4e-7197-4973-aa9a-1a44d3b0d8a3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7650511-715e-4e77-823b-a1fb6b1f710e", "sighting_of_ref": "indicator--ff67ade9-f169-4252-bbed-703460a1db63", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faba747a-9cad-48f0-b9f5-3f2e07ad984c", "sighting_of_ref": "indicator--647d32ca-71a9-49cd-95c0-5cba2717a97b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69f29161-8c42-4764-9f6d-9a3005a27d45", "sighting_of_ref": "indicator--250dbd70-1f7a-4dcf-a79a-5cbc8890430d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f21ed325-9603-45fc-b9d0-28d67f1ebdb2", "sighting_of_ref": "indicator--fe9e9ce7-5f50-460b-9f75-cf53616b5896", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e070e30-9de7-414c-8d4e-b82026abc96c", "sighting_of_ref": "indicator--2fc63b62-bde1-4b08-8b47-7fe7bc257698", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe3970a2-fec0-4984-9662-f80699bea619", "sighting_of_ref": "indicator--2da9e232-00c1-489f-a29d-f8846bb3e709", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f40ae413-a343-481e-b846-be7d2106f434", "sighting_of_ref": "indicator--48e0d525-b852-4c39-ae6b-938c2e9f7588", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c64aa589-1f1b-4b2e-9976-2eda37931a52", "sighting_of_ref": "indicator--a76dc01a-12c0-416b-ba02-2c23db46730f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59ff5510-23a8-478d-8097-260316087056", "sighting_of_ref": "indicator--b3c240ca-c403-47d7-beb2-817cf72e7e88", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a10e898-5e0e-425c-a67a-35b6017a2705", "sighting_of_ref": "indicator--6aff9eca-8196-4224-b9f1-43616aff07dc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9f54856-97f6-46e7-9996-0704b5598dac", "sighting_of_ref": "indicator--529412a8-adc2-4c54-8b22-170261e36565", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a3cc15c-2307-44f0-a0b6-1dad50d67ab3", "sighting_of_ref": "indicator--73de3605-10a8-4bd8-88ce-6614e7eb9a63", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--963abf94-e232-4465-be97-1a2e6588ea8c", "sighting_of_ref": "indicator--166e68ba-b32b-448c-a740-4ad4f5fb3cc4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb5c6c17-12af-44c5-b0e3-e4326891cb07", "sighting_of_ref": "indicator--08c62662-808b-43c1-8885-4a610f8841d9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1a99525-7e2a-4750-995b-0b277e5fcb77", "sighting_of_ref": "indicator--cd6bbd1e-e814-438c-a5d2-d162027b8fb4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dbe894f-6edb-48fb-bf11-0aea372e6681", "sighting_of_ref": "indicator--6b910bf2-3338-49c4-bfbd-ed5295dd8ba4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab185722-364b-4406-99a9-891caefcc92c", "sighting_of_ref": "indicator--b54d2daa-e7a9-4017-8e18-b44c55c5e774", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--428b1a0d-9c90-49b3-877a-237d7b77637f", "sighting_of_ref": "indicator--edc5e126-8892-47e4-87ec-fa2718690885", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e84e59e1-9c57-45d7-b7f5-88f26376857c", "sighting_of_ref": "indicator--32f45365-9012-4707-a90c-aec7564ac56a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4b832c4-9879-48e1-aac8-bc83479dbeda", "sighting_of_ref": "indicator--ba05e70a-3c20-45b9-b328-af0545635605", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d110381-d428-40ab-8c8e-baf79afa4163", "sighting_of_ref": "indicator--475d00e8-cc76-4bfe-a00f-f5e5ba0a175a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fab3354-5246-44a3-b3e7-758b4f30f880", "sighting_of_ref": "indicator--a24d41be-eb12-4f55-b8fd-3036f21ccabd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f595cb52-455d-4dfe-b207-0f07780d7f0e", "sighting_of_ref": "indicator--e8ebd5db-1dd8-41cf-a0b5-4cde79772f7f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc58e682-672d-4281-9306-c1408808e44f", "sighting_of_ref": "indicator--4b73f2c9-a193-4639-97de-24fbd47fa41c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--005a65ae-fa45-4e2f-8108-6c0b3f472189", "sighting_of_ref": "indicator--b8699739-c3d8-4671-8030-89cf9ba65ed6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81d9b6ac-4111-44ea-81e6-0f4be613486b", "sighting_of_ref": "indicator--75e8da9f-68d4-4985-8b60-d69fefa43bba", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4094918-1423-4027-addd-2de0916706b4", "sighting_of_ref": "indicator--b5dcc987-f363-4f26-bed6-35fb2ef95b96", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c06f234c-aec8-4325-aee1-8e58a803c497", "sighting_of_ref": "indicator--cec82fbe-8cbe-443d-9aa1-f18cf9067c77", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d23b0b58-991f-4c79-90bf-e7f1e2ac2b0c", "sighting_of_ref": "indicator--9857e140-8748-46e7-956d-6df8d687e2c4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--792f4ab3-45ae-44cc-a364-f7116fdce532", "sighting_of_ref": "indicator--7dc3ed55-863f-4c8e-b6ab-79167114b74d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff13a75f-1470-4e68-8643-d36291c79047", "sighting_of_ref": "indicator--56dccc4a-4480-4a75-8711-202fdb751f6a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b628b6cf-7b13-443e-8568-7223c7b5c060", "sighting_of_ref": "indicator--258a155e-6df5-4406-a4ba-c32b20646269", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a5237c5-37bd-481f-926e-901f3cb0b186", "sighting_of_ref": "indicator--8398b2a7-600b-4224-b23e-b86225917687", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6593423b-56b4-462f-aed3-0f73f503cdaf", "sighting_of_ref": "indicator--b7eec2ae-a390-48f9-8fec-165542a8c18b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99cfadad-e506-4fd1-8b02-9e1dc6a4956c", "sighting_of_ref": "indicator--f85c47e2-5274-4a94-aeed-02dd5ec85bdb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4984f9d-c1b1-4699-913d-14dda77b2939", "sighting_of_ref": "indicator--e66678a2-1a55-4dd0-8b72-c9cfe5b01a1f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--795bd301-f03a-4c68-a5fb-fd8d113384d3", "sighting_of_ref": "indicator--4d129fe2-86d8-4a40-ae54-858c4c867977", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ead0157-3b25-4ebd-8735-55df80b2cf4e", "sighting_of_ref": "indicator--d9a5e619-66c1-4533-862a-b544136e2a64", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1899b83c-a769-48ce-9e1a-c19dac0e3ee9", "sighting_of_ref": "indicator--aab3a970-16bf-4c0f-9e67-be7dcca32fe7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fff99335-5ddf-457c-8d57-555895cd48eb", "sighting_of_ref": "indicator--21b5158f-e71d-4e3e-b81d-8c21e4b37021", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f08bc371-cd8e-4426-a53c-b50249c52343", "sighting_of_ref": "indicator--aa57f423-f2d6-4dfc-a0f1-9c190ae49ab2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef382d3e-c1ce-4d0e-a27e-4978137e6c1f", "sighting_of_ref": "indicator--230609fe-3a66-4ded-bdfb-9ef596435c25", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--966f6de2-43bd-4ebe-b30c-2328f889af5e", "sighting_of_ref": "indicator--c373612e-59c5-4de6-9f4e-182a78c1350c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd0c80a2-1640-4b00-8de3-6edc69634c4f", "sighting_of_ref": "indicator--c34097b5-36d0-41ca-84d9-b983afc87109", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c723aec1-360f-4bd6-b4c3-f7ead1bde832", "sighting_of_ref": "indicator--951f7393-cdf9-4bae-95ec-2d16e3621a18", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50ce8d33-1703-4cb8-b946-77fd46983ac7", "sighting_of_ref": "indicator--5312ba25-46cc-4f62-936c-7839481976a2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--689b4943-4dec-4735-bdcd-ca4e3ea8859c", "sighting_of_ref": "indicator--dd1e31ae-bc67-4b44-8ffb-cc3e6d807fff", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e1c1abe-f57c-49fc-8344-e469f026e822", "sighting_of_ref": "indicator--2018981b-f0ed-4f88-8241-950021b593f5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b5c708c-f62b-4d99-a6ea-b96d8329bcfd", "sighting_of_ref": "indicator--50c73dc4-8a60-424f-b56c-afad799337a9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7790bd2d-2670-4bbf-aa53-15bf6850b2be", "sighting_of_ref": "indicator--fa0ad62d-61f5-44dc-b080-4be670a61e0c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfcef1e4-cd96-4247-96d8-2958eaf30055", "sighting_of_ref": "indicator--7c8b6080-c658-42bf-acfe-39286434f84d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ebb1b09-39a0-4812-8f4b-f5848c55ca96", "sighting_of_ref": "indicator--17a4708b-1d5a-44ba-9795-dddd86b7717a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4398e5c6-498e-44db-9436-0de085d971c7", "sighting_of_ref": "indicator--9609a223-d95a-4ac0-abaf-f3d9207d2776", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc7251c4-5dd4-4fb6-8733-3ad721abb1b5", "sighting_of_ref": "indicator--5470d316-87c3-499d-a802-d15c90c4fd62", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9153262-66eb-49a8-852d-00e0482f9181", "sighting_of_ref": "indicator--1cbf3e6a-1b11-44bb-8bda-313df7623c0b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20468c48-67cb-4e66-bd23-3f4e05503290", "sighting_of_ref": "indicator--b42f892e-e1e4-4b44-b129-9890da2348bc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a982843a-438a-4fcf-a379-e4a4dd233f7d", "sighting_of_ref": "indicator--55a0ec13-7f7b-419c-b6d6-6794573d9a73", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--762ef011-8828-447a-b97e-85f9caadd663", "sighting_of_ref": "indicator--aa5d6e49-0dd7-4c00-9fbe-1102874c1923", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5df1b191-c07b-412a-bedf-bbe818d0df2c", "sighting_of_ref": "indicator--a111a350-e98c-4606-a96f-f73ad655ac49", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4cb1419-569f-4c99-ab8e-2037950e6e8e", "sighting_of_ref": "indicator--fb4b3462-c797-4cc8-9683-83e8da8bf187", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9151a965-04ac-486f-ab83-b36afe8adbf0", "sighting_of_ref": "indicator--a0ada46f-7eda-40df-b79e-78bfbd7261fe", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f77d6e62-5f30-4265-9d7b-ada032456b68", "sighting_of_ref": "indicator--60700b6d-b891-4202-aeaf-5f09c5bae540", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1ea79ed-5890-47e3-a27b-7faae31b58e5", "sighting_of_ref": "indicator--729ab5e5-61db-4dac-b135-6a3380938d37", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc96ae04-26a5-4738-b62f-783aab855c52", "sighting_of_ref": "indicator--f986ecac-9d5f-4708-a916-69df04eb275c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09a5423e-8101-4ef6-867c-728afa5ab3fb", "sighting_of_ref": "indicator--7bec903c-c3f7-4626-bff3-a02d58745689", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--278315e0-e63c-4b3a-951f-ec91ddb015bd", "sighting_of_ref": "indicator--a35c0fe3-3026-4850-b5ce-95d5342ff73c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7205214-bc21-4555-9448-6919324bf244", "sighting_of_ref": "indicator--58616058-20a8-42dd-8265-a2bc94fb59cb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f09ad4f-a36b-47ee-8baf-46486667c2b7", "sighting_of_ref": "indicator--1283d372-f9ac-428e-873d-a2ba477d2a5c", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8514a25e-7d7b-4070-b1b1-49077f82846a", "sighting_of_ref": "indicator--92781467-f933-47e2-8484-bd456b02f1e5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7325155c-5407-48aa-80fe-942bdd1e7372", "sighting_of_ref": "indicator--3b56b2ec-9a49-4d97-879e-891cfe1af67f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30f78e78-256f-411e-829d-00643cf4b18f", "sighting_of_ref": "indicator--0013893f-c8c1-4d57-a772-b0942d75cc9c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48b50fce-e516-4f5c-99d4-1097037882d7", "sighting_of_ref": "indicator--44d23729-7b5f-4131-bd5d-ae07694e005e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc3c9c69-95bd-42cb-a42c-897ff5b8bd2c", "sighting_of_ref": "indicator--241b36b5-fc05-4872-9cd0-31ada83c47da", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2a5c55f-f8e1-47bc-af66-8cb672e7f451", "sighting_of_ref": "indicator--45d6af1e-76e7-4295-874b-7e489b32cc63", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2297fe6-f415-4e81-93bb-fcf40b6588a5", "sighting_of_ref": "indicator--3b56698e-e740-4c54-99df-3bac6ce1b759", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44988ed8-cc2d-431e-a4af-949d4c47751f", "sighting_of_ref": "indicator--9e6379cc-b885-4f29-b5a7-ee3e51111722", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ab86f98-3a89-4262-b539-8af108d81f6c", "sighting_of_ref": "indicator--a7104f1c-bb82-483a-b3f5-051299c6d27d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99adb6b5-0b30-4170-b976-d7eb44115c4d", "sighting_of_ref": "indicator--53e556a1-44ad-4f7a-a4cd-ec5144b19e61", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da1ae97f-661d-45f9-8a63-0d4aede28dd3", "sighting_of_ref": "indicator--3a38401a-c8e2-4fe5-a2bc-f8f317ce32b8", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2d8b4fd-9578-4a11-95d6-43a300889d8c", "sighting_of_ref": "indicator--3a38401a-c8e2-4fe5-a2bc-f8f317ce32b8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--644f9162-5453-4249-9ada-c3b496d162f4", "sighting_of_ref": "indicator--4b7a3097-6488-45f4-9522-3d3c620b64ef", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c07b045-1a01-433e-b4fe-cf25074e178a", "sighting_of_ref": "indicator--b41fa045-299f-4b88-8313-d0b8af7e5be5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e5f4080-2a6f-44d6-8203-2fe07561a52f", "sighting_of_ref": "indicator--70b4ea7e-10d8-4130-90aa-1a1ed8bc8f21", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb0da92a-e8a6-4545-a187-4273aa813126", "sighting_of_ref": "indicator--0d1cf623-3b70-4a82-89f7-e584ba2a681a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00dac570-45d3-4986-89f4-eb9178327aa4", "sighting_of_ref": "indicator--938d7315-f6eb-499c-aa67-e7473e1da257", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c21b3d03-b935-4924-8e59-ab76f50e60bc", "sighting_of_ref": "indicator--9a2a5a5c-ef7c-4cfd-9374-6e8b6b14ddf1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70dcda7a-08e6-458d-8e54-57a075660fec", "sighting_of_ref": "indicator--2a9941fc-d3bc-4b8f-9f43-2af0b42104d2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd16480a-da89-4a05-9fcc-5c137532471f", "sighting_of_ref": "indicator--a02c77d0-9c6f-484c-895f-bde2be33467f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a34c24f8-356f-4b80-b95b-04846471029b", "sighting_of_ref": "indicator--8ac968a4-0e45-4167-bfb9-11d8c15f271d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b88126d-bd0e-4cb8-aadd-5c4811e2c316", "sighting_of_ref": "indicator--a463533e-425d-4cb6-9f1b-504a4fea9f73", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb128f44-29c0-4301-be87-00e6507e9615", "sighting_of_ref": "indicator--1362bc89-ce4f-4c59-9480-5dfa3525418d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c90b826-9e84-42af-b774-e58b7b601b42", "sighting_of_ref": "indicator--16181f24-0d82-47da-9028-7ec993773625", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b05b0b2-71a9-4e20-b505-161c8e8efc77", "sighting_of_ref": "indicator--2040e8f4-93cf-4b6c-8f35-0d642d360da3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b8446ce-eaeb-4d0d-abf5-2c5003af795c", "sighting_of_ref": "indicator--63b0961c-e70e-43bc-b2c8-4b7b34ba777c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0b29722-a3da-4f74-bf5e-204625b43b41", "sighting_of_ref": "indicator--63ca7b84-98d1-4066-aeac-65bcdc96c56c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3731a228-eb4f-442f-bbe6-2962e1116a5c", "sighting_of_ref": "indicator--38520a1d-756e-488a-bf73-341b2ef5d44d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--640a5777-e876-4048-9627-8eb1faeed330", "sighting_of_ref": "indicator--febea1b9-898e-43b4-9fac-ff2063c64d25", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aae8008b-35f9-4e7f-a5a2-1bd1fe2f093b", "sighting_of_ref": "indicator--a7198c52-a266-4893-abe0-f653d7dc49f2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8df8e817-df73-425c-bee9-7c97f174301a", "sighting_of_ref": "indicator--e56e38f7-4e8b-4b0f-9ac2-f0d7ad49840c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd71c727-c9c1-4544-a317-6b3ff4eee80e", "sighting_of_ref": "indicator--a5448c0a-3fdb-404b-bf36-c1397a95f96f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b651e6e-d119-4caf-9f75-99e52144cc77", "sighting_of_ref": "indicator--247bfe22-5726-4822-9b7b-151d4cf35135", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f292a0fc-79f0-48ea-806c-b8406366898b", "sighting_of_ref": "indicator--06efdbc6-824f-4155-b2b8-c1ba337ce4ea", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff5809ab-f9eb-4b14-8a6f-8acfc6c89c42", "sighting_of_ref": "indicator--3126648d-18a3-4102-b329-cc95c3834173", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1b2febf-7aec-4105-b4ce-90239a2a5eb8", "sighting_of_ref": "indicator--394baf08-12e5-44e3-8f09-ccc0160bfe04", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0de8d5d3-386f-466c-bd2d-ec604c9c62d6", "sighting_of_ref": "indicator--95592e3d-c9a0-423a-ab43-a4ba37150b8a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbc8f23f-291f-45c3-88e1-dbfd5af03d93", "sighting_of_ref": "indicator--a4d18545-359e-4998-bd9c-2e19b378b85e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--588bce78-ca00-49d0-a5ad-8f529477b843", "sighting_of_ref": "indicator--c5042abc-c997-444e-8c9c-acf23a5646d7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46aaccda-4e76-470a-b5cf-b7036e0ca706", "sighting_of_ref": "indicator--aae0add4-e07d-47a7-955d-7b8e2cc068b7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e86cef1-02e9-460c-a52b-2ed7fd52e6a6", "sighting_of_ref": "indicator--1c10dab6-9291-425d-bf2b-a314057d0b67", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad91bc3d-ce5c-4033-be4c-0fcf3f41dc80", "sighting_of_ref": "indicator--65d82294-088b-4b22-aefd-e6991fc67703", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--949505e8-4e90-45b1-a146-3cef05e2a6b6", "sighting_of_ref": "indicator--8913b13f-a1a4-4c1a-9775-43b24319c98d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b8b4164-2606-4a26-9b74-2e19e2fe509d", "sighting_of_ref": "indicator--2610c425-4f21-425f-ac06-58fa1034e184", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee4ce6c3-3e7f-4cce-9e88-5838968365c2", "sighting_of_ref": "indicator--a480c694-589c-4f2d-8ad1-f314195fb592", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8860fa0-30af-49d9-a291-ad978c8a939a", "sighting_of_ref": "indicator--27d68145-5a02-42d4-9086-148fc36e7814", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--363a979a-50e3-47dd-a68c-58a89577ad79", "sighting_of_ref": "indicator--018dff66-be67-46e1-a19b-539e00d8ee54", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8bb799b-e326-410d-a7ce-9343eb39b8d5", "sighting_of_ref": "indicator--e444c147-7c75-46b9-8f61-2fda37f20d9b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaabe603-9754-4dfe-bfa2-55fd18ab09d0", "sighting_of_ref": "indicator--aa70f69b-46a7-485f-9043-5c9456561883", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1c52ac9-4e23-491b-a75b-7c33bde3f18e", "sighting_of_ref": "indicator--d52bdca5-eaf4-4d8b-b26c-1a848c564ee7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6291230d-cd5e-4947-b193-147b38b2298d", "sighting_of_ref": "indicator--6ecabd58-01c3-4fd2-a369-e9467ae953fb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--829f6b10-dfa6-406c-a6e5-45cb274089b3", "sighting_of_ref": "indicator--251a9242-29d9-4ae5-be02-2cda7a8da8b5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ba85fe2-070a-4443-a6db-d36797fca520", "sighting_of_ref": "indicator--17c0d97f-b674-478e-9844-5179ced73c6b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de83fcca-3be6-4532-aa5e-6ccd391f502b", "sighting_of_ref": "indicator--395ba569-cb6f-4277-83f3-095f0f36e3ca", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9210b7da-2a85-4a6b-a5d5-2cbca67be8ba", "sighting_of_ref": "indicator--353fa3b6-55b7-41c0-bd02-f813f044a0fc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f68d7b90-f3aa-476f-9745-11b520b3b154", "sighting_of_ref": "indicator--172878d8-1a4e-4037-a434-361ab0b7a5b2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f563ea1f-e627-4eec-a409-d1f8322c79df", "sighting_of_ref": "indicator--276b87eb-b582-47bf-901c-74be1fa13545", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34f81156-a3f1-4199-9164-910d22e9de48", "sighting_of_ref": "indicator--3d4e8b25-632f-4a9b-b891-161ab0a4ad9a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b71d2f25-c97b-41ed-b993-2992f9045c3e", "sighting_of_ref": "indicator--2bff7cbd-a4d2-4c99-a2df-5f1c33b61706", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97c90906-4657-4f3d-aa61-69ef6837fb96", "sighting_of_ref": "indicator--33f69ca8-4306-4e91-aa94-af95dd40d0ba", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ab1353d-4e83-49b0-a804-8bc93875505c", "sighting_of_ref": "indicator--fd77dcba-6c79-44ba-995c-cbf5a22a0735", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--255d635f-6465-45d5-b946-83cf163d3fd0", "sighting_of_ref": "indicator--3ced26a8-0475-47f8-a572-72c7395f1afc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba86d2b5-13a3-4fa8-ba69-dac9a77e9d4b", "sighting_of_ref": "indicator--bf6628ce-f643-46fd-b2b7-dde1ab21eb7b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a19f332-316e-4c7e-9c02-5289bf4ac401", "sighting_of_ref": "indicator--91c279c9-6682-420c-a4a7-6f6b0b77cd94", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1872728e-57d4-4351-bfeb-0d39066ed9d4", "sighting_of_ref": "indicator--4ff613df-1501-461a-b0ff-e1da98f68618", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efba7b47-ff7e-4ab1-9727-2f492b96f8ad", "sighting_of_ref": "indicator--f93b9722-0b3f-4297-b333-3e124af06957", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--688c2246-2f33-4071-acf3-7fabe27cd47b", "sighting_of_ref": "indicator--8bf6808f-1de7-45e4-a046-310c4d4f641b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61cde8eb-4d9b-4719-b6d4-8726d80cc5f6", "sighting_of_ref": "indicator--c6719844-e2bd-42d4-991f-32688cce9db4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93fd5d45-c2da-405f-8a1c-2c30456a7ebf", "sighting_of_ref": "indicator--20b955e5-8720-43b8-8f15-46ed1809b904", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a5e748b-6975-490b-89ab-9a682e73467a", "sighting_of_ref": "indicator--ceb77166-8792-47fd-a1f6-390e1ab6da9c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fc544b2-4f50-4cfe-bac2-05d0fba0ae69", "sighting_of_ref": "indicator--84ec472d-ae33-4d47-b783-9ab992b9a1b6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf1f3975-0bea-466e-86a5-85204a54f12a", "sighting_of_ref": "indicator--eb34cf43-1abd-47bd-a580-15b482426a83", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4fee6b6-53df-42f7-bab9-96b25591f03a", "sighting_of_ref": "indicator--60536246-3913-4f6f-8504-cdbbb177eb3e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8698d20-7409-4e1d-990f-355213e6f226", "sighting_of_ref": "indicator--6648f0f3-1a61-49b6-9525-1c070db77207", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd086e53-2c37-47c4-ad75-d0045921b66a", "sighting_of_ref": "indicator--197231bf-38ea-4af2-9d4b-d40fbc6fdffe", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf51c37b-1c82-484d-a242-576227c75c22", "sighting_of_ref": "indicator--34dd005a-4ca5-4f51-8c9f-0add25c77c8f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13af89b3-7556-4780-9e26-ebf755c7072c", "sighting_of_ref": "indicator--d8af628e-9270-4f70-95a1-9207f16ca07d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--592844ac-a493-4858-81cf-139c3ccfa8ba", "sighting_of_ref": "indicator--53e6aa8c-8b0f-4d53-9937-deb13140a2fe", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e68bb9e-44db-4a4b-b9c3-0c5705c0df27", "sighting_of_ref": "indicator--e3e8bee4-7925-4a52-9c3e-e6b37c0feb96", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2de01f1-6f96-45c6-b55d-9a8299e01497", "sighting_of_ref": "indicator--39bca7b6-c105-4796-b93a-83f773e60ddd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--535ea632-b4e5-4ce1-a123-81d919d45913", "sighting_of_ref": "indicator--ab3b302c-f9e8-4812-829d-4c58e860791b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f206abb-6b34-428b-a676-074c055e1481", "sighting_of_ref": "indicator--cebba87f-8d74-40ac-9563-c01b7950f4dd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89f979c4-a495-403e-8576-6ce85a0ac129", "sighting_of_ref": "indicator--f1ad6e03-319f-42b4-bb10-f49222a76332", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9121c6d-465e-41e3-8fd9-7a7c56b5bd8d", "sighting_of_ref": "indicator--06fe5b76-07a9-40d2-baf8-b26af8378847", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47646916-69ff-4acd-a05f-b5fa0f13f9f0", "sighting_of_ref": "indicator--6bbef51b-988f-4595-8b32-787260d18b44", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ed2460f-1a58-4b09-8ba4-8b6cbf0215b2", "sighting_of_ref": "indicator--a9ebdd48-c421-48ba-b5f6-598ff67dc910", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54a6e5f8-a9da-4b73-8ad4-fb0a0effde97", "sighting_of_ref": "indicator--71a095ef-d3f7-480b-aaea-38666e4dde11", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--280b29d0-0400-4d1d-b2ad-ff9e8caeb0bd", "sighting_of_ref": "indicator--36808d0a-e8fd-4ed6-9a13-4c2fda1fce36", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca3824d8-b5a1-47a7-8881-741dc5b6c063", "sighting_of_ref": "indicator--0ef02ff7-3f8a-4f5e-986d-135751d573f1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83544569-7d3f-443b-b42e-fedb229abb64", "sighting_of_ref": "indicator--6cbf58f6-c239-4697-946c-15a7e46a80cd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adb340b2-714b-40d5-bc1b-2a650e982761", "sighting_of_ref": "indicator--84c485df-f887-40ba-a78c-43a3276b2ad9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b3f45ee-0561-4b5b-87fd-56f09dfbcad2", "sighting_of_ref": "indicator--f1108d63-9a84-49a2-9b41-ac71e41c5a6c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0176002f-6ad8-4322-82e1-c0616ecff538", "sighting_of_ref": "indicator--a7ab68cb-4393-4596-a221-81dd0461c77b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83607085-512c-4d99-a0d7-f0ac94ac11e3", "sighting_of_ref": "indicator--41672f96-86e1-4b38-a6c0-6f97ea940ff7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--594f307b-109a-406e-af41-be99515e45de", "sighting_of_ref": "indicator--0b9081f8-47ee-4ab7-be26-a730341bb3ed", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f6a2dae-c287-4997-9ce5-81f63cc84907", "sighting_of_ref": "indicator--136e9cd1-af54-4278-95e8-b921702ea9b0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8ed375f-7b47-49c3-a2d4-647140892224", "sighting_of_ref": "indicator--3a9dd986-e490-4173-b84e-e479344ddcd9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82aff2ac-349b-4d7b-9b5f-85975d3c5055", "sighting_of_ref": "indicator--2285ca9f-836e-4947-88e4-9854fcde15b3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52c05860-464f-4096-a718-b6d212ee6202", "sighting_of_ref": "indicator--9512a732-ed46-428d-9f9b-33b8be683878", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6abf83d-95ae-4a6c-ba54-3234e8b614dc", "sighting_of_ref": "indicator--63980191-90a5-4d07-b7ac-797eb5773775", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--523c0eec-060a-4f40-9613-839af894d4cb", "sighting_of_ref": "indicator--0cd495b6-d05b-4514-9470-6d3149a7aa97", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a7c4671-d8cf-42df-8d23-25e8b3d1be49", "sighting_of_ref": "indicator--b45861f8-fb7d-4b66-804d-69220dac7523", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bac8bce5-9683-45f1-9b1b-7a28301aaaf8", "sighting_of_ref": "indicator--788b6fe1-e0fc-44df-9885-4434684fed15", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c45de23-bae1-492e-8053-449fe7948027", "sighting_of_ref": "indicator--db573a1c-3db4-4790-b881-0da0c73596db", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79168736-5183-4710-a569-fd46699d4ba0", "sighting_of_ref": "indicator--ce04e6bf-5e75-41b9-8806-3bbd13705365", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4db738ab-8b58-4ae5-a5ef-ab0bef1bff20", "sighting_of_ref": "indicator--313ac70a-cae9-4d1d-adcd-39d3499bca92", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2d1231c-dfc1-4cdd-a22d-dd1234ce6cef", "sighting_of_ref": "indicator--e4c36089-2873-459e-a0f6-3031adcff1d4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbab547d-c623-4a70-828d-f4398e607a41", "sighting_of_ref": "indicator--caeed7bc-ce1b-41e4-8d39-85ed0a9f4fb2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eaad972-34eb-4623-b104-9e88e16996a1", "sighting_of_ref": "indicator--0a9d7415-26bb-4329-a11f-6059acafce16", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e20c6d3-a4b7-4ebb-8954-d7a9b8eaf3f6", "sighting_of_ref": "indicator--c6e3ac48-dff0-49d9-b181-c9825c080b5e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8bbfc7f-7adb-4af5-a91f-b56e9f975bbc", "sighting_of_ref": "indicator--7bbe3429-9118-4a58-aeb8-1d24ec0d20ca", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61770ca1-f142-485d-b79b-d50ceb9e9990", "sighting_of_ref": "indicator--9c6cc66f-3e3d-4bcf-924b-5dd989f01cc3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd99c320-302b-4e81-8920-53a0cfb6ba29", "sighting_of_ref": "indicator--4895e2f2-5fbb-4db1-8074-97581bb605ad", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46fba936-85d2-4eb2-9359-b8ff6d569acd", "sighting_of_ref": "indicator--a5ed3aeb-acc8-46c0-bb42-642ec2494632", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c80e9ae-f1d8-4437-bb2a-604f6d469487", "sighting_of_ref": "indicator--2c2d1fea-aa86-4aad-b0d4-4f6f0a59e831", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0769dbf-24ca-41ab-a7b3-23ec7748784e", "sighting_of_ref": "indicator--e5190eb6-e72d-402e-b589-5156428ab196", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af1e10d0-298e-4e27-85c9-37456550a3c0", "sighting_of_ref": "indicator--830d6ed8-65c5-4ab1-a9e6-b434f652f825", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--586fe1b8-78da-42d2-95fd-96048824146d", "sighting_of_ref": "indicator--38e3df1e-40c7-461a-957c-1788bcbe9be1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd406b91-10d9-4296-bc63-9c07ec00a0d4", "sighting_of_ref": "indicator--b682bb09-59e4-4da1-94ef-ed1a66a2eff6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6f81303-c54f-4566-ad32-a0386af576be", "sighting_of_ref": "indicator--107ad5ca-8f83-445d-b0a1-3900cfb2567b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6eece45-7e4a-4992-a591-6b5c3b07b14c", "sighting_of_ref": "indicator--1d3ef80d-295e-4ae5-8e0c-bae09e9d0df0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e687519-280e-4849-ac83-005222fc4ddd", "sighting_of_ref": "indicator--b1a34c63-1e69-4127-87b9-432def313c74", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64371ab5-ea84-4ab0-bf37-f12f1ab87d2e", "sighting_of_ref": "indicator--45944557-0b93-464e-8ea2-f3344114c035", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--054f985a-90c9-4e5f-a448-40896516370d", "sighting_of_ref": "indicator--9b4da418-b9e7-42b8-82f3-0e76b69088a3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d62e0c1-5d1b-4651-a609-ff2a321befd3", "sighting_of_ref": "indicator--ebf47701-6f93-4dc6-a7e5-7a6fa42935bd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bffc282-379a-4751-9b9b-38d520e5f6c2", "sighting_of_ref": "indicator--f4020272-139c-46e6-8ef0-b8ea198db877", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2cf0384-17f4-4992-b46e-23add94b8677", "sighting_of_ref": "indicator--d0a72b19-d851-4306-b1ae-09eb31473709", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adc54674-5c95-4fde-aab7-fb26ff52e813", "sighting_of_ref": "indicator--ce776eff-8aab-4ddd-8ce4-70e9420f31b0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4bfad05-def7-42e5-82ab-57a2c30c15f8", "sighting_of_ref": "indicator--2063a457-7e6d-4c72-b812-36ff78ce14c7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d889cf46-a9d0-4e66-8ac6-00581a41b366", "sighting_of_ref": "indicator--7cd2722b-5496-4cd6-9eed-ce2256d570bc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41e167b3-fccb-43eb-8b99-d69fe1ac1008", "sighting_of_ref": "indicator--8a960be9-5adc-42a5-8a6e-26fd9807bdff", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15fa207d-c438-4244-932b-dae14208d5bb", "sighting_of_ref": "indicator--0fab9a1e-ee71-4296-bd30-df8f141807b8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10e98b46-24be-437b-bdcb-0c922149cd5d", "sighting_of_ref": "indicator--15982919-795c-4493-a53a-bf262c39b340", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52353819-84d9-48a4-8464-805ea19138ac", "sighting_of_ref": "indicator--f8560f95-b1a6-49ad-99a7-e3dc199bf5fd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7077934-b7a2-41d8-9c7d-34f35029ba2a", "sighting_of_ref": "indicator--bbd03032-cea2-4b47-8b36-c539abbe00e4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e457aa0-541f-4b46-896f-9e2cf215d254", "sighting_of_ref": "indicator--fef54122-bd6c-407d-b199-47b23af372a8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76784bab-a5e0-4e6d-935c-969c88740b90", "sighting_of_ref": "indicator--075d1b6d-31c2-449c-9f8a-ab6729caef29", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c28f698-e61a-474c-804f-66afe323d5c9", "sighting_of_ref": "indicator--6246c945-d18e-4297-ae70-7568b98b6d60", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0218ecd8-ccb6-4357-85c8-afe2dfbb022a", "sighting_of_ref": "indicator--0c639882-efa0-43a1-83b8-0c2025bbaa89", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--074c49d4-d62a-4a16-850f-d41517c64b17", "sighting_of_ref": "indicator--da731ec9-799a-46c4-a5d2-5b127fa3759e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8174f673-425a-46b0-a18d-a2ba21ac2db8", "sighting_of_ref": "indicator--5af8b1cb-18bd-41dd-955b-82a0bee9e006", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24754c76-5d77-4edf-a820-37ed9ed504bd", "sighting_of_ref": "indicator--64ed9e6e-5199-445d-a5a8-c9c1b8d67cd7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6d54d54-612d-4134-8162-5f1711ee22a8", "sighting_of_ref": "indicator--9c2d3d75-6357-4de8-8dce-ad52d1072aa4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a1bbfb0-2212-4def-87f8-6d3a54a7c867", "sighting_of_ref": "indicator--eccb5d8d-5609-46a3-8d23-253ce704f973", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fb41760-24c6-4a92-9687-bebd4a720dbb", "sighting_of_ref": "indicator--5f3f59fc-2076-4f65-af65-d49c23ac9c9d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--798b9586-4c61-436d-9228-61b705c5caf0", "sighting_of_ref": "indicator--a069638c-af59-4087-a7f0-8b051ccd25c5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1123eaa5-bfb9-4db9-9f24-8ef4d22d54ed", "sighting_of_ref": "indicator--a67472d6-2f47-4691-b894-3cbc4c869cd6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56d96e8a-ce7b-4b62-9ee7-ff00d39de696", "sighting_of_ref": "indicator--36d736f8-c2d4-42f2-89c8-e076144a6600", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36256dbf-f11a-4e6b-8b96-c51bfcfb009a", "sighting_of_ref": "indicator--9175e071-a944-4605-b523-6f29cd3dac38", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c535e11f-128a-41a8-a6ff-83d7d9647f92", "sighting_of_ref": "indicator--d4feb69e-99ef-498f-9530-52ec066a0b9e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--178b6ff1-3038-4736-b61a-71b3ab1a059a", "sighting_of_ref": "indicator--3a1fe137-dfb0-4501-a91e-1dc423cf020d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f6da653-5f62-42be-8604-3af1bef9c3ed", "sighting_of_ref": "indicator--848483f3-595d-45c9-b5e4-969a6bbfb54d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da9fc4c5-3a01-41e2-b27e-80c98722c001", "sighting_of_ref": "indicator--6799d670-6634-410f-b381-219c8e249ce7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a6bc73a-6051-4abb-bd78-b27e4e966444", "sighting_of_ref": "indicator--e585273a-05b1-4df0-a15f-cbff4dfe10bc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b6ea0b2-87b3-4ca8-9dfd-32bd78152c1a", "sighting_of_ref": "indicator--ff9aa9a5-6189-453d-b9a5-161056642a39", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e9d01a7-a5d2-4172-b0e9-10262e5ca5a6", "sighting_of_ref": "indicator--1d51a0b8-ff0b-4a46-82ab-9d94c24ec60c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14217abb-e571-4edb-b6b5-3ba16931c27e", "sighting_of_ref": "indicator--f447b216-4d60-400a-abc1-3cb6955984e4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84a30d1d-924a-43ef-9b0a-cdac174c5f8f", "sighting_of_ref": "indicator--41fdf71c-a04d-48cf-9d99-b026f371197b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b735656-ef11-42fa-82b7-16f2aaf164e4", "sighting_of_ref": "indicator--0301c7ef-38ec-4885-b9f3-194d9a6101d8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cbaea7e-a826-426d-878b-3cb17b391c29", "sighting_of_ref": "indicator--88dc44b7-11ee-4500-9d0c-5a40d7b83d9b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c1c8091-b724-4dd7-9d78-4889a24bf46c", "sighting_of_ref": "indicator--c078d168-265b-4d51-b066-5241839ac930", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32af20e9-8316-4aa3-85e5-5bb2a68a0fa8", "sighting_of_ref": "indicator--f9e56aa1-86f8-42c5-a22f-0fe450d8378b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20e41622-5c46-4b6d-a4f6-cd4a5fafcfe0", "sighting_of_ref": "indicator--4eec87c9-8650-4c82-97d4-3a71ced04470", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67fa2c27-a716-42fa-91e5-5cfb1160fc5f", "sighting_of_ref": "indicator--9aa81b1f-91ff-4eb8-b824-1cb67f0dc239", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9112faf-2949-4b4f-901c-306f69d07b3d", "sighting_of_ref": "indicator--9185485e-3bfe-4faf-98a6-ae160ce8b5af", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13b72653-7466-4b3f-a444-1f00b1bafd78", "sighting_of_ref": "indicator--42b6a2f8-3cbe-456d-82b3-380d1842e84f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7de49244-8750-4583-a07f-9ff59a1b6043", "sighting_of_ref": "indicator--24940d18-cb97-45af-8ad2-1230af31a7b2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--220bf975-5bb2-45c9-9841-7822ee71b38e", "sighting_of_ref": "indicator--7ffaea8e-ed29-4145-9196-1e91638fee19", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec904c3a-29be-4490-b09f-670081288171", "sighting_of_ref": "indicator--f2cd993f-7cc8-497e-ae86-86d8deba7d1e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa68db18-c8c7-4820-8ab1-bf6ba18f83b4", "sighting_of_ref": "indicator--86734ce2-4ce5-4a90-9cd6-c4f1e3d5841f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4405731b-e1d2-4265-ab79-4b1e726f4d1f", "sighting_of_ref": "indicator--55b49cf2-bd55-4b6b-b7de-4289ea0234ca", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dca0299-ced6-48e7-8c95-f2c3684fcd8a", "sighting_of_ref": "indicator--a072e3f8-bf97-4d8a-94bd-751568b83842", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f4a4ab0-3297-45f2-8e59-d0a87a3beb9a", "sighting_of_ref": "indicator--918d4720-bbc8-443c-9dbd-a9b8bec8d0a8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--457854c7-5e7d-4a4b-9d27-aaffcfde259a", "sighting_of_ref": "indicator--f6fd5b27-1609-49af-b140-50a98cfe405c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39fad436-5d8d-402b-a923-818d0bc75bf5", "sighting_of_ref": "indicator--2bdd3af5-7e3c-4449-b24d-91f853601f9d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4293775d-512a-4f5c-a44a-298bddd54ac0", "sighting_of_ref": "indicator--ad98778c-3af6-4f1c-89ab-8ebf7e781d28", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11fd44b0-6784-4f94-9adc-ff999bbdc740", "sighting_of_ref": "indicator--bcc76559-4f2b-481e-9723-f5cf53b83459", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6299aa93-adb7-473e-8e9f-93b58e616e8b", "sighting_of_ref": "indicator--6d99fb1b-f916-4add-815e-cb29686f46b3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c3478e8-1983-437c-8c06-baa60525423e", "sighting_of_ref": "indicator--616e8d79-e66d-4279-b579-6a5a1db87bcf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fee7287-8aba-4f1c-be23-fc40e63dda38", "sighting_of_ref": "indicator--1c0fadb6-50d9-4a8d-b61c-fbf783ca1d79", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a23984c-b200-4a49-a024-297c2dc7eb71", "sighting_of_ref": "indicator--37dae69a-00ff-4ab0-b055-0b73b8e7c4ca", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06eccbcb-8d7a-4590-9242-63fa93074021", "sighting_of_ref": "indicator--ff5a42a0-c4d1-4230-99fa-d191efcc352d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6dd8809-6337-48a1-b73d-8be1ee32946c", "sighting_of_ref": "indicator--b5244965-97ab-4ded-b84b-d5bbf978ebb3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23cf1bb7-bf67-40dd-be1c-374ccc4ae0e0", "sighting_of_ref": "indicator--86aa7e46-e193-40ff-8852-5c7d0185a8a2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5eba698-ddbe-4465-859f-7107e8e23e43", "sighting_of_ref": "indicator--23b984cf-44c4-4e1b-9479-644d7d1a89fc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffd31b3a-64b5-4caf-a0cb-e62a9b48386a", "sighting_of_ref": "indicator--8203954d-e6fd-45ee-a592-b57dedf55e7f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abf5b9ce-97b1-4b74-b4a5-3d0f2cc7fbf8", "sighting_of_ref": "indicator--86a368b4-b9ba-4a18-9758-004093f4906d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea5b1014-7a2f-4b90-adb5-657bec6cd644", "sighting_of_ref": "indicator--a08af5f1-e3fa-4f70-9628-aa36d50431a7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--275ff887-674c-4cb1-bb8e-809b04ed071a", "sighting_of_ref": "indicator--ee40b86c-0599-4ca4-a7ce-923c3c0eece9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bc2bb44-0e51-45ae-a7d6-adcefc8e0e85", "sighting_of_ref": "indicator--244e9754-6a62-4793-a9f2-ccbf182c1a4c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2027af79-9e81-4077-8cd7-317adb488447", "sighting_of_ref": "indicator--5c371271-d638-4df8-bca7-19b5acb62daa", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5a9666b-b8db-4e6d-9380-bb57ed055f94", "sighting_of_ref": "indicator--69dab458-7b88-4f15-bb37-e57d8f02a829", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fe91253-3679-4d30-b5b4-48dd5dc59920", "sighting_of_ref": "indicator--01b65d42-35a1-417f-a11c-3638b336f73b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fadd2935-acd0-4e6a-aeef-d4245de69861", "sighting_of_ref": "indicator--18de1d14-0346-4c36-98fb-fd2ce9ceb7ad", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0515088-b928-4065-9812-55d18997cff5", "sighting_of_ref": "indicator--fb347043-e357-4631-88ac-53ecb128886e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e77da544-0362-4fef-a333-7288f13d2da1", "sighting_of_ref": "indicator--2b956712-6304-4acf-88af-4e51e8862eb3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d04832e8-49c8-468e-ae88-eb854448f6b1", "sighting_of_ref": "indicator--2abefd09-2a98-47d7-9172-feeeb54ffc1a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4291b95b-06e5-4f53-bc55-fd2f5279ff42", "sighting_of_ref": "indicator--6250eedf-46b3-4dfa-8a75-4701f7fcc15d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25f45716-93ff-491a-9eec-a1b21622ebd8", "sighting_of_ref": "indicator--723bdc76-4c27-4ade-af2b-0ee7cf52328e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f91923c-59b2-4fc2-b7c5-5553e0577c59", "sighting_of_ref": "indicator--c0ec7817-b13e-4e1e-8aac-f5a014dc21db", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59b75296-cd38-4548-a764-f75cd560020d", "sighting_of_ref": "indicator--3ebbc790-bb89-4e1d-8731-ece0d7f14bcd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--530871f5-3fc9-44ee-bdfe-1b2c8ff97b53", "sighting_of_ref": "indicator--38776839-ebd9-4ff6-bb91-e406a5e260ec", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14d2b12b-c571-42d5-a191-78510ec79f3a", "sighting_of_ref": "indicator--26be51e0-5c2f-483b-822e-2715d1b1eb23", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b079952-1790-4f69-8fa4-010048863f5a", "sighting_of_ref": "indicator--35d4df38-cfd1-4a4d-90f8-4511dd5ba700", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9a55661-eda3-4ed3-99da-152fbd57fcf5", "sighting_of_ref": "indicator--85a49143-509d-4d64-8360-00c46c20312b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75119498-313d-4827-827f-b27b362fd737", "sighting_of_ref": "indicator--a3136f3c-e7e7-4269-b0e4-42af2f09288b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f870c686-e84c-4dd7-b19e-8742fa4b51e2", "sighting_of_ref": "indicator--d2d847dd-ea2c-4557-a9cd-82aea76b02ba", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a03b937-b600-4121-aa6b-25c725a7633e", "sighting_of_ref": "indicator--72b05159-1b21-4928-b370-d1d014423393", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8950ff5-9a27-49e0-a7a1-e69327b83e63", "sighting_of_ref": "indicator--8ad0d17c-1501-4336-aa49-9f27019d038a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7ecd6d6-2413-4d47-ab86-5a7412ac10ab", "sighting_of_ref": "indicator--3c43c2be-cef9-4b34-843d-70a51ae4ee60", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4ae9e59-5909-47d6-9b3b-d6bd3be17b76", "sighting_of_ref": "indicator--20ed8d33-408e-414d-8a90-3469cbec6e88", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4899e16-f2ac-4d02-b666-b5cf608c5a1a", "sighting_of_ref": "indicator--7c840627-c7b4-49c0-9657-f4897a7ed37a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d9d104b-ec36-465e-92bf-96fd934fb398", "sighting_of_ref": "indicator--b9a49fe7-a6e5-4be5-abde-c7243ea2a90a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed854680-5d2a-448d-b70e-49d1469f67f4", "sighting_of_ref": "indicator--c99c5fc9-0822-4d04-9134-9917f3800db7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58b455f5-67e6-4892-8238-2ec0845c035f", "sighting_of_ref": "indicator--972fa531-17e0-4843-b16f-7988fae377ed", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f0477e5-e86f-4f8e-9405-685872b4f0f0", "sighting_of_ref": "indicator--40b37be7-1149-45e3-a584-b6c017a3bccc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a508534-d8c7-4d2a-8ec0-c649fab41bc2", "sighting_of_ref": "indicator--fd54809d-9dda-47d2-b1aa-476ac6ee1b3a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89d4418e-5160-4231-930f-89c2f5d80a52", "sighting_of_ref": "indicator--cd7e4b89-6a23-408b-ad7d-900deb292c51", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f2d8cad-8fd0-4ba4-87a6-5e1bf198b964", "sighting_of_ref": "indicator--f58db459-f68e-42b2-b3ee-5c88593c31b9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17afc553-66b6-4311-b876-7a083e9d34b3", "sighting_of_ref": "indicator--d1c65775-3522-49d1-bbbe-f7c4986ac80e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--305b4556-7d1d-461a-845f-f3bde57cc2cd", "sighting_of_ref": "indicator--cd6569ba-3ece-4e7c-a9dc-4b404acb03a9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d9cf7ad-8224-43cc-a90f-be7b7fed3ba7", "sighting_of_ref": "indicator--853ffcb1-eaa4-4cd4-9317-a8e38c1168f3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b031b279-8937-4f7a-86ce-fe2bcf9215be", "sighting_of_ref": "indicator--c76cd830-3431-473c-ac3f-40a73b83064e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e3bb67b-4608-4549-9a31-63f1e504f74c", "sighting_of_ref": "indicator--3344ea5c-1b5a-4ae5-a896-cc085c190313", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1b484b9-4e6b-449b-8323-7ae8ac8c5037", "sighting_of_ref": "indicator--9c8cd951-873c-4b59-a84b-96585b08dc1f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24c31818-e0c9-4472-9a17-845e5209fd2b", "sighting_of_ref": "indicator--1ca281db-2622-46b9-a57a-efac102d6d70", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b71fa347-72eb-4284-a5a1-56901d0cef8b", "sighting_of_ref": "indicator--b49f1df5-26a0-4758-a7ba-552b4cd8ec67", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9231f2e-a1a2-44a6-a422-aeef7d6272d0", "sighting_of_ref": "indicator--7a3da9f5-0b4b-4474-ba63-3ed213b19829", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5e3eab5-2300-4a5c-baa3-b54081443eb8", "sighting_of_ref": "indicator--37fed903-ae0b-4170-b686-3f4adb126441", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2437f1b0-76ef-44e0-95dc-9ef4369a632f", "sighting_of_ref": "indicator--9eaa7de0-8555-488e-843a-f1bde7b82b88", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ab8b900-fe81-43d3-bbb5-88dec5e3911c", "sighting_of_ref": "indicator--a9bd8785-1e1b-4afe-90d6-cbc893318957", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f29e4b62-6adb-47e8-a9af-6155f1704225", "sighting_of_ref": "indicator--30699804-d458-4903-bde5-21afe551126c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd3658f7-dfdc-4323-bc12-432ed9fcb358", "sighting_of_ref": "indicator--7aedb351-6db4-40f0-98fc-778d292eebf4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b58af7db-62ae-4a26-ac79-d08e06ced6eb", "sighting_of_ref": "indicator--1c27e75e-b25c-420a-961a-dfde335fc99a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eda6b184-c024-4fd2-8bb2-03da739d4a21", "sighting_of_ref": "indicator--0c93e3bc-901e-411e-8556-b7a47c965559", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9149852a-8408-4389-ad9a-1314ce12b41a", "sighting_of_ref": "indicator--15f55957-e16c-4fa4-bf81-6f4447d95e89", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07139e09-2619-4cf5-8d7f-f2b22e1c74d8", "sighting_of_ref": "indicator--47e2f1ed-34d9-430d-a856-f35a670d219e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dafa55a8-e87a-453b-b550-c9aec50e4485", "sighting_of_ref": "indicator--bdf6e60e-4d2b-4523-ba76-8e9de03afb07", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ad48ed6-80e7-4f76-9750-af4bac9e9c20", "sighting_of_ref": "indicator--8747e269-1847-41ea-b278-0892a012f15c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b62df20b-5dab-4c70-b5fc-294f93198c55", "sighting_of_ref": "indicator--26d8d62f-3c54-43dc-93db-abf7af36ac93", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30c1e555-af0c-4d3c-8c53-0dfb256279b0", "sighting_of_ref": "indicator--e485581b-f632-4c5e-9e65-f55654df1008", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40c346fb-9fba-4b3b-8c57-c53d74425b2d", "sighting_of_ref": "indicator--146cf5b1-8963-481e-8126-1098f063e4c9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeea2cdf-7ef8-4ade-847e-f56795d0ac22", "sighting_of_ref": "indicator--e3c3f670-ea97-40c2-b95f-b998b29d9359", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e894481-fcec-4e04-9b6c-85c93a37f080", "sighting_of_ref": "indicator--3fba9408-067d-4c6d-9cd9-539db46f8b81", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--138cbf1a-0b38-4843-8aec-b26d6cfe74f0", "sighting_of_ref": "indicator--de93bf10-04f8-433c-8d8b-036d43087b85", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb075aa7-097f-49cf-b4ba-8ff82af7b77c", "sighting_of_ref": "indicator--871155eb-73dd-4296-be68-d379b3f32703", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91060481-1749-4168-bdd9-70087d2477f7", "sighting_of_ref": "indicator--d43ed8b0-9fe3-4969-bfcc-1e6fca07207b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16688a2a-1322-4c76-9442-809cfd722016", "sighting_of_ref": "indicator--675fb4c4-d183-479e-bf02-d69291e5bc15", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a1c9448-ebb2-40ea-9ac0-ab84eb4c64d4", "sighting_of_ref": "indicator--956d9c1f-f7f9-4076-8ed7-c61b4c1e8c04", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e16f6d6-a84a-4d15-8fa6-ca2130983b96", "sighting_of_ref": "indicator--20404cba-2a1a-4756-8602-6bbda8f3ee87", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c40112c-a373-4c5f-9a2d-e8a27ffe040d", "sighting_of_ref": "indicator--2e2b5a07-37fa-4c41-b46c-d4c973c2623b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c1b9132-1115-4a18-9007-0cd8ae7e97ef", "sighting_of_ref": "indicator--dc0732f7-b88e-4104-bc32-5fb9ee269147", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d46f4b42-420f-4f39-83a8-9a1c56edc1a4", "sighting_of_ref": "indicator--b5fbd8c4-b95b-4cd7-843b-96ec9bf784fc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d13893d-84ea-4078-b31b-c30944b198d8", "sighting_of_ref": "indicator--1356c0b9-90ae-48e4-97bc-84b1988402bb", "where_sighted_refs": ["location--c71c2550-5849-4a8d-b050-635a93ef5467"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3423f6ae-61ab-4411-a0c7-9446dac1efb3", "sighting_of_ref": "indicator--85bffdac-ceaa-4f6a-bc00-48e9aa588e6c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c65f88a-0855-4da7-a81f-b63a214571f6", "sighting_of_ref": "indicator--32675894-a7d7-4ce9-a9ad-0ff26f073038", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--429d4d27-9c5a-4bb8-a715-3b1d7a352d9a", "sighting_of_ref": "indicator--b1821235-82a8-41c1-a74c-0706b6be6c7e", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--418f0dce-2a91-44c2-acd3-f85b29af09a3", "sighting_of_ref": "indicator--bfb85f02-9e6b-4e7d-960b-37e65558fa69", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4afd0ed-6bd5-47cd-bd46-e3a35f48422d", "sighting_of_ref": "indicator--b5d05c17-9053-4348-b2bf-934cc8695fcc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02e8a642-cf43-45d7-a412-59affc6c19df", "sighting_of_ref": "indicator--57e31ee0-d1f4-4c7b-9391-6b3015bafb8d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3455251-337d-4d45-8923-02d9345694dc", "sighting_of_ref": "indicator--2714fcc0-88d9-44cc-97db-b4d40e504950", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87f594c1-e9b2-4574-9a14-53e5fbb5612e", "sighting_of_ref": "indicator--c92fc62f-e4f6-4dc0-ad8b-580c852b3606", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de70e45a-66e5-4675-8545-146d6eb8ea70", "sighting_of_ref": "indicator--c92fc62f-e4f6-4dc0-ad8b-580c852b3606", "where_sighted_refs": ["location--c8625a69-b7e6-4cad-99d8-76632a875c20"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a057a2f-6209-4a1c-b2cf-5983072136b6", "sighting_of_ref": "indicator--d25c0fb4-16cc-465c-a0b2-ae21fd3a9ef8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd81bf58-bbcf-4504-8492-22176ef92dfc", "sighting_of_ref": "indicator--b4cfe658-fcda-492c-8892-782f5b11bec2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29b39fc7-091a-474d-af99-3519adfd340c", "sighting_of_ref": "indicator--1b376ae3-b1e0-455c-82fa-12b4ec253786", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe432b82-7dcb-4177-b9fd-1ce4bf3ebef4", "sighting_of_ref": "indicator--ea6d076e-1f18-4e9a-a5c0-09b919306c30", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a750d58-4c1c-4f26-bf4a-742b5ee9e303", "sighting_of_ref": "indicator--63df313c-8a4b-4e56-9f8f-e570e67e2b72", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f932beee-ff98-4b6d-8a66-11fc68215d27", "sighting_of_ref": "indicator--2bd4d3a5-3077-4d75-8b0f-3fb77506a48e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f889596b-63b9-4ea3-90ba-416407f0e051", "sighting_of_ref": "indicator--0127ab89-6f07-4a3c-a703-d25651251c9b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ed5bcfe-2915-47d3-92a0-2d4e1f315851", "sighting_of_ref": "indicator--8f03ff57-0291-4802-a7bd-286bcb852824", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c29d06e-4db6-4697-b3c4-db68715e87e1", "sighting_of_ref": "indicator--c11ba5dc-e235-441b-8b3d-8681d2b3b5c5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f4475cd-4405-4806-a9d6-16c8bdbf1768", "sighting_of_ref": "indicator--6a0351e2-92fc-4223-b64b-6533f9ff4799", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e59ee53-6975-4545-8d11-45d99f3ca91c", "sighting_of_ref": "indicator--f5ad25d7-e57e-4426-be83-c21cde1e48a5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29d39c51-bfd7-4fb0-8dc1-2176c5690c50", "sighting_of_ref": "indicator--2282c5fd-b6d5-43e5-b3df-8d9babcf8125", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43abd028-96e9-47b5-99b4-a7569ce2f5b1", "sighting_of_ref": "indicator--40fd8cd4-dc3b-4384-b9e5-b7b3ac7c9074", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb473f18-21e9-49c3-af17-ff861cb1d051", "sighting_of_ref": "indicator--6007cc83-e7e9-4689-acfe-eaa50af3f597", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a054c277-d9a5-438b-a0a5-abce91d3b73a", "sighting_of_ref": "indicator--febc69cc-78a2-43cf-a527-7ca76be99ec6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--774381e4-c4ae-49d6-a171-c6a83c13455b", "sighting_of_ref": "indicator--8ab634cc-f53e-421b-ab00-2d2ab8afdb58", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--377b2dfa-4678-4f02-87c0-d242ef1362bb", "sighting_of_ref": "indicator--c2cc6c30-dda1-472f-bcae-1b8d458215a9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--030c1eeb-6c0e-4cb0-bd7c-f6caee7c61a4", "sighting_of_ref": "indicator--da1d0b88-f040-494a-bbb6-5a8eceb83b15", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff4eeb1b-bfbe-498f-b1a5-317b6ce6c082", "sighting_of_ref": "indicator--2085b63e-750a-4524-be8b-4ad7e77f97e6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--436ea16a-436e-435a-a4d9-52bed41cd6cb", "sighting_of_ref": "indicator--90fbee6d-a4bf-4bd1-bf95-59e0f20afb25", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d7a6d3b-b84e-4fed-af1d-db7e760453a5", "sighting_of_ref": "indicator--59a3af6b-34a3-47ee-b22b-6b506974b88f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91925eb2-72e9-4274-a8b0-5ca1e635076d", "sighting_of_ref": "indicator--4140c3ed-4592-469e-a6e6-bc9e734a2f49", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84b46a4c-5df6-495e-9005-13c1a61f1468", "sighting_of_ref": "indicator--9cbfb4a4-8f44-42f5-8bba-c66a49942f3d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--065373fd-a151-43f0-9a04-98cd02d45c57", "sighting_of_ref": "indicator--8f8c78a9-9031-440b-93f8-6ee2f2ec873c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--581021c4-3524-49ed-8d36-c8978519330d", "sighting_of_ref": "indicator--7d49a1d9-da4f-4b05-850e-00dab542c5e9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c07cc928-58a8-45e0-899c-9628bf35f37f", "sighting_of_ref": "indicator--c2adcd80-235e-4608-b667-d3a8242b4770", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72f24de3-ca56-44a2-acfb-96eabba2c632", "sighting_of_ref": "indicator--c0210134-79e9-41d9-84d9-33c00f60d90c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3251190f-6446-4900-98df-1b6ffc2ebb24", "sighting_of_ref": "indicator--bf3cbff5-08b9-496e-80d1-ce3c8ff38734", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a92bb877-d50d-44b3-b331-d22a236d0c9b", "sighting_of_ref": "indicator--0fd2ce85-bc97-4848-b1cd-91a542f9c608", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84a5841e-fa21-4887-b689-e432f2c35140", "sighting_of_ref": "indicator--b0d645e3-4fe9-4d94-b4bd-6f3017fdc859", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f140d684-547c-4bc1-9ce7-6abfedea42a9", "sighting_of_ref": "indicator--6041c779-ad09-43fb-a994-166aeaee4971", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29f8dcc3-12bb-4762-8993-f48124a9b92f", "sighting_of_ref": "indicator--c2fbf770-5488-4a94-9d7b-95df9b1023b5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30bfc3d5-321b-4939-89a0-e58d7a17b48d", "sighting_of_ref": "indicator--4418708c-6656-4041-8afa-2713a47ebeb7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41b476b6-f9aa-472f-93b2-2351632a0a24", "sighting_of_ref": "indicator--a250fe18-6fdf-4d79-8a2b-3465309962d6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3f101a5-b5ba-4d85-9854-86206c581e72", "sighting_of_ref": "indicator--3efee105-049e-46d9-acfa-c8f3e35c2ed4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aae33596-6cc0-4d9e-a113-316d2935d928", "sighting_of_ref": "indicator--697f4bb5-ee0d-41fa-aecc-49173c60b8a2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b38a5c0c-9b7f-48a9-8b10-4123a616ba18", "sighting_of_ref": "indicator--85688abe-657c-43a2-847a-763b7d5f9e12", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd0fd85e-4a8e-48fc-9732-6815876561ac", "sighting_of_ref": "indicator--21762c2e-862e-42e8-b0f4-d5ab0acf2156", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a703cce1-5acf-4832-aa2a-14a5c7491957", "sighting_of_ref": "indicator--8a32cd43-5324-4d12-82f0-a33954aaa94c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd9b9a71-2765-464b-ace7-f113093ce767", "sighting_of_ref": "indicator--e3773259-1bee-49e9-b409-03ae6eb04538", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4309bcef-582f-464c-8c44-a2531e7db2ec", "sighting_of_ref": "indicator--528f4179-a31d-4fbd-8b08-80f511999d13", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a15c07e-4349-4166-a508-612dab383493", "sighting_of_ref": "indicator--6bbc2687-08dc-4cdd-8b95-a15d657abc7a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7738322-8503-4e1e-8ffe-0511f1f826b6", "sighting_of_ref": "indicator--3f00617c-81a9-4e36-9b4e-19990e8fe19e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--513ff868-9246-454c-b841-73d17717732b", "sighting_of_ref": "indicator--2587be25-6dcd-4b15-9250-193914878bd6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d93fab55-7c11-4b08-9179-615dfd842fda", "sighting_of_ref": "indicator--71381a5c-232a-4513-834c-35bd8b8947c9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7089669-b3d8-414b-89ce-0159d2b14eca", "sighting_of_ref": "indicator--ec6523d6-8f19-46a5-bcb3-cc2268851139", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f913f20-4f6d-439e-b2c2-a1465203f328", "sighting_of_ref": "indicator--d3ac53ae-61b9-4d25-bc95-30351059056b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ea1194e-e8c1-4168-90a7-d08220f15796", "sighting_of_ref": "indicator--12842cd8-7f21-44b3-ab9f-be279a0795a3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f338db23-5b87-4687-8da2-f72c87a821af", "sighting_of_ref": "indicator--e982578a-581c-4900-8e4f-95f2d3460e6b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df3bcb0f-0ad2-44c7-bddd-428682e2e954", "sighting_of_ref": "indicator--6632cdb5-cc50-4900-b1d0-0a841c1a6fe5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e4883b3-a560-48c6-9081-aa229f77ffbd", "sighting_of_ref": "indicator--98529675-f5f0-40e3-bd89-9856168167b9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c41fb43-5d4a-4940-b5f1-72b340d7553f", "sighting_of_ref": "indicator--8a106b6a-14c7-4bdc-9473-8ef139e3b88c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7103b427-a0d9-40af-b890-914c631b7648", "sighting_of_ref": "indicator--3ec520c7-8d96-4160-9e80-67559874a7a9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee7d3d13-2bbe-430b-83f9-30560f5770ec", "sighting_of_ref": "indicator--65b8b985-dc9d-4b81-9b8a-4447852afc6b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f9bbe38-f4e2-4d20-ba89-4e575e8381c4", "sighting_of_ref": "indicator--aa79d1b2-936c-4eee-942e-bc12d6475d39", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--893573f0-a34f-48f2-a2c6-c10b3ba83203", "sighting_of_ref": "indicator--32e97bf7-e963-41f2-91fb-5b2c13ff0f5a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08ed49b3-a1cf-47e3-98ec-994cac0e31ee", "sighting_of_ref": "indicator--83b5cfba-8afb-4838-b78b-a51b20846114", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--262852ee-be8d-42c1-84d9-416f95487a49", "sighting_of_ref": "indicator--1792602f-d5fe-4230-9e55-9005e26eee12", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4b9e491-c918-4f91-9ad7-0d841ef1a6fb", "sighting_of_ref": "indicator--bd051ec4-1ce0-424d-9029-d42dcee88238", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7803202-cdec-438c-9b7d-c94ed2c07b87", "sighting_of_ref": "indicator--52168217-8c96-408c-bda3-c12a22f74a62", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--534f4447-a01f-405e-a481-7cdd0f954777", "sighting_of_ref": "indicator--f5b2abd9-92fb-4cc7-8ead-1412121d71cd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bccece2d-b8d7-4815-b946-6a8e27608d8d", "sighting_of_ref": "indicator--90622859-134a-4b7d-8c22-0ec34badaac7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16dfb22b-d329-4d73-bc73-851136433352", "sighting_of_ref": "indicator--f883032c-3fe6-433d-b055-dc6bf34f2945", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--244034cc-a4fb-48f6-9565-cac467535b99", "sighting_of_ref": "indicator--bbaa4500-ea33-43e2-a419-921c4cf4c089", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94d70813-72ea-43e6-9d01-c2c88931b08d", "sighting_of_ref": "indicator--5891a45b-9466-40d1-8b26-6dcf801f39c5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c02278a-f723-4aee-a3d1-9311b2ec2422", "sighting_of_ref": "indicator--f5bb39e5-ea28-47a4-bb74-1c6429b2f360", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d11f2f78-41dd-46c3-be28-66c97f0eeff8", "sighting_of_ref": "indicator--97e5345b-7789-40dc-8368-52894eb9b0b0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--234396c3-5632-4807-b2fb-3e700a70ebbc", "sighting_of_ref": "indicator--922cc7b1-6e20-4df6-a379-58461bc446b4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--489db407-e57f-4c19-b5b1-f156eb4e0e64", "sighting_of_ref": "indicator--e4d59e6d-7723-42ce-9675-d58bf3a44df0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a889babf-4567-4c15-b826-8c1fd39a6596", "sighting_of_ref": "indicator--39b59614-2dd8-4c91-90c4-3c84c7d2b70c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad91ac82-85ac-48d4-8925-8f78c1200719", "sighting_of_ref": "indicator--0e1897e2-6c7a-43fb-8328-62ccce3ed2a2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0b1f633-e26a-4690-8790-35b7d572bcf4", "sighting_of_ref": "indicator--1cfc059d-4934-4b5c-b4cc-7b3d62a1d731", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65c1be20-87b8-43be-a25d-21485b4cf412", "sighting_of_ref": "indicator--ce0a1c70-01c7-4ffe-84ea-997376d3db92", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3918c27a-2a0b-42c1-80e3-89fa4922f8d5", "sighting_of_ref": "indicator--ec71d7f8-0e8d-4cf0-938b-a0c5fb6e1c60", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db9d1faa-0101-49f2-ac71-ca1f10987b6e", "sighting_of_ref": "indicator--4c422fdb-98c8-41d2-92e8-03bef8bea13a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b9448e6-fc02-440f-8449-08fefee8fb2f", "sighting_of_ref": "indicator--2774fd65-1fd3-412e-aa76-03edd07bd211", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc3cf778-4f40-40ff-b2e7-1939931fea5e", "sighting_of_ref": "indicator--ad50117d-2332-4ccd-a941-a785c7b31e5b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8eff4af-e52d-48ef-b196-3e1f555fc81f", "sighting_of_ref": "indicator--1198ea9e-35b6-4a40-8e8e-a2ad9ec55815", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--775c2402-05ba-45e6-b199-6573aad5a6cf", "sighting_of_ref": "indicator--7da97325-aeb5-4bb5-88d1-36546ff166b1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1a24f07-386a-429a-8f9f-f97f5f737252", "sighting_of_ref": "indicator--f24411ff-be8f-407f-b9d5-e9278034a273", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92a369eb-7837-426e-a4a6-898e7065ac00", "sighting_of_ref": "indicator--e31a16f1-4d9f-40dd-af81-d70d1d634f33", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9aa65a9-ee6c-4cb2-98ff-66485cda0d65", "sighting_of_ref": "indicator--2998e03b-1669-42e4-8bd4-c139311f05d6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--970648ab-20b7-454b-963a-fe4a75ca9c7e", "sighting_of_ref": "indicator--4670d6b2-d600-4110-aa4c-9ec17569ca2e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51b614b2-1ac3-4ecc-9fc8-2e1552a91b4c", "sighting_of_ref": "indicator--0d5d92c9-ba5a-4141-ba44-18072bc655e1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2ac6017-8d29-4f36-acde-6703ff260807", "sighting_of_ref": "indicator--59d77f30-75ef-4db1-8bd5-dbcc65bb1342", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45cb34e4-bf2b-4a38-9a87-65c40f698827", "sighting_of_ref": "indicator--5c1f941a-b52f-4ee0-87d7-b9c5824cca3c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--355cd7c5-9248-4f90-a1a4-e48c6ddf12b6", "sighting_of_ref": "indicator--8bffd405-01d2-4c77-a672-09aa250e754c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74cf3958-7146-4aa7-bdce-cb9b1037361f", "sighting_of_ref": "indicator--a69a9307-a941-4f8f-86ed-7e530d61de53", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89c42a7c-6e55-454a-b45e-32a074aea614", "sighting_of_ref": "indicator--a46edd7e-0534-4d8a-9de7-cdc063c63847", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccd640d8-edde-45b4-8cc1-1685af59d0d9", "sighting_of_ref": "indicator--79902eb1-044b-4998-aada-c277e5fc9ebf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86f9e129-1ffb-4aad-ba6b-79e39de85cd6", "sighting_of_ref": "indicator--d46f0a77-f57e-4f4f-8e84-2d936f11a40f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--721c7b88-28eb-4b39-9175-864ba2e925df", "sighting_of_ref": "indicator--140893a1-daa9-4d97-8fd1-332ebe8099ab", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--465b20fb-52e5-4c16-bcd7-da281957be82", "sighting_of_ref": "indicator--32e15927-0d82-4ff3-9948-8546a4c66b98", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0da96d3-2ab2-444d-a670-6fcf68983ccf", "sighting_of_ref": "indicator--93d7671f-af8d-45c3-8beb-480d67fa36e1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24d77a2f-1ce5-4873-86d7-2a8fd88e6cb4", "sighting_of_ref": "indicator--70de6b41-56a1-4ceb-8257-32fa1f15196c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4634af97-5aab-4caf-98e5-de65d9193abc", "sighting_of_ref": "indicator--c907d413-ccb0-4ee0-ac41-7a0833354ec1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2609cf1d-63b3-4923-93d5-28bf74d988b5", "sighting_of_ref": "indicator--4f527a6b-8cc8-41c8-98e3-7074157c0f24", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b6d0efa-7165-45e7-ae69-109bea1ad695", "sighting_of_ref": "indicator--a3ad143a-b5da-48de-a714-05fe20dee8e4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd1fe403-c9c9-4d98-b761-d6f7fc77babc", "sighting_of_ref": "indicator--f801b7e7-94be-44ed-a0e9-34c6afb004fb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5e00552-f350-4667-bd3d-1e351acfc801", "sighting_of_ref": "indicator--ccb4895b-b337-4790-a34a-9af62d717b40", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78603c7c-49ea-4a31-8c9c-173a91e828b1", "sighting_of_ref": "indicator--4daa36eb-da1b-499c-9f7c-cbe4bbf6b319", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ba3758e-cfc1-45c2-aa45-f2c754e1bd5c", "sighting_of_ref": "indicator--c1714c13-da78-4af9-8bce-6977f2738dc2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dd55928-9dfa-47ba-9759-20642a245b4f", "sighting_of_ref": "indicator--0faf81d0-0aff-407a-823f-3f895724b91a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69911aca-0d24-47b7-ba87-12214e0b8b89", "sighting_of_ref": "indicator--f83b3c8a-adbb-49af-bd81-cd5d3983f8a8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9799fc5-bcd5-4ad8-a518-27575079e786", "sighting_of_ref": "indicator--78fcc04d-ad2b-432d-aba4-7ced518f9561", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36f7a6fe-819e-43f3-9aef-877ef2915150", "sighting_of_ref": "indicator--e36bf03e-a459-417e-9896-8fc0dd3e26e0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a550c69-d582-4604-a001-0bc947bebd3f", "sighting_of_ref": "indicator--6d06a726-8811-4e6d-8906-c4f24c927885", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48514cac-b71b-44ba-a499-a0e9bb0bc46e", "sighting_of_ref": "indicator--9e2d172c-1b79-4478-b093-850c5baef563", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9a1831e-364e-4ccb-83d2-aa59877c5f7e", "sighting_of_ref": "indicator--e802d9bd-c044-4ac7-b4c6-4c1f286a0504", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afe95187-4527-492a-8102-b87c9692b68a", "sighting_of_ref": "indicator--609abb51-82d2-450c-986e-a96cd7db5219", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92731ebc-a19e-4066-b427-44b6f698c765", "sighting_of_ref": "indicator--7aa111ba-7365-4c26-b743-32b4556f10b8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a00ab7db-ee5b-47b1-960e-391a2fcdb20a", "sighting_of_ref": "indicator--34ab57e1-36c4-4ef4-b93c-0c017a9a232f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05c52416-518d-4ce0-9a97-94fed61c4abe", "sighting_of_ref": "indicator--0f7d5deb-fb6b-4faf-9b20-f96884feffa0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a627d493-52df-446b-9c1e-2a25a4e7319c", "sighting_of_ref": "indicator--82454038-0cca-4758-998c-25c6ed1a3af8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e9da6c8-342c-48bd-9472-520ec867959b", "sighting_of_ref": "indicator--c2d5d66e-f5d9-4904-8a88-0bba5f694b10", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--965b135e-ec2b-4a83-b2bc-4bf60ff45e21", "sighting_of_ref": "indicator--10bef290-76b3-4017-8cda-c202a61b5613", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3d26822-89f0-4ce5-bb17-2ba80c2c4b1f", "sighting_of_ref": "indicator--4acf4c01-4873-4c30-be48-1707e4b2f70e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce16893b-8609-4bba-b148-324a25b6a97b", "sighting_of_ref": "indicator--303fab61-b3fd-4872-a909-b1f9fb5c8ccf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc3ca195-35b9-49d8-8a17-4ace164419ed", "sighting_of_ref": "indicator--16c90a56-ed90-414f-be08-3dd560f664c6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6054084-cf50-43ff-8b8d-4d3b9114fbfc", "sighting_of_ref": "indicator--31de46d4-760b-492e-8f97-fec1be0e3b68", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70d4100f-4850-42eb-a9b9-6e012125d313", "sighting_of_ref": "indicator--19e41cce-335d-4ea6-b3dc-2f1f1583de2a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2f3edcd-3203-40c0-b9a7-c1c92f54d7b5", "sighting_of_ref": "indicator--62a7fb74-693e-45c2-85aa-af5556215fcc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99120aaf-876d-4cc8-9969-bb11316eef7f", "sighting_of_ref": "indicator--4b619927-389c-471c-8608-96187f31eecb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e87389f-9490-499d-b78c-5257af9ce94d", "sighting_of_ref": "indicator--3fb3a457-7ce7-463f-aa1d-949d6cfabedf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e811cc0-2a3d-4a73-97ea-5b344ea673ff", "sighting_of_ref": "indicator--8ae6294a-32e3-4a43-bc39-4221f2c103cf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e93c6b96-1ad3-4242-81be-5e6995fc987e", "sighting_of_ref": "indicator--e5266718-53af-4fc1-9b16-c298803d6091", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eebcd7dc-97b6-40af-a405-3d5e468dae27", "sighting_of_ref": "indicator--9239d1ca-13f2-4d00-87d3-fb6b8530ac8e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eb64d77-f80b-4836-83d5-60320e04ff06", "sighting_of_ref": "indicator--3b22f83d-ada0-49c1-bb91-0740bc89b008", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aea10b81-33fc-4f24-ab60-a2507f4dc73f", "sighting_of_ref": "indicator--603f64eb-64be-458a-bee8-a809cd13dfc3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f371eb9c-3d89-42b0-8746-576bcef51650", "sighting_of_ref": "indicator--431ad302-7b8e-45a1-94b6-1fa555028569", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d33e799-c6ee-46fc-b53b-2a2fa88c1c32", "sighting_of_ref": "indicator--623d9481-4147-4783-9265-a89bfbce180e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28c769d3-364e-4563-b6cd-b783295eb2fe", "sighting_of_ref": "indicator--f43f41f5-a619-4307-803c-b6516e383563", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48dd6f4d-8b08-44c4-9b2c-ae3f3fd7cf78", "sighting_of_ref": "indicator--62a98c63-21d7-4b35-9ade-88fce50228ae", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46f68a7d-64ef-41fe-92b8-63b648343211", "sighting_of_ref": "indicator--28ce986f-6f70-4b27-920d-d06276c211f4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31e879f4-2c97-4897-82df-155fcab7f893", "sighting_of_ref": "indicator--34c50818-c4d2-496a-b78d-98a2eb45581f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--352a71a4-d241-4296-a307-9994c55d02e1", "sighting_of_ref": "indicator--66fe705a-0b7d-4934-9126-33d1807cd7f5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1983e7c-67ae-4fad-98bc-9ba59a50b9d2", "sighting_of_ref": "indicator--77c13935-b748-4da7-a793-9ab35d4bbd95", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57dfba5d-2a0d-4832-b80b-4cb73ee9dd5c", "sighting_of_ref": "indicator--17bac95f-6a62-4e98-b7f8-a8c30cdc0405", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca88f703-af2b-4d00-99a2-e7b64c3dc658", "sighting_of_ref": "indicator--6c350f49-5609-4579-bdf3-8d431b55cd2f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cee2cd20-01c3-4286-b6d5-ee1cc2427a47", "sighting_of_ref": "indicator--c5624243-9312-4c4e-9dc2-82b12c2b814d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f75564c-637a-455c-9f06-612ba91b4a57", "sighting_of_ref": "indicator--5b50c9c9-d628-4eec-ae1e-a071bed2fc65", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68692daa-809d-4870-acc9-e162007a1df9", "sighting_of_ref": "indicator--5c6aa6da-103b-4199-b9c5-fb9a51f0fc98", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--721a03e3-e0bc-48c3-b430-881a14c4b5f0", "sighting_of_ref": "indicator--f3323b8f-6fc0-4c64-8ced-7b83c19531b6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--002a8cf9-f10a-4f08-8661-32ae987c11fb", "sighting_of_ref": "indicator--4350f321-746a-43d4-99ad-d1a75d962780", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b912d61-e2f8-4130-9697-e4e08d0e2562", "sighting_of_ref": "indicator--593641a0-6970-46e2-a806-568e29e54ddd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc9adf70-f1d4-4f94-b863-5993e34d8bdb", "sighting_of_ref": "indicator--1e4e4419-6807-4947-bf1b-ef6bac8e8e38", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e06883f5-8a29-4533-8d37-028d24adf110", "sighting_of_ref": "indicator--7694002d-d728-487d-9aa1-da9991c66ad5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a48a5bf-bee9-4bb4-acf4-9c2459bcd760", "sighting_of_ref": "indicator--8048b72c-fb36-4b0f-a351-807d70d746c2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b9f738b-b3fc-4d06-ac33-bc0d4ead8279", "sighting_of_ref": "indicator--0c57d41e-790d-4705-b048-a3151f4c8e80", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--487fa813-ecea-4511-ae30-b16431d272f6", "sighting_of_ref": "indicator--75982780-22c7-4ecf-95d0-e40758904b82", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89a21ded-dbd9-41ed-bac6-13325d8a7111", "sighting_of_ref": "indicator--f38658d1-4928-42e4-85cf-9bd8d281c42b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5244ffc-2478-4992-a523-3f96adb9877e", "sighting_of_ref": "indicator--3fbb8b2f-dfaf-4b55-ae20-182f9daec5d1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--675660c0-6ec3-4bee-8ba6-0a2bcb7cd74a", "sighting_of_ref": "indicator--60949663-7499-4789-be82-1e53e375f368", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f1c398c-0d81-4a07-af19-aec4593f948c", "sighting_of_ref": "indicator--225bbe50-bd3c-45d4-9947-6d17d73b2acf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88d1fb28-9c43-4a78-bb15-b7a12d2feee3", "sighting_of_ref": "indicator--8c872532-e9a3-4531-8931-a23563cea633", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fcc56b6-c1ba-4e76-940e-a84f11ab206f", "sighting_of_ref": "indicator--67d240aa-0da2-4ec2-96c1-24f239de74ac", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3edd98b7-6911-42df-9087-41efc32b031f", "sighting_of_ref": "indicator--091017c5-4aa6-40c3-a4c6-bb63e06c6997", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8db2e0db-de15-4804-83db-21286912ae6d", "sighting_of_ref": "indicator--1c718db5-192d-4f6e-a33d-a9579a57d327", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abadec42-abf7-4405-9fab-cbe5f92ea1bf", "sighting_of_ref": "indicator--8237b337-4296-4cd2-9ad5-f99cee8e12df", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e886d59-cf49-44ad-b26b-98ef8d2f1f1f", "sighting_of_ref": "indicator--76270173-d3a8-4e51-bf21-017ed20f4c33", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c30414f7-ca3b-4140-8f9b-5308954eec2c", "sighting_of_ref": "indicator--dce76917-c024-44ef-8c39-e01f1997b38f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79a2675c-b043-48f3-8c71-def9037a3da6", "sighting_of_ref": "indicator--17a0ce64-f9a5-4208-a840-dd7cef7f5623", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18dd04b3-e856-4406-a884-acbae72d4e4c", "sighting_of_ref": "indicator--9c74aef4-ed10-4cfe-8627-657a881061b4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b186bc7-c735-4d6c-8485-fd2d3f695ab7", "sighting_of_ref": "indicator--455e76a1-f74b-4398-92e0-2a938f01e46f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb79122c-d97a-4c7c-abde-a1976b54d7cb", "sighting_of_ref": "indicator--5b39257f-1cad-441f-b21d-14fdcd3ec522", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d32e3ea-8233-442d-bc79-c993244d8ae2", "sighting_of_ref": "indicator--a0afcc1a-5c10-4f67-8243-c929b6c71eb1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2590496e-1f09-4f03-bdb8-a3441bd7314c", "sighting_of_ref": "indicator--81b678bc-d11a-4822-8b5d-957e103a4ad9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e2910c0-22dd-432a-8f54-ca18213675ca", "sighting_of_ref": "indicator--39d1c3c5-3e11-4481-b807-469bf8403e80", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--855ff873-ce1a-4fef-a733-10b4d03a2317", "sighting_of_ref": "indicator--21ba94b9-56e2-4d74-8096-ee89f575552c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--237e7a6e-68b5-4395-ade2-9f159b6bd5fb", "sighting_of_ref": "indicator--d03e1b12-ef6f-4564-90c1-06002b9f2f2d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11d32365-481c-43f2-b799-cd1c5b410a31", "sighting_of_ref": "indicator--cb70eb63-2e13-4508-bbbf-48b687413d27", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f64e964d-9307-4fdc-bd5e-b117cd41834d", "sighting_of_ref": "indicator--2320324b-ce9a-455b-8cae-01a04c41e047", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76c902f6-86b4-4ae7-8c30-ad51ae84719a", "sighting_of_ref": "indicator--0fd551fe-4413-439a-8da3-b793f63e2bbf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--257e0efa-a871-45c5-9316-82f11696677a", "sighting_of_ref": "indicator--7bce9f90-fb96-4d90-b63e-7d113f8a4047", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88f90ae9-6132-43f3-82f7-b474004d03c3", "sighting_of_ref": "indicator--61f549c5-ea72-4e13-87be-4c8e70499986", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63279fd8-e66f-4efb-a8ac-9be5dab32d5c", "sighting_of_ref": "indicator--96ed1699-e6c5-4144-ae88-9425aa519be7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8248119-8ac4-4d1e-98db-179e6fffd6b9", "sighting_of_ref": "indicator--b9f98937-4310-4d0d-a5da-5cb3e4f7c79d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68ff6b63-6a45-4236-a9b8-b797e2add2e6", "sighting_of_ref": "indicator--6d2d44a3-7038-4f8a-a8a4-398560f5b296", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73bc53b0-9cdc-4ccb-a01c-2a07761d5db2", "sighting_of_ref": "indicator--acc83fce-d8db-4667-bc03-f81fbfca435d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecb7a11f-e77d-46dd-bc37-f5ffacb02711", "sighting_of_ref": "indicator--723f35a4-dae2-4290-a194-9ce0fec773c6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49af38d5-3cae-48d5-9f12-63f5369aa46e", "sighting_of_ref": "indicator--2fcd6b31-93fe-4ea4-862a-7ec6768cd795", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f7a13cf-1d81-492d-b681-04e9c47e81c4", "sighting_of_ref": "indicator--07b55fce-bbf0-44e0-8ff6-9d7278681776", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ede2cd12-33a3-414b-821c-9f6350428f14", "sighting_of_ref": "indicator--dde42693-13b6-4876-92e7-6e529e17e9c3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae848a58-48a6-45ee-bf4b-1af000b6d35b", "sighting_of_ref": "indicator--faf94c23-974c-47ed-ba54-4bf3398d10c0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30300e82-e2f9-42cc-af67-7c31f60f18fb", "sighting_of_ref": "indicator--f370a5ca-8ddd-4c4a-bf56-33e55c6b573d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e81a441-a1d4-4367-9bd7-f1ad50bfb6b2", "sighting_of_ref": "indicator--b1cf4302-0c5b-46f4-aa6d-619fd7184db8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e4e3023-beea-4d1c-b2bd-5d28cb46342f", "sighting_of_ref": "indicator--9801f39d-1721-4ddd-969f-4911ae115cb2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--841d8070-c946-42b4-a2c3-c3898cb59839", "sighting_of_ref": "indicator--6712ceaa-4d51-4443-8e86-3beeb092f734", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caf8432e-4b6c-4ad0-944c-c0cd73418256", "sighting_of_ref": "indicator--34bdb7bd-054e-4cc7-8552-ea6d1d43c993", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6836c30-4358-4926-ada1-1d15b0b94402", "sighting_of_ref": "indicator--c47a1f1a-714e-4185-9e97-0cfbc8179ab8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15d762f3-c01f-4d2b-b615-630fe5f60da2", "sighting_of_ref": "indicator--61ade74b-e30d-4c82-b4cd-c7282bfa2b24", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c752b5a-eacd-428a-8e23-beefc92c7c1f", "sighting_of_ref": "indicator--c8f86cbf-8144-42bd-af4f-eb0f25805f4e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63a868e5-c9b7-446d-bba9-dd44a297572e", "sighting_of_ref": "indicator--add6480d-d87e-4e96-9c16-5593b757150a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b73184a-bf3b-49f0-bcfb-30956bb073d2", "sighting_of_ref": "indicator--82c1bec4-577f-465d-8ed1-a81ad18add43", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2f551a6-2be7-4525-8761-c40a61f968a7", "sighting_of_ref": "indicator--b9479e92-fa87-42e0-b4b2-e777d14e1e59", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bddc05bc-c534-46cf-94cb-a86b6ac1ff33", "sighting_of_ref": "indicator--d67b4631-ded1-4d6c-8571-03524159dcc2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fba8e422-c661-4ed1-8a0d-87561e13a7ba", "sighting_of_ref": "indicator--e95d57aa-2cef-4c98-b1d5-9aa2583adc00", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--149a2b69-8c67-43e8-ae25-03d1faca3a1f", "sighting_of_ref": "indicator--0278486a-c128-4440-89d7-e05565a50143", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5901bc2e-8e91-4812-97f1-bb382d49989e", "sighting_of_ref": "indicator--eb76d847-16e9-44f4-b899-ec2adfcecd62", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--474b0df9-6d02-4b3f-ba9e-260006000cd2", "sighting_of_ref": "indicator--929091f2-505f-4952-8723-b0c506841110", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d9a8336-23cd-4fee-9fac-ebdf98bd185e", "sighting_of_ref": "indicator--47f0f533-7159-4a7a-86d0-f4551713fa9b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2d9a65f-2f0b-4826-a973-7a4e47d9df87", "sighting_of_ref": "indicator--3d0e2a53-865c-4540-a09b-ec7dd1d873d0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bdaa3ae-db26-4e71-96a3-5c3a8e06c6b4", "sighting_of_ref": "indicator--cfd65b38-623a-48cf-ab35-8c3da172e21c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d7a9a7f-81e4-4706-857e-c836668ca8bb", "sighting_of_ref": "indicator--4c63cf89-6a1b-46cb-be89-8f39c83b9ab8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--761a26e1-be5f-4068-866b-edb00f3698ff", "sighting_of_ref": "indicator--013b7e7f-46af-4613-832b-b650276c6df0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6272416-7393-4516-b11e-2029c1b9f078", "sighting_of_ref": "indicator--126cdab0-ce92-421c-a7b5-d54b99dd2ec4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ddbc7c3-6581-42ad-8792-6d24b82d3aca", "sighting_of_ref": "indicator--33b7e24a-3075-47c9-9dd7-8989e602c0e7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a0ee479-1990-4093-8d22-160240a0ee6b", "sighting_of_ref": "indicator--d40bd296-8b52-499c-be18-31099a02bb66", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d745e86-e9e0-49df-b429-1c4dd8f4469f", "sighting_of_ref": "indicator--e6c59f64-15d3-42d8-993e-a7d83c2d68a0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0446071a-aafd-499f-8305-6df5ba960053", "sighting_of_ref": "indicator--42e4d4a0-6311-41f6-90d1-1f20cdb4c2b7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9301530f-5718-443d-b50c-ba9919a98b99", "sighting_of_ref": "indicator--ee49284c-bfd3-4392-8926-da29a8f45889", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0df86049-c4f7-4d09-9130-0e76d82e70e8", "sighting_of_ref": "indicator--9b5a57a5-6ec3-4c0a-8109-7ef90f3873e6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b058788-c8c7-4877-ba59-14b7638f4fec", "sighting_of_ref": "indicator--572ff74e-4d0c-40bb-935e-e8949135064d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d4dce89-c503-44d7-b1ed-3c148eae7b2a", "sighting_of_ref": "indicator--27babd70-9a0e-4c7a-8add-32235550d6e9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7decf6a2-b94a-4696-b3d8-338eacab4340", "sighting_of_ref": "indicator--d4f6eaf6-6b8b-490f-8668-7a966cc1818b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5d6b1d3-43d0-4937-882f-e7e274b8509d", "sighting_of_ref": "indicator--29f91648-4ef8-4c97-8dd0-3b4a749521e8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dace69d1-b1ea-4555-b933-875f96af2393", "sighting_of_ref": "indicator--5cfdc01d-ccd2-4e78-bda2-052595c79ea2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3df90a2-4f28-4cc0-ad0d-0d01c159dc4f", "sighting_of_ref": "indicator--cceb3a8f-1f90-4524-b759-4b141bd6aab4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77f3cf58-1a9d-48a2-969e-2561ec4b979e", "sighting_of_ref": "indicator--e4b7e995-7c6b-4ff0-8b1f-c5a306cac466", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5188b536-c90c-40eb-96b0-a72518535010", "sighting_of_ref": "indicator--c40ae3e5-1b88-46f9-bf6e-8ff02238393d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5791d6f8-da9e-4983-a571-f24ce186ec69", "sighting_of_ref": "indicator--316674b6-8283-4144-a736-e57c1abd5fa0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--664a97a4-b054-4de7-a21b-1c5aba0666e3", "sighting_of_ref": "indicator--fbbacde2-34ae-49e0-8565-b5d87a9753ab", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--226c7d43-d93d-411d-a995-c490fe6d561f", "sighting_of_ref": "indicator--481e7cda-f72c-41db-80d5-46c57cf8c5da", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc850040-f27b-4a32-81e9-dbca24f38b34", "sighting_of_ref": "indicator--2195ddc4-2803-42b4-8d8e-fb1746aa9b21", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--094c60a8-fbe1-4059-a722-633b430ad281", "sighting_of_ref": "indicator--703217f8-9189-44f3-8f0b-3f5c1ea267fb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5589b38d-fa68-4f10-a88f-9cbc398f7ad7", "sighting_of_ref": "indicator--ab801ab1-82c1-44ea-a796-e88dea95cbe2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75923c00-8d07-4c5e-85fa-061a1dbac13a", "sighting_of_ref": "indicator--dc4ced70-698c-45e2-a321-c0f8a37949e6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--868ff7d9-9989-423f-b98e-de6c8dfe5bcf", "sighting_of_ref": "indicator--534dd097-94b1-4722-917a-993653a474eb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17ee1646-a465-47f9-a57d-19e8df9529e4", "sighting_of_ref": "indicator--cf4f5097-0e3b-4bd5-9139-81aaeeee7c6f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f832e9aa-a2f8-47fe-85cd-86aa1d4c3e76", "sighting_of_ref": "indicator--aac2320a-d9e9-4929-8e8a-818feb6a2616", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b719b65e-aef1-480f-b94a-587d2f19268e", "sighting_of_ref": "indicator--1d28923c-1497-4187-b424-5db3e46d1c28", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--444c56f9-47a2-41e1-a8f0-3103470f4c19", "sighting_of_ref": "indicator--477ed209-51c2-405c-9e13-f074f729c4cf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5351fc9d-d2bf-4023-9307-75c615fc2865", "sighting_of_ref": "indicator--c98e04ac-b7d1-4074-867e-5d5fb15c0a42", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f21b81a1-e65a-4238-b110-7558aed6342b", "sighting_of_ref": "indicator--f86bd960-12f7-4764-8fa0-55a104f9a815", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bddb3cc-cf86-438a-a620-0e75f20ed341", "sighting_of_ref": "indicator--dd9eb74d-6b65-49ca-875f-d825f852a2b3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04c46388-d2dc-4da0-b621-a7b01bd216d0", "sighting_of_ref": "indicator--b50cdf53-beb2-460e-b33f-35d2fdf1c5d8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b287ab48-d90d-43f6-b156-fed81656f873", "sighting_of_ref": "indicator--87ea1694-4207-4ac7-a352-ae591f2e03d8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7d0f3cf-eff5-481c-a666-f7fd47770598", "sighting_of_ref": "indicator--b31b3523-e42a-43c3-9aa5-ca068c1dfff3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0052f05c-91ca-4de7-9e1a-315aef362b36", "sighting_of_ref": "indicator--69d1328a-1ad8-4dbf-a7b1-67ae2538b74a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ffc96c8-123d-4262-a060-200843e1db68", "sighting_of_ref": "indicator--e2855bc0-0575-44b1-8b14-00401bc54465", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c40d12b7-7bbc-4a5e-9284-7a62dcec2382", "sighting_of_ref": "indicator--c70f39d9-251b-4117-b194-61af467df07a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d9c6691-912d-4817-9822-3bf7fef7544c", "sighting_of_ref": "indicator--99f970fc-ad9e-480e-a0ae-911984f317ec", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71b8b5e4-aacb-4710-b6c0-b3705bc7eeb4", "sighting_of_ref": "indicator--38928d3e-d321-4ab9-913d-30ab389987a6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfdf1a3d-5c5b-4df2-a316-5643b3a37e3e", "sighting_of_ref": "indicator--082b5774-99c8-4638-b1ef-86cc5d65782e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d7ea330-ee02-4144-9875-1e5018ff7e4c", "sighting_of_ref": "indicator--0c6b284d-fd5b-41bc-a4fe-f1b623c11255", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d01d3216-6eba-41d1-8218-e8bf08047fab", "sighting_of_ref": "indicator--531f0168-3819-4ad0-8ed0-6d92a3561bbe", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05d42964-9516-4cf0-af7a-c420b1462761", "sighting_of_ref": "indicator--561d5b98-f16e-4000-9984-215230b54a5e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f8f98c6-8986-4267-9837-13a45f389a50", "sighting_of_ref": "indicator--4390b180-919a-42ee-bc91-3ac445682a69", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a43cd991-2f18-4c26-8f87-9e2a900f0a98", "sighting_of_ref": "indicator--7f63dc2f-17fa-4439-b39d-6fe05cfb2d38", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b147a57-4afc-49f3-bda0-74efd35c8be6", "sighting_of_ref": "indicator--bf9cb9ba-5a65-4d83-bebc-9c154dbbd0ab", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b003dda-782d-4405-9c76-982978288020", "sighting_of_ref": "indicator--116883b3-a602-4e3c-9199-2077e17806aa", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89574860-bc29-48c0-ace7-cdf06d47c994", "sighting_of_ref": "indicator--7b40a0f6-fb98-41c5-a780-497d0692f45d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a269c226-9904-4080-be7f-416bd0c9faa4", "sighting_of_ref": "indicator--74eefeee-fd6f-41e0-b6ef-4ad6549260e1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3d7c963-0fb2-499f-8111-35df7cdfad83", "sighting_of_ref": "indicator--2eb4a43d-b1d4-46b2-8ef8-f5c24fdedb82", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efaff747-36f8-4d7a-86ba-50f5b36b8133", "sighting_of_ref": "indicator--d5b3746b-d887-4411-bdfc-2d263ee90057", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dd8d585-4f0e-4d4b-82c2-ac142eb8cd55", "sighting_of_ref": "indicator--59afce73-8cd0-4541-8f56-09514fd135d4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a24828f1-11c3-4702-a6d6-65d71deb813e", "sighting_of_ref": "indicator--2a0a36cf-3d25-4762-9aae-49c9b2cc3633", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e945a13-7c08-4b5c-b3f2-0c402b6080e2", "sighting_of_ref": "indicator--9a6efc6c-c491-4461-b70d-2dc94728dda2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c5ee303-474e-45b8-b192-9de836b60cac", "sighting_of_ref": "indicator--231c9ffe-b2e7-4e3d-ae9e-4201530cf3d2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9dbf882-b9d3-40f7-b0dc-d007d800e51e", "sighting_of_ref": "indicator--a3d8a48e-cc93-493e-816e-3c98cb2bba09", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a8a71a8-8d32-4be1-a2d1-ce031fcf884b", "sighting_of_ref": "indicator--47574cf8-c134-4e46-99b0-48def23afc35", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d838766-fd1b-4bf5-9083-a3d207b42cfc", "sighting_of_ref": "indicator--f4df6966-22e2-4be8-b5c6-f103042f0238", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--168b2bb3-6ca7-4143-a495-d75ceb6ae5b0", "sighting_of_ref": "indicator--2ef2a756-9148-4b07-b83b-098c3c50e0f2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c795bef-766c-46f5-b952-ca03934cb0f0", "sighting_of_ref": "indicator--48a608a5-a8c7-4862-bd47-3394dd2b2aa0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--394557a8-11d0-4b33-afce-2dd98a188ac4", "sighting_of_ref": "indicator--5bf277f3-24ed-4bcb-a66c-129cf4c178d4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61ae9705-335a-4e80-a814-6343a2a12828", "sighting_of_ref": "indicator--fdea1b06-35f6-49c9-ad47-9b49aba1934d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44cdfe7c-1c83-445d-bc92-9f2e82885577", "sighting_of_ref": "indicator--0e1bdc1d-45e1-4f3f-bd69-9a8913feb789", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38756ebe-f8d9-4506-83cf-242e1475a6d0", "sighting_of_ref": "indicator--46e0047c-0a55-44f0-b390-e7cd245bb61f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9247bf5-54f9-43e6-8a95-085a65a1e02c", "sighting_of_ref": "indicator--ee6d209e-9850-4cf4-b798-e29cb8b112d8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d54b5bd-4013-4bcc-a2b3-f9e77133e5a5", "sighting_of_ref": "indicator--2e44e47a-35d1-485c-a00e-bb1bdf5e3747", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0e1ed68-d483-41d9-8f77-6a56426352fd", "sighting_of_ref": "indicator--6ce321b9-6e2a-4fa9-a617-580516f9fa31", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9115900-f6cb-4f26-9463-98a89a05a19f", "sighting_of_ref": "indicator--c9cca989-191e-4530-8d4f-0309faf99b15", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52f8f1aa-2f26-4568-96db-94ca0a3bd8b3", "sighting_of_ref": "indicator--3f28ddbc-3a87-486d-9df9-1601d9994367", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ae673c0-e5f6-464d-bd5b-1f7962522c23", "sighting_of_ref": "indicator--609ae44e-78bd-463a-9d64-7a3117863f5f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88ffe41b-ca5c-4195-a296-cc24814d9123", "sighting_of_ref": "indicator--eb34cc9a-8feb-40ce-bec1-df5b6964fe3c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b3327a6-0039-448e-990b-ef6473c7b9a3", "sighting_of_ref": "indicator--2c0352c2-84ae-4ffa-89b8-82f286602121", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5329bd7b-6ebb-43df-941f-5e1b569c505e", "sighting_of_ref": "indicator--0cee12bc-306f-4db8-b153-41d2df760f95", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b817dae-f547-47e4-bbcc-944808b2cf72", "sighting_of_ref": "indicator--6d2ee952-47af-41cb-8f13-bbac54cb0db8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f1fed81-2e23-40f8-89d0-88d758cb54d6", "sighting_of_ref": "indicator--67a52bae-8ba3-4310-998f-eb77a51a8c8a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f0fdf65-fa1c-455a-baf5-20eabb743cf4", "sighting_of_ref": "indicator--b8212197-1435-4f0b-bff1-900de539a2fd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f379e90e-42a0-41ce-8058-5b5b9a224d45", "sighting_of_ref": "indicator--61c97a93-a085-4e75-94d5-4b2e872b9d50", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6353226-446b-463f-8a4b-f0eaf3a51415", "sighting_of_ref": "indicator--68864a1d-16e8-4ad8-9d62-a54d07f836fe", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f68e9db4-ec21-4fbd-a1e0-7be4b9f822a2", "sighting_of_ref": "indicator--85540160-ba77-4728-877c-d519065ec243", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b08cf959-1fe2-4621-8e0e-b6b97d5cb6b2", "sighting_of_ref": "indicator--d99647bf-34ef-4279-8ed4-2d332925c687", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--789c3a9b-5a6b-4116-8bc6-edc7d512fd78", "sighting_of_ref": "indicator--d31e8bf9-aa0b-4c23-84f3-b4dad5f50ed2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5708402-665a-4a9b-9473-c6831451f0ba", "sighting_of_ref": "indicator--3eb6663e-bb24-43bb-b2eb-a8137dc5e2c7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8712a212-cab2-4847-a3d4-986317ebae43", "sighting_of_ref": "indicator--456dcf04-b0a1-4b8d-8f27-a7593dafb361", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3b22626-364e-404a-b147-b995aa6e8ff1", "sighting_of_ref": "indicator--730be393-8002-4533-b688-aa27f4eaadd0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d419a410-0b2b-4208-90d1-e4e0c6fbdfe4", "sighting_of_ref": "indicator--ff026247-d5f0-4477-962f-1abae0a16675", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5077b34f-7ecb-43e4-8792-d5de58fa6417", "sighting_of_ref": "indicator--40047341-67a6-488d-8e21-9123d4e6def4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ac86ca8-029f-4f88-83fd-8828d245ce85", "sighting_of_ref": "indicator--87c41e8d-df30-42da-8460-7e3f49bf9d90", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d61c43fd-9c65-4a4e-adae-1935fc32457e", "sighting_of_ref": "indicator--e4cd2496-45db-400d-89e5-1727a525e956", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c80f7a0b-4871-454a-bef5-eb1b17474897", "sighting_of_ref": "indicator--4bcf4e1e-bd3b-4158-ae4d-9205c29a25bd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a8b5fe3-4407-4f9c-bbcf-42c554d61366", "sighting_of_ref": "indicator--b9df585d-b11f-4518-a58f-c88850c41bae", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d336043e-d0c6-4733-8d7d-06c02d74c373", "sighting_of_ref": "indicator--5711744f-d814-41ba-9fe6-e9490648ab02", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--084ba820-f216-41de-8e0b-85f109c44fb2", "sighting_of_ref": "indicator--345886af-8991-4103-abfe-bfc07c4632a0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deeff21d-61e7-499f-ad72-6d4bf6e07df8", "sighting_of_ref": "indicator--498f7c0c-b6f6-4295-91f8-4449064dd57c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27a489f2-03c9-419c-8c64-c63aff39185f", "sighting_of_ref": "indicator--afdbc97e-636c-4fe8-805c-bcf9abfcf8a6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eff9b21-d78d-4753-8612-8a3169e87fba", "sighting_of_ref": "indicator--3fd9064e-7deb-4455-869e-e1b5ef7b0408", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73412c7e-6dad-4c88-a36a-096d32125f16", "sighting_of_ref": "indicator--b06cc403-9210-47ff-99a5-b7dec1055668", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d61fe28-50d2-48f3-8ae4-e2b636a9830e", "sighting_of_ref": "indicator--d77033c8-8c6f-49de-8053-a468deb0f66d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--086d70d5-29cd-44e4-85fc-83c4eaf161ed", "sighting_of_ref": "indicator--4df0b057-a8da-43a3-ad2a-87c7ddc8033d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e75b526-b98a-4670-96b5-f37bd2113317", "sighting_of_ref": "indicator--18c475be-b0ff-4759-8710-4beae062e600", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fe3bd9a-18e1-4f97-a648-402a451ca6bc", "sighting_of_ref": "indicator--457e7299-6009-48cf-a2f7-b9b313eeb515", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90a6582e-94ac-489e-a8a3-9dfbdfdced2b", "sighting_of_ref": "indicator--60234a5e-429a-4bda-a1c7-187e2e6c4d80", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd3c5c14-d6bb-4f07-b159-55f100659641", "sighting_of_ref": "indicator--1a2a7c9e-f9af-4ebb-85be-5ccfe0004ccd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f95f208e-908d-4053-a2aa-cf892ae1296f", "sighting_of_ref": "indicator--12d33f46-a1b4-4185-927c-1c4c4d383dd6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c63508d-cc87-4fc2-a6ee-5570e9caaea0", "sighting_of_ref": "indicator--27d9afae-0a6d-4f75-bdf3-2087116f6b13", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c695d194-f1de-4cd5-8970-2bb540a8c081", "sighting_of_ref": "indicator--5f1f6ada-2166-4f8f-a5c5-5d831a97027b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd68e31d-55d1-439c-8eb1-1b8058233020", "sighting_of_ref": "indicator--ff5fe299-8133-40ab-84a7-72f50ce741f1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce33a14a-d8c2-40e8-ba94-8fcfa0ad3328", "sighting_of_ref": "indicator--bfa35ad2-e52c-4582-be30-00ea5040abd4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b6de5f7-3bed-4bc4-ba5f-a75e0b44d7ac", "sighting_of_ref": "indicator--46c4cd07-806e-4a23-ada7-a67cd1e94c94", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b20d6453-77dd-44d2-8623-f75d8c64367e", "sighting_of_ref": "indicator--fce759e8-fb92-4ef8-b649-5e0212fced55", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--916e3f44-f51b-4c03-a012-5a2f07f13a83", "sighting_of_ref": "indicator--72d1aea0-9de1-4df5-8064-64d10d13db02", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e14f6c8-7891-4060-bb78-082722863aec", "sighting_of_ref": "indicator--a57eaf52-a7e9-4240-a570-809268f940c2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bad4e36d-a329-4a42-b178-847855cae8ef", "sighting_of_ref": "indicator--37b9a8f7-7a76-41c8-b343-76fbb5fad87b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bdb31eb-ded7-4afb-82db-8ae2761d0fed", "sighting_of_ref": "indicator--485e6b26-8aab-4ecc-a56c-a3c8b80f4cfa", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bb092ea-caa5-4759-9370-817d940430d9", "sighting_of_ref": "indicator--0a35208b-0dd0-4794-a870-a47ae68a4fc4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c9493e3-d8c3-4efd-a718-f8019591b3f2", "sighting_of_ref": "indicator--ee21f453-5006-44d6-b5ca-31418f890f2b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf0f60e6-87c3-4adf-8881-87be0ba13811", "sighting_of_ref": "indicator--6cf66324-adc6-4270-a390-7676ca6d4d7b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a365198f-ea82-4f7b-ac4f-86db03620eca", "sighting_of_ref": "indicator--c3d59701-3a44-464c-9fe1-d331717cbf96", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a3ed8f7-5e94-4e9e-8df6-f28ba1f0a5c6", "sighting_of_ref": "indicator--07cb1b6c-f1b3-476c-9a45-536e14aa6b7b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ff7d837-3400-4ba2-aa64-7fab2212eac8", "sighting_of_ref": "indicator--c48d1b9a-5034-4aba-92ca-aaf0e94c07dc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdd45315-c612-4c99-a7bc-57075d6e8952", "sighting_of_ref": "indicator--509b5c4e-685e-4d57-b6b8-566c699a7954", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb4d3856-0de8-4fa3-b4ee-e9558cb058d3", "sighting_of_ref": "indicator--b994f2d3-294a-418a-8a44-c7c7179a48fb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04ae71c7-90da-48c4-8fa5-ff55ecfd86b5", "sighting_of_ref": "indicator--d3afed1c-6500-4818-a3e8-461c4355e41c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0ae8b99-c46c-4be8-b488-5947d397481b", "sighting_of_ref": "indicator--c492e396-4965-4e3a-b7e4-b6f3c269725d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0739d9d8-ab48-436b-b877-c3cbbf5e09ef", "sighting_of_ref": "indicator--9e0918a5-7a19-47d2-8def-3c3386405820", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e6441cf-de74-498f-a5a5-1c722e5da1ac", "sighting_of_ref": "indicator--661cc5b4-5c68-46e6-aecc-3b33682249d4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65123bd4-c549-412c-8c51-5ae1bcdc7883", "sighting_of_ref": "indicator--09285f24-6275-43bc-8d6f-83bb6c9f0816", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24d6d7a6-0330-4421-b5a9-1cb46951b36e", "sighting_of_ref": "indicator--f891fcef-1fcc-4d94-9006-4ef1c72f0f84", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8d52749-aa2f-4c5f-941c-ea77e5b9f3d9", "sighting_of_ref": "indicator--76410e15-b9ae-4008-b836-84a355f92943", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--570cabeb-3a28-495e-a1c6-2ce4e0a173cf", "sighting_of_ref": "indicator--8713f5d4-65ed-4e5b-bcda-b1a40f1bed9a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--058acc89-6199-42bb-ac8d-8de3a70ea2cf", "sighting_of_ref": "indicator--2f03102b-0a35-4066-9696-4bf8f2d2a697", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40de58a9-cd32-435a-85dc-c96183072cfa", "sighting_of_ref": "indicator--a5988ab3-e98a-46e6-b4f4-29fb6fe6dc2a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3eadd35-1081-4e0b-9baa-f5ac57c235c2", "sighting_of_ref": "indicator--d1356d4b-3a7e-44c8-8e5d-41002137171b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8120601b-ea21-4b7b-acf4-4d6cb3bc48a9", "sighting_of_ref": "indicator--213660d8-abb3-4b59-bb81-f9685cd64c47", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb1ccdf9-f94b-44b0-b031-c02d281c59ab", "sighting_of_ref": "indicator--da8b322a-9d95-4ac7-9376-26d760610f8a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79c3251f-9b4d-4b4b-b210-0bdc91dffe59", "sighting_of_ref": "indicator--7c692553-9e42-4be8-a36c-b0b86e8e5274", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de4d544e-2207-4ef3-a00e-c83901f9af96", "sighting_of_ref": "indicator--41d96e4d-0f58-4acf-83ac-fdc9d05de1ec", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fdfbc04-84d2-4958-ac1d-861b6528efcd", "sighting_of_ref": "indicator--036fc574-d5a8-47d4-9957-088dfaae460f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b75b21e2-837d-4bf3-a846-a9aad0660169", "sighting_of_ref": "indicator--ebe26479-fa6e-4d14-bc22-417beec07450", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--771587d2-95d9-4adb-ad8a-f2cf9b4e2fb9", "sighting_of_ref": "indicator--1e598a22-9c54-4c6c-bf95-418a4e43a44d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bfdd0da-c3ee-4073-bae3-2102f55fbdc4", "sighting_of_ref": "indicator--b425524d-264c-45e9-9de8-b88401ec1b51", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a3a21cd-ca02-4d02-8db6-b95bb006973a", "sighting_of_ref": "indicator--e5261e40-2490-4bcf-961a-11e412e9828c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5d28253-4576-4892-9301-596c71e5b4a6", "sighting_of_ref": "indicator--99605515-a32c-48ad-83ab-a141862b9d65", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c24d12ad-2c10-48e3-80b9-734ee8e64eef", "sighting_of_ref": "indicator--9e3197db-7678-4aee-87d3-e2389efc6fee", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e2a1afc-5f08-4a95-96ed-3ff5e0dec211", "sighting_of_ref": "indicator--6f46229b-02bd-4a2f-834a-54519a14ce16", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e2858c7-9f17-413f-a0e3-92a8dfe9a582", "sighting_of_ref": "indicator--fe8c073b-88ca-44e5-8ae3-6f9cd2029765", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06733ccd-de6a-41d0-b885-1e987ea6153d", "sighting_of_ref": "indicator--19dcfb0f-5ab1-45f2-8a23-a25c2c8d23af", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d937fd6b-cf3f-4e04-987b-f36359e52a8c", "sighting_of_ref": "indicator--4d3bb5c4-98cd-4fdb-a605-9b379c102229", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b35e6aae-6fc4-4ed4-97d4-4fa991d48478", "sighting_of_ref": "indicator--f1ccc9bd-3705-40f4-8841-bdb382768260", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ae03a96-0dc6-4896-8a8d-2360686ca0ad", "sighting_of_ref": "indicator--559e6670-e518-4a31-b9cb-606cae6d1f7a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8551990a-173c-4709-919d-c2cef1c137f6", "sighting_of_ref": "indicator--d3fcec1b-cf02-42e1-b05d-5486e08fb03d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--388dd975-7556-429a-8fba-fb7bb2f05ea0", "sighting_of_ref": "indicator--5bd4095b-7ecf-480d-a52d-f70b66f477c4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9235464d-adab-415a-bb4d-6ccb16456f9f", "sighting_of_ref": "indicator--127a5e3e-4f29-4307-ae0e-dd689de3bfdd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aa4e150-89e0-47a9-a92e-bb1d284dfac1", "sighting_of_ref": "indicator--aa515c7a-de99-4bd2-aa17-f733a47e671f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fc475b1-41e2-4e4b-bc73-6d1269ab0f4f", "sighting_of_ref": "indicator--2b72d4c0-cf80-4598-8da9-4d1f7c51df5d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cf5a988-c3bb-4721-9616-114b77a8f64e", "sighting_of_ref": "indicator--405a5ae9-3b68-4d1a-872b-e5c4ee5b8425", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--865953ca-434b-4ea2-875f-cebf9c55a4eb", "sighting_of_ref": "indicator--ec7cf36b-9039-4570-a4da-2daf3da7f674", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3615048-5c40-49a8-b49d-bd2306fd7d92", "sighting_of_ref": "indicator--90e63b7f-a47d-4279-b27c-3e4cf49d1822", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--499efab4-b3d1-4cf4-baff-6760d7ff95cd", "sighting_of_ref": "indicator--3c01aff3-05a2-44a8-9785-ab6db508fee2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd6214df-4ae3-45d4-a9f7-49d849f50646", "sighting_of_ref": "indicator--3d8657ae-44ef-4adc-9c1a-f4e6766933d4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a95ca21e-752c-4458-9a39-c39e8a4fddc8", "sighting_of_ref": "indicator--09a740b8-f0fd-431f-9aae-6333da23c881", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f53c154e-102f-44df-9f33-e82d5cbec71f", "sighting_of_ref": "indicator--0bafc1b1-6369-458d-80ab-8944921c4197", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdf80a27-bec8-4a29-894a-b68de51466d6", "sighting_of_ref": "indicator--4d7b4e87-0218-47f9-b609-ac9608abb160", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04a4bcc7-5d1e-43ae-8cc3-ad915b84a1bb", "sighting_of_ref": "indicator--30e6a6ea-57c5-46dd-9889-9f9852dfb43e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3843f610-b638-443a-94c1-b950b2ba5d97", "sighting_of_ref": "indicator--4956508b-c3bb-40b1-bb31-74da0650e2d6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31999228-afc6-4e12-b881-13d5edf3404f", "sighting_of_ref": "indicator--db3948be-3ed1-4e15-a4e3-904b1c57d1e4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad4a906e-875e-42a0-93d8-b1f738f12516", "sighting_of_ref": "indicator--34fcfb49-bd9a-4d75-9eaa-c13111e693c8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2700f3ed-aa15-492a-9a24-f9852d3ce47b", "sighting_of_ref": "indicator--8fa57821-28c4-4263-9b26-7a991de50444", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f37b2fb2-c054-464f-ad16-f63ff5d0e7c4", "sighting_of_ref": "indicator--f14d73f3-f237-4c88-b63c-ed211900da8d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb83130f-c1b9-4f48-ae7c-de58b5cf1fe4", "sighting_of_ref": "indicator--efa9d7a9-2766-4bc4-ad56-857164449ff4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fd80763-4468-43fd-a415-f24880c0f792", "sighting_of_ref": "indicator--085b9689-7e4b-447c-92cc-4afab5a5bc22", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c3b2d6a-d05b-41d2-9d57-19bb5dac13be", "sighting_of_ref": "indicator--f9ef18b0-df8b-4b7a-8652-0523d562c39b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b9866f4-d5a6-4512-94f6-b8a63f45ab6c", "sighting_of_ref": "indicator--48cecda2-b0ed-4c98-936e-249aaffd3b7e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--158de551-6b78-4578-91f2-10ce3a920f62", "sighting_of_ref": "indicator--7ea2a943-a80c-4d83-acd5-285d632756ab", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbf1cf31-fd7b-4a0c-bbaa-b395a7cc6768", "sighting_of_ref": "indicator--a4729028-2ba5-4cbb-894c-80bef507ae98", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94856d22-29d8-428d-89d8-0f8dc1837969", "sighting_of_ref": "indicator--3e5ecd3f-792e-4792-ae59-4c57a782d707", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9ccd152-dd2b-47e0-9a9d-55073b4a05f0", "sighting_of_ref": "indicator--0d3ad60d-1caf-4fb6-a378-6fc8aebdfa65", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e11bdf0-0ad8-4a51-b11b-b5f014dfa9c5", "sighting_of_ref": "indicator--d70c24b8-bf22-4d8f-a19e-7f9a21288acb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1db4f9c-39ff-4a27-a102-455a2bfed328", "sighting_of_ref": "indicator--9afbc5ce-b53f-41fe-a26c-ddf27d557661", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caa4fddf-4e61-4197-91f8-910fff5e3fde", "sighting_of_ref": "indicator--884c1cf4-e998-4531-8225-6f90df820894", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e247708c-881c-438f-8551-721325d40fab", "sighting_of_ref": "indicator--c0da27c3-2081-4dee-8eba-2565b735daa0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da56ea37-80ff-4b6d-9827-14d8cb4d7dc5", "sighting_of_ref": "indicator--a24fce82-1196-4d88-8fa6-85cf7af0fdb0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46afea07-124a-4b11-b9fd-a5f0194b9dff", "sighting_of_ref": "indicator--7856eff3-ea23-439a-a915-4f68e64b186e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16a36177-b3ee-4eaf-a101-b37080719e00", "sighting_of_ref": "indicator--96c4e7f0-2910-4a44-b073-618d63df5993", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb8de1c0-5785-4332-8623-5846d2f06b2a", "sighting_of_ref": "indicator--315ad397-78b2-478b-9317-31e9774e79fe", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2acd857-bcf7-4c8e-b40f-a14915e996fd", "sighting_of_ref": "indicator--50105a12-67cb-4848-832d-4dc2c444af1f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5df9726f-1c0c-41ea-b6b3-7b7b4d87d6fc", "sighting_of_ref": "indicator--4120ff10-6ab0-460d-a5fb-44af476ab471", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a90eb20-31c6-442b-9eac-8f0c1950f575", "sighting_of_ref": "indicator--cdbb9dfb-81aa-4021-b0b5-f77644c31765", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--340388da-8845-4fa6-8719-225d2beaf164", "sighting_of_ref": "indicator--f7572c51-0cdd-429e-91fa-d0b3b3dda8bb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce84e441-1acd-4421-b3f2-862680779c25", "sighting_of_ref": "indicator--37a3aed0-26f5-41e0-9a72-4fadd4daafba", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ecbc676-7ef1-4e9f-a0c6-eaedc455c54f", "sighting_of_ref": "indicator--ee3a664e-40ea-411f-9c87-17a3db4e8b3d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f697e440-b80b-4471-b441-915b7a9c51cd", "sighting_of_ref": "indicator--e410a64d-8151-463d-a041-f5ecb06dfa76", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--812a4048-d9fc-4608-b683-ba5244ed36bd", "sighting_of_ref": "indicator--5ac78678-4352-4908-bcf0-bbe0867e7471", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31f36534-0413-44bb-b550-e387ddbe9ac4", "sighting_of_ref": "indicator--ec4d8505-0c92-4a00-bc34-b7e990b824ec", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99ef89fc-af1c-4946-8a46-fe7e23fc43ff", "sighting_of_ref": "indicator--24a7931c-f5f6-4d88-b304-5a41b30471b5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81851da0-3114-461e-b490-1e9697405f32", "sighting_of_ref": "indicator--337ff601-45a6-456f-8547-8d4385c48f61", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10e8806d-0ff6-4fa2-bef4-679a684a1d79", "sighting_of_ref": "indicator--d2c405b9-fa32-45fb-83ca-e54284fd6293", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74f7efac-4b94-4f30-a676-95ba1a72eaf4", "sighting_of_ref": "indicator--b5885b51-283b-48e6-aa59-737eb7298d8a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6a2b976-4751-4fba-90e1-b4753db3fa59", "sighting_of_ref": "indicator--78dcef4f-f585-422c-8460-74e025662bb2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ca620a9-2902-4667-a571-26c207303320", "sighting_of_ref": "indicator--54e1f41e-4453-4e9a-a84f-674acf480a84", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5df8959f-0334-40f1-b079-341d3900e5d2", "sighting_of_ref": "indicator--4ed0504b-a3de-4371-8118-94aa4f13aeac", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f861062-4053-4a3d-83a0-e8f553d71a9a", "sighting_of_ref": "indicator--392745fb-6c01-44ec-801b-8256c1c896e1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65254b39-5ab9-4bdd-ab54-73bb6e7c9324", "sighting_of_ref": "indicator--bdf758d3-0f9d-4326-96fa-4278a4aebdcb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96201bec-8448-42c8-a8d9-8500456acfee", "sighting_of_ref": "indicator--31c8a081-377a-48be-8dd5-0a1c99013999", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8696856-5e66-4557-81bd-0e034fa861d3", "sighting_of_ref": "indicator--e3898495-81f4-4316-8c19-cbe23eb96d78", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51bd9837-a86c-4008-835f-33daa2e0c696", "sighting_of_ref": "indicator--6ca2b87d-08a8-4599-b192-cfab017a918a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b8fe61e-0d2e-4a5b-9eaf-9858578b2b15", "sighting_of_ref": "indicator--8d54f29b-0532-4a7e-8a01-b317f182110b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65c70163-e769-4668-b90c-ba5bad638e96", "sighting_of_ref": "indicator--540bdd76-588f-4407-b124-7d722aa48c97", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--472d34ca-1d5e-4e2e-a11b-17d3364096a0", "sighting_of_ref": "indicator--312fe454-448d-44be-8a89-ec1ab079f20c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5986392b-19e0-440f-aa51-43bbc4f4b792", "sighting_of_ref": "indicator--1c740f86-b0ea-4120-b4a6-5c0e4086a453", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05b44f4a-b622-4c2d-b369-8a1650637d63", "sighting_of_ref": "indicator--da05772e-def4-4c65-b173-cb456ea73d32", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2f64df0-0460-4ccd-b622-e1526f5c7626", "sighting_of_ref": "indicator--8b8d8177-5e36-49fc-b76d-fa8e6c55b2b7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f172eb49-3730-4581-9533-c5bfe710e186", "sighting_of_ref": "indicator--e852f449-0802-4658-9d2a-a16f59b534ba", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd71713c-1245-4d83-9b68-43fcfb98b723", "sighting_of_ref": "indicator--d4b0763b-3755-47ce-9c3b-eabf54cef19d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af524020-5dac-4eb5-9fa5-92dfe89383e3", "sighting_of_ref": "indicator--3bac9b1b-5183-4d11-8b1f-ef8c85c02c63", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a5e620c-f6d7-42da-93fb-ddea97f277f1", "sighting_of_ref": "indicator--67d8ecae-5871-474e-a4b1-c830bcbbf60f", "where_sighted_refs": ["location--c71c2550-5849-4a8d-b050-635a93ef5467"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ef9d46a-58f8-4008-bcfb-075327bc9635", "sighting_of_ref": "indicator--d4d7c1d2-ed7a-4ab5-b113-0649c1d8dd2a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24b33fd4-4e6a-4309-804e-509134e47a1f", "sighting_of_ref": "indicator--a6bd40a3-272f-4baa-aab7-7e141204a43a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fafbabb2-c643-45aa-932c-73bb46dc6791", "sighting_of_ref": "indicator--9bab9da8-4396-4ae8-8f68-050cc7eec198", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6a9ec13-00f2-4ab0-8e17-5b2be0d19c9a", "sighting_of_ref": "indicator--24871239-7faf-4d15-a5eb-a48ae3f148a5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b42f5f3-f7fb-4053-a54f-bc555b0a266e", "sighting_of_ref": "indicator--f7b5e1ac-c3c6-4c2f-8904-ca6a64ff1016", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8119c7e-7a30-4691-9fda-e1c015c14e63", "sighting_of_ref": "indicator--b6af32aa-426f-492d-8d41-17b939edcc77", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db415f5a-a145-4483-ad48-af1f484f60ef", "sighting_of_ref": "indicator--463b9f23-1e5e-48fc-b804-41b08a5c02d6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c81af562-92cd-4ac5-843d-b78114a7b5d2", "sighting_of_ref": "indicator--b39f50bc-d8f3-43de-baca-61fe482cdf89", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dde1c8bb-9d79-4102-8a37-b659827b4202", "sighting_of_ref": "indicator--3986109e-4600-4563-9804-77767581a0d8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2aa64eb6-c61e-48ba-9315-4520be8c4fb9", "sighting_of_ref": "indicator--1b008166-17f0-4cc5-87c6-8c1b8ddcb5bb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d14cef6-b930-488b-afdc-ae4b80c2d3f0", "sighting_of_ref": "indicator--94f21ad3-172f-40c6-b45a-cd316fb808de", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f96d1834-5c5f-42e4-9701-604352727286", "sighting_of_ref": "indicator--cbc88502-508f-4d80-acf0-11bc7a200953", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--badc609b-6cbe-4c19-a99f-c857606710fc", "sighting_of_ref": "indicator--2a9215af-4f91-455d-87ba-0fea985b2bac", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2ea5982-fda3-478f-9ab5-b5bc6f7bc034", "sighting_of_ref": "indicator--cc110135-68da-4a7e-83ba-a6c5b2329c44", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70c25853-01c2-4925-bdf5-4da2d5bb4cb2", "sighting_of_ref": "indicator--ee024aac-e261-45ea-aacb-3a1a353b2c65", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33a21f93-9dfc-4dd9-8543-dd07d06fdeef", "sighting_of_ref": "indicator--296fb473-9980-48a7-9372-103957a9c787", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74d312c2-be5b-414e-870d-3db081617d96", "sighting_of_ref": "indicator--7a6ab920-5237-4a9f-872d-2d826f0fb5fc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0ad3b4c-299a-41c1-a700-61ea00cd0c3f", "sighting_of_ref": "indicator--9f18581d-c1f3-4371-a17a-05712bcbe1e3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0c65b4c-28b7-4cd1-8da0-55efcdfe5f82", "sighting_of_ref": "indicator--846c926a-7532-4302-840e-cf1e2673eee2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90436fa3-ea42-4897-9d0e-2315ca25b851", "sighting_of_ref": "indicator--c69b50f8-8525-405c-bf73-2c60a1966596", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9cf5853-d938-438a-bab8-2931514e4803", "sighting_of_ref": "indicator--39e1e265-6aa8-4fff-8192-38e6f7c02da9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--809173dd-6426-4ab7-94bc-25898e030986", "sighting_of_ref": "indicator--37291fcd-fa4b-4553-8bbb-92a88aec6516", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0968215b-136d-405a-9a90-edc0ed5e8ad7", "sighting_of_ref": "indicator--f463bfc3-f2af-4c49-8f6e-afa1ef232cc5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4770c00d-2751-497d-a1f3-2369ee8d0cb5", "sighting_of_ref": "indicator--ea3bef73-13c6-410f-be61-a2e6680d7e3e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a364fd9a-3fb9-437f-9bcb-45f21fc1ec03", "sighting_of_ref": "indicator--6a15cd74-bb59-4f39-bd30-2bfe46e46b9d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d26dc460-3e03-4e65-999f-b4ee7cf2f435", "sighting_of_ref": "indicator--9c7c990d-3d67-4706-9206-fc7d4367b48c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70f03e3d-1a44-4f41-a241-7576743ace10", "sighting_of_ref": "indicator--697b5265-a554-4471-b6f1-be30b23c95d4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80d9beff-a9ed-485e-8415-ced3f360ca3b", "sighting_of_ref": "indicator--e22fe27e-28c6-4b70-94c0-b8fc84524118", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--619a37b5-c6e0-4d2b-b053-a14468ad7174", "sighting_of_ref": "indicator--2ce7b029-675a-45d7-9099-3e1aca61bfd4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4d9e4cb-6703-4361-afb4-d121f53ebda4", "sighting_of_ref": "indicator--978073da-1441-467a-b30e-5ee154dd4f46", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3dd6285-8d89-46ee-ab01-10ab3174aca6", "sighting_of_ref": "indicator--a800f23e-0a8b-479b-b06d-108d96d70ea6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c4a601d-6cc6-4683-8d71-95becc96a705", "sighting_of_ref": "indicator--fc70d3b2-e234-4a9c-b2cc-9b97d64b7e33", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c1c8638-d077-4109-8eb0-eb9ce6e289a7", "sighting_of_ref": "indicator--d89271e8-c7bc-479a-9017-bfa0671122a5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--351a51c1-daeb-4d42-b290-cb6ccc9922d0", "sighting_of_ref": "indicator--ec3ee33c-d823-49e1-847a-99de5b5b2f87", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6984247-2c21-4c10-bbb5-cee941c8bc52", "sighting_of_ref": "indicator--7acaf4d9-d0fb-411e-8406-954dbcfa7b5a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aadb8f23-0dff-4c17-8ae7-b00faac13b83", "sighting_of_ref": "indicator--20014738-ef98-4874-a7d0-120086eaf915", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a339e86d-c9cf-4199-aca5-4dfebafc9ad6", "sighting_of_ref": "indicator--4ba01bbc-d742-46e9-9a06-4b16e0a8efe6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65551c42-9988-4813-89f6-c7f5698d6d85", "sighting_of_ref": "indicator--81cff66b-6a82-41f6-bd59-bbd219f6ea85", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e424c1d-0fe7-4003-97b2-1b38cbc0ee0c", "sighting_of_ref": "indicator--c04b1f3b-90df-485c-99dd-2a235a93fde2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6342589e-e89c-4054-a77c-f08a18ebfaf6", "sighting_of_ref": "indicator--c3c5b122-4827-4af1-b426-c83abb916308", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca6cd5c0-8e0e-4a0f-a801-acbc3e2986f3", "sighting_of_ref": "indicator--e6d8738f-57e2-41ed-a4aa-f0e875c78f2a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddfae0cd-06c4-4bc8-ad00-6b76f4881fc6", "sighting_of_ref": "indicator--da735515-dd79-4a6f-93ea-12b8dd3d6b52", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--353d11f4-d4b3-42b0-be92-11099696a38e", "sighting_of_ref": "indicator--8bd7e9bf-3783-46ee-9e37-25a4c7ee4c1a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f1ad9b3-d0e8-4820-9647-6fdd31141237", "sighting_of_ref": "indicator--624858d9-ba25-4bb6-8bd5-e54b7b398101", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aad14538-8552-4ed4-8135-6beb2cbc4d3a", "sighting_of_ref": "indicator--e519c0eb-fccb-4fed-a7a2-4b98ac18720e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--673a9d44-4f2d-4690-9ba7-e24f2df7bcaa", "sighting_of_ref": "indicator--5da49382-7019-4cdc-9d68-2bb11f261f93", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f889aade-07b6-4f17-8bad-61b189e5790a", "sighting_of_ref": "indicator--e7210f2a-cfa0-4d32-906e-ab4f22ca5d19", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3002672-7a8b-4a7c-ba2d-40acc8ecd04a", "sighting_of_ref": "indicator--7924d50a-9ecc-4fa2-986b-74df42610e48", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12bd8b35-2933-467f-b130-2d68797e2fa0", "sighting_of_ref": "indicator--ecf2fbeb-2b3b-4476-8fa6-637f36bb69ee", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d3ab884-d053-4e23-833d-572b4173ab9f", "sighting_of_ref": "indicator--dc1fca04-20aa-429e-a2f3-4d37b85c6d64", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9562644e-40a4-49ef-aa62-575508a89f18", "sighting_of_ref": "indicator--98485438-e350-4e26-97a3-643d5d16fc1b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80f8b90c-80e8-4e29-8926-530025b5bbce", "sighting_of_ref": "indicator--af6aa94f-be74-475f-8c18-63106ba15503", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d6cda03-89a9-456a-96e2-b8843665f1dd", "sighting_of_ref": "indicator--112c6904-0732-46c9-b9ca-4049f92f4e01", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--072177d7-3bdb-4cdd-b68e-99a4eabd750a", "sighting_of_ref": "indicator--6cf97ba1-0e0c-4205-98c3-5ad0f89c2ca3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74600e3c-e784-4b7d-8813-ee970786e58c", "sighting_of_ref": "indicator--9ad50223-e892-4866-a4e6-5a7e356876b8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f9de578-2685-4ad6-a29b-726519e4561a", "sighting_of_ref": "indicator--4a5b9138-b2a3-4f47-9c03-aaf247279e07", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f3aa1ca-009c-4c4f-ac24-13b738895d71", "sighting_of_ref": "indicator--9f5ff407-e55b-4388-8325-94e506cb88f8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72409d39-edb1-4025-82c6-2047a44ee174", "sighting_of_ref": "indicator--24172c03-12ed-4bac-bbf4-dbfcfcb2d565", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4224726c-0707-4fd1-8dbb-1be515ffebb7", "sighting_of_ref": "indicator--d4f24eb2-7601-4ca5-8269-b2e03e0815c4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3361f458-c18c-489d-bcc7-a13810648e78", "sighting_of_ref": "indicator--873da975-8dfc-438f-910d-ad895a5554e1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76e991f7-9ee4-4c25-838f-d5a83bc7296b", "sighting_of_ref": "indicator--1e73b529-8087-4fc9-9aac-0c6ab9249b97", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31adcfe8-9ff7-4acf-ab41-41399a66fd5b", "sighting_of_ref": "indicator--ed102e7b-8767-4959-b56a-7d191a211e9b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c960055-9be4-4fc6-9a0b-d4473b6d4a3c", "sighting_of_ref": "indicator--d89d8f1e-b448-4c02-bcc7-c58c42ae09bd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04b5fdd7-5ba3-47c9-8dd6-a823af64e2b0", "sighting_of_ref": "indicator--60bbea21-3d9c-49a1-920e-f788a98f6c3c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ec8ffd4-bce3-448f-9898-dd366a914d55", "sighting_of_ref": "indicator--435822b9-51d9-4d5f-9e1c-8af0ac2ba218", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--755bd569-3cff-4dcb-9fb2-90c28f81c9d5", "sighting_of_ref": "indicator--d2ec9a67-ca53-475b-9f05-916d4dfff827", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--341df8a7-f37b-42e3-b279-2084b41bd84e", "sighting_of_ref": "indicator--320bba23-ca92-4840-9dbe-1b71c807e5f8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c74816f0-1c93-412e-ac58-f23b80ab0336", "sighting_of_ref": "indicator--1ad9b40b-849a-4bd9-b981-71dab3a875e6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef5d4542-b9ec-4ae3-8be6-48eb99b8ec5f", "sighting_of_ref": "indicator--762c4977-5562-4790-bdd4-f4b9f1495fee", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20659e8f-34a1-4155-a3ce-3f5ad622b2aa", "sighting_of_ref": "indicator--0a31a9e0-a58d-4853-b5ad-7c795f462b63", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb0591bf-8d17-40b0-ba6e-27c71a504cf3", "sighting_of_ref": "indicator--c8d5a11c-d85b-4168-8654-2112c643280f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6855b4cc-68a9-4d63-a1fa-1ea649146836", "sighting_of_ref": "indicator--1a4f17b3-1735-4c88-ae5b-fac5f2f79bf6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1946866d-121b-4d6a-b81f-5a9751cfc653", "sighting_of_ref": "indicator--bf321e3d-a53c-46b0-b3af-a8c502b91097", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7361594b-282b-49db-b00b-22a71a973bb4", "sighting_of_ref": "indicator--54221eb4-8d9c-42bd-bb1a-89b1e4d5cdab", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83d93c00-1fc6-4642-b1de-7511dc28e916", "sighting_of_ref": "indicator--bfd3373d-32bb-4c20-a4fc-fcd59bc40118", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9315e7e6-d5a2-4727-901a-6180ee470e8b", "sighting_of_ref": "indicator--29ae3698-67d4-4592-93ba-91fcbdb44a66", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--994baa42-ab8a-45e0-9f6b-21f28a255f79", "sighting_of_ref": "indicator--409d948d-0598-447c-aeba-c1d50cb379a6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29d83c38-abb1-42f3-b1b9-a5d4b3713130", "sighting_of_ref": "indicator--e5fd4372-4ef7-43d8-9df1-a65884b4c097", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c272f918-fa15-4839-8fef-37f4d8992bff", "sighting_of_ref": "indicator--355e8850-93da-4330-b29e-b5df4510f9d3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55adbdeb-3e84-45cb-b01e-713c088c308a", "sighting_of_ref": "indicator--766a2ffc-deac-4cd9-8fee-ba9c1fcf6c21", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c5a3fe4-1811-43bf-8956-3c1841c17ae0", "sighting_of_ref": "indicator--f3353edd-7e5f-448a-9c2c-208758e32c72", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83b417c0-8159-444e-a8bc-7b062e971a43", "sighting_of_ref": "indicator--cfa68c11-0f12-402e-8090-6142d7e3ca25", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46a24590-2b78-4fa9-8eaf-52042ec5c426", "sighting_of_ref": "indicator--517e8d65-e108-49ef-97c3-9a327cbe4ab3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2f35679-6668-4922-abf4-eaf09db904ce", "sighting_of_ref": "indicator--a7e00176-c820-4088-8494-e2aff05a5c2b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9559ec3b-d29d-4fd2-aa0b-38c4ddfbb6ac", "sighting_of_ref": "indicator--dce27b5c-c86b-424f-86f3-0637aacf30eb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--337f4936-ed48-4c34-a1fc-38e1e45ad58e", "sighting_of_ref": "indicator--1b3d992e-e6c6-43a4-ba15-c841ab2a4358", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9adb1659-f58f-4200-8915-0ac00b1b7972", "sighting_of_ref": "indicator--66bdc270-ee31-4819-896d-e2594d640dc3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1795bede-45b6-4509-9762-c2e0068a8cbc", "sighting_of_ref": "indicator--95cb1417-82ec-4c57-aaf8-2da084ecd682", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b68f9f6a-ed99-4a20-bba7-aea33aacb47b", "sighting_of_ref": "indicator--c2c82a78-dd89-424c-8375-901de073aa7a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc138e31-cc5b-4276-b611-37a3be86e2fd", "sighting_of_ref": "indicator--4b5d34f8-7eb4-4719-a740-6a5a2accd543", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66d38efe-b7aa-430a-8ffe-b6b2df1b902a", "sighting_of_ref": "indicator--b13c031f-f118-47a3-a0f4-4ca84cd2a9c0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2050f54a-15a2-45be-a298-cd55c7205790", "sighting_of_ref": "indicator--029139b3-417e-4086-b2aa-e64b2929210e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12acef2c-6872-4d4f-81ac-e68db94c3ac0", "sighting_of_ref": "indicator--5654f833-d76c-406c-9f3f-d9dc93b326c8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d3b3772-e4b3-4ec9-a3ad-7d231e36b4fb", "sighting_of_ref": "indicator--03d6c44a-0ed4-41df-a5cb-ffbb855dced6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2745b0e-d6b6-45d6-b9e8-c91511cee7bb", "sighting_of_ref": "indicator--0b45c45c-4280-48b6-b217-ac45cc1936ed", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f31ae881-ec19-4143-b4f7-45581413fe7c", "sighting_of_ref": "indicator--afd77b75-186c-46da-98ab-aaa2770e8f8a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c967e8e5-4d67-4f6f-8040-70018d44485c", "sighting_of_ref": "indicator--7a7f64ac-c242-4a96-a800-cb02e020e400", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--941a5214-bd6e-4549-834d-adbd24ff86e1", "sighting_of_ref": "indicator--71fc2983-8403-43c1-b583-d54eefce7691", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5149d697-5324-4c2f-8092-ec7d988121fa", "sighting_of_ref": "indicator--01d32aa6-28f0-436a-aaa4-33785652d68c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73636bbe-7398-4479-b948-e78cfd54ce4e", "sighting_of_ref": "indicator--9e309c21-f830-4f7b-b00c-9d2cd9d679e6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8e52016-252f-4b4b-a57e-a9d6a36fee3d", "sighting_of_ref": "indicator--45477154-d7d3-4e33-9d5d-0b3990e70a2d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fcb92f0-3ea2-4114-b142-4ba35a5c5236", "sighting_of_ref": "indicator--90dfdc70-e0ae-4957-99ea-0ca31d7bac75", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06ca79e6-3690-4584-9e0b-409f8a1dc587", "sighting_of_ref": "indicator--c37c4ace-ad7e-44bd-a935-bac42454e329", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6324695-4595-47e2-9eef-eb7433df7516", "sighting_of_ref": "indicator--0722bb8e-c83d-4c63-81b0-f40cd632f2b9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3522ea8-42e2-4ae3-bb1e-a43336a72c6e", "sighting_of_ref": "indicator--157d8207-f490-4850-88ea-6777dd73e129", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d81adfd9-0f62-4504-a8bd-a0bf6adcb3af", "sighting_of_ref": "indicator--7ee7540d-47f5-43aa-bdc3-0e17386e5147", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51c5caf0-adb9-401c-9312-155cc39e4886", "sighting_of_ref": "indicator--02976477-72ca-496b-8725-44e63e955299", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8eeb9b4-d55c-4de6-8c1e-2966c63cad36", "sighting_of_ref": "indicator--dbeebf4a-c98c-4b46-97d0-67ad39ed9b02", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51b7168f-7ee0-4f01-b7f1-d89faeb36d18", "sighting_of_ref": "indicator--88ca8402-38cc-470a-b560-a46f69c6842d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--600928a7-a7c8-46ee-84a3-b93497e958dd", "sighting_of_ref": "indicator--84effded-1fc5-4d66-b5c0-d55f8b9e3e04", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cd895dd-010a-4d28-a320-9fc36eb7f1f3", "sighting_of_ref": "indicator--4e883591-e79f-42d4-94b9-f75095775278", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6038688e-676b-42fc-9f78-9861d5cfc029", "sighting_of_ref": "indicator--b296ebbd-d1ab-4ebf-a6e1-d880eff0e235", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a975a18b-818a-4106-91ec-7831ae820643", "sighting_of_ref": "indicator--cb62af2f-90fd-476e-91c3-f309a8cfacdb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d568228-7b1c-4e77-adf3-adea6bc888e8", "sighting_of_ref": "indicator--ed684a55-0dfa-4ece-a0aa-9535cfc05075", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83b7f96f-97f8-4ded-a3d1-693610db633c", "sighting_of_ref": "indicator--c125cf18-7c17-4b16-a4d0-daf89fd2bf8a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baf72ffb-6acc-4252-b1d0-efac62ea9160", "sighting_of_ref": "indicator--a829b7e2-ab2c-4f7e-84cf-29385c2b49bd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aea31b01-ff92-4eff-95d0-ff1c65a040d2", "sighting_of_ref": "indicator--2b18547e-48ed-4d47-ba10-c1f85a576ee4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca70f0a4-26c1-4baa-a124-1b5db4f2da4a", "sighting_of_ref": "indicator--85820486-81e1-4ecc-87c4-0630a5ba84dd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c03deebd-4d5f-4899-a6e9-c4be7582d19d", "sighting_of_ref": "indicator--8cee5d92-0196-4a54-806a-fd111cf5fd27", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--131d6ad8-dec1-40de-bad3-150553429f29", "sighting_of_ref": "indicator--0ff981a3-aa93-48fe-ab09-0d5d627bda05", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8818891-fc05-466b-8b33-29148372e33f", "sighting_of_ref": "indicator--36b54dca-acc2-4eeb-a70d-31dbcbf41439", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3a9088e-5353-4863-950e-60b7b7b5f9aa", "sighting_of_ref": "indicator--76e4c3ff-db3e-44a3-9360-142d085ec525", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a34236f3-6a56-4832-bc7e-042275aa8a06", "sighting_of_ref": "indicator--10a7d6ea-ff65-4eb0-8fd5-c28b452ba267", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00adfdcc-1f33-4a5a-9660-215c2c8e375a", "sighting_of_ref": "indicator--91a0814a-002e-4c86-b8e9-7a9da2fbe594", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28003d67-41db-47e6-acb8-7168975334ac", "sighting_of_ref": "indicator--ca00948d-6b10-4fde-94e1-9862bed2bec0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61a99134-06c6-46d1-962d-718a2356071c", "sighting_of_ref": "indicator--ca92014e-bb7f-4497-a325-3bab4d0ac144", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b39ab860-5656-4039-90f8-c7024d7be3d2", "sighting_of_ref": "indicator--5661217e-6e8a-4c2a-b331-ea7d6b427e5d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc310867-72fc-4847-8939-36b48a2d5eb9", "sighting_of_ref": "indicator--c4d820f3-3e64-4681-af5e-229088d0f816", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6bddc6b-202c-457d-ba7f-7c462b8d8025", "sighting_of_ref": "indicator--73fbe193-afb5-4783-83d6-17fe6923e761", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--631621f3-5a12-47f1-b72a-4c8160ce3428", "sighting_of_ref": "indicator--7156eaa4-1dba-48c2-8f24-9cad8adc9e74", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7623bd86-e0a9-489a-ae7b-07d272927269", "sighting_of_ref": "indicator--e18198da-b9a6-4414-b685-e47fbe8b917d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1b52b49-f883-45e6-8768-ea172add00a5", "sighting_of_ref": "indicator--6a2aca07-cb8b-485a-a1fa-27431086569c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6330b6e-502c-45da-aa1d-afc3dec48fb2", "sighting_of_ref": "indicator--49642e3e-9e49-479e-a5b3-1555be947f6a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6fb899b-587f-4bdb-ad88-ceeda82fb9fc", "sighting_of_ref": "indicator--728a137b-1ca3-41f5-bf2a-fd5f536e7737", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b886248-adf2-486c-a939-97c3c5ddcffe", "sighting_of_ref": "indicator--a2480022-53d0-47d8-a36b-4ec3f3e50a34", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0328f46-5400-496c-b7c1-35bf3b496aef", "sighting_of_ref": "indicator--a53b3f54-0dcb-453b-af13-6cfad8ad5b31", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81d08b8c-2278-4e67-96b8-951131f18014", "sighting_of_ref": "indicator--9c459792-d4ac-4746-9a5a-e059cc6aa241", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3dda454-fbc2-414c-8f29-95ef0a84b4a4", "sighting_of_ref": "indicator--481467ba-99f6-42ab-9dfe-700907bf3b32", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef87e143-8195-44a5-afd5-cd53fa430a86", "sighting_of_ref": "indicator--26cee328-fc47-4b96-99bd-e44f0d333450", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6edb0471-d5dd-4015-a0f1-81d2f6d00eee", "sighting_of_ref": "indicator--49392713-c2f0-4970-abfe-90a73fb05b5e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3fa497f-5af6-4316-b52b-31b587966b6b", "sighting_of_ref": "indicator--2f22cb0f-d111-4c06-aba8-50c8c7bb9f2b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e50d715-c5c9-46ff-a465-3e86b042abee", "sighting_of_ref": "indicator--6783773b-68b1-4df0-a6b8-e3891aeade14", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1760782-a3ce-4d18-91d6-4ad7ba0f40f6", "sighting_of_ref": "indicator--b4d4bdbf-ebe7-40cc-976e-08563f833723", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19616e8b-215a-4488-9b87-a6e47f80e627", "sighting_of_ref": "indicator--23fcfc66-01d3-42fc-8917-847e921aa63b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a59208ac-c64f-4406-ada8-9f7c3405981c", "sighting_of_ref": "indicator--c92f9900-ad8a-47ca-afb4-e9e88447968c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96de4268-1bc0-45fe-b565-5806044d925b", "sighting_of_ref": "indicator--5039ca2e-e0a6-4595-b63b-718f615e6326", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81d19661-8921-40a4-b274-d362fed17855", "sighting_of_ref": "indicator--b20b8bf9-519d-4a35-96c7-18412ce0a142", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50fe7670-0d13-4fb4-8c08-8985bb3ec4f5", "sighting_of_ref": "indicator--7ff1ed46-3177-4012-9210-b3d61cada078", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--505467d4-4dd9-4b08-89aa-33ca3f5b6e74", "sighting_of_ref": "indicator--8523307f-7b71-4acd-b010-b090d83662d8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a083ee67-8eca-472a-b18a-988d724e3fae", "sighting_of_ref": "indicator--3f63f1a9-3e99-42e0-9952-ade2e26c2bb9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c2e7f54-5df0-4c15-a7eb-3a01292d9db2", "sighting_of_ref": "indicator--d777b88b-a281-4aaf-90f6-49ecf6552862", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1ca83f5-91a6-48bb-9f1e-502251e0a1ce", "sighting_of_ref": "indicator--2452913d-e164-487a-973d-050799624489", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55ca746d-df2b-40f1-93ab-bd01286ee001", "sighting_of_ref": "indicator--cdd879e8-d571-485c-94d9-663be7029c88", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61fb34dd-6045-4cc8-b6f8-b0decdc4ea41", "sighting_of_ref": "indicator--aca6cd8e-07e4-4144-97e8-cc6d3e5cd635", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9ba92f9-8478-4044-ba17-fc22c604737f", "sighting_of_ref": "indicator--7118a7fe-1793-471b-b8c1-ba438cc9f12d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b713322-7742-4751-b295-c8b190c167af", "sighting_of_ref": "indicator--9d017eec-9b52-427d-87e6-466938a7b1c3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cf786bc-62dc-4794-8475-9735f4bdb698", "sighting_of_ref": "indicator--625374bb-460d-4af8-8384-cc0e7fd40bab", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ce49e32-a982-435e-a6f6-c0d7187ec79e", "sighting_of_ref": "indicator--5b729b88-1795-46ba-9f40-cb63695dae1a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89c02b98-af64-44b7-9610-6c471e0bb593", "sighting_of_ref": "indicator--87bac75f-d275-4aca-bad2-2b73739576cf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02f1f7d2-af31-45c0-ac6c-ab66284afc22", "sighting_of_ref": "indicator--25d564a9-7e55-4558-83bf-3bf53d6e8377", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97361f9f-132a-46aa-ad4e-0f2268118f00", "sighting_of_ref": "indicator--8e4dcfd7-fc5c-47ea-a3b1-33fd9528a61d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa1ca2b0-b868-48ee-9dd2-630782d8bba0", "sighting_of_ref": "indicator--1a20c684-3c48-4105-bf56-5c7502bce1ea", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84c622f4-7f96-4b02-a029-62ae218f0747", "sighting_of_ref": "indicator--c90e0c17-9a25-44bb-b9f7-353ff236678c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b789b13-080f-43d2-b230-ffdb370ed9d3", "sighting_of_ref": "indicator--adfcd1f5-fa2e-425e-81be-049f62c6426b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--408650ce-046d-445e-9467-750057405b9b", "sighting_of_ref": "indicator--07782092-7f6a-46e2-9989-ca1b396ef532", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9249c923-cf91-4fe3-8825-356f248f453b", "sighting_of_ref": "indicator--96af4de4-ec95-4528-a2d1-66ee68900866", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2312d98d-0e52-41a9-9511-53726c5961ff", "sighting_of_ref": "indicator--174b2287-4c4c-4800-a38d-fc742ec5191b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aacc6aa-7271-4f96-b277-797e2dc6d742", "sighting_of_ref": "indicator--3210ba04-8151-4a01-a097-cb39fb9688b6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a315b2ef-8248-4615-83eb-31437196e32e", "sighting_of_ref": "indicator--071bc225-c5e2-4132-863c-37ea6a3c167b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a69c35a-7363-471e-bc95-a04ee58eb556", "sighting_of_ref": "indicator--2f06c1e6-6974-4bc2-8c1f-dd8ac8dc4e77", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a028b99-43f1-45ee-8c47-2a93b33a78c5", "sighting_of_ref": "indicator--4a226034-2077-45d3-88ae-908574d87fb8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaff3178-f1f5-42ee-be8d-27c735526a1c", "sighting_of_ref": "indicator--28dffd77-c634-428d-b17d-4c485d1e8c85", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8cad372-d6ae-4893-8ad7-8fe291d1af59", "sighting_of_ref": "indicator--86cf385b-ac13-4d05-a3ce-a6a52779553f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9663c12b-7940-4199-a976-fbf8a1ea8ef9", "sighting_of_ref": "indicator--8a3dfb8c-e7a9-48a0-aa3c-b634c315df31", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f59ef105-43c9-4d0d-bfff-d560a79130c9", "sighting_of_ref": "indicator--972ba109-a828-4865-bfd6-e120909be28e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47e5bcf3-3bdd-44cc-8f4b-06820115faaa", "sighting_of_ref": "indicator--48a95778-67ab-4c30-9fb8-647b333cec05", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--294fc053-97d9-44cd-bee4-6a711bc2c1e5", "sighting_of_ref": "indicator--b58ab276-7f09-4272-8179-95f817a83459", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5af56e92-da64-4190-950e-3e6b2ea17ccf", "sighting_of_ref": "indicator--b2b85ad6-560f-4a19-847b-e39fb9bb513d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f97dc23-1c1a-49b0-b626-8f9bb9700032", "sighting_of_ref": "indicator--08ffbfb2-945c-459b-a131-35c05fb70743", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac204587-7a18-4ef1-9987-a76b14ca1e85", "sighting_of_ref": "indicator--4130d9de-6267-48f1-a5d1-e628b82f1c42", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2990d074-5a57-4ac8-9be2-63145bf2f918", "sighting_of_ref": "indicator--2d7aec7f-3f7f-4eb2-bd67-c62196192f81", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--747f17ac-3cc5-4326-a256-babab99106b9", "sighting_of_ref": "indicator--68549a74-6e10-4dd2-b973-5e0eee79a9d1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba8a1ef2-355f-491a-bc64-598020ef820e", "sighting_of_ref": "indicator--6b89d1bf-37ec-402e-a75f-84ae474251d3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b7e59d2-2668-4d55-9f0c-549df35a846e", "sighting_of_ref": "indicator--5f739c1e-235d-44cc-a6c0-ed9626754cba", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53c392cd-de0a-4682-a0c5-b5f3b22538e2", "sighting_of_ref": "indicator--5ca84998-0a3b-48a2-8d9e-64d746b6d53a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3b61f45-307a-40aa-9c82-541f8174b4d5", "sighting_of_ref": "indicator--d47855c4-2310-4235-92e6-f197b469c211", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e921da3a-3da6-4e3b-bde4-51ab5e77097a", "sighting_of_ref": "indicator--0a0d287c-488c-4364-81a8-7235021089d3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--328db245-9873-4852-b3f1-28278198b70a", "sighting_of_ref": "indicator--54c1d918-6f3c-4088-aa39-e51df79198ba", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37b41669-c83b-4fd3-9eae-c6caa83f6ce7", "sighting_of_ref": "indicator--7765664d-43c8-40c0-b051-bd2c8dcd8576", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aef40c81-80b3-4232-8a3f-94c4ffe19bdc", "sighting_of_ref": "indicator--be8a6982-ffda-4ac1-b3c5-a8509c972af7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98b905a9-57c3-4657-9f6c-9a43ab563be7", "sighting_of_ref": "indicator--6e7b6672-5a2f-4b4f-909e-89ad8ced831c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9127066-3cd2-4101-a06e-8f2b21173a58", "sighting_of_ref": "indicator--6eeb5450-b283-443a-962d-9c08c010621b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6267d207-1c95-4677-8d36-1096a10d4b41", "sighting_of_ref": "indicator--95ac4c1e-e2a9-4e39-98fb-f651d7deb849", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--390acedd-df16-4396-b838-faba34584622", "sighting_of_ref": "indicator--a222c672-d7fe-4493-9bc7-2b3b96d3ca5d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ca64600-e552-4dd6-87b4-d3e12de29081", "sighting_of_ref": "indicator--9309993d-53ee-40f3-a042-3f68358cfacd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aaf9c33-bb37-4b6a-b915-b8ddbe0b61d8", "sighting_of_ref": "indicator--b3455aa7-6e65-44bc-bdd6-b721ff3eb08f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--621d2b02-15e1-4ca2-aba7-d878ee519df4", "sighting_of_ref": "indicator--6e2800f3-296c-4c74-bd4c-550f22ab3c44", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41f35e55-00ce-4399-80b0-4337bc36230d", "sighting_of_ref": "indicator--898a46e5-8410-45dc-b4bb-7f50a8f9d01b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24f27901-b185-4559-be28-a3f437450df0", "sighting_of_ref": "indicator--3788aed4-bd5e-406f-8df2-08a6ea532917", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25ef5ea1-11c1-46ee-84d1-f91b453e895f", "sighting_of_ref": "indicator--704ddeb6-1991-47cd-9aed-8daa49500f7f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--976487d2-a8fc-429d-90b2-4f0b0d04060d", "sighting_of_ref": "indicator--69acd1eb-a57f-4ab2-b159-b919a5c6606b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--963920c7-ef40-46aa-8be2-789dc3f76bc5", "sighting_of_ref": "indicator--fd818157-e0fd-4263-bf49-6b1cf5e01ed3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5a25a3a-61f6-4f65-bf03-4478e259423a", "sighting_of_ref": "indicator--ba3742f9-1132-498f-8d88-adef7d6ef2fd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfcb3bcf-5b5c-45a9-863f-1136571366e8", "sighting_of_ref": "indicator--e95a7c60-5260-4e12-9194-be20cd25c384", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f85d3ab-53ab-452d-a6d6-fc3c24ad5e95", "sighting_of_ref": "indicator--20a4ba6a-6e28-4762-a2a9-2b2ae237fdc2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b380259-22ab-4aed-ac53-16603b96eb98", "sighting_of_ref": "indicator--0578672a-0a74-44f2-bb1c-237fdc8be05f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b12d981-9041-4777-aad5-55c65af9a457", "sighting_of_ref": "indicator--eda6222d-87e8-4b7e-a588-93a4f7219733", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26d4f50e-51be-416b-adb0-f74443fc66b9", "sighting_of_ref": "indicator--c0fdff59-f49a-4d10-ac07-5cc95b4663b0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bbb8c20-f5b6-4003-83ab-599314f371dc", "sighting_of_ref": "indicator--e2001339-eb41-4195-b3dd-9857930152a1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf8ccc41-bd2c-4ce1-8d5b-d68bc15175bc", "sighting_of_ref": "indicator--8c26695c-7512-4658-a8f0-ce3e9d5c0a27", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6a0113a-c95f-4060-93c9-8d76fb565094", "sighting_of_ref": "indicator--1c0cb67b-67d5-41c5-b681-dfa49b6431c2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3cfbf7b-4152-4f84-b88b-a93faf603ed5", "sighting_of_ref": "indicator--f724e491-02c8-4789-9f5b-b7c37656dd14", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94484b3b-6bd2-4614-a663-5b71238e86de", "sighting_of_ref": "indicator--5cee2ff7-19b5-42fd-8a7b-d9147eb12c97", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--389780ac-b621-4f87-a4b5-cbb3615f3269", "sighting_of_ref": "indicator--c050f06b-a7be-462a-8ef5-d8f785b633c9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebbe54a0-ab16-4458-b4cd-cc74ed40dc79", "sighting_of_ref": "indicator--68896f5c-41dc-4265-83e7-8296522ca2d3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40b6b6b9-c81e-4c33-9c6b-d8adb3044e09", "sighting_of_ref": "indicator--3e7de653-5ef7-4e69-bd8e-b32d685f76c6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e400d26f-1493-4690-86e3-2da5e79aeb82", "sighting_of_ref": "indicator--fa2a5790-9f50-45dc-abdb-ddb0c4b07598", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be271e94-4e08-4f6f-8a7f-399b4dda4813", "sighting_of_ref": "indicator--87f51bdd-e2cb-49e5-a84b-6ad737ffe282", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--174741bb-abda-4fc3-a917-bfec40202499", "sighting_of_ref": "indicator--5df6dbc2-cca3-4281-ac7c-066c9c93eb73", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8f99204-f54a-47ee-8923-984c272c0c1a", "sighting_of_ref": "indicator--5f58c269-4e4c-4845-bb6e-0feb71a10261", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf2053cf-449b-4ecb-837d-3861494ed63c", "sighting_of_ref": "indicator--6df5c5a3-22cf-4bd8-9abd-f2847182c71a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03492139-9090-4d11-854a-922ffc073ca2", "sighting_of_ref": "indicator--9ed9cf02-3d9c-4ac5-90de-9b4ed17ef068", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcb6b7bb-7476-4ab9-b905-cad94d19c818", "sighting_of_ref": "indicator--8238d6c1-07ad-4196-a66f-42a21c97db8b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7388aab4-8ce1-4ca8-b363-a990c936d76b", "sighting_of_ref": "indicator--9e82d18c-cd30-407d-b522-6c7399b4d01a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66b89cf7-4726-45c6-bf41-a0072c811065", "sighting_of_ref": "indicator--6bd073f9-b425-4e45-b3fa-bd03184a3272", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48975482-e138-4a6c-9a47-c1a21501723b", "sighting_of_ref": "indicator--d4445c94-0cf6-45a3-bad1-990e2bb8d82e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8dafef6-b0c6-4bc5-acb7-d15dce49f12b", "sighting_of_ref": "indicator--5293196f-a557-4f77-b5cd-1d6b74d0ddfb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--496f488a-5bf9-4c2c-a9cd-93de761a5fc0", "sighting_of_ref": "indicator--286d64a1-f907-477a-83d3-d09681c64571", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4b1f731-b6ba-4f1e-8ef2-d96e42bf197b", "sighting_of_ref": "indicator--5bf22f67-e997-4d1b-b483-a39800a08c9c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1642427-d90c-412e-a6f0-57eb34ec953e", "sighting_of_ref": "indicator--58a7337a-0f1b-48e8-b5c0-db220d3adef7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef14899d-890d-4122-b447-a08dd13e7ce4", "sighting_of_ref": "indicator--a9f5c7e3-63a2-4470-bd9c-a58462f6b49e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26224f4c-2525-426f-a478-5c0a705e2c84", "sighting_of_ref": "indicator--d22ef924-6cf8-47c1-8181-5cafe7055cd2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3686edbe-9bbf-4a9f-9fad-a1cd8df0eb6e", "sighting_of_ref": "indicator--cea11d5a-5c37-455f-876c-e87b2a58765f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1864b0d4-5565-403d-877b-419fe02ba24a", "sighting_of_ref": "indicator--57fec38f-3c4b-471c-bf9f-3b88f7d0de7d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccb53f41-e186-4e66-bd9c-10d177d532f7", "sighting_of_ref": "indicator--3acaafa6-69a7-45fa-b690-ff1cdda05d57", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e6d627f-59d9-49bd-8fbd-d4c5d3aa1e5a", "sighting_of_ref": "indicator--3f50ff59-051f-451b-8a0f-dc97f1e52032", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c65f9afb-0443-4489-8256-1e3c1fe8d9b5", "sighting_of_ref": "indicator--e751357b-e6f1-43e7-871c-c8dfc9dd0797", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8c620cd-4874-45a7-866a-dcd1005b598f", "sighting_of_ref": "indicator--b213fcfd-b87f-4aab-a08e-713c7c702f1b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--113a4464-e207-48a8-8f9e-363d436ab1de", "sighting_of_ref": "indicator--f8d56128-8a4a-4f83-aec0-e1bac3c76942", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49e25da8-95e7-4dd7-becd-7b96fd996754", "sighting_of_ref": "indicator--d5764457-cff5-4384-b079-640c0adda64e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1e30d06-cf8a-41fa-9349-6b658818ac16", "sighting_of_ref": "indicator--7b367665-50f3-4b89-9e3a-23d300ecb268", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--504be631-5733-4823-88fa-6acc6fd156c2", "sighting_of_ref": "indicator--0e61a0b5-58d4-49c4-96ce-aa2735458617", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d585b59-a6d7-4cb6-bb8c-f6c3348ea17a", "sighting_of_ref": "indicator--fa9eb86d-0de6-45f9-a1a4-a19ca5ba8c56", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6e20e62-4fdb-4217-9fa7-ddf9432726da", "sighting_of_ref": "indicator--8f9fdc91-b7ab-4400-9b78-b1a817a81608", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5b325b2-4da5-4c82-b534-da7dd094e76f", "sighting_of_ref": "indicator--b6da025f-45bd-4fc4-ac35-3d8337792c92", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98e60a65-02c9-4e6f-b24e-94d838f22b8b", "sighting_of_ref": "indicator--0bc803e3-b0f0-44ad-9a22-8eee7c64aa28", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d93173f2-997f-4ab1-a1af-2b4ab7f9a6df", "sighting_of_ref": "indicator--6a5ffaec-8b49-4748-acbd-bc2af9ca98c3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91581f46-687c-4297-b849-5fa93bc17bd7", "sighting_of_ref": "indicator--2c84dc64-7a5a-4803-900d-583ef25c2a0f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6a78a71-1ed2-43bd-8198-b61acf7c26e9", "sighting_of_ref": "indicator--dce9a385-e4b5-4560-82a2-dbd9757522de", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--366df02e-a982-4560-82ee-60137e95a8b8", "sighting_of_ref": "indicator--51081745-d969-4662-8bd0-616de401f4e8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--227021fa-9c40-46cf-94d4-6ef21735c9ab", "sighting_of_ref": "indicator--650d564b-5b9f-4893-b194-35217f06c5a6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d57a2216-fb4f-439a-8c5c-f6eb5121363b", "sighting_of_ref": "indicator--e8d83bbe-cbc0-48eb-bbb2-e7fa3d1cfac3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22e69554-e61b-4bdb-a89a-1c5836be8425", "sighting_of_ref": "indicator--22d21610-2a4b-4d7e-9000-9acdd3d034e0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--811d51c8-13cf-4c65-a94c-329f4301c4e9", "sighting_of_ref": "indicator--83943d03-0896-4272-ab42-1a43720a972b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15220728-85ec-4221-a037-5cb2461dec88", "sighting_of_ref": "indicator--835f0aaa-f427-4e52-8a8a-b6883ea1bbb3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--906d3911-0684-43e0-bcc7-76bf8ef07080", "sighting_of_ref": "indicator--f284ab5c-8fde-4d38-ac1b-60d1c652a6c9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddb9cbe5-ad62-4e9f-ad23-a409e2f18f0a", "sighting_of_ref": "indicator--09fb04fd-17fd-4490-b668-59d318138232", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c21ede9-5897-4c54-8e39-ff53b6c49b1d", "sighting_of_ref": "indicator--23bc586f-4b8c-484a-97b3-9df732d8aaf2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c117e4c-ca7c-434b-aa55-4da3c9504461", "sighting_of_ref": "indicator--034cdfe8-f4d0-4d28-832c-120832d22285", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5344a6a0-003e-4cfa-a390-7857b86bb5ac", "sighting_of_ref": "indicator--0e8fffe4-bcf8-4af3-b874-ec579e9d41e5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--342de580-ee5f-4abb-9b71-30d668581184", "sighting_of_ref": "indicator--fb83edf2-ead5-4448-917f-eb4304a76aa5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--785670fa-a4ea-4934-bba1-93598c737a5b", "sighting_of_ref": "indicator--117f6fa0-5a6b-4c48-9316-b6950d00e9e5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f042a91-d355-49ef-85c4-3696af150dab", "sighting_of_ref": "indicator--1b3cd375-0179-400f-b631-3ea365513259", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--984155ae-abf3-4039-ac43-4b9a7c9a8bcf", "sighting_of_ref": "indicator--33e6d9eb-00f6-42a7-8798-e44eeedbdfc7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7080d138-c60c-47de-8d4c-9a82865c9651", "sighting_of_ref": "indicator--e2b923b0-801b-4f6f-94b8-f9c09e6c9ab6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74939df6-daa0-4923-a1a9-1aa65a5faa35", "sighting_of_ref": "indicator--7aeab968-e85d-4bae-8d10-ebcf5a082f13", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--936ac2e5-92a3-45bc-9759-79b2b5d549f6", "sighting_of_ref": "indicator--a5e2b44c-920e-44c0-a1fa-df4452923d1f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5fb6fe0-a500-4e40-bbde-7fe94d4c1a5b", "sighting_of_ref": "indicator--8c4f0010-2da1-4814-b2ff-ef2047c93514", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e2f52a0-b96b-48df-9c58-c6850eab848d", "sighting_of_ref": "indicator--e9a3b94a-9df5-4ad9-86df-229a4b135caf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eafa39d7-9bfe-40a3-a2c2-0d21ea468d20", "sighting_of_ref": "indicator--40327512-49ea-420a-b941-864489de949c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb3d3be2-1951-4bb7-a95f-56c4114655cd", "sighting_of_ref": "indicator--3ec8e46a-ac34-4f8a-8cf5-70885dceb2d5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--570fead2-d28b-46fe-90d1-e67f7f347333", "sighting_of_ref": "indicator--b3511412-68f5-48e7-b0b6-c44fb7ec20ac", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f584698e-fb6c-44b2-aa2c-98c30eb76f84", "sighting_of_ref": "indicator--1fe5dfbc-1243-4b58-91c3-ed1b64662ecd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26e8b350-e146-424f-b81f-4dc94e0e0ecf", "sighting_of_ref": "indicator--69a5e777-417a-44f5-8995-6323a2b0da9a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55295ebf-d0af-4267-a850-1d240a492894", "sighting_of_ref": "indicator--cb474ba7-745d-4f5f-bfb2-9baffac6ecb8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42fabc23-10c5-4e31-9059-622e9c8a4e35", "sighting_of_ref": "indicator--7bdb0b8d-f203-4896-be4f-21d289d97016", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f6f26ee-cee2-4e7e-b67d-e0b14b777b85", "sighting_of_ref": "indicator--b3394203-6685-4327-9b89-edd805705bc1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--998adacf-dff8-45fe-b763-d48d7cce3064", "sighting_of_ref": "indicator--db9e437e-6e1c-4db5-9f9c-afabe2808c1b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fad14a4-be1b-4b43-9a4e-2f0f7db5d160", "sighting_of_ref": "indicator--07170c70-a805-4975-83e5-2d6fd6c101c4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f0a05a0-4446-42c1-90b6-c19af3d10dca", "sighting_of_ref": "indicator--175a3c65-6200-4f93-aab4-cf6566466493", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2507e4f-5ad1-4587-a373-4c98bea85c4c", "sighting_of_ref": "indicator--3659641b-fb40-4586-bf2c-40c36fb99927", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b3dee0c-fe1b-4a0e-ad9f-5711e5c716cf", "sighting_of_ref": "indicator--ceafc421-1ef8-46d5-90a2-4c4176cfc26e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--642fa717-fcb2-47a4-96ce-4398df3a3f90", "sighting_of_ref": "indicator--71677832-fc4b-45dd-9451-e9fd960d4757", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70bcea3a-0860-4ca2-b103-df32f78d633f", "sighting_of_ref": "indicator--cd1426d1-d7b9-4435-90dc-4cc165718aae", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa8245d5-9a65-457e-ae03-7e9bd5566f91", "sighting_of_ref": "indicator--1b830eca-659f-4c02-8fe1-d32456921bab", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--172402a4-5de3-486d-a685-2afd1eb4c93f", "sighting_of_ref": "indicator--5db41ad9-52d4-4d13-ac0a-19efcfabef82", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b20a656-d32a-4e43-8f51-f5c27819d5c2", "sighting_of_ref": "indicator--2b5b13ee-8152-4606-bcb4-45e0810ea14f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1749c24d-80c6-48bf-b708-45aa3e985009", "sighting_of_ref": "indicator--315b8092-5107-412a-9204-85e834394271", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edc0a13e-87e8-4ba4-be0b-2f8f85d88838", "sighting_of_ref": "indicator--3f73edf0-06b4-4755-9531-154487e55d0a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a038db3-d62d-4d4b-bd3c-a0f97d79d95a", "sighting_of_ref": "indicator--c13becfe-2972-4d2b-b768-cdc9380e7575", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6acf7392-ab17-43fb-9fb9-1b3a06bd9e6b", "sighting_of_ref": "indicator--423105ba-0b22-401d-b97b-76965bfb7035", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ffa71e1-dced-4e41-820b-2dc927552bef", "sighting_of_ref": "indicator--366caf35-6a2a-4c38-b070-cad9fb39a7ec", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6098cd4-8068-40e7-8f15-7cdad0ed52c1", "sighting_of_ref": "indicator--00dd4083-f04d-42b3-a03b-83ebf8a3883b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dda6d69c-57fe-4a97-8a27-8f877065285b", "sighting_of_ref": "indicator--f16ffd71-afb8-4f8b-a4ce-51a25ba6070d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e04e654-e063-4072-9945-bd1849c13111", "sighting_of_ref": "indicator--cd9c7377-96c7-4571-a225-b19f61b1114c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f68d735d-9d52-4c83-b2c4-1d4486b2f22e", "sighting_of_ref": "indicator--e2052544-8f74-4f44-9b7a-524d6ac1a61a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2b537eb-67a8-4290-b3e1-a1be993e2a4c", "sighting_of_ref": "indicator--21def164-eb15-4aaa-b57a-6fdbe0d8e73e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a556560-a229-4e3d-a85e-e4854f6af1bf", "sighting_of_ref": "indicator--b49527ea-b70c-45c5-b493-0150d69da09a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3969ff04-68de-460e-b331-278c548156e6", "sighting_of_ref": "indicator--ab5d9171-d4b6-4436-a937-b947cfb12669", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c09d7e8-ecb5-47ef-849e-bf68ddd15e1c", "sighting_of_ref": "indicator--d63314be-0079-4cb7-9274-3d19256cf7b5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4ab244e-d28d-4252-b113-63bf4ff7ba0a", "sighting_of_ref": "indicator--1df780ac-97c2-4bd8-960f-241394711d6d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce63da98-f143-4373-9514-6bf2253f683e", "sighting_of_ref": "indicator--e4f5b8b6-9181-4d53-b799-788b84826713", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f18bae6-9ae1-4f70-ac3d-114d036f5249", "sighting_of_ref": "indicator--5bf669c9-624f-4f14-813c-28d256712b97", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b48907de-c8e7-457d-b49f-af07428168e8", "sighting_of_ref": "indicator--06163b45-c567-4aa1-968d-2739eaa9ccd5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc173f85-6ee3-47e3-a7cd-322c9b0336d0", "sighting_of_ref": "indicator--381e58cc-2d34-40eb-825f-db69271e796d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--905c4df0-3fb8-40d4-bba6-e8863e15d48b", "sighting_of_ref": "indicator--7e9af744-6c04-4d60-a611-e6e31f31a41c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19166988-c4da-48e5-b442-45a3bdf26882", "sighting_of_ref": "indicator--0eb8e333-3145-41b0-a61c-a998e1663c20", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--873cf252-ac9c-4bf5-9506-1bc12740d4ef", "sighting_of_ref": "indicator--09641137-8f24-4fbb-ad75-88a96eb62491", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed912747-8168-42ed-b5e3-c30b99b5aa47", "sighting_of_ref": "indicator--266e493f-6f30-4992-94ac-52545d8dc78c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8afc960-a1bb-4745-99b2-b1fc518fcdb9", "sighting_of_ref": "indicator--16d4c075-905e-490e-a762-bb57323c5d34", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75eee79e-aaa0-42a3-9efa-57178045c5d2", "sighting_of_ref": "indicator--33710f3d-e8a4-4ad1-9a01-6fb7647af821", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c78e76bf-728e-4bc2-a60e-5ce80f160c74", "sighting_of_ref": "indicator--fb2d33c5-07a2-4288-9497-6baa6ee4011c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3278b2f8-3cbf-4b3a-ba1f-d885a8aed698", "sighting_of_ref": "indicator--0f9e8148-5177-4795-8f37-db0a3ea8c005", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--778ac07d-7a8d-4710-93ee-0084f9e20000", "sighting_of_ref": "indicator--f2048791-35a0-4513-a7a1-aa415ee33487", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80256b6f-f87c-4e10-acec-4c490125afc4", "sighting_of_ref": "indicator--dad0ed0c-9bfa-4141-9545-1444945f6b7a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b5a6282-b57f-4991-ab8d-c6d2ac6a9da9", "sighting_of_ref": "indicator--53b5751e-88a3-474f-8b3b-9f3e4aba7caa", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a675b9f-1c51-4a54-9306-c44fa05467be", "sighting_of_ref": "indicator--40450904-23d3-454f-9562-0b8f0ef9417d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56ef31af-6e5e-4d4d-8649-d0e27eb9364a", "sighting_of_ref": "indicator--d0a94afd-8a50-448e-8662-390591639660", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ad7dce4-16d7-45b7-96f1-9b0d22dff037", "sighting_of_ref": "indicator--6917899a-c414-4951-ada9-6643b76ea4e5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40176ede-2269-4eb7-8708-6d7b5782be93", "sighting_of_ref": "indicator--3ed7ab78-46d3-42b5-a1d2-f10b1ca68833", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1404c3e6-4aae-404a-987f-2932c09f9ef8", "sighting_of_ref": "indicator--709e7e6d-a749-49f4-8fb5-f23a6e2d8fc0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dad53898-cf84-40ba-a2ac-ea17921575e6", "sighting_of_ref": "indicator--342c1b9f-d87c-4a6b-95ac-61c9f1de4241", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ace0752-707f-4637-ac11-0bdc14e09bfc", "sighting_of_ref": "indicator--ef81c7e4-454c-40b7-a5ad-8ca95eada4d7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02778475-0731-470f-8fc9-e341d67532ec", "sighting_of_ref": "indicator--37a6b5ff-17db-45bf-9c95-be9cd7937e1f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b3ebca5-8a57-4e37-88fb-419bf5bfbc58", "sighting_of_ref": "indicator--4df130ad-ecde-4725-bf54-8011e4de69b6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--278487e8-23c9-4602-bd59-89e218e2acc5", "sighting_of_ref": "indicator--27897fc0-0052-482d-a2c2-ebd58548beee", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a71e5a9-e972-4481-b66f-41cd3c2e7b14", "sighting_of_ref": "indicator--be365c17-b8a7-4f93-be25-447f79d356ac", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2433f73-c256-4f4c-a7b1-fe816141925e", "sighting_of_ref": "indicator--83443f6c-9a42-47f5-96dc-6d79bc19e4ec", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f915dec-612c-4dd8-ab4e-4ddff93c42bc", "sighting_of_ref": "indicator--5470bbbb-ee24-432e-bb47-d94db2dec880", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20611ae3-9b75-4f0b-b873-be32a04e0c3c", "sighting_of_ref": "indicator--41231c48-da5e-4870-96aa-9acd97be2b35", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8324eef4-fc8d-43b1-97ef-eecc396f1dfc", "sighting_of_ref": "indicator--77a21da8-873d-4301-993b-722fe7b4c06d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caf67f0f-3600-4d0a-8aea-73f120b2d885", "sighting_of_ref": "indicator--4de8905a-7df5-4b42-a8a4-9a1a4c074ee5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d823366-9687-4624-abd1-f0e5315a5ce5", "sighting_of_ref": "indicator--1b2876ab-1c17-4a1e-9857-1327fc26605b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fe2d062-82e5-4170-aa6c-a3133ee2e53c", "sighting_of_ref": "indicator--cfe2c592-d142-4b81-aef2-56a0ca9d71d0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f2bc322-1ce3-490a-9e82-75eb2d6d8f4b", "sighting_of_ref": "indicator--73dfab46-df7b-4f94-aa62-0d0f4db5a1da", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4daef0c2-3adb-4e4e-a037-3131a1fd21a5", "sighting_of_ref": "indicator--03cf21a0-3273-41be-8861-de3c8f89bd94", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99248a4b-0255-4ccf-a3fb-a2dc244830f9", "sighting_of_ref": "indicator--b6fb6ba5-3bdb-4a43-b5b7-35825c21cf48", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4961e2e-c93c-470a-affa-224e21cc3caf", "sighting_of_ref": "indicator--092ac6c8-13f8-4747-a3c6-d12708dafd17", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ef401a8-59c9-4acf-9d87-b11bd1d00060", "sighting_of_ref": "indicator--87dad723-58b1-4fad-b222-0040e701be24", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d991c5c-80b6-4ad7-a24c-e15b7626ffb1", "sighting_of_ref": "indicator--6d52c4bf-b695-403d-972a-47882655b22d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02c4e3f2-0419-4c04-b949-ec29e2cd9e4e", "sighting_of_ref": "indicator--c50e129b-a209-4968-ab91-bb5c1c557552", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c708abe-95f7-47a7-bae0-c4dfc46f7304", "sighting_of_ref": "indicator--75870d58-f930-4dde-883e-dac4f67b0d61", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f25022ff-8673-432f-b874-684aa1aaf006", "sighting_of_ref": "indicator--928e5ba2-07ba-4d00-9b3d-52e311fa783b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17f1f189-d79e-45d7-9130-bcea6f5c4c22", "sighting_of_ref": "indicator--eadda889-7601-4192-88c9-2133d487bee6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0389c6af-dc94-4202-9ac1-773f54e7f8a4", "sighting_of_ref": "indicator--4e2d026e-79ad-43b4-9d01-6648bd3ca8fa", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3df005f0-c37a-4a7a-9ca2-8d60973421e9", "sighting_of_ref": "indicator--0411abaa-18ed-476a-a92d-0a5ace19adb2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9b7c88f-5c88-4444-a281-e121a20a126a", "sighting_of_ref": "indicator--ae110ede-d003-4839-bd0e-e081485f55f1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1bb8355-26e9-4ce8-91ad-0f669a4d48e3", "sighting_of_ref": "indicator--7cf48fe2-b2ca-4891-94d4-d211d176f8d0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5325e304-2770-4631-a90f-20313873a10d", "sighting_of_ref": "indicator--acf0f16d-5f9b-4b89-a5a2-59dc60c0a70d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d384947a-8e79-45e9-a26d-6dfa78b40955", "sighting_of_ref": "indicator--6a47088b-cfbd-44a4-84b9-9db9783e08e7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5090edfa-62b1-4acc-b840-d13ebc911a98", "sighting_of_ref": "indicator--8757d89f-752f-475a-af93-bbe709213186", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1fdbdfd-2a59-4fc4-aed5-c7f4ffc71b47", "sighting_of_ref": "indicator--95c3c3d7-20a5-45ad-8215-05db1871d079", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d66a4ce8-39b6-4f9d-8232-905fa99f5c5f", "sighting_of_ref": "indicator--e90e5a78-5680-456d-9e13-c7f451e45140", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1bb1791-98a9-4a87-ac42-fc259249d7d6", "sighting_of_ref": "indicator--cb27f822-1a9c-4836-91f2-edb70e04b9dc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc9886e9-444b-46e1-bdb5-9ce6870df9d0", "sighting_of_ref": "indicator--52939bfc-1014-4d25-a9f1-3a20cbf3319b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6de08758-cffa-450a-a249-30f033a1f88a", "sighting_of_ref": "indicator--f0f52fc3-94d5-4707-820e-4cb12dd73f29", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d32cf23a-96ef-44a0-8b38-48dd54be6dd4", "sighting_of_ref": "indicator--cd4ee7af-5ff3-4c9a-aab0-1fa789e53a4c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14d215d9-7ea9-4caa-935c-591dbc73f3b6", "sighting_of_ref": "indicator--55836a28-9721-48c1-ba7e-d3a73e79549f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6271e808-f748-49a8-9c60-ba5a0c1aae95", "sighting_of_ref": "indicator--a269dac6-0e9a-4375-bb57-c4868df6a16d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--115fb8ed-b2c5-44a7-a2bd-85971892a17d", "sighting_of_ref": "indicator--add64785-33d9-4ec6-bcd6-ec7ece3b2612", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--786400f8-df24-4de6-854b-5f46ef897f30", "sighting_of_ref": "indicator--1d9bc025-381e-44f0-baf6-b7672fc4228e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--898e95b8-2ed9-4379-9f6e-5957f5af00ea", "sighting_of_ref": "indicator--ae70286d-468b-4dd9-b08b-4b65b9484556", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d25eb05d-5259-474f-b8bd-c02a32383878", "sighting_of_ref": "indicator--6b34adee-c89c-4e25-baf3-b41db7d9bdbe", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cefca70e-db77-4920-a2e7-a4364fd74173", "sighting_of_ref": "indicator--a167c6ae-2d63-4b5d-b479-de2bded15859", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ee32fae-5626-4961-bdc2-97e9be56962b", "sighting_of_ref": "indicator--c93c60dd-3f27-4901-8d7c-ab78b334c444", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6743f1de-f00d-4b66-9fe8-5a859367e936", "sighting_of_ref": "indicator--057d4af0-36a6-466a-9772-82ccc9faeb4f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5967c83a-4630-4455-839d-eb5a3923ae3d", "sighting_of_ref": "indicator--48ac988f-f803-4a82-9e12-01d87dc8e6f3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ba6dba2-cd09-4b27-a82e-eb120eb1b7b6", "sighting_of_ref": "indicator--7f645f4a-631f-43c9-9862-71963b346e1a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--633953de-9d1e-4fb9-9953-9eda1e7a3cef", "sighting_of_ref": "indicator--7117be62-08f5-4ac0-91cc-90a688a44e5e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65a4055e-c1a9-44fb-be3b-92a798804de3", "sighting_of_ref": "indicator--767a9798-c469-4ae9-9e3b-b63c6e06c0a9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13a63f0e-c63d-4c61-81d5-0bfafe4a157b", "sighting_of_ref": "indicator--00fcec61-005f-46b8-bffd-ec1627f0da49", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44665bae-ad07-49b0-8fa9-0f8a149eebd6", "sighting_of_ref": "indicator--7def69ee-9ca4-4534-a99a-1e0b87bbe099", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b83e1de-4c17-45e7-aca0-30e4e3174dff", "sighting_of_ref": "indicator--71f1038a-0667-47f0-bff1-8ff02c15e664", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95c7e84a-cad7-4430-aab7-8e05786ebcdb", "sighting_of_ref": "indicator--4b38b980-f9c8-4b54-9464-141102fba602", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c66ea302-2e10-478e-8720-d1911f4f6cd9", "sighting_of_ref": "indicator--570ee161-5272-49a2-a215-1b5d2e0703f9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b1058fd-e22c-4f6d-8992-a7ee5263492e", "sighting_of_ref": "indicator--507b310a-df65-41bd-b222-7c6828ed3338", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c24f2657-0acb-4c84-b4c0-f0081f78cd8a", "sighting_of_ref": "indicator--62af4dd7-25b6-4cb8-ab05-7316caec3efd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7876831a-d680-43a2-a82a-c533300f7cce", "sighting_of_ref": "indicator--971d9c6f-c1f1-43df-94a5-f0436a762b21", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ee2efdf-ca38-4df5-a020-ccce6a739e31", "sighting_of_ref": "indicator--fb5feaea-769a-4992-8f3b-b56350f91035", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--324e0c6c-c004-4170-a3b3-2ede576e5a3c", "sighting_of_ref": "indicator--3c4e9ba6-efa4-48a6-9aab-2d04b8ea1589", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--877a1bbe-2f5c-4c3f-a642-cbd203e1d22f", "sighting_of_ref": "indicator--46f3b90d-b8fb-4a83-b06e-550ffe4aab63", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f876d747-92dc-4384-af55-1cc97c7836b5", "sighting_of_ref": "indicator--ba8c3b61-dfc7-4935-b9d6-c17ab424303d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caf09e79-e418-445d-8a7f-d9211053c8f3", "sighting_of_ref": "indicator--719f2b2e-c552-4506-98c8-4441a743c69b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4587763b-9e3f-4b5e-837c-2f735f76901e", "sighting_of_ref": "indicator--e86a16ea-3814-4f5d-9a97-68c842c71b9d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ebdd401-d615-4944-8096-2bb89b323ef4", "sighting_of_ref": "indicator--1a50a0c0-54a0-4bbf-9a45-78556f2799dc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6df57ce-b537-4c1e-b087-cfb0e4772ab3", "sighting_of_ref": "indicator--b1e9bf1a-596b-47aa-821b-5c4680de9e85", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1af9aef-7ae4-46f2-a245-ea42d663d88c", "sighting_of_ref": "indicator--736a1909-fbbd-4d3d-bbff-6b5ae38d39af", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e677fed-8578-409e-a7d8-91316bb1dd76", "sighting_of_ref": "indicator--886e31f4-b692-4fe2-b772-7233f6e20377", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8f834cc-4e66-4954-a751-d2424b4a73e2", "sighting_of_ref": "indicator--a6e8d7bf-abde-4e6a-a26d-880104032659", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13d5a3b7-7187-4d0e-9bc1-2cfdf6a64810", "sighting_of_ref": "indicator--453b4e00-5b28-44a9-a0d8-65e7e0079c07", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a92b84c-38a2-4b7e-bcf4-03e980ff4351", "sighting_of_ref": "indicator--135de850-39fb-4bef-8b1b-2ffe02d04eaf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e14fe94-079a-40c6-8430-32406b3a3b61", "sighting_of_ref": "indicator--d2f82dde-f39f-4ef6-b4c9-c9fe04e6483f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75e36fe1-da31-4438-b599-81d1172ac3f1", "sighting_of_ref": "indicator--f337a7a7-1cc2-4949-bbbc-fa4d58814dc7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcd6d500-edb5-4349-8a71-cf721b32bd73", "sighting_of_ref": "indicator--e6e977d8-8e4b-4d01-ab6a-b6d93c6f3534", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb70a2cc-2ddd-42bb-9a23-633f15a0ca4d", "sighting_of_ref": "indicator--18bff12b-bcba-45bb-b96a-dababae9facc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ab613d8-8ef9-417a-b4e8-01dacb90020e", "sighting_of_ref": "indicator--27f965ff-b901-4a4d-a795-0de08f2a64fe", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1b322fa-cbe9-40c5-880d-04b6831ce643", "sighting_of_ref": "indicator--95dba9a5-f2f9-4bc3-9a9f-95a41e5db92b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d438ab4e-62b6-4f28-bc6c-6984b362a8fc", "sighting_of_ref": "indicator--d207af8b-080e-4080-8057-44a562d12798", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78f81be7-3450-4655-906b-f9a00fcb485c", "sighting_of_ref": "indicator--cab43efc-668a-4a6e-9d28-a00e339715ec", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a213f6a0-7345-43e7-bfb0-51245f4a0afc", "sighting_of_ref": "indicator--bbdc969a-b338-4a95-bffb-ef8e18416ab6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac667527-b633-4123-bbc6-f43bace980ec", "sighting_of_ref": "indicator--5d8cbddb-6b70-4f4c-b186-fe3baaed683b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06818b50-e091-4f96-949e-2ad5a17a8a18", "sighting_of_ref": "indicator--b2e79384-a7a5-4098-b79a-750050205276", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2df4ec0-2183-4a9f-ba2d-dac7d1807a81", "sighting_of_ref": "indicator--23c33873-5992-4cc4-babb-793a1ba879c2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfcd3ced-a60f-47fd-8e06-401070bc8a99", "sighting_of_ref": "indicator--3759a41f-6143-4271-a686-e2cc266339ee", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fb957df-efb1-44eb-a64c-af0109177d03", "sighting_of_ref": "indicator--f1ccab67-2bd9-438a-b7ab-4033ae4f75e3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e18d61a4-9d9e-4f04-b131-ac3d956ac207", "sighting_of_ref": "indicator--32a8aadd-ad31-4f84-88d2-61e997025a09", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--394f4d2c-7e2b-47e7-9f6d-96fc23b4bb38", "sighting_of_ref": "indicator--65380d18-070b-4d2e-9e41-afd7cb9530de", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abdcb874-6bf7-47b2-94b7-71f372944ec0", "sighting_of_ref": "indicator--ab1e787b-5eb2-427a-be8f-7018d23eef26", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f1f6c2d-bc39-4cc7-b6c1-7b5663a12151", "sighting_of_ref": "indicator--9accc84e-228c-40d4-9449-d135aedceb8b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2190c3a0-a986-4b72-84ce-9ab32fadebf1", "sighting_of_ref": "indicator--229809aa-db4a-48a3-a384-ad060ee5f65f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c07ea469-9eb7-4b0f-9b0a-d72f6790b419", "sighting_of_ref": "indicator--d3b47f4d-922a-4732-9cc9-a2e4edc23489", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daa332ca-e312-42b1-acc0-f54d69bf1eed", "sighting_of_ref": "indicator--07c5bbfe-1add-4ddf-9161-0f0d52279614", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c183a0b2-b03b-4f8d-9239-c56dfa2e0fcc", "sighting_of_ref": "indicator--65f25aad-049b-4c69-9a6c-7c24ff639cdd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ab36016-b122-493e-b130-7664c64d1b26", "sighting_of_ref": "indicator--fdafa492-ee2c-47a6-afea-9cf1888e60b9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c05e44ca-349e-475a-a66a-d77bf0be193b", "sighting_of_ref": "indicator--a5d33487-3c69-40c2-96d1-a6e72e46bd5b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--097dbb5b-288f-4333-8897-9457b5b3a8da", "sighting_of_ref": "indicator--adf5c4c0-6060-424b-b2c7-aea3d90086b4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--952dd673-1862-439a-bdcf-a72c5c7a247c", "sighting_of_ref": "indicator--b7fa722c-8812-4a63-837c-17df5065d702", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edfd888a-2c10-4947-b6e0-edf3091868d2", "sighting_of_ref": "indicator--20f49489-2bc4-44a2-92de-494db4301748", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0ac843a-1656-4d93-aaa3-0de0b3b4cf16", "sighting_of_ref": "indicator--04e6182a-fa10-40ac-8146-26d02479fce9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54f2b11e-112a-4779-902c-7cfe114d795e", "sighting_of_ref": "indicator--c837830c-7a6a-4c1f-9720-462226fa46e8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6ced511-f31f-4422-9ee2-d7111fbc0680", "sighting_of_ref": "indicator--9d35f40c-94f8-47bb-809b-2ffbdbb9cf97", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d1c8199-b5e3-40b5-adc5-0220a004bb15", "sighting_of_ref": "indicator--542ff1a2-204c-4c57-8fc2-9537a27c3962", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41430d08-e040-4a08-8279-10953b22ffc3", "sighting_of_ref": "indicator--f502294b-60d3-48c1-8d86-7f26d38f0281", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e333f51-8f49-477d-a1b1-a18140b9f961", "sighting_of_ref": "indicator--442a37a5-6543-4907-87db-fa2d42413746", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6bd7ab1-b270-4bb1-9553-42b093f712b3", "sighting_of_ref": "indicator--da5083ea-909f-4ccd-aaa4-f056c541cea5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7087698b-f0cd-49c7-9ca2-2fe49ce25122", "sighting_of_ref": "indicator--a2017a0b-b62f-4314-85ad-bb369df6f639", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7426ad38-1fca-4930-bf71-2b8ba66b454f", "sighting_of_ref": "indicator--76092451-c0b2-4fb3-87eb-6b5c8dfb6ea3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7835cbcc-9e51-4985-bb06-8fda394f2d44", "sighting_of_ref": "indicator--dd1c607d-6831-4627-98cb-d99bb0d09b84", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c899768-c871-4501-b6a0-dd050963f016", "sighting_of_ref": "indicator--1e4269e0-9fa4-4ee3-832b-9e9e40640627", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ce1d6e7-4b16-4f3b-8c84-3ec115bc5d46", "sighting_of_ref": "indicator--b320ed72-c112-4e07-bdd9-99e06426f86d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5e2677a-2c35-43bd-99d1-b5d13e026151", "sighting_of_ref": "indicator--d79863cc-0633-48f9-ba97-9ec9f14b2491", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b7d982a-4cb3-4e9e-89e8-da24d3f239bc", "sighting_of_ref": "indicator--19088a7c-99e6-482d-9b27-c20fee8cdeae", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1caeca0d-1a8d-4882-9f61-250f8a5788f5", "sighting_of_ref": "indicator--5f61418e-8f33-434e-8205-fd5f42ce7d5a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8825d0bd-4e72-407d-bd55-735a216fb554", "sighting_of_ref": "indicator--6226f77b-feb9-4edd-b738-4fbf7482f39f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61f02bfc-be43-4186-b792-fec982432728", "sighting_of_ref": "indicator--5bbdfbb0-c423-4db5-8cc3-93a17f793359", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--370efc53-358e-4f06-ac01-8a6432f440c1", "sighting_of_ref": "indicator--96633fc5-1503-4450-92c4-fb620be4791d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e4123e2-dca9-4a95-ba71-e86bd99d45e9", "sighting_of_ref": "indicator--62704517-9324-4c57-a60f-72a42758b21b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b7c8c27-0ce2-49c0-80e0-13ce7c2af218", "sighting_of_ref": "indicator--38f2e3d7-06d1-46fa-86ea-481ec00d44ac", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae12d56e-f376-4a9d-beda-0332e747617e", "sighting_of_ref": "indicator--c7d1e214-f4db-4d43-8454-e37de6436869", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af233a87-71f0-4b5b-bed3-5359263dc136", "sighting_of_ref": "indicator--5ff4c10f-d159-45b4-8a8e-214a4b001f3c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a1da216-58e7-4842-96a5-7017123e5787", "sighting_of_ref": "indicator--5a5771bb-bace-43e9-8a82-396196058f88", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed7e7330-a4c5-4c6f-ab53-8d4568f04306", "sighting_of_ref": "indicator--e1a43643-4757-4fea-b8cc-ddafaa3865c9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cf0690e-3db1-43e9-bab8-a4cd9efc3279", "sighting_of_ref": "indicator--9d6be815-4648-4aef-a855-01e5cca29021", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7160b18e-83fa-48d3-8d3c-58270591da74", "sighting_of_ref": "indicator--952c8351-ba4c-49e3-abe5-51bc65ce5185", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8626bcf-cf5e-4357-ba9e-0e5bbcd506ed", "sighting_of_ref": "indicator--b8fe36c7-fe74-40d2-a9d4-0f8737488f53", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5041b5e5-2fe4-40ca-8a8b-de867d5b6144", "sighting_of_ref": "indicator--3b0757c6-875e-408c-aa64-0138cb838a5a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ffb7e48-c0a1-41f7-8686-9cb6d936e121", "sighting_of_ref": "indicator--7fcc1115-a87f-4857-9892-dad44c4e195c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a05fc88-5fa0-412b-a754-cf11c3f7d6a5", "sighting_of_ref": "indicator--d0e0eb7e-d61e-469f-a059-30983603df0d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--541d174f-2b17-488a-bb3e-88c713af0473", "sighting_of_ref": "indicator--283961fa-ed39-4723-bd2d-99fd3f227606", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4899f8fa-3833-4671-8ca6-9e689263fb6c", "sighting_of_ref": "indicator--d9edd37a-019b-4ce1-aebd-c16fe643a8bb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caee22ee-065f-489f-8bff-3ef019657701", "sighting_of_ref": "indicator--6e9c654c-d793-4d79-8fb1-e723e661e982", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83498510-47e1-493b-aa5a-2e72789e2ed4", "sighting_of_ref": "indicator--d5231e15-7fdf-4356-8794-7b184e7a40f8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d2a0722-64c6-4960-bf40-f09524084498", "sighting_of_ref": "indicator--058f4ded-7535-412a-8166-8076a1437ba8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7f87015-d945-4443-8411-3a1fa9e709c1", "sighting_of_ref": "indicator--e6930d53-4fa4-4092-8f3d-d19f0803c911", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6851fb88-cc8b-44a4-a38e-e37079249974", "sighting_of_ref": "indicator--bbe4d285-c53e-4d1a-9416-297d0df0fcef", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--697aefd5-94f9-4c40-bb8c-32c461f11b8a", "sighting_of_ref": "indicator--a626a90d-d46f-42a9-bcfe-44edb7a5d540", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--276254b7-34c3-436f-bf01-583a5a126b7b", "sighting_of_ref": "indicator--7c5b8cb5-514c-467a-97d1-01044c5f444f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d9b1fc5-1962-40eb-af4e-877e0236fd5c", "sighting_of_ref": "indicator--961fba46-01c7-4d7e-b687-978f5b578a3d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be95c874-b5d0-4b49-a6aa-ecf4086c27c3", "sighting_of_ref": "indicator--016fcb8e-ec06-4099-b94b-3d419b715904", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54c1ab83-930a-4799-9b90-a8d89c8e9361", "sighting_of_ref": "indicator--0fc9edd9-f557-4bbe-a0b3-7580a73b7aa0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3903dd9-e9c3-4143-b279-ae481b5846cd", "sighting_of_ref": "indicator--f429fe6c-8301-423a-8eb8-345f219a40b7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83939c52-e30a-413d-afbb-69b502172b16", "sighting_of_ref": "indicator--227437bd-cd4a-439a-8baf-0c554d7d75a2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0dcf82e-742d-4438-aa10-a36c1a7fdaed", "sighting_of_ref": "indicator--c404391a-22ed-4d58-8d03-667d28ca7095", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c512aa8-c11e-4156-8177-4d851d41f487", "sighting_of_ref": "indicator--c4f0faf9-cd6e-46f8-8a0e-402c3a491a87", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa313241-ed9d-409f-a759-0f7202cc1a73", "sighting_of_ref": "indicator--5e87c7a1-3f22-4b82-880e-db2cc536f3e6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7a41245-0dca-4a8e-ad50-5a44cfd85262", "sighting_of_ref": "indicator--3527442f-a588-434e-bef8-562ed06f6ba4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53100884-d743-424d-ac28-a5d8a88bb992", "sighting_of_ref": "indicator--77842176-5921-4f6d-8a79-1dab4ff3fd90", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a9b590c-1fa7-4037-b6d9-dcba090fa319", "sighting_of_ref": "indicator--01d99d56-722f-4531-8886-7104b15682b3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--180fe948-be1a-4181-9713-6a7fdb9c2ece", "sighting_of_ref": "indicator--431a0fe5-7948-4f0c-8f14-170ed4b8d17c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a122aa8-44f5-4f6e-b098-e44bc783e897", "sighting_of_ref": "indicator--62e8e9ce-9b87-4624-b862-cbf5fc1a21d2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e241ebf-72f1-4e06-bd27-56f116f8353a", "sighting_of_ref": "indicator--e655d8f7-7caa-45c9-96b7-9fc20e5533d5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0777ef4a-b267-4522-9f77-a6e5a1d33d46", "sighting_of_ref": "indicator--ba177f2e-e800-4625-a09d-7abe336ee6cf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d53de3eb-830f-4759-9cee-bf611bb684c4", "sighting_of_ref": "indicator--fb5eb9c3-38f3-4643-9435-8de2475a3c87", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00504a0c-1583-4b06-a8b9-2004afdacddf", "sighting_of_ref": "indicator--5385399b-883f-4c6f-a393-159d07cf291c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c752752a-8f5b-4d6d-b52c-1c6c3b0eec68", "sighting_of_ref": "indicator--aa78fded-ae48-4468-9132-76783e74b87a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10936607-bbcf-4103-98dc-e5128d9ddc8f", "sighting_of_ref": "indicator--e316eddf-7751-42ca-b9e4-8e2ff0c889a2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de13d7fe-ef76-4489-bd7f-3668056d47d2", "sighting_of_ref": "indicator--cf8da66f-3638-412f-bf66-52d5947832e1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ebd3766-a3ec-45ea-92c2-3e75531b758e", "sighting_of_ref": "indicator--3fe462c2-a6fa-43fd-b8ba-28a83425ec78", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--797228a1-4d78-4e1d-9cbb-74e63f7dd28f", "sighting_of_ref": "indicator--e5c0baae-e611-4731-b1b3-67dd50abe587", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10e553ee-6423-4bcf-ac3c-67ffb8acb30b", "sighting_of_ref": "indicator--5b0e0f7b-ed9e-4054-895f-8535e3d5fcca", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--197b3c49-bfb0-4a7e-8443-3c4ae3bcb53d", "sighting_of_ref": "indicator--fdcbd677-d504-4ea7-97de-676b7f17d163", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c07ae499-aa5d-46e6-b44e-fee564e0f5d1", "sighting_of_ref": "indicator--e2047abd-8087-4487-b464-b1571efd8ed1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--142a2b00-45a3-4ce5-b192-4322ffff1c1c", "sighting_of_ref": "indicator--bfa3f137-14c3-44c3-babe-ade5e2d3bbf1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36bb6f2e-58b2-4423-b098-58391ac9b8bc", "sighting_of_ref": "indicator--fa14051f-fac6-42c1-b42d-57070c53fdde", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41857a80-fef9-4aa5-9575-1bc03d921db8", "sighting_of_ref": "indicator--f907e7fd-f1ea-4ab5-97e2-89938ce54937", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--341f17b8-e0cb-4ca7-aaf3-736580448475", "sighting_of_ref": "indicator--e73972dd-ad8f-4289-ae1c-6c348273a98a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b09d6eb7-b1ad-48f5-8e75-c9ae3344d1f2", "sighting_of_ref": "indicator--55da3792-5414-4eef-9fec-3f64812cc810", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5491c52-1430-47cf-b306-ee5b48fba599", "sighting_of_ref": "indicator--f0d650e4-ac50-4137-b1c2-004d27eddbee", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--522ea91c-1971-4146-9e8e-721a277fd419", "sighting_of_ref": "indicator--86d1d91b-5c43-4e18-81f8-dada1837760b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce865d6f-5091-49b1-9d7a-9ecba821f447", "sighting_of_ref": "indicator--edf683c0-cf5b-4f1e-8f8f-a43288e8b94a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a8af9dc-5855-4454-bce5-573aa92ed231", "sighting_of_ref": "indicator--eecd92dc-c6ac-456e-b658-fd74f660951a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0633a437-4a1c-4cc4-b169-b4f89e97a0e3", "sighting_of_ref": "indicator--767d2fb4-7840-4898-a245-8d70546a66da", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d7dc13e-e0fe-435b-837f-50e716dc14cf", "sighting_of_ref": "indicator--9dc6d48e-4568-44e3-826f-c79a6397f573", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6df0867-cde0-4227-8a19-630690e5b19a", "sighting_of_ref": "indicator--51c5d945-d46d-4e4d-82e1-18b5de9163c6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45527e30-820f-4d14-b730-837f9cdc7dc5", "sighting_of_ref": "indicator--2ba16ed9-38e7-4f44-929b-1fe97c6f4b95", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcb47e8c-7ffb-42c1-a669-c0452cb9ba8b", "sighting_of_ref": "indicator--f56af92b-23f5-483c-84f3-b0df85af3b4c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02eda780-5f01-490c-91f8-8760638e7005", "sighting_of_ref": "indicator--797e0f4a-0bc1-488b-8c57-978d4b2ca71c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3d944cf-e734-455e-b63a-e7502a6e1c88", "sighting_of_ref": "indicator--089c9bfc-d801-4516-9042-4b147c135416", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33a7fdbc-e839-4472-9445-f959698a3293", "sighting_of_ref": "indicator--efe3d999-8a9b-41ae-9a98-1edd57ca621d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eec7154f-1126-48df-b15c-ce6635b01eae", "sighting_of_ref": "indicator--f7b0bd59-d75d-4758-bfb7-a8576b9da3f3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9450939c-e9d6-42fb-876a-aaec99684bfa", "sighting_of_ref": "indicator--733978d6-3688-4c24-bfc0-0a028392a2d2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8881ea06-0b98-459f-80fd-3def865723ce", "sighting_of_ref": "indicator--58ab9076-6f61-41c2-be94-9ee82b59581a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b32386f0-88c0-4164-9cb9-25437949303b", "sighting_of_ref": "indicator--2e66a1bd-bae4-454e-ba20-6cc83b24a3dc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61bd8a11-c7b4-436a-8949-5882e4fe9423", "sighting_of_ref": "indicator--263075fb-2831-41e6-9dfd-8193ef8dde6d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--472b9d2c-0dc5-49e4-9380-df19721a6a78", "sighting_of_ref": "indicator--1a835b20-5a4e-4fe0-9eab-50508e9d5c19", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dbaec5a-0f94-4125-8328-e589bf17f0ab", "sighting_of_ref": "indicator--a3560138-3e22-460b-b32e-47b11ea52cb9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--263e8a37-2882-422c-a0a0-b1a16ffa392d", "sighting_of_ref": "indicator--f1d97a43-f176-46ef-a443-c2636648ecd6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33bc6265-884d-4ad3-b6bf-e5eec0e81875", "sighting_of_ref": "indicator--c4be9e9b-a136-4ed1-bdd5-5b528355b806", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32c52f0c-5ca4-42b2-a198-908baf3c003a", "sighting_of_ref": "indicator--32e2efbf-04b4-4e4a-b72e-1636ae587230", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--396ef8de-0098-4407-aadf-d553b807ee06", "sighting_of_ref": "indicator--e9921f0c-9251-4901-8b35-d9ceb6c35c07", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31f5b467-8e7a-49b4-8fab-b7a294d97045", "sighting_of_ref": "indicator--802bd7b1-2b43-4871-9eb2-3f81581db87b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5202c19b-9e02-48ca-a2b2-70af95a1ab2d", "sighting_of_ref": "indicator--c68ecce9-3c8c-413b-a4da-f5f691c996ba", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba4754ce-677b-4317-b41f-f7af0c1924df", "sighting_of_ref": "indicator--aa1218cf-c939-4b0c-84cd-2e5f8c01f9a8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ac78bef-deaa-4e0a-a410-8396290b3e14", "sighting_of_ref": "indicator--32ac4bd2-7fa8-4f15-86d1-0777ca9d70e8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40482014-1222-4f09-b54f-fe42f9dc5e6a", "sighting_of_ref": "indicator--ce72ecaf-ddae-4ea4-84b5-179f9997e8e7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9455003-77be-4156-b2a3-69e4764e46a6", "sighting_of_ref": "indicator--a2560863-e104-4589-b1bc-e68ec40b0f72", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2e1090e-be60-48d8-a66b-eae6cc345870", "sighting_of_ref": "indicator--a713e309-2d26-4e49-8326-9954199ecc3e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b1e6c10-6afe-4409-82a7-3613c9272937", "sighting_of_ref": "indicator--96256cbb-4f32-4d28-a4fd-1a9771ea5574", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13d7ee04-33a9-4f80-ab6b-6223dcd29e3d", "sighting_of_ref": "indicator--b1a2cb7d-dd6b-40dd-8e85-41857fe9a712", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46a6f403-bb9f-4819-8066-bfeb6f722382", "sighting_of_ref": "indicator--18764305-27fb-4348-815d-daebf8fc671c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--420bc469-3bb6-467a-97c0-146975cd3267", "sighting_of_ref": "indicator--d464be3b-8b85-4962-8854-30d77dbb8de7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f0a25cf-74c8-4dae-92c5-7f4c39195813", "sighting_of_ref": "indicator--0f08ca75-d9c8-44f9-954d-3e4bb243ecc4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a280d3cb-a5a8-4eb7-91b2-269b9f4c5c60", "sighting_of_ref": "indicator--687ed6bf-f475-4d39-a121-932bed22edae", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f974e728-8cb0-4ab7-ae7e-5df0fa6eaed8", "sighting_of_ref": "indicator--6d945dbd-64b0-4a39-9578-195b8d65b4e5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64c33442-04a0-4ac7-a974-ac27b6113b94", "sighting_of_ref": "indicator--dd577acf-d8a5-4244-b744-09496c2773ef", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7fc4a44-e9ef-40c0-b5ec-1e00c3489f47", "sighting_of_ref": "indicator--1ff7425a-0d00-4f54-b958-7fcbc48a867f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a860286-efeb-482a-82cc-0daae30375b3", "sighting_of_ref": "indicator--85b33116-419c-43ab-93a4-e0fc0794514b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c431e4cc-8028-4519-92a1-3d93aded21d6", "sighting_of_ref": "indicator--d5a01cdc-580b-4f03-abd4-edfa25f9b66d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd78935d-7392-42e6-82fe-52ba3e07348a", "sighting_of_ref": "indicator--235559a3-988b-4254-bfb7-829fdf6cbb1b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfb19ba5-03cc-46b3-8a4a-e942a24ecb5c", "sighting_of_ref": "indicator--d231d2e6-90de-458e-9e72-1665e1b17720", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d97ada2-e6fc-4f32-964f-f186494a9dfd", "sighting_of_ref": "indicator--9d10090b-daec-447d-9a69-5e58315f324a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f2f70d1-fb89-454b-87ff-244ad5d1f3b3", "sighting_of_ref": "indicator--1c76cd3e-adea-45ab-ac1d-bda3be2366cf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfcf0ef6-3248-4eef-be51-ec535a6186aa", "sighting_of_ref": "indicator--6627cc75-7cbc-4c8d-bb92-6bcb63dde2d8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f38a5dd1-035d-467c-9f28-e592d6784644", "sighting_of_ref": "indicator--72efa2f3-0d5e-492d-80f9-ee67d8b65fd7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c25e09a-8925-43d4-8f45-6a7309ca050b", "sighting_of_ref": "indicator--11becb28-4ffd-4985-85e5-8347369d4511", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8da829f-f5b4-42d6-a29f-7ecd170a494b", "sighting_of_ref": "indicator--f9ce5d9f-500d-41b6-9801-4146f407b985", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--258a0208-a1e7-45c5-9c7c-f26b38d6f49a", "sighting_of_ref": "indicator--0a8e3b82-ad8f-4bde-904d-417a9dd30056", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9f0feb0-1c9b-445e-b7b6-d3427795369e", "sighting_of_ref": "indicator--abf0db20-d71d-4d0e-8c35-f4c92b3c5482", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4f72ce0-6d4b-435e-94f5-f3a00d61dec6", "sighting_of_ref": "indicator--b1d340cd-0c3a-4c2f-8797-4aca738b2e09", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d37107cd-a9f0-453e-801d-c34c03e0643e", "sighting_of_ref": "indicator--d3de6003-3444-4a88-9c66-fd4f9823188d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3fa26ef-686a-47d5-bc56-0d5c2030ee8e", "sighting_of_ref": "indicator--a1d9fbcf-0b86-467f-8112-6f66a1017a9f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87282882-f225-439e-90cc-fec6a00271c8", "sighting_of_ref": "indicator--cad79db2-80e5-4e8d-a33e-958e91294288", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24b1e27b-9cd3-4a0b-82c3-f4016025b995", "sighting_of_ref": "indicator--de3ce5bb-3b78-4be4-b595-2e2878c9be8b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fcac218-3f54-4520-83ea-036cf14c0ddf", "sighting_of_ref": "indicator--c01b791c-57f5-444d-8a4d-e5b92ee53e78", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b56fb461-7d9a-4b0b-8ea0-cb799ecc0ec9", "sighting_of_ref": "indicator--d7e978e6-8a7f-41e3-9c85-e6cc1a98a139", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d06f2fb9-4a81-48e7-99ec-a7b9d7a95c61", "sighting_of_ref": "indicator--d45a25c4-fbe3-44bc-bf9d-6d91eeb3de67", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb7d6e88-6530-4c1a-bbba-a13ecd926853", "sighting_of_ref": "indicator--33a956c4-6f50-41bc-8137-6d5732e03145", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4845e7bd-b759-4c61-b72e-90d92dc10439", "sighting_of_ref": "indicator--c7633fdb-be12-4c80-b23b-0217b401d5d7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4bf7fb0-5652-471e-923c-bc60c2c5870b", "sighting_of_ref": "indicator--02b41fde-f118-495b-ab73-78f417106ea4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c83dccdf-e92e-4ea8-9fed-8d5f51c80035", "sighting_of_ref": "indicator--eab2408e-5932-46ad-99eb-52f6e213c8d7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--605c7d10-971c-417f-ac99-ef11a602ae90", "sighting_of_ref": "indicator--66f50e26-0dea-4069-8501-b37f9da28e14", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22354c39-7b21-4aed-b7d3-0073cb54618b", "sighting_of_ref": "indicator--ef6ac9fa-52bd-4b45-8992-e1a8631d615f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--787b9757-2c19-4311-a426-3dabbf1ca489", "sighting_of_ref": "indicator--5b08802e-40ab-4693-9604-3d7756859461", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ebd778e-8bdc-4d9d-b246-a2059b1ca37c", "sighting_of_ref": "indicator--e1b990e6-3b43-4657-9e1a-2bee149436a4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a177d96-5cbb-4bc5-a58f-6db73085ec53", "sighting_of_ref": "indicator--d40d83fc-76a7-4ae3-b216-e3755bb538b9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49fb2cae-85f6-46ef-9f66-555ca0a89e38", "sighting_of_ref": "indicator--f062d2d9-2516-4048-b8df-24f5307a9aa9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d889628b-b133-4dd7-b9b3-ff9f3397271f", "sighting_of_ref": "indicator--0ce89cae-65c5-4a16-bd12-03448d3c1f4c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea2eb025-9fa0-4cfb-b23f-7412e9307812", "sighting_of_ref": "indicator--330658ce-87a7-41ef-9c03-41b71a27d3ec", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f9b358b-6986-488d-a9a3-097bfc9e9727", "sighting_of_ref": "indicator--bfe7d290-68da-4327-86a8-ab4085107448", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7abfa575-d063-4f61-9a6b-faea46aa54a8", "sighting_of_ref": "indicator--1ceac6e4-b595-4123-b253-690898237da9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09d71a73-5669-4433-9ca6-317fc98d42eb", "sighting_of_ref": "indicator--086836be-da0f-4184-9af3-710599df330a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faa20848-d6b1-47a1-b40c-3b2ad4a519c9", "sighting_of_ref": "indicator--45fcf173-c4a8-4064-b9ad-a998a90b16c6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8761e2a9-3122-45eb-88b7-53ed7445292d", "sighting_of_ref": "indicator--1aff8079-17e2-4007-a67c-1af33ad8b484", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90c4cbe8-58d4-4490-b83a-1feaf944ce5c", "sighting_of_ref": "indicator--2fe0e33e-3ac3-4f4b-be5f-d83934115013", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b989001-b96c-4b73-87d6-620a15cdcc0b", "sighting_of_ref": "indicator--78daf49f-a794-4f3a-9e2e-abea78c7565e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--929da241-decb-427a-9281-98f61e42c456", "sighting_of_ref": "indicator--a8c0a8db-1dab-49a7-93b8-784070c3a2f5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2891f58-f47b-49a4-a4a7-530111f24d18", "sighting_of_ref": "indicator--18d07cb0-568f-4abd-8789-725667f45900", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--258749c4-878f-4bfc-b8ca-b3e21c68a683", "sighting_of_ref": "indicator--cdcf08b2-1f72-4d35-93eb-6f88b00a6414", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1209a64-88c9-4ac5-ac23-d2b6f0413fb9", "sighting_of_ref": "indicator--8909b9c5-d505-477c-9e5a-f824c62564e8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c6c6fed-6e67-42f5-9b57-69040787518f", "sighting_of_ref": "indicator--958911d2-607f-4273-975d-04e03fbd85bf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--042427a5-49fe-41df-9fa9-e18d3ac27384", "sighting_of_ref": "indicator--c248d255-b90a-46dc-8154-42345191d5b3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--374b7703-9021-40c9-86f4-ace1f347e955", "sighting_of_ref": "indicator--6f0092f7-8ee5-4fae-9cc0-b9895836fc16", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1140aac8-7636-4dac-bbb5-922ea3a88698", "sighting_of_ref": "indicator--c75fd01b-beb2-4716-9387-e3b8a01958b6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c29cd8b-1603-44a4-840a-997357daba19", "sighting_of_ref": "indicator--62fb135a-b049-407a-81a9-ea22bdba868d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32bb8ab3-e240-4db3-a7db-684fb9c15fd6", "sighting_of_ref": "indicator--e5eadbd5-c9a7-40a0-8363-76614853c52a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83f5e699-9215-4821-93f2-b4a2ec28281e", "sighting_of_ref": "indicator--9d2a6955-91ff-444b-8acb-6e22be1144cd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37999403-9237-44a8-b3de-0c960788d917", "sighting_of_ref": "indicator--4a1be2f2-5bf2-4218-8571-150d3d15ce14", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14316690-e7e0-46b2-a233-f82a4d17ff5a", "sighting_of_ref": "indicator--172510fa-6e6b-46d3-b72e-0b1d5c947651", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2f30469-a554-4d7e-9800-65a84282c710", "sighting_of_ref": "indicator--24ac7949-dcb4-418b-9284-21615ef054fb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31851ba2-c7da-47f3-a04f-6c3356194021", "sighting_of_ref": "indicator--15eea3bd-a6b2-42da-a12a-96de1fae89e8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3b46ee7-514d-475b-86ce-ddb6cbd37241", "sighting_of_ref": "indicator--33ed58b2-c1c4-4b43-8190-b4dd689ba47f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--561d141f-fe5f-49d2-9817-5419f446bcfe", "sighting_of_ref": "indicator--fd20ecd1-acb7-4b20-8971-a269e7765048", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c06dff7-734c-46e7-8f5f-560f2704573a", "sighting_of_ref": "indicator--d05578b2-77a5-468e-8754-e78307e70769", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a1ad229-4441-40d3-b460-2f6bb31f8009", "sighting_of_ref": "indicator--3222e24b-6339-4cc4-9794-d1c80cd8cf0e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aea4135-326e-46b4-ad91-a89b8edec63b", "sighting_of_ref": "indicator--e8a92de1-2f7f-439c-a756-eda13a96ed11", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f85e9440-b2e3-4e15-9022-587f2595dfeb", "sighting_of_ref": "indicator--a924f02b-3466-4276-a950-15635ba83a07", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d106d5f6-eece-406d-917b-f8f56feded7b", "sighting_of_ref": "indicator--28b6032c-d51a-499a-8b9e-baf41a823114", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--687a9354-5594-4e24-a394-a225a7e96f05", "sighting_of_ref": "indicator--9a7c6124-6671-4d0e-a56e-705c6019c537", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc05a48c-1bb7-4974-983e-a4a66947f490", "sighting_of_ref": "indicator--e31ef39b-615c-41e6-8241-bc1b53b200ca", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22295b3e-63e1-459f-9c20-0bc79396342d", "sighting_of_ref": "indicator--3f3d4d5e-5cee-48f3-ac3a-305d27848cf2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eb0e999-5254-4313-b31e-c086726c1ed4", "sighting_of_ref": "indicator--e1d74cf4-8485-4e6d-8dc0-dd1b161fb7a6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48503e26-296b-486a-a3d7-91777c910b13", "sighting_of_ref": "indicator--b0dfc874-ba15-4839-a5a6-f59e60d0d052", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceb712ce-8538-4b5d-b354-56e5329cb5bd", "sighting_of_ref": "indicator--cce7db90-660b-4034-aec5-cc5048424274", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a49f9ae9-379c-4494-8339-bc3a17e4da3d", "sighting_of_ref": "indicator--db1473f3-25c8-4dc2-9644-73494c81a563", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6b1688d-2607-46f0-ad52-5a448f9dfaf4", "sighting_of_ref": "indicator--969b5fcd-511e-4102-89c3-7bc8493b8601", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50f7af5d-0075-4bc2-9b93-99ed67913bb9", "sighting_of_ref": "indicator--4de91b42-ced4-498f-a0c7-0f70e3b5997f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18a61109-485c-4ae7-bddd-2ca6c6af47d3", "sighting_of_ref": "indicator--d0c07e8d-cb48-40a2-b408-019cb976e6c8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feeba678-336f-45cc-86cc-327dbde22858", "sighting_of_ref": "indicator--6040d905-5903-477e-8489-5dcf5360b74e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--685ad1cc-68ee-47a7-9652-bca07a766649", "sighting_of_ref": "indicator--ee480a90-ef95-406b-94f1-6253d32041cc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca67150a-19c1-48f4-baac-696cc385ff3b", "sighting_of_ref": "indicator--77abdf37-9d89-4669-924d-3044ef8fda16", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c3a6fbb-e5e9-44b0-a1b0-5868378deeca", "sighting_of_ref": "indicator--20028e79-0ed2-4912-989e-a8f6a1c48fee", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66ade1b5-253d-4f78-8727-a1b975684ede", "sighting_of_ref": "indicator--0e63af2c-88fe-48dd-a8d5-58ef2401c250", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32e3a60d-3d6b-4b0b-85cd-acff86f984d0", "sighting_of_ref": "indicator--98143d8d-520d-44a3-a6d7-ebcc4e7306ea", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6f32be1-25b6-492f-869e-ea1a80a544b2", "sighting_of_ref": "indicator--b971cfc4-803a-4215-8b7e-8f903f921995", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31761b32-cf84-4913-9d12-99cc47f197a7", "sighting_of_ref": "indicator--dfddd552-e855-42c0-b967-c48109dcbcfd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0171b27e-6cb4-41b9-bce7-7898ed78d947", "sighting_of_ref": "indicator--fd120fe3-d448-42fc-8e96-5123856ba485", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bc27965-3316-45ad-9354-ced0e183ab24", "sighting_of_ref": "indicator--e4059913-97de-4bcc-bee6-64852f272540", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b072d5f7-631f-45a5-b842-af5f788d9c22", "sighting_of_ref": "indicator--131105fa-02f8-47e1-805a-15805b7d9475", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f49c600-329d-4288-ae59-7eb0bcfd2a8c", "sighting_of_ref": "indicator--d94d42a9-667f-4d02-b7de-b6c74ffbbd19", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e425c5e4-fa3d-4e63-8f09-fc2633b57bf0", "sighting_of_ref": "indicator--7b851136-b007-48c4-8b14-9cef3c78d163", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9fb7dae-5b8a-4ce0-9cfc-87a9e03d49b5", "sighting_of_ref": "indicator--3df7cc27-33a8-4cff-9a0c-d8469e5a3efc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed3ce39b-4be7-43ec-9e20-f16c2b57a404", "sighting_of_ref": "indicator--cc492225-652f-450b-979c-2cdf58408bfc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d35cbcb6-7b19-4936-a566-ed9f8d556b46", "sighting_of_ref": "indicator--5ae2e05d-6fac-48c3-ad79-3b7626f02ffb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--889e118e-329e-4bdd-8cc6-8e23d9e076f9", "sighting_of_ref": "indicator--8a2aeebc-a7a7-467e-bad3-8e9cdf8c070f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05bba1dc-50ef-4daf-8e14-d796588ac04b", "sighting_of_ref": "indicator--d79f9468-0cd9-4cb0-b696-70b3ba91801f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cefa892-0f58-43c3-adb2-a7b38277a276", "sighting_of_ref": "indicator--7d99c1d8-9142-4b3c-98ad-3206ac27aac9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9d58e47-707d-4365-95a3-2c5c39395c5b", "sighting_of_ref": "indicator--193669f9-f38a-4660-b4b1-bf6206969298", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6974244a-7d90-4e2a-95b8-ebe4691c2497", "sighting_of_ref": "indicator--40bb8ad3-2498-4b59-b031-4b974a588730", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aebd038-8c26-4504-ac12-732aaa721115", "sighting_of_ref": "indicator--c7f4b7b7-bd77-4b13-9037-c5969420d01f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9edd376d-79cc-4f65-a70e-1f31471b96a5", "sighting_of_ref": "indicator--1bac1039-3ac5-4340-9624-e64041cc74fe", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--298c4dae-965f-423e-944e-77b41cdc339d", "sighting_of_ref": "indicator--8d399182-a9d8-49ed-a1fb-f827feee39b9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--314b9911-a363-4847-a6f8-baea2c6a8163", "sighting_of_ref": "indicator--fb248613-6688-406b-b85c-90c0a30f55cb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc2fad71-9c56-4afb-a2f4-2288c02ffbbc", "sighting_of_ref": "indicator--8e710c26-e000-4438-b969-1bcece964cbe", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8262b1d5-9b94-4b9d-a72f-dba124b7ef6e", "sighting_of_ref": "indicator--5eb8046d-9d20-4822-8889-8713b41c8a07", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afad7542-6dd6-4705-9807-63d79c2885c5", "sighting_of_ref": "indicator--9eba2eda-0afc-47c6-9d87-d814a9b1c52f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dee54edc-fa07-48f5-b72d-63faa5ec7e62", "sighting_of_ref": "indicator--72424875-2d70-44c4-b5ec-df85ce9afcbf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54d34753-201b-4a09-97ad-78aa2e66ca3a", "sighting_of_ref": "indicator--5a4b6772-69c5-48da-8873-1e54efa965ff", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d01c986e-6fbd-4552-a32b-324ea452ed63", "sighting_of_ref": "indicator--bc99cc0d-1f87-42e6-a6e0-a59b2c849fc7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fad893a2-abb3-48c0-8095-3210f474bc57", "sighting_of_ref": "indicator--1b5ac8e7-075d-409e-adde-f8090e7d80e3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d99d6db3-8883-49da-ae73-a19243c8e680", "sighting_of_ref": "indicator--a9a999f7-7ed0-4af5-9197-07eed8efdf59", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed379915-9f8b-4e46-b19f-c50ea2349a87", "sighting_of_ref": "indicator--ec57be17-b6a4-47fb-888e-1de7d3b70531", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07d776a1-e2eb-44f2-83f5-e2458997995a", "sighting_of_ref": "indicator--586637b9-e5a2-42f8-810f-3e66e34976d2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03c38f41-0594-4f60-bbd4-a8769abb5f38", "sighting_of_ref": "indicator--8b793b7e-07bd-47d5-90fe-62cd2b6d5bd9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c4dfd40-3bda-4c7f-94b8-22b83d74b958", "sighting_of_ref": "indicator--d169ccbf-6e39-4ec6-8ca5-dcbfe9cd6cb1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a6cc970-b34f-4a3a-9c28-5bec120b21d4", "sighting_of_ref": "indicator--e39da6f1-d091-4d10-835d-0bbe320ba2c8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bbe1654-a2ac-4a3a-8ba3-5fcc38a58d8c", "sighting_of_ref": "indicator--18824741-4077-4fa3-aeb4-ca6183aa63cb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34b93294-90b2-445d-9ed6-320ab69b592c", "sighting_of_ref": "indicator--b68309a6-09e4-41dc-a7b4-2e043366cdbd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bca9c14-f34b-48ae-b2d2-f83910e8458c", "sighting_of_ref": "indicator--adf6ede7-3ce2-4487-8371-7a16dbf2f7bd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51afba1e-2719-45b9-93a8-3373722408e4", "sighting_of_ref": "indicator--4cf418a0-e630-469b-9d28-45f58564e4de", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee38dd51-ae88-45de-9ba9-532a0aa47edb", "sighting_of_ref": "indicator--1623c89a-8510-4e9b-9cda-6095baee111e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4edf1eba-6868-44f7-9467-acbb2105a63c", "sighting_of_ref": "indicator--b74af885-2b06-4bb6-8b25-6d85142fbe58", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98e8e77c-4667-4bd9-a845-3c5ce74a8361", "sighting_of_ref": "indicator--23273232-305c-4c18-8ca5-c49e5f1302a8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42d2e7fe-c893-4dd5-a628-8575a503d797", "sighting_of_ref": "indicator--fb643cb9-2c42-42c0-84df-d0da0a74a8f7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea20d556-d4e0-478d-bdba-07a23af6eae0", "sighting_of_ref": "indicator--5ec4ef0f-7413-4708-b7fe-1da5a7297c2b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b07e765-b5d0-40af-b991-90a9bc95758b", "sighting_of_ref": "indicator--66d9f28b-acd7-4d58-838c-0564a5f9414f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93cc36d7-7fa0-4f6c-a2fb-0af4ead57a3a", "sighting_of_ref": "indicator--17f0a2db-9947-4e2a-b715-01208ba29430", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cb83794-5108-40dd-ac0e-500a2f658f45", "sighting_of_ref": "indicator--d270c9a8-d531-4dd9-ae12-5fc60370c1aa", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d50f3d62-e4eb-4415-b203-24676ce5438c", "sighting_of_ref": "indicator--dc6dcce2-7e3c-4e1a-98df-5ea6fcc3356a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fe27e11-3a9b-4e91-ae96-770430b26e76", "sighting_of_ref": "indicator--ad4e7520-453b-4085-a634-cb26d6cb20c3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1ce0b7f-5fc4-4b90-824a-da1d974e7750", "sighting_of_ref": "indicator--6ad9252a-8b6d-4c01-b1b5-795440ca08fc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65158fc2-96af-45fd-a55b-3c16a7ec0ddf", "sighting_of_ref": "indicator--3d3125e9-af53-4365-a6b8-3ad100fdfd6d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3b3ae7d-71d5-4900-b678-c7462a69f64f", "sighting_of_ref": "indicator--ff4abef6-aa6d-49c7-a244-6d4304ca232b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f8b203c-832c-4b70-9a0c-e436eab37658", "sighting_of_ref": "indicator--e5382940-3948-4927-abba-ec428458d2ec", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--621d9dd7-cb7a-45e9-bf44-4d2136719f29", "sighting_of_ref": "indicator--a6a463d7-510b-4a58-9541-970f80ad2813", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0965e0a-8cbb-432f-8b6a-5dda8bbe0cbf", "sighting_of_ref": "indicator--c267881a-495d-4f52-95d5-e7b1c63c5e10", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eb0f3a1-00a5-4a62-8f5b-443007b7adda", "sighting_of_ref": "indicator--f38feaef-360a-42ae-b85e-17fdb3c9a714", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd78ed0b-823f-4e80-bea5-ca4778e1ad68", "sighting_of_ref": "indicator--6799b3f5-068b-4bcc-9ad3-61798accfcbb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a6e1b4d-3ff3-41f8-93b7-bb2a94e0d303", "sighting_of_ref": "indicator--5e36c6d6-9d3a-4075-9559-a7ffb441bbe9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--847bfcc6-b550-4009-8c76-1facc25f9026", "sighting_of_ref": "indicator--06f67784-8a17-4a2f-b100-a9d111861fb9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dfc5aa4-792e-4cb7-9322-d818ee2d3e98", "sighting_of_ref": "indicator--ced27708-c306-412e-87a2-3f4e3d842e98", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52ba916d-c63b-4c40-8c65-9a596d46e997", "sighting_of_ref": "indicator--b9429b29-5450-4d95-9528-03b50696c6ce", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72d1c109-f698-4cf3-8028-cda13d555208", "sighting_of_ref": "indicator--adb2d03c-5ed1-4952-8438-c9652ea26815", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4a33ea2-9000-440d-96f5-d77d0b0aeafa", "sighting_of_ref": "indicator--7fd66edd-1fee-4a72-a68e-60661cebc77c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed4d883f-a000-4e33-8284-5c6bdd1db97c", "sighting_of_ref": "indicator--c6d5bd03-e634-422b-bf89-2b001ee962ba", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7410784a-3d2d-4d4e-8e4f-e6896a3a174d", "sighting_of_ref": "indicator--ea4f5519-9a51-45dc-b084-ec96c3ceec19", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--068e61ef-1095-4f93-a5d8-bfb466378ad6", "sighting_of_ref": "indicator--ac8bd305-c7be-462e-a587-d72a22ec76ce", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffd6b1e5-615e-48d5-a2cb-6b09e374bff0", "sighting_of_ref": "indicator--adf67efd-d8c8-4f3a-b27e-16d3e4e1326b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcab4f1b-badb-4551-ae22-9ed13640d5ce", "sighting_of_ref": "indicator--1ee2beee-9ca0-494a-9094-290b79736b19", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--816e22ab-e012-4e42-9396-afd0588be89a", "sighting_of_ref": "indicator--1ada8d25-ba17-405d-ad01-0e3d92d3f22e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6e4703d-d018-464c-bd4d-94468396666d", "sighting_of_ref": "indicator--a0377002-e400-48c9-8d54-b1a74d5392f4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69b44ad9-c220-4855-a73d-ea9ebc966768", "sighting_of_ref": "indicator--e1e9efb9-ae9c-4f27-8bfe-49f448f7fb23", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--828a7e27-cbd6-4aaa-b20a-1b83a71bd204", "sighting_of_ref": "indicator--3b43b214-1b00-44e6-9ed4-ed1d9cdd042a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe96316e-cbe0-4c3e-b287-58b148e043ac", "sighting_of_ref": "indicator--804960e5-6ea2-4feb-98d8-ec063ec83795", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--585d7392-ec58-4f92-811d-e9412a5966a5", "sighting_of_ref": "indicator--5433a063-df39-4b9d-8a52-b39d4b10a7ea", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac7fa020-1797-4035-b39c-b26b78aad640", "sighting_of_ref": "indicator--43e670e3-edfc-453f-8981-7031f9173c53", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--214f235c-819f-4487-a08a-8011406e0f68", "sighting_of_ref": "indicator--68efec1f-e3c6-48ac-9cfb-aa16f4b8ab91", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b2aab9c-4c8b-482f-8c7f-ab76f17c2573", "sighting_of_ref": "indicator--76e6cde6-d5d1-462d-9e7c-21519d4c2e62", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f50e394d-70b8-4912-8c70-a789e2fedda0", "sighting_of_ref": "indicator--50865290-a726-4d47-b1b5-7262e3694e73", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3bd21a2-db8f-424d-8ab0-bf88cb948705", "sighting_of_ref": "indicator--a1248a15-4db1-4bf2-acfb-e24806a5a11f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2e478ad-88e5-4107-bf0d-667673a313f5", "sighting_of_ref": "indicator--8065a71e-ef0e-48e9-a451-2783f1f736f1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bb6db7d-abf7-4803-a200-be1a35d5c7ef", "sighting_of_ref": "indicator--46d4c6db-f64a-402e-be78-d63c6713cb54", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--356c4bb2-c7c1-4373-a52f-c171b1cda578", "sighting_of_ref": "indicator--4acb3405-4684-4f97-81ed-bfce19ee71ff", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33f835bf-5bbf-4862-b6f0-e564086de5e8", "sighting_of_ref": "indicator--e4ebc276-64e9-4bcf-acc6-a0824d6f06f5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5dd33ec-03ae-488e-9a32-6a93eeac52c9", "sighting_of_ref": "indicator--5c0f7c23-8c24-4392-beda-fecd45dc9cd8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b297aaec-6a17-463b-9818-dc75aae4c6a9", "sighting_of_ref": "indicator--e212040f-867f-482b-9e2c-98cb24e202c8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--145ec0d2-8364-47de-903a-e656e5ebb2b5", "sighting_of_ref": "indicator--1738d870-00f7-45b0-8732-85c88c0273d1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4180a8db-fa2d-4a66-bc02-99800e34906d", "sighting_of_ref": "indicator--8847dfed-2443-4583-91b2-6b7f46e0301b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07b85269-d88b-4889-89a3-edfe5e99b139", "sighting_of_ref": "indicator--c065d028-687b-476b-a990-811f55d5e2a3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--150995f1-08c2-4728-9ab9-4d0fef6082c1", "sighting_of_ref": "indicator--0a6e6a6a-785a-4553-aaa4-620c80aadd93", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdba74ee-4cb8-461c-b45c-538f5a657384", "sighting_of_ref": "indicator--d4f4ac65-a5b5-4c68-99c8-120af7bcdfe1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e073568-a50b-4c50-bae0-a97ce7c9f2c8", "sighting_of_ref": "indicator--f3816a9a-8de6-49b7-b2c7-81d003924bf1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1241364-45db-43fd-bacb-fd4b681febfa", "sighting_of_ref": "indicator--1fe15979-635c-4b02-8687-e965277d0693", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4670c91-4a9d-43df-85f4-38f297a235b9", "sighting_of_ref": "indicator--6a2bfbeb-4e7f-47a8-86a4-04a9b06ccb88", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d55d0bc-1ebc-41d1-ba43-205cb7f69c0d", "sighting_of_ref": "indicator--b05b2727-b904-4f76-acd7-3160104d5ede", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccc4c3a2-80ec-487b-934f-8ce757e5f62d", "sighting_of_ref": "indicator--128cf7a3-3a9d-48b1-b3b5-78266e386403", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c9c8652-6404-480a-8c06-a4e17656b78a", "sighting_of_ref": "indicator--ce57c9ff-0ef2-48e9-8336-483ab6f77d68", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83ab01c4-cb71-4071-b681-d6b0ff7c26db", "sighting_of_ref": "indicator--f69f06e9-d431-43bc-ad0f-fde9fd178d44", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c70830a-c9d5-4180-8749-f84a4b9835d4", "sighting_of_ref": "indicator--3dd53aaa-e82a-4b78-99d2-6025e092a73c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aa6ea4e-f310-409d-b75f-5bff005a6b4e", "sighting_of_ref": "indicator--df30018b-5f0a-43ae-b405-4eef8cc60ebb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7bb5037-79c3-4ae7-8ffb-5f77f7bd8124", "sighting_of_ref": "indicator--6180c7ff-7514-4022-9e3b-83f1f3f8789c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6d8cce9-b07e-4989-a840-1611265554dd", "sighting_of_ref": "indicator--a63642b6-a321-46ca-9701-c100a01821e3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5faef1d2-8f59-49b8-b7cc-d94dbcf6246c", "sighting_of_ref": "indicator--84a25f17-db92-4f59-aff0-81eabbe8d24f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bf1ee1a-e7d8-4e5e-b981-67a7b2d46a85", "sighting_of_ref": "indicator--c1baff49-f182-43ea-b5c3-1fade3f05947", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be50e609-52b2-4345-98e5-5cef8d939bf7", "sighting_of_ref": "indicator--31f8843d-1971-40f8-bef2-4b26e68a70a1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae62f8f4-8120-4126-8295-16cc785439c3", "sighting_of_ref": "indicator--a1a6029b-25e5-45d4-bbda-8855f0eb96a7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8682f526-bea0-43b1-ae73-3555b86237a8", "sighting_of_ref": "indicator--231ed77c-ed84-4299-bb2a-168903eb5a67", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f15fe3bb-e07a-40e5-8df6-29f03a5b552e", "sighting_of_ref": "indicator--a3597cad-6b9b-4413-96c7-f6c4357811b1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8080bdad-d72c-4e1b-b7e8-42c1aa857324", "sighting_of_ref": "indicator--dbce2858-5426-4438-9a20-5c58bc0b9470", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f0f9ab0-bbdc-4195-a13e-d88c441b7e8b", "sighting_of_ref": "indicator--02c40713-3366-4c4b-ab7f-263ebd847416", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3e7bca2-b64b-472d-b9b9-81fd3c578451", "sighting_of_ref": "indicator--e3b995ac-44c8-4e3a-931b-ae8164d4834e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6b463e2-6875-464e-9789-6ae4e0ab95ed", "sighting_of_ref": "indicator--5626becf-2f9c-4066-8cc5-83940f5d1165", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7734412e-01bf-4cae-b953-04a2686395c2", "sighting_of_ref": "indicator--6f11af65-676a-4db8-8e4f-be7e2f5fb3c8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ef7d03c-0510-421d-97ed-ec7bc35c86ec", "sighting_of_ref": "indicator--e1e91278-0a44-422e-81f5-cc135aad0e19", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--287a3581-8099-45ed-8e9e-bdf00862fc3e", "sighting_of_ref": "indicator--2603ffdf-92e3-4a3d-bf04-b602e867654d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6005dfde-55b6-4926-86d3-17829afbb1c5", "sighting_of_ref": "indicator--fb2ea525-fc54-4a0f-b62c-7c7279b60347", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2874ecd1-4de2-4395-917c-29fb2b45c732", "sighting_of_ref": "indicator--f013f865-5ca6-4a6d-9abe-279a58a52280", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9efd9a27-fbe0-471b-8f1b-f51833eba0c9", "sighting_of_ref": "indicator--6565a327-a880-421d-a332-2c4410ea464f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--796788eb-b3ce-4f8f-aee7-aba07bd17fcb", "sighting_of_ref": "indicator--4acbbb1b-fb91-492e-82cf-1b8a70df3a19", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6be993ad-4450-429d-98bc-bd769c840a29", "sighting_of_ref": "indicator--2697ae9f-931a-4ac2-ba51-62490b47c8db", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa4b79cb-8f3c-4d45-a03d-e8852b7ca67d", "sighting_of_ref": "indicator--044354e5-f5e9-473c-b4a0-33e70f208917", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4fc0038-174e-4b56-9dd0-0ab341007366", "sighting_of_ref": "indicator--da418ca1-7cde-4b09-9376-eb7797d00f5b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4de1c8d8-02e0-4d60-8a75-05b0534c797c", "sighting_of_ref": "indicator--59a5a9dd-3a56-46a1-80f5-00aa1b04d38c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15ba18da-10a5-41a4-8a66-5fd03052a158", "sighting_of_ref": "indicator--ecb8c8bb-3ce2-429b-a4b2-a01363fdaaf1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d0dbcba-79fe-4b78-b113-bd490b292640", "sighting_of_ref": "indicator--f9be5c6a-c9dc-4210-950d-7be9d1480726", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--780bafe7-4654-4489-bcf5-1dc5d8224a0e", "sighting_of_ref": "indicator--531a25d2-3f42-4a0d-af4c-efcf1d186a29", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b6ccc3b-f214-4ae5-8c3b-694a74cda840", "sighting_of_ref": "indicator--f93f5dc1-9a6a-4ce2-a323-b84e761b9bcd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dc8ac3f-3e04-4f86-8cc8-a5f51c034a4b", "sighting_of_ref": "indicator--163ed71e-bc88-4c7e-8eb6-c90e98a5af9d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0412acc3-b7bd-41ea-8104-e80b56617670", "sighting_of_ref": "indicator--b3c52dd2-3133-44f3-8ca7-625518d79fc2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d763e4b-1d0c-4b8c-9f7a-efea54d4dffb", "sighting_of_ref": "indicator--0b8fe8d4-e8fa-4415-a9cd-6c2c957f9555", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--268a23b8-551e-4d22-bc33-f62270799a9f", "sighting_of_ref": "indicator--ebf5e22f-4c72-4821-b6ec-7d4284b925d2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5854611-b3e9-4801-b200-581fcd7461ce", "sighting_of_ref": "indicator--314fb28f-91dd-4dc9-8092-93f02eab035d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95a5ca4a-9da2-492f-a168-ff7e7b7815a0", "sighting_of_ref": "indicator--fdbeca48-9b7b-4f15-8f84-b6fa52acfc2a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9727d4b2-37b7-450f-b287-a3e6d0050b59", "sighting_of_ref": "indicator--86841688-80f4-4052-9e55-34204acf55a0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0967fe50-c491-4c98-8f45-52dbce388e61", "sighting_of_ref": "indicator--6a3f4584-672a-4726-a919-281566730782", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcd34575-8921-4427-be32-49ba6fbcc995", "sighting_of_ref": "indicator--61b1cb6f-1973-47c0-972a-55cfd6892d1e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c747c46-985f-443f-9347-900a6c8daa80", "sighting_of_ref": "indicator--acb34ace-c627-43f9-abc8-791365c728b4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b82214ee-8699-4fe9-b955-01e92e12f13d", "sighting_of_ref": "indicator--b7adc235-6890-41b4-b07b-8ee6a678ff34", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b620b6ef-3314-4508-a5b0-84256fb1f2b9", "sighting_of_ref": "indicator--4e4ae61f-d6d3-4ed7-8d86-5796ea32baa0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--095bfbb3-f387-4d6d-9bed-14bbe3271bf7", "sighting_of_ref": "indicator--2c3443c7-be71-4583-b5a2-d585b95695dc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeaf7be6-76bd-40ed-8520-6396869e9ae5", "sighting_of_ref": "indicator--b15bb76c-0a2b-42d2-b646-cb219de2d2c1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6653dbf-1b3a-472d-93ec-58f62acb8385", "sighting_of_ref": "indicator--62e66cf8-5ad9-45a8-8541-8c51f8df99cd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9cdf3cd-3994-43b5-afe8-7d0b4fa323b1", "sighting_of_ref": "indicator--dd2ce9c8-e907-43fe-a8bd-92b044d91de2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d83532c5-1244-4e5e-a236-27274fbe3605", "sighting_of_ref": "indicator--c1d9a3b4-e38c-4a76-a5a2-1e9c314e0370", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78c90613-2aa3-44ae-aa81-940d8b653f99", "sighting_of_ref": "indicator--bab74021-6aa6-494f-89ca-6dcecb456bfb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f51db90d-c081-404e-aa78-608d1edc5266", "sighting_of_ref": "indicator--8cb54c1b-0012-40cd-a3cb-b0c0bf27639a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--326a28f7-3431-472b-82ef-8f61061ce4e5", "sighting_of_ref": "indicator--18ce43b3-8dd8-4dd0-8b9e-b31935eadc66", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--525bd615-ae35-41fd-ae91-da8c58563968", "sighting_of_ref": "indicator--0c7f7f0c-4ce4-4a25-8fb3-cbb707710b9a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f52f865-4ee2-4627-8cd9-4573c4da3f5b", "sighting_of_ref": "indicator--d570db5c-d376-4494-8eb4-453f620c4eb1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c077f92-3f02-4282-af39-e24c31203392", "sighting_of_ref": "indicator--02fa772c-c058-4548-9aea-22fdae149608", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1efaf9ae-215e-4f0a-bfac-9cc8689c5dd7", "sighting_of_ref": "indicator--cdaefb32-d622-4518-9e5e-f3c2e30e5bcf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a577673-a49b-4ff0-bf38-430f95116bed", "sighting_of_ref": "indicator--8fb43679-5c72-4b95-9cc1-02a62920761c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2675319f-b0cc-41d1-8ee0-49f628fc360e", "sighting_of_ref": "indicator--97359d05-6dc2-423f-829b-7994c3065d32", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e8064a6-7b26-4a11-ae05-1bd4812cf4ba", "sighting_of_ref": "indicator--11702baf-03c5-429c-905e-7f7615bd70c3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf4da3b8-def8-4548-bd95-3bf458f2ad0b", "sighting_of_ref": "indicator--1e424620-900e-4990-be1e-5b297625f0a3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c64f66f-2908-422d-85ce-3d1f4c5ed6fe", "sighting_of_ref": "indicator--fb53b4fe-0d2a-451e-8ea7-6ebc177ca94e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65c67a83-4168-4647-9559-1adfec2592e1", "sighting_of_ref": "indicator--92087343-0ed0-4ea9-9252-ec3df64939ea", "where_sighted_refs": ["location--c8625a69-b7e6-4cad-99d8-76632a875c20"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c1471f8-cfcd-4fd6-ac7b-7a55f1a35806", "sighting_of_ref": "indicator--fe802ce0-d8f7-46f2-b24f-d3d3d42b758d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da39a0c8-f909-448a-bafa-ae484803bd15", "sighting_of_ref": "indicator--afa6a1cb-7fad-4500-83f0-472aa80d2603", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19b15eeb-1fd2-4ca3-bca3-f433cb6cb02c", "sighting_of_ref": "indicator--a80a4385-da2b-4409-a1a4-959f58f3780f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2957b9a4-80fe-4beb-ba3d-ac74cf9f2ee8", "sighting_of_ref": "indicator--0b6f86bb-a546-4509-88d7-716c5fd316a6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--335e65c2-6125-4acb-be0e-2f9cfa043fde", "sighting_of_ref": "indicator--2ea1298f-86db-4308-93ed-5c9a5f980f84", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b057e639-03a0-41e6-b26a-dbd694eed63f", "sighting_of_ref": "indicator--ba20ffdc-020c-43b9-8164-24a433d7d966", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aba45c6e-29ca-4cd9-9e55-16a7349ea283", "sighting_of_ref": "indicator--1cbbbaf0-18d8-4be4-bb24-f1759dfb9f86", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--869601b3-f8bf-471c-b57e-eca72a970c29", "sighting_of_ref": "indicator--503b0f2b-6bf6-45b5-b710-a1a89d1c1980", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e3ae2eb-1edc-44b6-b425-a4299d007df8", "sighting_of_ref": "indicator--a5f020a8-5ebe-45ee-bdd1-757c4d043320", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2330b47a-059e-44a5-95d9-28f845ed9301", "sighting_of_ref": "indicator--b39d80af-7f03-44bb-88d2-23985e04c05f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef6c3cbe-a666-4a3b-aa68-0e32f3135c89", "sighting_of_ref": "indicator--87591c4d-53ad-45b9-a017-2d827d6ee5b5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da9f434e-0ceb-46e2-ad58-a85600ba0cad", "sighting_of_ref": "indicator--f2104e6f-4a0c-4a5f-a92a-e401faf9dc95", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdfb1be6-1aa8-4208-ad31-9702e30ba6d2", "sighting_of_ref": "indicator--354803b4-8b8b-40d4-b133-7d2e70e95ca0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a51e5dc-31a2-4049-93a0-c56112d44282", "sighting_of_ref": "indicator--d657cba3-2b91-4c05-872e-b5ed3d4f1950", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c6d5c53-03cc-4cce-8bc0-785aeae6c124", "sighting_of_ref": "indicator--3ff47163-b60d-42c8-bb1d-0961506b2643", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff0fb41c-9dc0-43ab-87c8-f935583740d1", "sighting_of_ref": "indicator--27d335bd-9827-4311-99ea-381d4a8e8ffa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaf73753-d1a0-4ec1-8e27-aab81ac0730a", "sighting_of_ref": "indicator--2104b5da-b348-4072-a3f8-56249041bbc1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9a74f7b-46ca-45ba-b95b-ff57fa9434b8", "sighting_of_ref": "indicator--9adf1457-4d0a-44ac-a50d-d680bad1f271", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92127205-a088-496e-94ca-44c4522ce7b3", "sighting_of_ref": "indicator--37645473-ebbe-4ef8-bd71-de0208adcab1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e9ba70a-04ef-4e17-aa6d-a1cde8974c9e", "sighting_of_ref": "indicator--2ba59c2d-eba7-491d-a268-55ec4d92278e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6a18b72-51fb-4e24-9448-63654839995b", "sighting_of_ref": "indicator--42f5d289-f1b8-42a9-9135-974d4ec0569a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cba89e7-e024-430d-993b-da30eea116c9", "sighting_of_ref": "indicator--3e0b023b-74d0-400c-b6c1-4458e2d1928e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a447019-cc07-4e2b-9974-95a3b2ed4488", "sighting_of_ref": "indicator--df7b2491-6786-4ad9-b654-bcb6da074f3f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aa1d100-7f28-43da-9382-8053d433cbc4", "sighting_of_ref": "indicator--9fc5a9af-f10e-44d5-81a9-4291a68b5d69", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea279c17-9c88-4b82-a3da-01b755d8aea7", "sighting_of_ref": "indicator--61f26f7d-662a-4e99-8176-03bec9d8d335", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3408112f-b34a-4c10-8bb1-b207537b60de", "sighting_of_ref": "indicator--eb92ec1f-a610-46f9-ba7e-88dd57c18f78", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55d7956d-8a45-4fc4-bac4-f30354ff208a", "sighting_of_ref": "indicator--9dba184c-41f0-4421-b995-af661ee9cdbf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f30a924c-3336-4ef7-ac12-ca43928ae9b8", "sighting_of_ref": "indicator--4060f0c6-c3dc-4417-aa4a-84a2cc3978d3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3c5a0bf-be5c-4382-94e0-3f84a51389f7", "sighting_of_ref": "indicator--2ad28063-e8cb-4146-9fbe-561071be3ed4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40398c3b-f776-47a0-94a8-ce5bebd3a10b", "sighting_of_ref": "indicator--933b06da-c93a-4b3d-83fb-10c39d60bbe5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21401484-aa81-44d3-b333-2e45434dd442", "sighting_of_ref": "indicator--e70504e1-678b-4dc3-9cae-ed42b9593cbb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67595829-d90e-4de7-aba0-88139a81fb9a", "sighting_of_ref": "indicator--4d0a91fa-2153-40c6-bc76-58f0de63f584", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cd7ebaa-1d37-43fd-a37f-7fe4b336bfb7", "sighting_of_ref": "indicator--95867010-ce12-4172-9906-7879c8f94bd6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b43bde39-4594-4c38-8110-658009fc9194", "sighting_of_ref": "indicator--da12c891-4005-433f-b8de-3160781905df", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c6fef23-2edf-4fdb-b22f-f6d0b5d48ec2", "sighting_of_ref": "indicator--c511372e-ef63-40bf-b8fe-9fed3141e592", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64af1c84-d058-4ce8-bbb3-443bb4a071c1", "sighting_of_ref": "indicator--d58f5999-c490-4870-b833-76ae11c9604f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91745ec4-24ba-437f-bf63-eada47605e33", "sighting_of_ref": "indicator--00879db2-e9a9-4c0c-8074-94619846c53e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41434fd9-71c3-467e-8d5a-785c6ab56d94", "sighting_of_ref": "indicator--9f6331e1-b1f7-4e2b-a464-bc1c6de5d9b3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e47d3305-fb02-4d0f-a0d7-b62e44e8e646", "sighting_of_ref": "indicator--1efd20ae-cbef-4282-a6cf-33b0948cea51", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e6fdedc-0303-48cd-9948-a40cd4e3147f", "sighting_of_ref": "indicator--3d5e6163-e015-498f-91f2-ac85e1d5f989", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba8c7ebb-d6ab-4660-8979-752badec1c71", "sighting_of_ref": "indicator--8d0ee093-93a9-42c6-956c-903f2b0c634f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15f142e7-44e3-498d-b15b-3f8c5e186e88", "sighting_of_ref": "indicator--672e5ec2-46aa-40bd-b874-32d2cb1a935b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20c0c5b4-160d-4c8e-806c-a8aed76f2979", "sighting_of_ref": "indicator--8a0730b8-e37f-49e1-81d5-4c1ff9d3f51e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f33e4a4d-15de-4036-ad0a-dd3aec67e37f", "sighting_of_ref": "indicator--e45cee71-4258-4668-a64a-388e1465fd36", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac9ab678-0fbd-4232-a87e-61e95c7bd4dd", "sighting_of_ref": "indicator--67cfff68-a7c7-4afd-8da4-d02f9e62b60a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c385a3f0-33f2-48f0-9612-af5327d1e285", "sighting_of_ref": "indicator--2a24e9ec-22df-4f71-967b-88f5d591b9fc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--547d15e6-351d-455c-bf0c-2aba2023bd1a", "sighting_of_ref": "indicator--e2dde642-b0f8-429c-bacd-d59c4bd873ed", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d35b9fe0-c2f7-40b4-b9bc-92a045410064", "sighting_of_ref": "indicator--eb43835b-e017-4ad3-8392-dbdcff5f1050", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c44fafd-11a0-4d6c-be51-c5988f34edf2", "sighting_of_ref": "indicator--ba86d807-7f3b-4838-99fd-6203ab0c948e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--100d9dcb-a118-428c-92a1-8c2e098eed5e", "sighting_of_ref": "indicator--cb45bcd8-7b09-479e-a024-63256f79bdf4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44a6a17d-83ce-47c1-ae89-be515d4c96d9", "sighting_of_ref": "indicator--7f02148b-464b-4372-8fb9-6f5a6e49fd3d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--706c7132-075f-435d-aea7-2510b776cded", "sighting_of_ref": "indicator--9ed59e10-0c76-4efb-bf34-4412743a0235", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f83895a0-8d53-4652-9fc9-d42294852b08", "sighting_of_ref": "indicator--303df562-04f6-49d2-a08a-711b6609cd56", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9126a1b-e3c9-45a4-9f2f-af1b583a9be1", "sighting_of_ref": "indicator--0e107530-a8ea-4e8c-a9ca-01c7f0c2a8c5", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fecbb24-0c7e-4215-a0b7-f99a8e633fc6", "sighting_of_ref": "indicator--0e107530-a8ea-4e8c-a9ca-01c7f0c2a8c5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--015080e3-cdcb-4d51-b162-92737469ccf4", "sighting_of_ref": "indicator--e06d8166-ed86-4f7c-815e-209a85047cfb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ced9883-34c3-43cb-95fa-191929fe6eb9", "sighting_of_ref": "indicator--1a3231a3-8960-4dd8-a280-37f624602708", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd0eaef6-6c17-4ba4-ba49-441706640b4c", "sighting_of_ref": "indicator--6dc26275-9f44-4799-a966-a51290b7499c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48f4ec6b-49bf-4642-8c8d-d3eed8f64694", "sighting_of_ref": "indicator--dcddde5c-bcfc-4b81-9403-f53fe6a62781", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77529585-77f6-4b44-845c-b8ff0d416873", "sighting_of_ref": "indicator--83858863-0b8a-47dc-b9da-a3803f050d42", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0bac9cc-9cf7-4e1c-8ac8-3029a4584e22", "sighting_of_ref": "indicator--3779aa27-bbdd-4afe-b3c9-4b95a72e42c1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dddd8b92-2cda-412a-97a9-cf6f999c26c1", "sighting_of_ref": "indicator--0bf14139-f427-4554-9036-40a51f78c598", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6cdbe23-98d0-42c8-a3a0-38507772c60e", "sighting_of_ref": "indicator--1ad39999-b24d-4ba8-bec4-607250ddce64", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--078b8b64-40e9-4464-9fd8-be034b7c8bf2", "sighting_of_ref": "indicator--a1121d6c-38c3-4da7-bc92-9e75148422c8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76ea7c3d-b553-4672-9cde-8ff94c1c558e", "sighting_of_ref": "indicator--bf936e06-0c7d-41bb-82f9-6f48cf9b5883", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f8eb0ce-7319-4090-b62c-41116da937c7", "sighting_of_ref": "indicator--06f8ea0f-d703-45de-a268-351f77fadbdc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb2f6ca4-bcdf-48b6-9882-6b3253bd134c", "sighting_of_ref": "indicator--6b5c4888-d54c-45b2-8737-b6f30a39fdae", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5072066-9c17-4d0d-bb04-07d4170adbb6", "sighting_of_ref": "indicator--b5c36baf-ddb1-46c1-8e45-d56d077598dc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c053be6-c56f-4da5-830b-a205bf6cdb93", "sighting_of_ref": "indicator--c942d205-dc49-4d39-8d50-5d0a253b1aa4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc5dc148-0f0c-411c-a566-aa43167d9852", "sighting_of_ref": "indicator--0f3c3d2f-ac8e-4475-9bc6-228872fd6d26", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb4670e7-4d8c-4559-9207-21af994e1830", "sighting_of_ref": "indicator--32524843-f517-4576-9b12-94a6c49a87bd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b9538af-59e2-4a81-9d2e-2b060737df0b", "sighting_of_ref": "indicator--d2ccd949-b6e0-43c0-ae3e-78160e092509", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be51e38b-c3c5-48e1-9424-fba84d3054cd", "sighting_of_ref": "indicator--b0465251-30c1-454a-a9bd-1d00b39d04f9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4b43957-b22e-430a-b109-6bc9714720c2", "sighting_of_ref": "indicator--13b89fe3-7da3-42a8-9436-17c835f62f21", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--464dedf3-8ddb-4880-ac06-b9278a2db432", "sighting_of_ref": "indicator--d060c0de-62fe-4d1e-a254-856fb9426c50", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--765547a7-180c-4bab-a602-55371bd62a7f", "sighting_of_ref": "indicator--6dc12af0-d2f3-4794-ae1d-c806e0ce448e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82f6b120-6614-4f9c-9a6c-f8b2c2cd8dc0", "sighting_of_ref": "indicator--20fe95f4-5a6c-4007-9de6-046f21f590f1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9583ed89-351f-4308-a423-07b2c2292f66", "sighting_of_ref": "indicator--7c27b543-550f-4a2a-9b6f-36f5151a6f01", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9d467ee-77fd-4a0a-a8f7-d074c9e14647", "sighting_of_ref": "indicator--fd9ff294-c107-4ec5-8176-66e5761bfcb7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28ad6eb9-955f-41c6-bc3f-91a0265e009b", "sighting_of_ref": "indicator--dcd42898-16ab-40f0-bf4e-a5377f8f0c0a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae093e33-570b-439f-a010-dd215afcd58c", "sighting_of_ref": "indicator--6afa68ae-1e63-42d8-b911-7013002f1463", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9824f54e-b0ef-4466-8a83-a56f273b8562", "sighting_of_ref": "indicator--916b16d5-5feb-4873-b923-bda5e06f9f6e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd1cf35b-d573-446c-ab07-0163e24e9762", "sighting_of_ref": "indicator--060dd98c-73cd-48b6-9528-cd476bfafaa2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c5541ba-f0d7-4c2a-bdfc-b423d1937132", "sighting_of_ref": "indicator--e8b5129c-6bec-4b05-957d-890da1dd5574", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35a92ff7-7f30-43f4-9c7f-d12949867db6", "sighting_of_ref": "indicator--f4967441-59dc-4b55-85a7-711601b95f51", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cac86f79-273f-41a5-a968-b359f6f24bde", "sighting_of_ref": "indicator--6f1dda83-216c-4a89-abf1-f183389712e2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--787f644b-dc87-4dd5-a979-69c0e5be4ae1", "sighting_of_ref": "indicator--5b9a0d9c-537e-46c2-8737-99701e739e2d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d63ba3c-c6ea-41f7-9231-585fa3061ad4", "sighting_of_ref": "indicator--0413c2e2-3dd1-4706-baa2-727ab43753c4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b002ae4-87d0-4a61-a933-9aa432430963", "sighting_of_ref": "indicator--3003f229-9432-45d1-ac73-49c1b5531819", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e575b46-8dbb-4886-8c7d-faf9cd946689", "sighting_of_ref": "indicator--58ad9cca-60ab-4c49-a487-eb09cd8743f2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1074df01-5449-4f57-a077-0cc91a0ecfab", "sighting_of_ref": "indicator--3576e55e-05ae-40dc-a05a-636bbd5ea65c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--567732b9-4304-49e3-a440-09a0c153dd2d", "sighting_of_ref": "indicator--09397ff0-e281-47a0-bbd3-13d5752d4413", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--644929c4-c618-4e2d-8833-57a005afa272", "sighting_of_ref": "indicator--c8bd3bcb-48e5-475b-99f2-009fc4c0413d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a3f4fd7-16b0-4d96-8d18-2a5eaadae717", "sighting_of_ref": "indicator--73a22f2c-57ca-47ad-b58c-ccb726f8f92d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6de73bc-e7d4-472c-8d00-c1d8b556a58a", "sighting_of_ref": "indicator--38d07fbf-093b-44d8-bb2c-8ed7757c3560", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cc1618d-654a-475c-94ac-f0d72426a223", "sighting_of_ref": "indicator--ac0a1a84-77e5-43e4-8285-ba39c1e650ac", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26ba4036-caa2-458c-9f58-16273850e62e", "sighting_of_ref": "indicator--d101e408-1ba0-4632-9886-24f13abd2ddc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f97d2af9-f7ed-4dbb-8402-10f21f457a57", "sighting_of_ref": "indicator--6653b0d3-9b09-40e6-a9c4-136d6e35e62f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01dae915-9c3a-404b-8a1e-a9c21c8e6c52", "sighting_of_ref": "indicator--1b9343f4-26a8-45e5-a363-4b887d9dc5bc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b036f34-c6b5-4fc6-8993-78295fc12e79", "sighting_of_ref": "indicator--33791220-2a60-472c-b573-1647d9a6adaa", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--185eb3c4-74f8-4c29-abef-086a0991c22e", "sighting_of_ref": "indicator--ef1fcc74-05c8-4cb7-876b-0f5d7974ead4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--290da82c-6b0f-4d06-9ca0-9092a7194228", "sighting_of_ref": "indicator--ac321677-3f9d-4e38-aaf6-6038caaaeef5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5a6b6ae-6991-44dd-b72a-9430ebe4949d", "sighting_of_ref": "indicator--30a12686-4e33-40d3-8d52-eb448d0b265b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eef4193e-60e6-49b3-a73b-f7ac105da4fd", "sighting_of_ref": "indicator--cbd5fa46-df8f-46a8-90bd-fd5b45ee061b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc070433-f84b-4ef0-be42-90a8d4688045", "sighting_of_ref": "indicator--7ec36d2a-77ac-4aec-a1ce-5c3d9ff925d0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0df2b247-126a-4817-ad1b-70824de1fd0e", "sighting_of_ref": "indicator--12db6df5-44ef-42a8-9e30-8309bf170807", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74b3ec3e-88df-47dd-96f1-9cf7253f2a40", "sighting_of_ref": "indicator--d634a7bb-8f5c-4a0a-9280-f24d7fb971da", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c31a3f5a-fe98-4eca-a2ea-ce1909cdf4a9", "sighting_of_ref": "indicator--4bd7c355-7af9-40d0-922f-81ecdd35c15b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f384629f-b9d3-4e46-a72b-2e65dfedecd0", "sighting_of_ref": "indicator--fbdfaeac-9ed9-424c-b73c-bdca6e5f747a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6abd046-c77e-4a12-97cf-c0e6b38976a4", "sighting_of_ref": "indicator--ac647ce6-e205-486d-b284-edde11496885", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf5a85cb-aa1d-4260-86ee-9709b301c1d1", "sighting_of_ref": "indicator--6762fe7a-b641-4192-9c71-ba5ba5ef6637", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9356df40-9371-4a00-a3f5-1b2b0532fafd", "sighting_of_ref": "indicator--06ef0719-df31-4503-ad46-7f68af05130e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd855570-fe3d-4076-a433-4c0c1628bcc0", "sighting_of_ref": "indicator--0fef507e-f91e-468f-abcb-bc1218690a44", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae59b9a9-132c-43c2-9e76-995ee5f95841", "sighting_of_ref": "indicator--ecbcdc31-545e-4404-991a-d1fdfe636270", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e180039-db38-43ea-ab68-df4d73b3a5b6", "sighting_of_ref": "indicator--52f519c9-6df0-4fd1-8148-136f0de7c977", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e00efd0b-558c-48b7-84bf-b3d93746f0b2", "sighting_of_ref": "indicator--8cecf9c7-1a42-48dd-b750-571accb04405", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a7be801-1f2f-401e-aea4-0f7294891305", "sighting_of_ref": "indicator--e0ab5684-f8b3-4e59-bb20-60702c357942", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad55669b-20ec-4bd8-a25a-6fe8586e1b89", "sighting_of_ref": "indicator--4454f772-e617-450c-b9f7-599d27991340", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a34f57f-d4fd-4c80-b49d-fa25158736de", "sighting_of_ref": "indicator--39153e21-64fb-4c87-9860-dc692f6c81aa", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--890e9aef-6892-4325-88cb-6723f1bd4b4e", "sighting_of_ref": "indicator--59a7fc36-aef9-419b-b226-764aed99e7dc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7591e1d2-4411-4b13-8c32-ff9bfeecfbb5", "sighting_of_ref": "indicator--4dd6c473-dd75-4d25-b2e3-724f676d219d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cc4b26e-daac-4722-a930-c69f9ed33c8b", "sighting_of_ref": "indicator--4a2026c2-698d-49a1-93e7-849fcecb104d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f60a635-b7b9-486c-a4cb-a82bfe680d15", "sighting_of_ref": "indicator--830d60e6-a48a-4a85-a4c0-1b507c08e69a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdb344cc-b4de-43fc-9f6a-562b09677ae9", "sighting_of_ref": "indicator--088baa4b-47ff-4372-aac5-247a80616916", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39321cd9-45e1-4d59-9ec8-54793e54a499", "sighting_of_ref": "indicator--31027d83-cba3-4706-93ee-2636065361b3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c0283d8-e2c6-46b1-9674-0d9ea08f595f", "sighting_of_ref": "indicator--7db4d35e-6df6-49c8-93dc-a4fdae87f765", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--695f2cfd-d8a7-4271-82a1-817036ecd5ff", "sighting_of_ref": "indicator--e1275e6f-71e9-4c07-88f5-868f56bf406c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b51ff91b-0f81-4390-9063-b1277b2f53a1", "sighting_of_ref": "indicator--754f10e4-12a4-474f-953f-e971374cb1f8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaf40dd6-3649-45dd-8aed-a3f4f8338a81", "sighting_of_ref": "indicator--33b0f160-8061-4e8e-8501-a2c0ad0568b8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6886e08e-72f1-40da-9b21-b72a7ea7985c", "sighting_of_ref": "indicator--31d4166f-42c2-4507-bd5d-10f1046140c4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8eb2d8ab-e639-478b-b275-0df7dbad2b44", "sighting_of_ref": "indicator--adf687f6-b801-4fd5-bf76-0c3cf586922c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a37aafb9-02e8-4cba-ab4c-aeb08476415a", "sighting_of_ref": "indicator--17fdbc52-6c9c-408b-9688-c97d3c537004", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e47beb6-ce8d-4ccf-9478-fbc43d60d124", "sighting_of_ref": "indicator--7dfd9918-de6c-4ba8-9704-914b4fb29aed", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dd8e24d-c14a-406e-9dca-5ffea158d671", "sighting_of_ref": "indicator--ab515669-c061-4ea0-ab83-9e6fff850eb0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3df02d8e-1e65-4b6b-afb6-23878e841881", "sighting_of_ref": "indicator--d20b1820-9f56-4dea-9af8-88c2712863fa", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20aef2ed-33ad-4cdf-a4c0-9781839bde1f", "sighting_of_ref": "indicator--ffa8722a-0042-4b4a-8ecc-69169e147e88", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c56c5e58-db67-476f-994b-f0be65fea076", "sighting_of_ref": "indicator--712804e9-7740-4bca-8808-7edc7c6a235e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77b5f501-2de4-4e51-8e07-4c0fd2ff2331", "sighting_of_ref": "indicator--fa149a56-f7b6-4ef6-b17c-d868f8c847a0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--684dafa6-b2c3-4e07-beb8-7c37a9c85519", "sighting_of_ref": "indicator--b9fa659c-7d9e-4fd7-8be7-94c4648319a2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6611226d-4176-4029-bd8d-c2d5e2e7a48e", "sighting_of_ref": "indicator--f4a6dbe8-00eb-473e-9c70-17cf96b0a736", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--734fab09-a736-4328-9621-bcfb1aab1652", "sighting_of_ref": "indicator--f50a4fc5-e3eb-41f1-921b-86e0ae732587", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07a767d1-876e-4c55-9431-b53851db1dde", "sighting_of_ref": "indicator--186f537c-79f4-4c00-a788-2953e06254d3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--690d223b-049e-4542-9c4a-e929fc5c36fd", "sighting_of_ref": "indicator--f1088fe4-272e-49e1-a82d-bb3339939d1c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6a08572-8174-4381-9570-a23e3bdcd0f9", "sighting_of_ref": "indicator--8892d6f6-bc6b-4e36-87f4-9833884a288c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da68ac2f-683d-44e8-87d8-2acebb775862", "sighting_of_ref": "indicator--8c02d93f-b6af-4b81-8590-ec0bb54c436d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e261f9a-854d-4b2f-a748-0c58c53d3b62", "sighting_of_ref": "indicator--d18f1849-3a60-442a-a66d-ee88458e6397", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5340abc-8105-411e-804d-36c7027c37b3", "sighting_of_ref": "indicator--8f760c16-5f54-40a8-9e04-457c5f0647fc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8f02497-0906-4d70-b14c-8deeae898093", "sighting_of_ref": "indicator--564b524c-a7d8-4a47-8edd-4510cd1b7c3e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34176fae-1d46-4bde-ae27-d1ecc0d0a6f8", "sighting_of_ref": "indicator--b9b84067-d4c1-4e90-80f4-34389fdb57f6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0063f898-4784-4a30-96a9-276581dd4c10", "sighting_of_ref": "indicator--1dece5be-08c6-4f9c-9ce4-4541d08515e6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55b4767c-4a3e-4885-9bad-d6728bdd721c", "sighting_of_ref": "indicator--e0311372-bffe-4248-9327-417671982a1f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99b3e1ae-4356-49da-8957-3ffb23cbaa96", "sighting_of_ref": "indicator--b4d4c7f5-034d-41e2-b9a5-7fbf2d62303e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbd1a307-6138-4c9d-ac8d-2a685162993f", "sighting_of_ref": "indicator--8331612c-7fbd-4b4e-8aff-d890502f99d1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6532d97-6549-4f6e-936f-3b141f1bedc3", "sighting_of_ref": "indicator--3d6bf31d-f610-4e1f-99db-76e046915981", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e28b8fe-c3d6-4bb6-9168-c03eedb835ac", "sighting_of_ref": "indicator--6c9c7893-c4ff-4fa6-9aa9-2b11c18e8482", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--433afab9-7623-4087-bf71-8d8c7fa1f193", "sighting_of_ref": "indicator--367db017-b2b9-44a6-949d-9ab1a0f41e5b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29d3884f-e1f2-4404-a280-b43d8dabb4e6", "sighting_of_ref": "indicator--30f1364e-e6f3-42cf-8a47-72b147df1349", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--743b9963-8c69-478b-8c1f-6fe73ac2ae42", "sighting_of_ref": "indicator--0938adbe-eebf-4abf-8d8b-fa5eddbf8d6b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a165f90c-f60d-4b08-bdef-9195bbab11fa", "sighting_of_ref": "indicator--f5478e41-3037-4553-9a1e-6a8f6e654213", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7cf1790-e62a-4410-a057-fe862943084d", "sighting_of_ref": "indicator--6a468a78-2b63-43db-9709-83f079f3c8dc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fe21044-7701-4f4b-aa5b-6a7103ee7169", "sighting_of_ref": "indicator--042faf41-d28c-4fcb-91f7-00af69199b72", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71e961f7-9c46-4339-916b-7ca3bc58db0b", "sighting_of_ref": "indicator--b5240849-cadc-4573-80df-808635a15d2f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fe8b0c7-37be-4e06-8aaa-02f8ab34227a", "sighting_of_ref": "indicator--6bc33322-5df1-4763-951c-ce42254d0033", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a781c16-2009-44fd-a8b4-1c4e034e75ee", "sighting_of_ref": "indicator--7b5e0d5a-2624-4125-9468-12fee23a9d49", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6517554-f627-40c8-8ee6-32b510f0bca1", "sighting_of_ref": "indicator--42d64c1a-2d11-4e8a-80c1-c096156a195e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--793a98f6-165e-4084-8d2d-6b2e4fe12731", "sighting_of_ref": "indicator--09832689-c3d0-4df7-84b7-f8f70484c131", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4f48750-8199-4444-ad49-453c950e1368", "sighting_of_ref": "indicator--555adb4d-87fd-4dbb-8719-fc298fea216e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5258ff5f-8b0f-418d-95d3-4c741fcdc938", "sighting_of_ref": "indicator--58da3e63-d78e-4567-b54b-605b768cf434", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--932ec7db-5bbf-4e12-8e70-e5ef33d9694c", "sighting_of_ref": "indicator--ca380b05-564a-4c46-abda-c4e1e4fb4ae9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--473190e9-79e7-4b75-894f-570e85dbb827", "sighting_of_ref": "indicator--a99752ea-20b0-4272-a3ff-c83d3e78e39e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--843a642a-5848-457a-8e52-8cc945f68f72", "sighting_of_ref": "indicator--96a3a155-6f10-497f-91b8-0a2c047d39b1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--902649da-9ccf-4d52-a989-6d614dbf2f4b", "sighting_of_ref": "indicator--eea50303-01b8-49de-802e-2d32e31aab33", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edea3e2c-15f2-4278-8356-45af8ea88d4f", "sighting_of_ref": "indicator--ac4432d1-9a20-4b49-b10b-ec9eee2bcdd1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc5922c0-6664-4ca7-a25c-11065886034b", "sighting_of_ref": "indicator--4800b8df-8abd-4ddb-bf84-f2f46b8e75b9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a8eeee6-6033-4df5-9991-ac511cc77ef3", "sighting_of_ref": "indicator--9976af73-fe61-43a0-8b0c-fad30abb36f9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c15ea5a-938f-4607-b21c-e3cf55077c1d", "sighting_of_ref": "indicator--87ecea77-f209-46c6-8c20-05ddc509a8b5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bc83953-004d-4838-b5b8-720912e22203", "sighting_of_ref": "indicator--94cf64d2-3b09-41fb-a579-f167160733bf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1834f0cb-fd85-446c-932e-19bb4c27ec00", "sighting_of_ref": "indicator--b6a6666c-8419-485f-abbb-443b1a36feb1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--023d3ec4-2c37-41fb-b045-bcb7b7f2513e", "sighting_of_ref": "indicator--697a8121-621c-49b6-b530-9a5bfacb2524", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b193502-5ea6-479e-a11e-442c80fc0c56", "sighting_of_ref": "indicator--60d8a450-07b7-4557-9bd5-28251f732b70", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a6ed2bc-5267-498c-b7fb-ee74eaf5bef3", "sighting_of_ref": "indicator--06a15625-70a4-48fd-a162-ab50237ef1cc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59779902-5d50-4753-a5bc-2e40633379f0", "sighting_of_ref": "indicator--a28b1f49-1339-4015-9a61-1b1c75aedef5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14945702-f1ed-4f4e-b649-b432ea970c96", "sighting_of_ref": "indicator--1d12b4c6-53a3-4b73-99b9-64b09397ae70", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9d54e91-24f2-4ece-962e-72fd80c8eaa5", "sighting_of_ref": "indicator--4783dfb8-12b6-4f45-9828-ff26556e2612", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e567d2ca-879c-4e30-be2e-439bba21aa01", "sighting_of_ref": "indicator--d77d668a-8b49-4306-86a8-49c79021e1f7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9100a90-8ba6-415b-a58f-87c4d48a2735", "sighting_of_ref": "indicator--5049fe2c-71b1-48e5-9aae-14efc98bc834", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb4ee78c-9931-4f31-8f99-39c6d1d53560", "sighting_of_ref": "indicator--0219f352-0692-47cf-bf34-ecc935834ed4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0a028f3-ce18-46ad-bfbc-4310e70302fc", "sighting_of_ref": "indicator--b606d30a-9141-4b22-a2c2-dfebfd6f33e9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c75e9129-b01f-471e-b48c-a06c7d295131", "sighting_of_ref": "indicator--fa8b2459-2b64-496f-b5cf-43de24e54702", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--672e1391-1f87-48ab-af67-836306670222", "sighting_of_ref": "indicator--e7aae9c0-44ad-4da2-9e6e-0a59b6e1cf6a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df2b95f9-ebfa-472e-b8c8-9112c57af459", "sighting_of_ref": "indicator--039681ae-fced-4ceb-9a89-ede92ab0a20d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--602c039f-8ad6-4f9e-9bb0-7c4f75a0cd96", "sighting_of_ref": "indicator--b83a2b7b-f367-461d-b79d-fde56222283b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e146567e-7883-4620-bcef-ce23072723cb", "sighting_of_ref": "indicator--d54bf8c2-3749-4041-9290-f8a2bbc22074", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44741111-ce7e-4992-adae-30ac3f77eb65", "sighting_of_ref": "indicator--2f85e00d-286c-419b-8d74-4d1312c6fcfb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3494eb7a-7401-43d4-9be2-b7fb1a88df9b", "sighting_of_ref": "indicator--06014870-8929-4394-b16f-85c4f1ba85de", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fcabb05-e612-48dd-8e1b-2723391bb20e", "sighting_of_ref": "indicator--ee894a00-b6f0-4c90-b56c-94720099616b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeb2d08d-cbdf-4181-ae8d-895680509927", "sighting_of_ref": "indicator--ba2b066f-26f5-4a4d-813e-918757f632a3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff84b651-8117-4357-9d45-f60d8060db17", "sighting_of_ref": "indicator--19225ab7-8775-4bde-8792-4ccde5e204fb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0f9c3db-0643-414c-a7c1-a62646b0d44f", "sighting_of_ref": "indicator--b2a9d572-117d-476e-9b8e-cd85ade0b103", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52ffce61-0d65-4503-b8e7-615f5ca9dbe3", "sighting_of_ref": "indicator--0d292043-8972-4f25-9696-f9b60f41a025", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--829005e7-f619-4d43-a784-0c2d25e8ced6", "sighting_of_ref": "indicator--d15a2dfd-0595-4dc4-be7f-e2275d9df6e5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff18f0e7-21c1-4c12-a9cb-b87c480daecf", "sighting_of_ref": "indicator--682c636c-df89-4098-9f30-1893d32e46fe", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68bbce53-c3c1-4b24-9b61-a3e5a6d2e683", "sighting_of_ref": "indicator--45f496e7-7a75-4995-8fb4-e2427d3076b3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--948036e3-f41d-4ffb-8c5f-4987c3c1c82b", "sighting_of_ref": "indicator--9a70d85d-46aa-44c1-a0f8-1c4572518439", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb37e114-de72-4c02-b047-1a3415ebbfdc", "sighting_of_ref": "indicator--14efb3d6-037b-4aa2-abcb-943b2c08c87d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc374a20-da08-4e91-9570-2e0fac788a46", "sighting_of_ref": "indicator--5e0bf5fe-0485-4aa4-ad31-dd2bb24fe361", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26f1bd18-a634-4494-8196-0494b9e18680", "sighting_of_ref": "indicator--3bbfa078-9664-48e6-b45d-fe2db2235624", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--964716b8-d0f5-4972-b5e2-13cfac1857c9", "sighting_of_ref": "indicator--19443232-0632-43f5-aa55-6b44a1e72e9a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d1c0977-d754-4684-a77e-00206759bb76", "sighting_of_ref": "indicator--1f957e02-20c6-4054-90a9-44648067e3b4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3683bca1-4856-4429-aa76-b29ce67da4da", "sighting_of_ref": "indicator--6635d9a6-e3a2-4b8f-99cb-f669b29bceb5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60ce7254-d24b-4dfd-b198-777ad3ed27c6", "sighting_of_ref": "indicator--5f223e0b-f7dd-4dde-94d0-180befcbc4a7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba13ac60-1798-41e6-931e-0a61de98f1d9", "sighting_of_ref": "indicator--cd403e5f-8481-428f-9943-5f447da9e9ef", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90d92c8c-715f-4272-89ad-89337a9769b5", "sighting_of_ref": "indicator--b074cf9d-2b3a-4c8b-b9c7-67d7db3da253", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4279085c-1452-4e7d-a58a-d79ea9b5432f", "sighting_of_ref": "indicator--ebf93e29-5453-471d-bb00-69c29b21b8e1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eecfe17-754b-4248-bd0c-0ccd8f3b81b9", "sighting_of_ref": "indicator--02fa04e2-42e7-4865-98e9-a4d980d43896", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8646fd6a-cded-453c-8d7a-e770d7676635", "sighting_of_ref": "indicator--78dae085-2f31-4417-bffa-b20ddc307b20", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a3dbca9-9d01-42b2-b9d1-8a3e301276ba", "sighting_of_ref": "indicator--80ca1f87-e7eb-4347-befa-3d838e369d6e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94b9c075-0822-4df6-911f-41b60e719619", "sighting_of_ref": "indicator--05e6c69b-14df-48f8-9f6d-714c2ee0f90a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a9a77ed-67b0-4a4d-b029-3cc6003b5a34", "sighting_of_ref": "indicator--633b7ffa-250e-412d-96a3-9d94c67993bf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b443618d-2841-47b1-b253-2a5bdf153ed6", "sighting_of_ref": "indicator--b3f0a8fe-66a0-4419-97ec-7a7e4cbd35a0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f255397d-6695-4cae-8631-ee809c462a7c", "sighting_of_ref": "indicator--c5fdfa16-0259-4e33-8fa4-a17ed3d8e3b5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f2b5cba-75e8-4383-920c-87a792208f0a", "sighting_of_ref": "indicator--d0dc9340-e4df-4b2c-b56c-2dad131f1782", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2d830fb-600d-4c67-90c6-87827f14ef8e", "sighting_of_ref": "indicator--1d3db202-1c18-44c1-b4ae-6dcfc31ef07f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f46d947c-01d5-4c6f-ab25-cd73c0d01159", "sighting_of_ref": "indicator--066ba7a7-25e9-4244-bff7-236db86b26fe", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5da8eb5-0c20-4e14-8d53-0cf2ab27f30b", "sighting_of_ref": "indicator--d07a6b32-0a5a-4ccf-a55b-0ee6a4bfa330", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf18f10d-9e1b-4c83-afda-fb9b0ed2ba65", "sighting_of_ref": "indicator--f4b9d4c9-eb43-4e52-800f-fd83adf696b3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84ce8d41-cd69-401f-be82-c07fe1785fa3", "sighting_of_ref": "indicator--1461660f-abb2-4b36-885b-6e015378dd18", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94ca9649-6a5d-43f8-8b05-c0d4433e9a49", "sighting_of_ref": "indicator--b63c4cf2-09c2-4c6d-abc8-145934074a54", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d454722f-1aca-45e7-8047-a77c3e9583ff", "sighting_of_ref": "indicator--b4c62850-93c2-45da-9546-392256df1844", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1f18838-aee9-427e-80d5-6fbcc3f7fb69", "sighting_of_ref": "indicator--c29a35c2-5b1d-4a80-a81a-bc137c1f9049", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4108ec1d-2fe3-4589-9648-1d6bb4e8d279", "sighting_of_ref": "indicator--149ac039-97f9-443e-a960-f67cb225a86d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cdddd91-b29b-4a4a-bbaa-9666abdb1162", "sighting_of_ref": "indicator--f7054678-f09e-44f8-aa7b-2b286db12a25", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--143f6c9d-d4a7-4dc9-aefb-605360368bd6", "sighting_of_ref": "indicator--0d496002-8481-4630-93dd-bb5e33b3aaca", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc566d55-23eb-4cd4-b42f-ab2a5f4b4066", "sighting_of_ref": "indicator--c714b5d1-a9bd-4f70-9ddf-3ea1c8ee2446", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88eaf8c4-e8b0-4566-b129-e509a7b17cae", "sighting_of_ref": "indicator--c374af41-4ab4-4233-b8bd-8f2a28f2307a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bf8a477-5b0c-453b-9d60-ed16ee54bc64", "sighting_of_ref": "indicator--bf96436c-5997-4a72-9f56-31b7bcdd4a4a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf71558a-8bfd-45f4-880b-5a517ccaa5ef", "sighting_of_ref": "indicator--c7397d1d-1a79-46e1-a7d9-0bcb4a8e8d08", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8594d2c0-4df5-45d1-b1b5-09ae3331a1ce", "sighting_of_ref": "indicator--095d2d71-379b-4cc3-b135-f6eb7246fd26", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19f9ae54-c091-4b3f-b0e5-7d0bbad10405", "sighting_of_ref": "indicator--107e8afd-3f61-435b-a023-2ac02c71f069", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9573201-b272-4b21-89fa-b311800bb9ba", "sighting_of_ref": "indicator--6eb71108-3c33-4879-ab60-04de3559b51a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e402eee-837b-47c7-9387-1ce97638706e", "sighting_of_ref": "indicator--3735843d-2a5f-4ec3-9f25-f6e334e19e7e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03a8fcb3-a675-414e-9883-1940a7c13848", "sighting_of_ref": "indicator--7b291a03-505a-432e-a2d6-dfc50cc9ae16", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9130cc53-08d0-451f-aad2-6dbf75ce3714", "sighting_of_ref": "indicator--c7755800-bbf0-45f2-a3b2-e3f7d15298eb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1444cba0-78ba-4476-9d74-8c46d4c45eb2", "sighting_of_ref": "indicator--e131ae6d-f4ab-42db-be28-648f8e0a747e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--725fe849-ce1e-4561-b5f8-ecf76e7f0f3a", "sighting_of_ref": "indicator--acb0434e-0bdb-41d8-93ac-5f8726f5fcf7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5b06bb1-227e-4faa-b9a0-da9bfc53ffb3", "sighting_of_ref": "indicator--13c0c35b-c3ba-4d36-983f-d0b6d0e7f345", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8fd2575-6b4a-482f-a746-362bc3f2e431", "sighting_of_ref": "indicator--ec0bd119-5300-47c8-8ba1-15bb5a73ddcb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4fc73a8-abc0-4dad-a911-e50babb33b30", "sighting_of_ref": "indicator--2ddfb802-6c44-4fc9-8b67-6d58716b1032", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d37a2474-8309-480a-9301-89cf0d7fa989", "sighting_of_ref": "indicator--0fd58940-b973-42db-a2dc-1a0af6d1d04e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5939aca-21b9-4402-9b3c-d0273caf4dd6", "sighting_of_ref": "indicator--9c29e7a8-e92f-4a6f-b88b-4cfd15c3cc34", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef6596f1-ae3c-4f78-a8c9-bb0306b828c0", "sighting_of_ref": "indicator--3461f890-dcba-4a4d-a613-43c3b6899ebb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c509023d-892a-4bb1-8a92-468256bba558", "sighting_of_ref": "indicator--a5eee2fd-3a0b-47c8-b4b7-5ef7341b8349", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85c48d29-9eb8-4686-b9fb-5cb4c54d0050", "sighting_of_ref": "indicator--d7bc3572-567d-4796-8e00-70e1e60c796a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bcc2e4c-75a9-464c-a61b-4ea302fad66a", "sighting_of_ref": "indicator--14e6aa73-b863-490c-80eb-cc9edb617a93", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26174d50-6865-43ea-b834-a839628060c7", "sighting_of_ref": "indicator--b15c2b04-47a6-442d-a5ce-0df948b17ba8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe67567b-c6a6-484f-b176-3a3b7b718761", "sighting_of_ref": "indicator--c3c93bc6-7e12-4feb-818c-1ea902c0e88a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e77aaa54-e190-44b4-98c1-454d63c5a87f", "sighting_of_ref": "indicator--11cc8fa6-d91c-4742-91ac-ecd48eb4a458", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ea947ee-d318-43d7-b824-a0aa83a8b938", "sighting_of_ref": "indicator--72fd3b25-c807-4efd-bd13-0c281a549f78", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72403e25-5aed-4bf0-b7fc-a715e5e41da7", "sighting_of_ref": "indicator--626c7368-8c40-4672-91e7-083543ab78c5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05c65836-6972-4d5b-a147-b79f821b937c", "sighting_of_ref": "indicator--47af51c1-2474-4cee-84e1-b4d8fe319ae4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f72c1916-d6db-4ed1-9c85-76ce99efc157", "sighting_of_ref": "indicator--9e12aabb-37ab-4fcb-b9eb-8ffebd2d690c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e4953ee-53fe-467a-9bea-533853b627b5", "sighting_of_ref": "indicator--b9648952-230c-4e4a-9407-f45728ee9fa8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38b4e488-8f3b-43c2-bc7c-c975c3fd8959", "sighting_of_ref": "indicator--861979bb-0737-45fb-8133-b7cdfecf37de", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac30b17f-c386-4bf2-9798-5ae16efb8d4d", "sighting_of_ref": "indicator--ace3d890-cb6c-4994-b3ea-e12519cdf412", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12e81aa0-6b05-4b64-b682-123e71c72fef", "sighting_of_ref": "indicator--0933fc65-540e-4525-9820-d9e8b3ec2801", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bfe0ea7-045c-4e22-be89-c668a0ce0ec8", "sighting_of_ref": "indicator--99a14279-43a0-4427-a1c7-60b97bacabb2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1715d07d-f42d-46ec-899a-278410594cb3", "sighting_of_ref": "indicator--a7e092fd-004c-4656-86c2-8783782bc098", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13b6f6cd-619c-4a98-bcef-e536138fa6e7", "sighting_of_ref": "indicator--7d475563-da0a-4ac1-ae07-c6f6289ae3ad", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f672a813-3045-499f-b741-0aa5f6bad141", "sighting_of_ref": "indicator--c51e7681-c8c8-486e-a348-4247d2d58849", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdc7b728-38da-4225-9a7f-78e5e66f9acc", "sighting_of_ref": "indicator--e5c44eb9-8c10-4a14-a3e5-5d7f28e378f3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47c35933-e435-404c-ab35-d1c9060bd054", "sighting_of_ref": "indicator--6c4f5214-1031-4729-a79f-267e10d0dff0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58cd6a55-e9ec-4a94-99b9-55d335dc1e6d", "sighting_of_ref": "indicator--843804d4-817c-42a2-ba08-f9634f989a63", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--382e895b-b7ad-4c28-9e85-831d5494a4d7", "sighting_of_ref": "indicator--4b7ee4cb-c0f2-4f61-9bd8-763b9977fdeb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57822987-3cfa-4abe-9664-7d4de900add2", "sighting_of_ref": "indicator--d1d840cf-b933-40c0-aaee-5d82d770af3a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7cac389-c737-4142-9f73-49a3e7790726", "sighting_of_ref": "indicator--167b7090-8b86-4be2-9f7d-f992367481fe", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5812592-3886-4524-94ad-2a56456cbf20", "sighting_of_ref": "indicator--9d6ef692-c380-42e7-a962-c76f11be61d7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--812ec519-6ed6-4cb4-922a-b8e1d4e94979", "sighting_of_ref": "indicator--daf80d9c-39f5-44a3-bcb4-c0190f803c7a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf65e0dc-6c2a-431c-b960-0819a8d64966", "sighting_of_ref": "indicator--92449124-f832-4366-ae9b-613fe23dc1c3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a006b7e-417e-4d02-88a3-3b9948828831", "sighting_of_ref": "indicator--26403dd2-5175-4f8d-8156-8dac40f037ab", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c356642a-c290-4ad6-9bfe-fdf6a9486da4", "sighting_of_ref": "indicator--7bf40288-4440-48da-94b1-81df0fa1c62b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49bf45f0-2bb5-43f1-b76a-612a8be2d737", "sighting_of_ref": "indicator--1b921b3f-4f8b-4cab-861a-eaef21b93ede", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e543667-804d-43ad-8728-205bb1a96ccd", "sighting_of_ref": "indicator--a91c76f5-63cf-4ce0-a531-d06d43634986", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05d68ed5-75c6-4e68-90ec-90f33351b239", "sighting_of_ref": "indicator--38fc58ce-4b55-4766-8606-6df216e39474", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45d96a37-2e9a-4531-846c-81bd9e18b1d5", "sighting_of_ref": "indicator--d59aadad-6189-4399-9059-454e8ca1a9b6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef1b942f-dcad-478a-acb1-7cc1aa68881c", "sighting_of_ref": "indicator--7225bc41-4703-4846-8028-6d5d8f2f2687", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63adf337-8209-42d0-9022-c1ae41e2efc8", "sighting_of_ref": "indicator--d1ecba80-351e-42f2-b5d5-51e75e257542", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dc16b4d-4421-41c3-af5d-c4b77d2d750b", "sighting_of_ref": "indicator--168f5854-d3d6-43f8-bc6a-2257c4fa46d4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa0052e3-c4cf-4a31-9a92-66517b098899", "sighting_of_ref": "indicator--e44b8e05-f03c-4da6-b2f1-e18f73668a59", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--995887f6-fc1f-4c74-b04d-1ceab9f7f09b", "sighting_of_ref": "indicator--b978070c-a561-4fd9-a2ea-528183994755", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12463bc8-c32d-4002-bcbb-edab94f8ecaa", "sighting_of_ref": "indicator--f2470d5b-46c4-42d0-b65a-3fda52afd2b5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e99671b-aa36-4bda-b802-fe7cec4e50af", "sighting_of_ref": "indicator--5027cafc-b6b9-406a-a9fc-9ab675240059", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--904eb692-d341-403e-a6c2-818403ec4d30", "sighting_of_ref": "indicator--9d4ce3f5-57b0-4179-9717-5203a7a82735", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55826634-1d5b-4e07-ab33-7ed05df69ec6", "sighting_of_ref": "indicator--313f05cd-34a0-4197-bb5f-44ccbdd14e78", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3127d868-dead-4b58-9601-3747db831174", "sighting_of_ref": "indicator--2a65a68d-f9f8-4aff-bdb9-25aead15fd0e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27a67ed7-8063-4b1b-a58f-c64288b3e25f", "sighting_of_ref": "indicator--f9872679-51af-407f-9c96-c3abe08e8cf9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07757b58-bd92-4db2-a6b6-e0ac9f2f52c2", "sighting_of_ref": "indicator--2ecac563-68a6-4bd8-8f3e-6425dcffa326", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--003f7be5-856e-4170-92ee-a17a6c6f4b60", "sighting_of_ref": "indicator--4e4c7047-278d-42db-963a-c06eb41bd185", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee97f88c-7a8d-48d9-ab41-00466872dd80", "sighting_of_ref": "indicator--fb6e922c-5113-4eb5-ab44-9e98d7e0201b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c94138fe-8583-4e7a-ad3b-0ad88b9d5b6c", "sighting_of_ref": "indicator--ce739a9c-9f9f-4d19-a24b-b2cc0d1736dd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c0a4448-dd84-456e-bed6-6a2b945beb04", "sighting_of_ref": "indicator--6966fe98-590d-4185-9d42-f0fd9b4257de", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95bf2af9-8976-45fe-9479-969b3926d027", "sighting_of_ref": "indicator--b39b403e-051a-4985-8d50-74c24d3e3903", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ba5b71c-ab7c-44a3-b181-1422428c38ab", "sighting_of_ref": "indicator--199aa467-32dc-4e28-ac0e-43355939003b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00c2f79d-c554-4c49-9a8d-76e386d7af67", "sighting_of_ref": "indicator--235d00c0-01a3-427e-a41d-889513e114cb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--644db72c-cc20-4a80-b1c5-f79ddf050b06", "sighting_of_ref": "indicator--a5793a9b-a240-4dd5-b68a-3c0480637559", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51681884-e212-420a-a22f-dbd4521db757", "sighting_of_ref": "indicator--db2a9cdb-c6cc-4a5f-9c9e-ed926aaa17dd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--687fea1c-b211-458b-984a-0bd34c4f6c6b", "sighting_of_ref": "indicator--8a9b77cb-eca3-443f-b7d1-2f58afe5ff81", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbd86101-ab87-41c2-9892-803f35fd7423", "sighting_of_ref": "indicator--5d87c93f-8edc-4c9b-bcb7-23c79a2d0ecc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05c98411-2c07-40ea-9f79-3453f2921261", "sighting_of_ref": "indicator--651a99e4-e9ad-48c3-ad30-555e57802766", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3735de3-3b73-4f57-9603-f05b60c0d863", "sighting_of_ref": "indicator--2241b45f-9d20-461a-9c4c-9e748f62c70d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fb55d6b-0bef-48ad-834b-89e5b2c59ac5", "sighting_of_ref": "indicator--56b2a937-3608-4e3f-95b8-802d9d54f7f5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1d63258-c7ba-4e09-a02b-0e4bbbd49d37", "sighting_of_ref": "indicator--38a31452-cf63-4b88-aee0-71b50440f0bf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35eafecb-f31f-42f9-b9df-0dc778db29fd", "sighting_of_ref": "indicator--dfc880a7-7352-4455-8969-3b4566eb5be4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--479cf88c-371f-4aab-be25-a371559a05bb", "sighting_of_ref": "indicator--ef41c815-3322-4543-9b03-04a250ceeae5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bfa2c4e-9efb-4046-96ae-7110e40fd688", "sighting_of_ref": "indicator--b9dcd798-8ac5-4694-8eb3-9c4613bf583c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--205d8997-d9f6-45dc-bed9-d301f82e5bd0", "sighting_of_ref": "indicator--4b4c4706-12c0-4e09-a4d4-d407b97de58a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b9528d3-401f-427b-87c4-f677dcb8f36f", "sighting_of_ref": "indicator--a5885757-a9c5-4980-a04d-dee631557c7f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b2cda1d-7969-4581-b8bf-7871ca2235b4", "sighting_of_ref": "indicator--73233b62-dc04-4cb9-8aed-b886a6a72f7a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--307b0915-f4c1-4efc-b980-5c6ad411af54", "sighting_of_ref": "indicator--ce198787-d866-4a3c-b8cd-9e40291d8991", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a80bac4-aa61-45eb-a034-0c0e6daba2e3", "sighting_of_ref": "indicator--92a64b46-dbe1-4091-bde6-074560a52d43", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49761128-aa41-48f2-9cd3-4ec4fcbd1fa5", "sighting_of_ref": "indicator--57775616-017b-4f46-913b-dbf9934f7be1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd37e7c3-6e33-400f-bded-a76da96bab85", "sighting_of_ref": "indicator--3077590e-1e99-465e-ada8-30148f1bfa80", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--878a2cec-0e08-4204-99e2-606100291f63", "sighting_of_ref": "indicator--983ca2f2-46ea-4c7b-b4ff-1520bb604f2e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9573135b-2219-45b7-9fb5-245a3d5ffeff", "sighting_of_ref": "indicator--8e4ffba7-6460-4c8b-980f-ce1f68a99dea", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7853067-8ad7-40f7-8c8a-6ebc4c8ca00a", "sighting_of_ref": "indicator--bf0dea9f-7bd8-494c-aed3-6d94a2add8cb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8e21839-4aea-4a78-8427-b49cd2227fef", "sighting_of_ref": "indicator--068e461d-046b-4193-8227-5c2b4f3af87d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6c64d62-7604-4bc1-833b-bc939660dadd", "sighting_of_ref": "indicator--6dd588c0-8b95-40ea-a9cb-e6404739f581", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c323f41-1681-4696-9d51-093ca5518600", "sighting_of_ref": "indicator--f3cbe7e8-cb0a-4cde-86e6-3932c7801c7c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--867863af-c09d-4433-9894-5d50e611a01b", "sighting_of_ref": "indicator--ac3262e1-8e3f-4758-8330-cc7bd0037cc2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a9725b3-c49e-4446-9ddf-2ec671c70e7f", "sighting_of_ref": "indicator--c7b47e00-8cb1-40a9-aa2a-c1d9dcc52e10", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0be816a5-718c-42f0-9a6b-cdc7819d621a", "sighting_of_ref": "indicator--a0e15bc0-df16-45cd-bbcd-656fcc763737", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--885a2f7c-a449-4457-82b8-4504f81d0108", "sighting_of_ref": "indicator--5162514b-0df7-4dc4-9f11-97212800710d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0186e675-bffe-4999-9919-2843edcfd5a0", "sighting_of_ref": "indicator--8ef4a4c7-51b8-4722-bcba-e26cb47ab69d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a19a6962-639e-473e-99c5-97aef3a91e61", "sighting_of_ref": "indicator--a9a25a2c-4094-49bf-8487-0626095f9480", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63c74cac-f33a-4851-b5a8-09a975c25965", "sighting_of_ref": "indicator--be81cc81-f3c2-4c35-a6ef-dfa8609e6e42", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17683767-ddca-47ae-8838-b80a1fbd4b74", "sighting_of_ref": "indicator--ce0c2b31-47bd-4238-b328-4116cc70ea26", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6be0ad4-953f-4a43-afa8-3876f7201c05", "sighting_of_ref": "indicator--aa2f7513-ca08-4f35-87a6-0337910e068e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64857d13-c985-424c-8d44-99c1ff916acd", "sighting_of_ref": "indicator--1aaaad2a-0052-46f1-90e3-37dd94391a05", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92102427-eae5-4134-849b-1500c4479656", "sighting_of_ref": "indicator--1e81e3e3-be31-4ada-92b5-f5cb92ccae41", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27439ee6-ca51-4078-9f4b-c8a606eb6e13", "sighting_of_ref": "indicator--b197bc9e-8f27-4882-a3d9-4b918a4521de", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--306dd020-6bb4-4432-9718-56978390a78f", "sighting_of_ref": "indicator--9aa11707-ee0e-420c-979b-0c21fe46e465", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46d80286-63e2-4572-8cd3-c5e4010ce164", "sighting_of_ref": "indicator--03e12deb-8fd4-4ee4-8adc-550922f3739c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45117141-3125-4f13-9629-8ca84104aae1", "sighting_of_ref": "indicator--1ea12da4-ce8a-4e91-8f84-a4f29942bc95", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b65c0e11-3710-4aae-bae1-89e0374e5d68", "sighting_of_ref": "indicator--3c6cea12-d7a3-4df9-bc79-ee70e15ac89d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2091ebe-432a-4e7b-bf16-5012ed608850", "sighting_of_ref": "indicator--6bf0bbc8-0f6e-422f-82a8-c114467c7d90", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60f71cc0-eb7d-4ae8-9cb8-5ba3b730800b", "sighting_of_ref": "indicator--30ed7b9d-df02-4902-81f2-1f9fd0292172", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79628c5f-743f-4452-8228-faf35d774d92", "sighting_of_ref": "indicator--eccdb01f-1dea-40fd-8919-91e41f159239", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85dde565-5ffd-43f3-bccd-90c59f2505a1", "sighting_of_ref": "indicator--9eb48f5f-9926-4aff-bf1f-a259f66e2f6c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4f38c3a-3d78-4c14-bcd6-5ee90e809587", "sighting_of_ref": "indicator--9a8dbc75-3a1c-4b33-9e5a-085b282d7e1a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e49de894-6b98-4308-a6da-8f4ad47a8e06", "sighting_of_ref": "indicator--359b5f53-29e2-4eb3-aa3d-9b9c4b6b3307", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75624c24-ce39-4dd4-a229-cbd1fe8e8005", "sighting_of_ref": "indicator--646b023f-af61-4c40-a32f-33ff816e0c46", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--646ac619-5d33-438a-b538-798299898d07", "sighting_of_ref": "indicator--4b6331cd-7a5e-4cba-962c-6758a504d7fe", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7baa5c1b-f70f-4c28-ab5e-d8f8ecc9a100", "sighting_of_ref": "indicator--4a9783ee-77a9-4783-b132-75507b5267d0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--952a1427-635c-4d55-8597-0382b92a0b89", "sighting_of_ref": "indicator--b9da7176-e8c5-4826-9861-6e495a0fefc1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b383514d-c773-402d-838e-6e6e365fa1c7", "sighting_of_ref": "indicator--a5145b9a-a5b7-4875-8bf6-8a50a373eaba", "where_sighted_refs": ["location--c71c2550-5849-4a8d-b050-635a93ef5467"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b541947b-a141-43d4-9555-27936d136893", "sighting_of_ref": "indicator--4947d371-8358-4183-a083-69368fd67052", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baa13673-dc2b-49e5-84bd-2974b851dbf2", "sighting_of_ref": "indicator--0733e614-67d9-418c-b455-f7d27c9a894e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7254a4f5-dcb5-4201-80da-11a926a04474", "sighting_of_ref": "indicator--80a75ff1-01ec-4f26-b386-d6db6682cc76", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a7be64e-8b65-4788-a533-e2e65b53530a", "sighting_of_ref": "indicator--61da7ec2-313d-4d1d-bd1a-3514b3feef27", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66ae418a-feac-480c-966d-bc4a46026f10", "sighting_of_ref": "indicator--f11ae4ce-ccdb-4fa1-affb-0ffddc4d6c98", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e99851f-6e9d-4b12-821d-819cc2c8ccfd", "sighting_of_ref": "indicator--232a7691-5c2d-4489-9a77-32983e2a53ba", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0aaaf82-50c1-49f7-83ab-b3dbc5fd7094", "sighting_of_ref": "indicator--25b8c6af-08df-457d-aa1b-630610b83e3b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ab05016-1a38-45a0-a5e7-539c1a1648bb", "sighting_of_ref": "indicator--c05169b8-541d-46d7-a9ce-b9b15d13ff70", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d59cde01-adf0-43a2-8339-6b5e1747c859", "sighting_of_ref": "indicator--815c77fd-e888-42ce-ab41-e4dd85d50a7d", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e4b2f80-77b3-4e96-8439-9dea190efa0d", "sighting_of_ref": "indicator--4bb273ec-db4c-44d2-b6dc-e52324bcdacb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3ac8ec5-e064-432a-a740-7d6925b9be88", "sighting_of_ref": "indicator--62bc5450-e736-4673-895e-98b6a60044ff", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a285407-6fc4-4add-bf9c-f0a05f7a39e8", "sighting_of_ref": "indicator--d01c0ec8-e231-4334-a185-49b25d5568ff", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01930d9d-3d0d-4eb8-8563-2b3f7bc930b6", "sighting_of_ref": "indicator--08137356-8aeb-4aff-b8b6-0ad0f20c6857", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--221672a1-70d5-4414-9ce4-fab7144d50fc", "sighting_of_ref": "indicator--572a893a-3c59-4352-a582-ace140a339da", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ddaacdd-f353-41d1-9669-260c1a4204f1", "sighting_of_ref": "indicator--d60ea80b-8358-44ec-ba5e-5dba0babac0f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23551583-0333-4f35-b214-3c2992151560", "sighting_of_ref": "indicator--d3e6f2a0-2e88-4983-814c-f28955de9dbf", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f32cfd36-5c74-46a7-a2d2-2f9910805c4d", "sighting_of_ref": "indicator--69ada8f5-cb18-4337-bebd-3bef9e3fead1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--287c0e77-e185-4867-95d1-e30e06f6e896", "sighting_of_ref": "indicator--61bc8c16-f0d5-4dcf-930f-6093fd2bf970", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bb5b058-44b8-4f1a-89c6-cab35a6480d0", "sighting_of_ref": "indicator--01526eb5-782c-4d7a-b922-cf6f7bdd9670", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5aac88a-8b6f-4fd9-b828-0bb4828e1aa6", "sighting_of_ref": "indicator--9f2179b9-2c70-46f8-9f2b-97eaf8e343a5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--088269c6-dbe7-4347-9051-45fcf14176ec", "sighting_of_ref": "indicator--f47ea779-49bd-486e-aeaf-015a922f7d73", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a64d7f65-15f5-4598-ba46-9be32528c789", "sighting_of_ref": "indicator--6643903f-593d-456e-bd9b-dfe76309c70b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ebb6f46-9137-46a7-997a-5e73e273a26b", "sighting_of_ref": "indicator--9a60ec8f-dc45-4193-af58-5ed420cee552", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f86d75ea-6a32-4631-ba99-0200de91fead", "sighting_of_ref": "indicator--e13be8e7-330f-4799-a6c0-e889da49d98d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83542854-0189-40de-aa1f-743b446136e6", "sighting_of_ref": "indicator--876d8171-f784-4cc4-88ee-231653fd8e5f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8442c5fb-0462-4b1a-8de9-02dea1fa5a80", "sighting_of_ref": "indicator--c0ec087e-bc63-488e-bb45-b228dcbd42e9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02669337-ce03-419c-b98d-2a9515bf1ec1", "sighting_of_ref": "indicator--f4fa66ee-b740-48f5-acc1-7cafa66eab3e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb4d3d81-ec57-42f7-90ca-08881be3e3fd", "sighting_of_ref": "indicator--75644503-1dbf-49db-8f47-c9c827d23f2a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f356f8fd-16e3-46b5-8bc4-68da910422cd", "sighting_of_ref": "indicator--1caa10b7-276c-4154-85d4-5c1c931394f9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00814465-4225-4242-8960-00c3685051ca", "sighting_of_ref": "indicator--8c935dd4-bea6-4233-b840-0eba04bb3738", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ec4b404-caaa-44eb-a2fe-8d4db44c7b9e", "sighting_of_ref": "indicator--57fed2a6-3c0c-4200-b376-e5598e9fd80e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6235a07-15b0-4804-ae6a-c0cfc0b62389", "sighting_of_ref": "indicator--edf5a346-8161-4e07-9725-da027801f998", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4f75fb6-b0e6-4f1e-b460-ba86f3abf571", "sighting_of_ref": "indicator--edbe3134-a807-4bdc-a8a6-3759050df5c4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0766263c-122d-4190-a155-61d8efb7ffe1", "sighting_of_ref": "indicator--d138764e-046b-471e-9dcc-6dc5cba65d6e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7c2ad26-e755-408c-bf7f-464717d7164b", "sighting_of_ref": "indicator--9b38e4dc-a9e4-41a6-9dde-67088e2d1c18", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41f85749-a9c3-45cf-8d30-0fac6f387a74", "sighting_of_ref": "indicator--98c69fe7-eb9f-423e-84e6-863bb54bb99d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08921d53-d943-48e3-893b-bcdff78c7653", "sighting_of_ref": "indicator--91dd60e0-17d5-4f2c-acd6-5e1bdadf4ecb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63ae5a68-207e-4e38-8ea6-d8a6c487222d", "sighting_of_ref": "indicator--42042a60-54a2-4b2a-8307-e88833494d97", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0de9266d-126e-4fc5-9b77-bf931703045f", "sighting_of_ref": "indicator--81c74862-892c-4a96-9db1-2ef2b80da178", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--606f3a6b-b92d-4425-8d0f-360f62dacd9b", "sighting_of_ref": "indicator--de1c4429-edf7-47d5-81a1-9ed0444210d6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--678dbb78-de4e-41c1-b7ca-c64f53f7d455", "sighting_of_ref": "indicator--8f62728f-a8c8-482a-9e6f-2de0c8c86feb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cf01415-f2e5-4fa9-9540-479c2d38a76f", "sighting_of_ref": "indicator--a88dd049-5eb9-40cb-8a36-c61a95f32ff5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c6bba19-d9f5-47af-bc29-bd1cc680f276", "sighting_of_ref": "indicator--e42482ed-3c60-4f71-aed4-04373bdd974d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--165c189c-71b0-47d9-a4b8-6ddb466a325d", "sighting_of_ref": "indicator--bc69b581-995b-469f-8d00-725653cd90c4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d7dd354-3f1b-4b28-a1b6-7edabc874293", "sighting_of_ref": "indicator--ed96804b-1baa-4166-86c2-e10a3c5f5a81", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b20bb62-9e03-488b-8d65-6b314ffb2c75", "sighting_of_ref": "indicator--328d97b2-454b-4f06-bb68-698edb610c57", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58ea377c-71c8-4fd5-be0c-fdab46f84612", "sighting_of_ref": "indicator--2110eb69-9757-4357-8bff-1ef186d36191", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcd99f1f-6515-451f-94ba-b9aefb27acf7", "sighting_of_ref": "indicator--6fa928e4-f049-44d5-8744-512207d13c33", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98f69954-7e07-4591-92ed-affd16070a78", "sighting_of_ref": "indicator--3ee89143-8d75-4d83-85e9-9b20def24042", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4dcfa81-390c-4239-ab75-e3963877a1c9", "sighting_of_ref": "indicator--04e591f9-ae24-4568-ae66-6ea4486f6639", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6860e0a2-5a5a-4a8e-9206-f4aaff4bf9fa", "sighting_of_ref": "indicator--8b7b5051-2316-4fd8-89e7-15af59c51491", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f268bfd1-3ae4-4172-917e-fdc71b5c9e7d", "sighting_of_ref": "indicator--88a24b0c-0df3-4307-904d-02b0e52e1d02", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9306d749-4aa8-4880-89a0-068a6507c3b3", "sighting_of_ref": "indicator--b3ee0e67-cb7b-4bac-babb-a598e5dca801", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c90d2b07-da71-4cf7-b5b8-6b044a1ac37d", "sighting_of_ref": "indicator--fd82e238-e42c-4eaa-bacd-fc7f0e4b0aa7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb6a5153-08db-40ff-a359-7730c245794e", "sighting_of_ref": "indicator--21f21bfa-975c-43f7-ae8e-24c784e839dc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f9f44f8-c646-4250-a8f4-e42f09ef1789", "sighting_of_ref": "indicator--588fb2cc-da36-42bf-86cf-90b300e75a07", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd90a5e9-733e-474f-8fc8-badeea302b0e", "sighting_of_ref": "indicator--7286683d-a9a2-49d8-873a-9d7554cf6cd0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5555f83b-e6fb-4423-88cf-8981d82e4761", "sighting_of_ref": "indicator--b3c96f48-991c-4860-93ac-8f3385af14f3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07853369-3a66-485e-894a-8f1d6a8fc6c5", "sighting_of_ref": "indicator--fcc3585c-622a-485d-8e49-59036dd25e2d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38a6f0b5-e0b2-4b56-ab20-fb1238b89187", "sighting_of_ref": "indicator--d4a7085f-af41-4f68-9867-ba0a616a991d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--709dd1d4-788e-468c-987b-958535dd02ab", "sighting_of_ref": "indicator--8cf21055-a049-4a4d-b654-fd78f805a8a4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77b1e01f-130b-455e-93ae-029065c8b50c", "sighting_of_ref": "indicator--83023a1c-4a9d-46e9-9112-5ea72aa4eaba", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f5ccb32-8f3e-4360-869d-65cc6ee18dcd", "sighting_of_ref": "indicator--3202a76e-6d7c-4fb3-9ab0-fcb0d7a5d770", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18f9a01d-d779-4c18-82e8-a89d1e97bda3", "sighting_of_ref": "indicator--82a58fdd-985e-4122-bb98-532c908ef08d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8832046f-1227-40bf-b0d2-1f26206daff1", "sighting_of_ref": "indicator--c87c8c5d-6327-474a-abc9-1bf13f503469", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--742eebd1-1524-4ec2-9f70-1d2649096366", "sighting_of_ref": "indicator--45ffd413-bd09-460d-bdbb-ab1dea88f98a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c80a8e4-80d1-499a-8e32-5fe169c90926", "sighting_of_ref": "indicator--9227576f-aafc-4ba1-8cab-ea3642ddb3ad", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd0c1ace-b8f2-4115-9d75-5bfc457e4be2", "sighting_of_ref": "indicator--1d828ff5-82fc-4f6d-99c5-e8b60fcb0c6c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af4074a0-82a2-472b-bb3a-9e4f0faf88e1", "sighting_of_ref": "indicator--fc9961a1-6a55-411e-be6d-8e08725e2454", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--797de4de-aa9d-4604-8da0-32fb1c7086be", "sighting_of_ref": "indicator--9f863280-fbc8-42a1-9ee9-d1b1ab5ba5ce", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f3ef28b-d3b5-4055-bd2c-99ed56dc8694", "sighting_of_ref": "indicator--1dad140e-6663-489b-959a-7960e334e660", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--585c14f5-66c1-42cd-ac1c-6b65fe5524a6", "sighting_of_ref": "indicator--73a9b00f-b4e6-4167-907e-d54528462a8d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb6d2033-d252-4be7-9881-96490b4d1f33", "sighting_of_ref": "indicator--6fbf9dd7-f0a1-4515-8d23-b6733ec60751", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b95a04ec-c8bc-4484-825d-6dcc47e15aeb", "sighting_of_ref": "indicator--82e7698e-25fc-42c0-a749-6445d8b5e81d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--799f9a80-1c7f-4d02-887d-c53ff1ba036a", "sighting_of_ref": "indicator--3f12f423-e4a6-4288-a4db-aa1904b2667d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--174a4773-ec50-49c2-a0c3-aef1a628c2f8", "sighting_of_ref": "indicator--a2139bfa-a209-4132-be17-90cf2b38b399", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37b03cf8-d818-43dd-b8f8-e26f5aa4d829", "sighting_of_ref": "indicator--e737628f-261b-4a55-b4dd-9b54be87289e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2baeb3b5-6bfd-47f4-be49-d0f4bd046588", "sighting_of_ref": "indicator--35cfe1ff-b9b1-44af-9d5f-9a437285f07d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b747653f-74f9-402b-a270-77636cba09fb", "sighting_of_ref": "indicator--7c5732d8-2502-460e-8c7b-2ed539a693cb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--489c1eae-8238-4d01-a1d4-7a14505acd7d", "sighting_of_ref": "indicator--db2fbdc1-1d19-49de-9b95-b4f1b8db8a12", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ce9640f-a734-492f-80d8-f219f27caa0b", "sighting_of_ref": "indicator--1b1798e4-00b7-49de-a23e-48136be642e0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c944781e-c531-49c1-8f13-633a526aa291", "sighting_of_ref": "indicator--c10f0acd-83c8-4faa-afa2-6de6241959f1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d593ede2-a183-4a10-9186-b2a4801ea59c", "sighting_of_ref": "indicator--b35afd6c-1d0e-4e32-9b75-2137756493a4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--575fb66b-3604-405d-8572-8b8ab3f4056e", "sighting_of_ref": "indicator--e0af912f-ef38-4f73-9136-8330a111e305", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01a12971-1c2b-49bf-bd37-66fc7e954ee7", "sighting_of_ref": "indicator--917bd5fa-a349-4f7b-a302-52d42f315198", "where_sighted_refs": ["location--c71c2550-5849-4a8d-b050-635a93ef5467"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04451b41-df11-4bf8-89ee-42e7b74079af", "sighting_of_ref": "indicator--917bd5fa-a349-4f7b-a302-52d42f315198", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f9ae8a3-219c-4e2b-8bc9-52681c5101a2", "sighting_of_ref": "indicator--04d508d5-b847-4b1c-9225-24aac59aafdb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d4de852-7a47-4efa-ba7a-d5ea45e9e356", "sighting_of_ref": "indicator--b6f016ae-22b7-4eb8-a5e1-4e3db529b9b5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3d1d294-904f-4ba5-99c6-bb0b8b484f27", "sighting_of_ref": "indicator--edf3737c-6a64-400a-a20a-1e69ebc2588d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--499788fa-b64b-4e09-9ccc-cd7c80a3205d", "sighting_of_ref": "indicator--fbb6e653-000f-454e-a201-29750b32c605", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9d8d8b4-041e-4c54-a099-8b8b5e3c2f98", "sighting_of_ref": "indicator--e0455114-42a9-413e-87f1-aae661a1bc23", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e182c0b0-6dbd-4892-90f2-92636acbf3d7", "sighting_of_ref": "indicator--ac436c0c-e548-481d-a79d-5d2d25e0210b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bfd0e2b-60a5-4aa9-bff7-afe63328c70e", "sighting_of_ref": "indicator--f808f816-769d-4e6c-bdff-acdce8959424", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed6d2299-a51d-4fda-939a-eae973d31327", "sighting_of_ref": "indicator--d66d83e0-44b2-46c8-9241-c936d76e328a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3f52637-a974-4ce0-a300-9d160b8c9dd9", "sighting_of_ref": "indicator--8211db71-4283-4105-8e15-1d01ec7050ce", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bc22e90-11c2-41b1-a4a4-0957c4c8c6cc", "sighting_of_ref": "indicator--dcd4c040-66bc-4b9b-a939-c2139b19eb9a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c44bc90e-c732-4480-a583-010be1d65590", "sighting_of_ref": "indicator--c75d8e63-80e5-4f65-8992-2ebfbddb8848", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c233cfd2-cccb-4861-952d-a15cf2e85e09", "sighting_of_ref": "indicator--94bfa0e6-b260-403e-9b93-4eec9dbe2ef7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7760fa4a-f875-4105-a040-dea737307f8c", "sighting_of_ref": "indicator--54a4f506-355f-49ac-b935-25c0600f3298", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6236695-6a16-494e-9406-b608a6b5bd0e", "sighting_of_ref": "indicator--e18f2e7a-99d8-408d-8a03-8bebd4638f37", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25858b59-d645-43fd-a59f-d890175273ea", "sighting_of_ref": "indicator--aa279d83-52b9-4aec-996d-f554f5e67be8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23737a86-2dc3-46df-b496-1bcbb314f0cd", "sighting_of_ref": "indicator--c9da554b-355c-4cbe-abd8-d53cc57df653", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c5be8c9-33fe-40a7-9a11-163dd58c1e4e", "sighting_of_ref": "indicator--28c85f2e-2ead-4983-b7ca-9f65543db11c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--455a8b67-d394-43f5-a9a8-a791a05b4ebe", "sighting_of_ref": "indicator--344d72fc-73af-4c5b-aa0a-4669ea7fe70c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0b25862-f6c9-46af-8b64-8774b3e8df6a", "sighting_of_ref": "indicator--af678c1a-5fe9-4e78-a9c5-b309241c80c5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2511bb97-727f-4ebf-8352-473de69b26e2", "sighting_of_ref": "indicator--2a372edb-c341-431b-a71a-b926ab78e025", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6c07410-aa0a-4475-b581-727d33bd8797", "sighting_of_ref": "indicator--9a830c92-3cf7-4b1b-ac4d-59dc3b7d53e9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c8b3cc9-a311-4583-bfae-b9c6cfe3fc08", "sighting_of_ref": "indicator--f7107c08-50a5-4b3f-8a76-d7dfbcf0bcb4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a07cf1d8-be2c-4f35-9744-e014c68a43d5", "sighting_of_ref": "indicator--779a3eac-bdd9-4e64-8b7d-213013816fa5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69d62523-df23-4d72-a4e3-b6dfeb718efb", "sighting_of_ref": "indicator--4240f11d-9b94-4976-8f2a-8ed8f410359e", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37b1bcdd-cb47-4b27-9e82-c3dd00a15065", "sighting_of_ref": "indicator--9d13c4e8-74c8-480a-bf5a-6398b4b5c3eb", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56fb9399-2639-403d-b1d8-fffcfe429686", "sighting_of_ref": "indicator--fd54dae4-13ef-4b39-b7b2-96279e04bd46", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb425a03-3a83-4a3f-a735-8295049c84a9", "sighting_of_ref": "indicator--32d807e8-3772-47b4-af97-db31446c4f7f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a909a92-d9ce-4f1b-b66a-57920420fcc8", "sighting_of_ref": "indicator--ea422c91-8767-4994-8f7d-597bdaa2a016", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--313025b8-0b72-4a7d-ba06-23e88cd20e0b", "sighting_of_ref": "indicator--a05c5217-ce62-4c4a-92d9-ceb346adb896", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f5efb84-f5fb-47bd-8224-43de76ad61d0", "sighting_of_ref": "indicator--5e7b073c-9b0b-4e4b-a8ff-c1c5b37812bf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--299e237c-2920-4c7c-bcd6-a12655a8100d", "sighting_of_ref": "indicator--6e1e3e26-e000-4edb-9432-c1668d87d828", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eda5e2c8-0ed2-45fb-bd5c-f196768a5012", "sighting_of_ref": "indicator--506fab46-4435-4413-94b7-feba087fe980", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31d34204-b0ef-49fa-b181-ded5716928ce", "sighting_of_ref": "indicator--b7b1cd50-4fa8-4264-9422-71aed07593ab", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f97c167b-c8aa-452d-b51d-236a909bd12a", "sighting_of_ref": "indicator--edec4323-2955-4240-a434-4d6f29ef9f9b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87308463-5d89-4d3b-ba88-6285727ee3d6", "sighting_of_ref": "indicator--a2d2e45b-59a7-4153-9f53-fea0e291afa6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bb9a60e-d2d7-4420-98a4-98ba89dec26e", "sighting_of_ref": "indicator--392c2350-a5b7-413d-9d87-9b334e180e99", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70140a7f-d60d-4ce5-b6dc-507e96f84d75", "sighting_of_ref": "indicator--d6f57fc2-584c-4311-957b-da29a428b528", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4807944a-a9a9-4243-9467-db6ca60a158d", "sighting_of_ref": "indicator--31902fd3-5e90-4c85-8d4a-424ec4e8a08d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51cea71f-83b1-4f6f-875a-245d41f305b4", "sighting_of_ref": "indicator--eac5f715-e2d3-4ca6-a378-2176c6a53aab", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfc37a4c-ba7c-4532-9f92-711f7bb52188", "sighting_of_ref": "indicator--9813e51f-07f3-41c4-8bd5-1e7d6bb3d703", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fc5b632-fb3a-4951-b8e1-8d70f7bfe7c8", "sighting_of_ref": "indicator--2f492b94-92ca-4b8b-aae7-cb6f6a28cb71", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90204699-97fc-4715-9877-dbb8dce314d8", "sighting_of_ref": "indicator--2440964f-cf48-4bf3-afa1-f48d4d249762", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0402b6cb-4e1c-4739-8acc-abc3ae8ac7d3", "sighting_of_ref": "indicator--a03cb366-9d31-4bf6-a1ba-542686367c14", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df846dff-b46e-4135-a4bb-c46e7c8badd9", "sighting_of_ref": "indicator--e57a5517-d5ef-4912-9e74-fc2cc37729cd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--708b56ef-25bb-42b7-9da1-408c6815f75b", "sighting_of_ref": "indicator--847e1722-a1d8-426c-992e-c949b56cb376", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--098142bf-0e4a-47bc-965c-acae8d2db7e8", "sighting_of_ref": "indicator--f40c6bcf-123f-4a9a-bc20-d62e05f2698c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1499bfad-f78c-46c6-a9e3-72ec26364eca", "sighting_of_ref": "indicator--7b577de1-ca29-4d06-be68-b7eaae5eb579", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31ad20e5-c103-44aa-86cd-8a823cd8cf56", "sighting_of_ref": "indicator--b4c72058-4b18-479f-89d6-9f139f674050", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cedb223-02e0-4b00-b146-ea2f356bd4fb", "sighting_of_ref": "indicator--149acc66-9dcd-4743-958e-662d41e42c88", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb0843e1-3d03-4265-91f2-9868cd109c45", "sighting_of_ref": "indicator--96a5922b-d520-48bc-8311-cc8c29bd975f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--238f93ba-5d85-4d18-99ca-3cf6f6eb0741", "sighting_of_ref": "indicator--be487fbf-00a7-4524-95da-0817cfa5b234", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3097dc0b-f0b8-4331-b94d-0bf78a4c5b86", "sighting_of_ref": "indicator--bbd4170a-10b0-4e35-a032-29be2b27c942", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db2403aa-0bf8-4fb0-b1e9-f4285a5a57f3", "sighting_of_ref": "indicator--33331d5c-8eb0-4b72-9440-d088fed5f732", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6553fa9a-4437-470d-9ecc-c6f736f75d6d", "sighting_of_ref": "indicator--84458848-3070-41b1-94f1-a6d87402a301", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4c472b9-b6d0-4acb-beda-ba9b9230e472", "sighting_of_ref": "indicator--24317d16-290f-4717-8ade-b8da23726340", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea0e08d4-5ac4-494e-802c-e92f1d0cf4fd", "sighting_of_ref": "indicator--6ffb4c4b-2754-474d-a69b-df7e30d4d19b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed97c99b-967b-42c9-96e1-d2e02a939401", "sighting_of_ref": "indicator--48a585e5-18c2-4452-9b8f-71929fed1ec1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3e94908-db88-4448-b01b-03dcb3158fcf", "sighting_of_ref": "indicator--4f83d688-3601-4694-bd74-15e48064d3a7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c1b2cd9-efa4-40e0-aa61-62f2211cbff4", "sighting_of_ref": "indicator--12807e49-5097-40e4-bc81-257947af8ccc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--887dc705-c74e-4ebe-8bc5-297386f0683d", "sighting_of_ref": "indicator--ac6b7146-a847-4bc9-9d63-197b6543a920", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a244234-22ee-496b-8f71-4541eed89d7d", "sighting_of_ref": "indicator--43632e2a-9f1f-40dc-9bd6-dcae70743327", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3d46965-29f3-4644-8872-efc251b01acc", "sighting_of_ref": "indicator--a51368c4-b3d1-4fc8-9f6f-590e402dcb51", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72ba89bd-5298-4934-bb4e-b02be01ad6dc", "sighting_of_ref": "indicator--0f342218-77ef-42f2-a3da-fb23c4a97e8d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6d5fd2d-2b82-40eb-942a-80ea636de578", "sighting_of_ref": "indicator--3f63d794-8884-4fe8-930d-fcbbbdaed0c8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cba67ef4-099b-4a9c-a306-ebb1d2045a8a", "sighting_of_ref": "indicator--a4b10a92-912b-453a-95b1-f68fc2f3a10c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17c67e6b-9cb2-4e94-a3fb-a09b01959821", "sighting_of_ref": "indicator--682b7196-c037-4f0b-ba69-5616cbdcd19a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c5d2c98-64bb-48e3-beed-dd66a41e2363", "sighting_of_ref": "indicator--f5406152-8163-4304-bdc4-95edc6507a29", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ab20f59-fbc5-4a37-91e9-e6657fac5682", "sighting_of_ref": "indicator--6179736f-79dc-4cee-8bf6-aebb5bea4d92", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84cc5b18-8b16-46d4-aa5c-73833c283e0d", "sighting_of_ref": "indicator--3bf2c14d-3262-47b9-80b9-413f351d8a58", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--430b52c6-d959-4312-946d-3566dc6b1ad4", "sighting_of_ref": "indicator--f0a7cecd-09b0-43f5-9085-f8d8a651f797", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acdcb283-f59c-4717-b9aa-77858305c186", "sighting_of_ref": "indicator--b1bcf1d1-ca8d-4b8e-84f1-84dd612f1b5b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d327ca19-28a3-42a1-8945-07cf1af210ab", "sighting_of_ref": "indicator--073335f2-b977-41ae-8eee-1738c3484b08", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50338ea4-a399-4167-9180-e493b703804f", "sighting_of_ref": "indicator--22c2bd4f-40b3-43f2-940d-344d78a0808a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e366879-294c-49dd-b812-64dcbb52a29b", "sighting_of_ref": "indicator--895ea25f-237c-457e-b65f-3d58fdafe9c5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82165f78-09c0-465e-8fd6-7fa55a431166", "sighting_of_ref": "indicator--96b1480a-822b-47ae-93a8-e977b32de0f1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b30025d1-815e-4775-981b-e7bca5dc46cd", "sighting_of_ref": "indicator--af6b72bc-c97d-4d98-8764-7900f697e887", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e4850a7-5ab7-4730-b04d-8cc10fd66217", "sighting_of_ref": "indicator--ef784552-221c-4359-bfa3-6ddb95d42db8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b32d534-681b-4d7e-a777-b3c983e97aa2", "sighting_of_ref": "indicator--eef76703-a633-43cd-9e85-99862d8d0808", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c78c70e-c416-4042-90a4-dd66a65fb5fb", "sighting_of_ref": "indicator--aed19077-620e-4db3-a78d-cad11df19b7b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75fc93b9-91df-4c39-9395-b4a56d1a3397", "sighting_of_ref": "indicator--788e7666-810b-4c03-a1bd-a141b049a017", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--194b0971-a887-4348-862b-ae0a3eea9672", "sighting_of_ref": "indicator--b067ef49-9980-4652-a6ea-6812ad06dd9b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdc7ecc7-d2b9-45b6-be74-6cb43400025c", "sighting_of_ref": "indicator--a0dcf682-9fea-496a-98d3-0fd9305d29d0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b15f0621-caa1-4045-8094-021d983cbed6", "sighting_of_ref": "indicator--452d35c3-abaa-4650-9854-149ff9482560", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c66e6b18-1243-4c3a-833d-fa567d92954b", "sighting_of_ref": "indicator--083bde47-5998-4cda-aaa2-20e1d77e5105", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--267e4d2c-2b53-46e3-94ef-ee0f5807b77c", "sighting_of_ref": "indicator--1b58a990-237b-4367-8aa9-c82656f1df5c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f890f7f-7953-42f0-ad5b-706581bb92b6", "sighting_of_ref": "indicator--f6d66505-dd8e-4c7b-9e61-7dc67dc933b5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42af62c8-344d-4191-bc4a-4519c41a2e5b", "sighting_of_ref": "indicator--3a12ecdc-1e9b-4be3-b1d7-1885ee169c69", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e7c7a53-f326-4b6c-acab-e390b27d0f07", "sighting_of_ref": "indicator--93669a0d-d652-4f86-83a6-d210a73fb634", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4de87a33-261f-4fb0-969d-e67a37d24d3c", "sighting_of_ref": "indicator--98663ce3-9b4a-409e-8e55-beacff3c70cc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c07240b7-3add-4086-96d1-06ad1f603a13", "sighting_of_ref": "indicator--28c5c7f8-98fb-4b35-a447-0afc8319e51d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6656d3c3-a877-4127-a956-c3b4949e9b26", "sighting_of_ref": "indicator--b04eab93-8a82-45a2-bf88-5a5d1dc83228", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcff19e5-d606-4c8a-be38-8652e5b394a5", "sighting_of_ref": "indicator--e91141d3-bb1f-41c9-8efe-65e1ee7ec416", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83f676b3-0194-4d60-a7e6-79c231443f3e", "sighting_of_ref": "indicator--d2a0a6da-0076-498d-9dbf-8091aa7be32e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4484de7-b62c-48d7-8443-c1fa89c3ff92", "sighting_of_ref": "indicator--97c427be-4639-4cef-b344-6f8e89c3c187", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--930511a5-c1b5-4167-a0e2-7155efd249b1", "sighting_of_ref": "indicator--2255eb93-c40f-435f-9442-6056d8589a51", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--289c65e0-b723-4882-a8f1-2aea5537a188", "sighting_of_ref": "indicator--9808a9bd-5d5a-4925-a919-9352ec0c28bd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a506cd8e-c4a3-4259-a052-e6a2e8fb8ed5", "sighting_of_ref": "indicator--6681600c-2fd4-4d71-9262-54492d1b0cf4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ff4ea8c-df69-4c4b-a47d-fca5efedab9d", "sighting_of_ref": "indicator--0e353f37-d883-482b-8834-f1b501078ff0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56815794-a567-4582-aa31-7cf8e7704099", "sighting_of_ref": "indicator--72921d6a-74a5-47ae-ae3e-29ff8bfe6b5a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc79a82f-31a2-4c0e-a9f6-c5f8c304a22a", "sighting_of_ref": "indicator--bba90a2d-8caa-4caa-8134-da7c05efb664", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d819b3f-f609-4b7b-8b72-71527bdc91b5", "sighting_of_ref": "indicator--27fc6db5-de5c-4b88-beb9-accdbdd1c4c3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02eed459-88a8-4fe4-9080-4685d5950f5b", "sighting_of_ref": "indicator--92293e56-4b23-4a44-b32f-7ee6e1eb6e9f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57e6010a-aa99-4a21-84b6-3c2f3bf8253f", "sighting_of_ref": "indicator--c4978c0a-8a50-4b96-949e-f8441855de12", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8db4d996-225d-4569-8dcb-79f4230ad7e9", "sighting_of_ref": "indicator--fa7bf1da-ed34-4a51-a02b-39e72c5de981", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa821aaf-9dd7-4d49-889b-bf5a779ce1ee", "sighting_of_ref": "indicator--7d5fb21f-1542-4f3b-af17-8d594d2b69d8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21c1140b-48bf-4ad2-b4e7-b10dfa04ca66", "sighting_of_ref": "indicator--ed57bf3b-a101-4e6a-8c2a-a1541b5e5971", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b58419f-cbb5-4505-b1ee-3bfdc7f4e963", "sighting_of_ref": "indicator--4ad3e0c0-0a32-4ad4-9366-2e056c56eca1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1305b9e-140e-4968-a525-699f0ead6c7b", "sighting_of_ref": "indicator--b66211fb-f395-437c-8a58-2e5ea6ad39ff", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78b9fbe8-8357-43ef-a753-e19a12e9e222", "sighting_of_ref": "indicator--2e8b2c92-461a-451e-813c-0688ea537411", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4084ad87-a346-4f6f-a4f0-bd76fabab54c", "sighting_of_ref": "indicator--678af5f2-d0ad-45bb-8b4f-e53d480149b9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a04c282d-18c4-4eb4-b663-0b54cfde2174", "sighting_of_ref": "indicator--7cc1683c-6bf3-475a-8ad8-771a3c7ced28", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41ba247e-96e9-47b2-af16-151908bdec39", "sighting_of_ref": "indicator--dbf2885a-2a8d-4eba-9271-67f1bc38d1bb", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cf116b4-9f52-4f35-8c2f-635c36898122", "sighting_of_ref": "indicator--61bb047c-3192-4187-a901-9126ff1ddbc0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00401ea4-ed77-422b-9fca-1d6aac5d138f", "sighting_of_ref": "indicator--ba01f5a9-6f32-4a58-9ef6-1cc0dc2cab09", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50f267f7-af50-4fd3-a189-8c13089b2cd8", "sighting_of_ref": "indicator--9cddc179-9a63-4f68-9b5b-8bb5dc01d0a0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee5e644b-0a9c-4a13-9da4-5b4d40b019aa", "sighting_of_ref": "indicator--671f342c-bcd3-47d3-8c8c-b2cbf7230888", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e575e35-f90a-426c-9176-cf891adb73b5", "sighting_of_ref": "indicator--e0a419fd-9cbe-4dcb-9b09-7fe85ebbdef6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed293091-bb1c-4ecc-b74f-3887de7f2b44", "sighting_of_ref": "indicator--cd601d3a-b211-40d0-9b48-2190a8bfbbb5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4476cdae-9a56-4857-b42c-c550587bd2fe", "sighting_of_ref": "indicator--14e02312-8073-40ff-b931-c44017552062", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a44a6365-7566-4261-a3dc-77833c6d385a", "sighting_of_ref": "indicator--7709b503-4648-4720-9abc-45b777275a70", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5280d0b-1046-4871-a2a4-b011402ef1f3", "sighting_of_ref": "indicator--9721a292-64bf-46c8-80ac-3639dad5daff", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--321d3053-d11c-407e-92aa-e8779751f217", "sighting_of_ref": "indicator--aae9aff0-693e-4415-90ad-a824e3248c2e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ace335a2-ed43-4022-a043-58b6bee2db06", "sighting_of_ref": "indicator--938315de-acf2-492b-b1bb-3b6ebca18835", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0330f3bb-4be3-457c-860c-31d7ad38654b", "sighting_of_ref": "indicator--1bec8660-a3ec-485d-9ebe-8d8b0be3689f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6ddee51-75a3-4ac7-a23f-4011aee84534", "sighting_of_ref": "indicator--0ccbfb4a-0be6-4e2e-9f8c-d6d570af8e08", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feb71cb3-73be-40d5-bcd3-f432626d1747", "sighting_of_ref": "indicator--7164e344-23e9-47b1-a2a0-dfa3bc6ac872", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dab32444-8175-41ee-b46e-5745c8237269", "sighting_of_ref": "indicator--1ceccb30-da3e-47a5-b337-008e8b326f9d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41f92657-866d-4204-b0a9-7d63de761684", "sighting_of_ref": "indicator--4ec397fe-47c4-4e6f-9cb1-300cc22ef74c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5126b80b-e5c8-40bb-a9f6-992decc171d5", "sighting_of_ref": "indicator--c70166cf-4383-4930-a5f4-a1e65fc6a66c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--624a67bc-2167-4d6f-8977-812e831237fa", "sighting_of_ref": "indicator--9e29d294-134f-41ff-bbed-7b27b6ccee9e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d8a9183-cd9e-4235-954b-90907da04286", "sighting_of_ref": "indicator--a21efa97-11d4-4d7e-b95f-e2437895a273", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5acdee13-ca06-4d4a-b1f0-0f4da84ccff0", "sighting_of_ref": "indicator--bc2efde1-2a6b-4781-bee6-0c04b63c5b31", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e8d82e3-aed9-4c78-b9b7-7da8892b25c2", "sighting_of_ref": "indicator--92ea539e-d274-40e6-8d28-b210d0890b53", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbbf0d04-51a6-4789-8c87-b4740baf4cc7", "sighting_of_ref": "indicator--45b82486-5ac7-4fa4-937f-0f5953b6fbb2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24db0192-ab51-4146-af7e-097f19d7807e", "sighting_of_ref": "indicator--c259d7b1-2074-4783-99f5-ff6417591d03", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3737b9cf-0889-438b-8b58-dc153a837efc", "sighting_of_ref": "indicator--a73e86fd-9f1e-443a-a9f0-09010e2c9cbc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--827c7993-de27-40de-a5eb-3ad13990bf3f", "sighting_of_ref": "indicator--92833304-5424-4748-92bf-f28868ba059f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bea81dc-1a0e-45f4-a28d-a3cc816817b0", "sighting_of_ref": "indicator--a02ec566-ed94-4eb3-9f02-fcbe54c327dc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ddd7d63-548c-41cf-844b-828211920ac4", "sighting_of_ref": "indicator--28bc1035-5c91-4960-bb3d-e8691b58bcef", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f96263aa-e7cf-4f75-8c6b-d233970ec021", "sighting_of_ref": "indicator--81fe1d7e-995c-4f90-a673-e042dfd6d65a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13472c52-0077-481f-ae1e-590ebbddc54d", "sighting_of_ref": "indicator--74986ee6-cdae-4b34-b54d-562a2c8ee23d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f34d85b5-f235-42c3-af36-ff689fbfa23c", "sighting_of_ref": "indicator--f0c073ed-855f-4e68-8d5d-208068a61502", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d950899c-3e8f-4a77-951c-c353bdc3fb67", "sighting_of_ref": "indicator--c7adda73-4a69-4756-897c-0e778c9b0474", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24592b69-c45c-4c17-8f40-72cef6d2dcb6", "sighting_of_ref": "indicator--6e56d2bb-53a3-4137-8545-399e731a4e38", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42cddabb-c02c-4a02-acd0-0a93b7441f6e", "sighting_of_ref": "indicator--b310a3a1-f576-46e7-85f6-54a1e4266ed0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e53059d-f40f-41c5-ba99-126e0e5bab28", "sighting_of_ref": "indicator--fa057a57-ba9c-4164-83df-dc62a25e852a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0849bc3f-4655-4e69-82b6-92a21fd4c935", "sighting_of_ref": "indicator--a61c382c-b02a-435e-b96c-be3efa649998", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36a452cd-dc88-47b8-bd33-6a12855fe1f4", "sighting_of_ref": "indicator--4bcddf17-3f9a-42ab-9ea6-d5d152b0f3c9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2c948e1-ca6a-4450-bff7-359542a93ee9", "sighting_of_ref": "indicator--cb54acb1-b6a0-4dba-af96-7ef7102bb0f3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a1ca7c5-2754-4f6f-aab9-27874cfa880f", "sighting_of_ref": "indicator--06675b49-7f04-43ee-ad33-9a88005b894c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61305304-7326-43fd-bd47-8e45cadd002e", "sighting_of_ref": "indicator--9606bd87-b607-4765-9f4e-40c3919b5dbb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1a911f3-25c8-4117-b737-6bfb478cab20", "sighting_of_ref": "indicator--a0701df3-7f84-42b0-b9d6-e8d20beba692", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62817f92-b3a4-4122-ab39-29753f02c21c", "sighting_of_ref": "indicator--b78517ab-f0d5-4a74-ba6d-2b7f348fcde0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d17ba44d-9954-4c4c-9e91-ac28d28dee25", "sighting_of_ref": "indicator--45ab89d1-58da-442b-b8d7-534c941ab989", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79162b6f-89c0-4a30-a376-dc34d4a4f38c", "sighting_of_ref": "indicator--59aa27a4-15d2-4aae-b142-2b9c8d4bce00", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e95fc9e-ecad-4f7c-90b7-adaa3d1b77c4", "sighting_of_ref": "indicator--16732505-2c01-4c82-bbd1-42fd4db8889b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffdc999f-0cbe-490e-904a-8b439bc65ab8", "sighting_of_ref": "indicator--e5308d62-9abc-42a4-8b99-dcf65db304a7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa1fd9c2-c12a-4c61-b40e-433242678dd6", "sighting_of_ref": "indicator--49771dfb-f796-49a8-9379-113f4b6d01b3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--084ec05d-0c4f-4073-9656-1f264b275d58", "sighting_of_ref": "indicator--dad1e79c-24d6-4655-a962-a037c10ace38", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98518feb-66d8-4997-870a-132eaab4e02c", "sighting_of_ref": "indicator--02ba9c2d-731e-4d0c-8999-6d53d9991eb8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--724c2487-96ee-459e-bddf-631aba09c029", "sighting_of_ref": "indicator--caecdc3c-2720-445c-b8c1-784fbbb0cf2a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1338980-57cb-46be-be54-7df5111ea0ea", "sighting_of_ref": "indicator--60346a0b-d899-47ac-905a-5aace1469666", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95eb9ab3-633e-4f13-8b9c-35be29f0a816", "sighting_of_ref": "indicator--e6ca4131-5cfd-45ab-a01c-7057838b15e6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95e38a7f-6067-4622-8c9e-339077d4da54", "sighting_of_ref": "indicator--2ed4d319-573d-40f3-b832-23198b78fb95", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a2350b4-864f-40cd-9b61-1ded6127ca8b", "sighting_of_ref": "indicator--724b25c2-05e9-4203-979d-aac900837dcb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b10912a7-e583-4cd2-a81c-19b99eda55c3", "sighting_of_ref": "indicator--9a0014fb-661a-4c73-9f8e-8bf7c6aec678", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93c77578-bda7-4e9e-a85e-52d69eb5b4df", "sighting_of_ref": "indicator--7be3a85a-a762-43e5-969e-1d472f3cf0c6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a4a8ed3-dd74-48c6-956c-303832839cf8", "sighting_of_ref": "indicator--9117aa2e-1b94-4266-aeb0-7b8b8e376898", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b20652d7-d627-4bc9-a2cc-85ccfaa15be6", "sighting_of_ref": "indicator--55d00288-e073-4c63-b046-1c6cbc178261", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4327dc02-e317-41cc-8972-068d73bc6a6e", "sighting_of_ref": "indicator--4836cf88-0a67-4bf7-8c21-8eb62d1d06aa", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2484b78f-1a73-45b1-a294-d7d54a837963", "sighting_of_ref": "indicator--2c6e0197-55f0-4b6a-b8c6-c876128a63fc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f48362d5-fba6-4c91-bfef-82801aa1eb51", "sighting_of_ref": "indicator--511df891-6887-46b8-8fa4-f57e3bf94d92", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3745a122-56d7-4556-9932-89053d404ae8", "sighting_of_ref": "indicator--5fdbcf2c-9906-460c-885c-33e28b3aee60", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40b5d058-75dc-4ac0-9772-e63f5e1d0638", "sighting_of_ref": "indicator--d3876d85-1d55-4f75-a849-560b89c77b3d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da6036f8-fc7b-44b3-a64a-8f8e7965406b", "sighting_of_ref": "indicator--a68eeb63-08a7-4a15-a53b-db3cfc78bd34", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca307957-a66a-4024-80c4-b29f14b68434", "sighting_of_ref": "indicator--dedebba2-6f3a-40d3-8a02-579e7b82b58a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a72c7402-2f8c-4a03-a86c-389ad67b5d37", "sighting_of_ref": "indicator--6b1976a4-9fed-40f0-b685-bc6edd317284", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97cde3cb-33d2-4145-8361-713f877aca93", "sighting_of_ref": "indicator--67750a2d-d29e-44da-951d-05a9c24e20cd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1c62245-3d56-4f33-b2d5-9bb98ecab2d7", "sighting_of_ref": "indicator--71b785ee-bcc7-4b7b-9b80-0a3b2669ec2f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e453f5c-e7b3-49bb-a921-3a6f178e6615", "sighting_of_ref": "indicator--346c773a-0323-4fe4-a762-c560e0383613", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1efcf9cb-5de9-4a87-a772-ce8efbbb69eb", "sighting_of_ref": "indicator--6687a63d-e6f8-4fb5-8ca1-e7ee65ad6924", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--490cacb9-9079-4029-9bf8-3be65e67bd64", "sighting_of_ref": "indicator--b6ac5771-fd1a-4192-a59d-ad95b45203ba", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aba265c-3e1a-419b-856f-ea6640568a55", "sighting_of_ref": "indicator--d59e4f3b-b58b-4e31-941e-33ed02af3e6f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea4d978f-4ea4-4317-abbe-48f329234a11", "sighting_of_ref": "indicator--be5c55de-90d9-4df7-8aef-6a13c3a9efa6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86cd4129-4e9c-43ac-a05a-f9252e1d09c8", "sighting_of_ref": "indicator--35d1c0d6-4502-4c16-9efe-a5742e81d83a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c84de66a-d7eb-4f60-b41e-b41533e6baa9", "sighting_of_ref": "indicator--b3ef8f0f-240f-42ff-8539-e7b8eaffc158", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f6d14bb-c02b-4932-89d2-ff4ae1e74db6", "sighting_of_ref": "indicator--27006140-1f04-493e-936f-b393395ffdfd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--741bfdf5-8317-4bff-afb6-6c2eae7c15e6", "sighting_of_ref": "indicator--098e56bb-98e2-472f-a5e2-dbfeeb8cf212", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3353067b-5bde-481e-bcc5-e5c4d862f11b", "sighting_of_ref": "indicator--a603c8f2-b81b-4b2c-b991-9d3353b1f3f4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7680b042-a848-4688-a690-b17f8ae23d49", "sighting_of_ref": "indicator--3317342a-2195-4885-a5da-f5de1023bc61", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc86c916-08c5-4915-95da-3953a77e7e9e", "sighting_of_ref": "indicator--b31dafce-8082-4570-9588-0f32374b5691", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd55db74-4b4b-4e53-beb2-869d9b8bd280", "sighting_of_ref": "indicator--468519ce-23e4-41e7-809a-6603430e1461", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aadf0c77-f930-4c01-bcce-a8d16dce5bed", "sighting_of_ref": "indicator--c9e6278f-5a28-4f4b-949c-083ebaaaee7d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4e03b98-624e-4b96-973a-7908cc62a1f6", "sighting_of_ref": "indicator--b7256b0f-2cbe-4968-a0fa-da2ce67d4353", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a275013-66c1-426c-8be6-7ca21b3c0f0b", "sighting_of_ref": "indicator--78b55ef4-2467-4342-9c88-a641d74cca76", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cdac211-7349-4a35-b6c5-28f0a7b2ce96", "sighting_of_ref": "indicator--a813d58e-ba2c-4dc1-a581-51675cd8e2b4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fb8044c-043b-4ead-a263-520c2616a8f1", "sighting_of_ref": "indicator--5f507130-6752-430d-ab4f-827052e53c51", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--312f2017-1fcd-41fa-aaed-82c162a567c8", "sighting_of_ref": "indicator--d663b805-1af9-450e-be02-d08db83c9efd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a32f4ec0-b72e-4a19-b91e-e5264cd27123", "sighting_of_ref": "indicator--5ede54a8-d75f-42d6-9341-7b5b7a5afb82", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6f7da9c-6732-4c1d-8924-74d9c108146e", "sighting_of_ref": "indicator--27f9f1fc-db31-449c-a6e5-b37d7d4b3518", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbcce494-4bbf-4ad4-a874-ffd4441d6fca", "sighting_of_ref": "indicator--709a7f66-a565-4518-9de3-b22c90619730", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f04526b-36e2-4409-b445-2f8ca73bc844", "sighting_of_ref": "indicator--22347b34-9075-4540-8a16-522f378f45f0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf831c44-b2ce-4d1f-b5cd-2eb9732f17f6", "sighting_of_ref": "indicator--2b9579e8-8ac8-4d3e-9ddc-b3406a6d9a94", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f44d6241-3968-4159-9767-7a8943a6b6b6", "sighting_of_ref": "indicator--a8ec3651-17be-4c33-97bc-afe8aa7c8e16", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbc42212-332d-4977-90fd-17a56a2c0ba2", "sighting_of_ref": "indicator--91d8206f-be56-4850-bafa-5a06c8dfce53", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed6ea752-1937-485c-b97f-5606b09ebc75", "sighting_of_ref": "indicator--4a190184-be8a-4358-84b7-98939f1e99c3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd8b69d6-f093-4041-a852-a784ada39c4e", "sighting_of_ref": "indicator--122f1e9e-3f71-4fc4-9dff-976cee862dfb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd688e16-92e3-468c-aba4-f22203854380", "sighting_of_ref": "indicator--0684d1b9-3073-4c1b-9563-80efbcedccb1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e275a63-28c1-4f6e-b1ac-05a420b81f27", "sighting_of_ref": "indicator--2acff164-f84a-403b-80c3-955c24391d44", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--358ace8e-c32b-4f4d-85a4-f8d11a020594", "sighting_of_ref": "indicator--5974dd43-2164-4e9d-a426-2c8d840790ad", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19f5d30b-ce48-4cf6-a69f-7af6b3770da5", "sighting_of_ref": "indicator--1cb77b4f-23f5-44c5-becb-d2b0780ac876", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63df12c5-54e0-4a60-affc-71d7e79021dd", "sighting_of_ref": "indicator--b6c4c186-2722-4f22-a1e7-a46d96bb000c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c1211da-59f4-4df3-b6e4-4fa94b798c34", "sighting_of_ref": "indicator--4982e03c-2d84-447d-ad98-bac8721f40ad", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad9719d6-8f41-45fd-8d4b-9d9b6922af8b", "sighting_of_ref": "indicator--3fa2849f-d8f8-42a1-ae8f-d65023a532f6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0e1c79b-8cab-4b2d-896d-35423144a137", "sighting_of_ref": "indicator--0a26c40f-8c4c-49d8-a473-cfa9207ecca1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ba225b9-0068-4fdb-a403-c0e8e47f18dc", "sighting_of_ref": "indicator--9009a78f-0075-44b2-84e2-92e5534392da", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd42767a-90cc-4dab-86b2-f69efa42d671", "sighting_of_ref": "indicator--2a5876e0-60ca-4a37-aa56-09b515621d60", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae70adb8-295b-45e2-98f4-a28ee0f3d536", "sighting_of_ref": "indicator--2c68d3e2-b2e7-4450-92b8-21967d027f7b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8333e17e-1b67-4b08-8689-a8a8565bdc61", "sighting_of_ref": "indicator--3b5a8474-56bf-40a4-9cfa-ce17787f7a68", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d0eec23-eeb3-4d6a-a716-a2b146791b8c", "sighting_of_ref": "indicator--f1639190-8715-4fc1-bf91-ab8ef58a3bcd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4538cd2c-1e6e-40ed-b23e-2c4460ad265b", "sighting_of_ref": "indicator--bcd7eca8-1456-4d99-b17d-05328e7f2912", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6343ad2-d459-4603-aac1-f89ebe2c745c", "sighting_of_ref": "indicator--04ea1ff8-3079-4c3c-a2ba-3c338cbcc15e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82c3dbe9-70f0-4273-bccf-efa3bf375427", "sighting_of_ref": "indicator--d9139b59-02b7-4924-97b5-55b8bd640ecf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--970108b7-ce5b-466b-a172-b45d407ed5aa", "sighting_of_ref": "indicator--0675f77c-85dd-4348-88bb-71037df81205", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24a40df6-4553-4976-ba93-16e515c97668", "sighting_of_ref": "indicator--8c5c6b96-3db0-489b-bab3-9887d985576f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e2c589e-c50e-4ffa-bc53-765ff1823f2a", "sighting_of_ref": "indicator--75ea4854-aa43-49f0-9ac0-26be283f6560", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f731952-dba4-4f7f-b68d-4a5b6ce1fb90", "sighting_of_ref": "indicator--23abff2d-d7ca-4f43-b320-ef57394805cf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c43816dd-1f52-4d7e-a768-45ac970a957a", "sighting_of_ref": "indicator--6ada65f4-d504-4165-8dcd-b96f2f0b83f8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c0a7359-8483-4331-8f5a-f0d8fa5b2115", "sighting_of_ref": "indicator--8c9516bc-3733-4cf9-ac78-b7ae3991cd3f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f5e6adc-79bb-451b-837e-4e8f257ee50f", "sighting_of_ref": "indicator--1367d32f-ed03-4a08-8795-7a3913a6b5bd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adf7be16-82fe-4590-84fa-15d07ef303f8", "sighting_of_ref": "indicator--0443fade-52bd-4250-b562-0c5f67215ea7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e55d519-6159-4469-a429-b66d6917305d", "sighting_of_ref": "indicator--dec3ca8c-00f3-4f61-9a0f-3a7ff38a7f3c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a21c0838-5956-492e-89b5-5ba5939369a0", "sighting_of_ref": "indicator--40eb10ac-25ed-4076-8ac6-bfcb5c13fc5e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05c87365-7f99-4a32-941e-d49f356e70f8", "sighting_of_ref": "indicator--d709dec7-a5d1-446c-a2d4-ad64d1ff3c3d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e84bd28-eb07-4e1a-9bed-aa96b4ae1a30", "sighting_of_ref": "indicator--77cf2154-328d-4577-904a-2346eabecd7d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fae5f4fd-8257-4d90-b7e7-e0513bc5551a", "sighting_of_ref": "indicator--a486e5dc-2bc7-454c-8dad-b9794db99ea3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd6868e0-1edf-4d0b-a994-be13d461500e", "sighting_of_ref": "indicator--90d8bd24-8ce0-4bf2-9fcc-34e7452a3771", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cdeef11-3db2-47f3-8f9a-acf6ae60d89e", "sighting_of_ref": "indicator--2abbaeeb-e656-4a53-8d61-e09a4a9b7543", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a05d9d99-4958-4f58-8708-28e875e32688", "sighting_of_ref": "indicator--25e3f055-69e6-4b08-8495-0d53ca584d24", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2e8b4b7-8eae-4734-97dc-de4806733845", "sighting_of_ref": "indicator--2d0b7d89-9ebd-40c4-844c-95e10b2fffa5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09139df2-ef7c-4156-bcd8-a153c8dc6660", "sighting_of_ref": "indicator--6ff115a0-dedb-47e9-bcff-ea23e91da896", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b288439-ce99-4771-ba0e-9d2775567d30", "sighting_of_ref": "indicator--65f2dbf2-b3fb-4e31-9d53-67865e67fa7b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f7e1b1c-e55d-47d2-85a7-53f46f687040", "sighting_of_ref": "indicator--a72c691d-6ab1-45c3-a669-b5a2a3bb5159", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d4c8f7a-8572-4ab4-8eb9-bbea7f24c099", "sighting_of_ref": "indicator--36cf53e6-9674-4966-8c2d-785f6d837922", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58fb2325-7a7d-479d-b782-3536f69a4159", "sighting_of_ref": "indicator--c6543e03-6ee5-4a5a-a5ed-0fdfdfc854f2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baf191d3-be3e-4382-b567-a98c9a02c7cb", "sighting_of_ref": "indicator--6abf381e-e9b7-4358-a340-40be9080c27e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83297d22-7540-4305-aa5b-5f7984c1ded6", "sighting_of_ref": "indicator--85f79885-b85a-40d8-a0c6-d27ea48a5e12", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--594bc9cd-8d89-4f18-9024-9bc8a17071cc", "sighting_of_ref": "indicator--e61fced8-11e2-4156-b869-8988f37a4957", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25920f08-b1b3-43d6-9064-e097d607dede", "sighting_of_ref": "indicator--bb3a2021-8cc2-47cc-a03a-d99126c757bb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7be9eb28-bcf8-42ff-83e7-e899d9b1ae37", "sighting_of_ref": "indicator--0416166d-d478-4276-bd2c-9678ff9faba0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ae59271-6bbe-4489-b59e-2b16104beea7", "sighting_of_ref": "indicator--49c7e619-ad9d-400d-affb-6e9f6ce1fdc5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95258845-36c6-406a-aa8d-8971009485d5", "sighting_of_ref": "indicator--c8fb1a9c-867d-442b-9277-eb0d9b3a8625", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e4d0c05-37fe-411e-908b-c6e7fc767603", "sighting_of_ref": "indicator--1abbc272-8e8f-4504-8d99-85d6dcf907c2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb79a1b2-4c9c-49e3-b03b-ce9b3fc307f4", "sighting_of_ref": "indicator--9d98221b-af20-4fd6-9596-9b98deadc265", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ec5cb7c-5734-4bc8-ae99-f2b0f18eda19", "sighting_of_ref": "indicator--f3c151e9-0ca8-4e9b-8e55-5d9033d8b12d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36cd6453-7ab3-4432-a662-bdab0b0e5c5a", "sighting_of_ref": "indicator--54a81567-f4ce-4d12-88c5-fa81f347dc4e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d51cc143-67f2-41b5-bf60-9139ca9bde94", "sighting_of_ref": "indicator--a68b6e07-b7d2-4055-b324-91a93731ae25", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb707129-e550-429f-a1f2-f736581fbae5", "sighting_of_ref": "indicator--43983d41-c87a-4345-be3d-cb9deb524892", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b7bbcb3-3dd7-413f-83d6-ea51b58b9285", "sighting_of_ref": "indicator--9823efab-5de1-4702-bcee-86c68773edc4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36a98951-3a7a-4a77-8f29-9e9c0381d1e3", "sighting_of_ref": "indicator--7dc678d0-16e8-4fcf-897e-cf587e883145", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d14de97e-7f2a-423a-a484-44274e55c93b", "sighting_of_ref": "indicator--1c8a7a38-1812-4c61-90da-670f76cad71c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af0c75b8-a19a-47d2-ae67-cef556caab5e", "sighting_of_ref": "indicator--1f68e150-756a-45b3-a38c-adcbca619029", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6116ba5-ee04-45b0-bc18-ca635b41ed77", "sighting_of_ref": "indicator--bf314859-379c-487d-bb2a-a345da2bc0d3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b9168ea-6ca2-459c-8ea4-bb1eecf1c324", "sighting_of_ref": "indicator--0ac64f15-6754-4c1e-b5b7-02c8e2f700f6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2977c2d8-5c77-4b7e-96bd-8f54539788a3", "sighting_of_ref": "indicator--780a3892-dee2-4daf-84a1-4f99eca00566", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bde11fe4-17c3-4c47-8ff6-560303a09df0", "sighting_of_ref": "indicator--c5385aea-b21e-4e94-b5a8-d7ec94025147", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd2ad169-d625-49db-bd77-0b1e61afcec1", "sighting_of_ref": "indicator--d316a320-2e78-4b75-9583-9787bfd21952", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93857b0e-6241-4e5c-b66a-42e8c9a4fced", "sighting_of_ref": "indicator--7c2b081e-1fac-4307-b183-f4f9b89ae1df", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3ad1fe7-1b7d-4c29-bb74-671026042b2a", "sighting_of_ref": "indicator--ada2a766-ac24-47a7-a558-e8edbb045786", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--932f03c6-2add-4789-a0ab-56cedb4173ea", "sighting_of_ref": "indicator--0ca874c5-da8a-486b-a956-06dd7356ffc9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--005a01c5-0a50-4c4f-9e07-02b22aa7ef5b", "sighting_of_ref": "indicator--49c38bda-2086-4d62-8af0-7c7c2cda143d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92e72065-213e-46f5-bfac-778e8babd693", "sighting_of_ref": "indicator--684308f7-7843-4d33-ba00-80cfdb3122e5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec685464-d2e2-4d4f-af99-9c8af3afc8c5", "sighting_of_ref": "indicator--d3f870e3-d465-4dbd-954e-520ff703f84d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce2fab50-491b-4520-8ddf-502e94cca446", "sighting_of_ref": "indicator--9b57a4bc-bb6b-43d3-bc79-c9f4f5ec4da9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e8eb784-cb64-4c41-bd46-a22e0950e1bf", "sighting_of_ref": "indicator--da895bae-dc95-4ab0-b051-e3bd536d3e40", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b9d2cb3-ea46-4c25-8211-7c2e5c623de8", "sighting_of_ref": "indicator--7a52674b-0152-4fb1-9e4d-b75407c56b8b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cffc9180-b1a6-459b-8803-feaaf02ecee3", "sighting_of_ref": "indicator--4573dd0a-43d9-4f38-ab58-ac0349484535", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5a193a6-7873-4d09-bc77-51d9fcafc8bd", "sighting_of_ref": "indicator--35840e19-aa2a-4614-9eed-e0abe0bfdc9a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f9788e2-4599-46bf-8d03-d9341b67255e", "sighting_of_ref": "indicator--3958c907-ea00-480b-9ca6-9f296d215b93", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18c1cd2f-e276-4432-9017-f08a99aae2aa", "sighting_of_ref": "indicator--6239616d-2839-4015-a8e2-b9059a8e5422", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a3f127e-663d-47a9-ad57-00d050c324e7", "sighting_of_ref": "indicator--ff4e9ae7-54fc-4cce-a99e-37fb4fa946c4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfd95eb7-4f1f-41e7-a0e8-047394be1390", "sighting_of_ref": "indicator--939d0748-2fb9-4f7c-b365-c9dff5130a13", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14c918eb-71d3-4002-ade6-351341f20e79", "sighting_of_ref": "indicator--6f00d510-d72b-413e-9a1e-486e9f8e4146", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23284bc5-afd1-4f2d-915d-6265298d2c7b", "sighting_of_ref": "indicator--c14fa705-f09c-400a-8f2b-cca38e5c5a63", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38ab794d-8828-42ac-bf48-e6f8249a14f0", "sighting_of_ref": "indicator--5d3bcfab-c92d-45db-935d-1470cfcaae94", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7354cc5c-bec8-44cf-aeca-a9258b641f8b", "sighting_of_ref": "indicator--0c998a39-f469-4abb-961a-35ad371e2d89", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0765a8cf-f4c9-4afa-976e-71bd4c64f591", "sighting_of_ref": "indicator--a1901087-cd68-435c-9a9b-74521a1b3a39", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d892686-f36b-40f9-a66b-c145c8bb937c", "sighting_of_ref": "indicator--bec825dd-48c0-49f1-a6e1-0b53c28c33c1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c16f017c-f285-41d8-b0b0-cde8c7472e5c", "sighting_of_ref": "indicator--63fde4d5-fcc5-4601-bf54-7ccad69e6f7c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15d8e173-6d5f-4a07-b43c-a313d2f787fd", "sighting_of_ref": "indicator--c0d19b0f-43c5-4c19-9e5d-3093f77d24d1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4a2db0f-2180-4609-b884-8fb672fc6f8e", "sighting_of_ref": "indicator--afabddf5-b19a-4cad-a84c-b669282c6e8f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b25b0cf5-4871-4a6b-bca2-b300c5d82b4d", "sighting_of_ref": "indicator--d389ec1a-f111-4253-b228-a94d8764fbec", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9e1f0b9-b379-4a1e-9ca0-34a420a8fa9a", "sighting_of_ref": "indicator--f3efdedd-229d-485d-85d3-3e56b180ba66", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1899de7e-dddb-41c1-979d-0afcdf67e8f3", "sighting_of_ref": "indicator--14829963-578b-4a3e-8660-f0a37409fc70", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e8e3690-771a-4969-b37e-cd689f4727c8", "sighting_of_ref": "indicator--7b2216ed-7381-4ab3-9d39-51985dc8e8fe", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06e77996-6ddd-4524-a5a1-aa6c70658fa3", "sighting_of_ref": "indicator--29c94b8a-84fc-4786-820b-9345373f9b6f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--682f96a9-c617-4dd0-94f0-0548eee2a28c", "sighting_of_ref": "indicator--18464f3d-3f9d-45f4-a90a-6c29d9020d6f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59a5daa6-4ea6-4aef-9852-b42599251896", "sighting_of_ref": "indicator--42632897-c48c-4822-81d6-38415c421a12", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c642887-d718-4ea6-b130-13aa0398b983", "sighting_of_ref": "indicator--d6352f9b-c2a0-4a3c-b81f-4e7b148561d7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b28a2a7c-9813-4277-8a52-b962ea185169", "sighting_of_ref": "indicator--cd1abce5-5814-4b70-bf61-3005ad6d7abd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31f6fa71-6143-43a6-bf7f-d2093001aca9", "sighting_of_ref": "indicator--8b8c10ef-8771-4729-b83d-4162f03335e6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cff3da3-f965-420c-b2d6-b3de2f5b2f6a", "sighting_of_ref": "indicator--39039aa7-15c3-43ad-bffd-e6da1ed82c1d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47100ccf-e1de-43bc-a741-6fab94ef4823", "sighting_of_ref": "indicator--cc249ee1-8f0e-44fb-a2f5-990206d7c69f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc782d15-6ee1-48ec-90f6-8117f861df5a", "sighting_of_ref": "indicator--24135b1e-5192-4bbc-b3dd-e1fd166bc0c1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaf49e7c-e821-4f9b-94c3-0af2dd0692ca", "sighting_of_ref": "indicator--c3e6a6e6-d08b-4927-a140-6a471c09121c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53a923d2-9b3b-444d-8db7-7ee793d26673", "sighting_of_ref": "indicator--86b0706d-d449-4510-a06c-6d928c23a6c5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a95361d-6d85-4e94-b404-1d8e4fd757cd", "sighting_of_ref": "indicator--8ccf50b4-c35e-49c8-af57-81d2ebc657d6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--969267a1-7c2b-4083-af54-620080f5df54", "sighting_of_ref": "indicator--af84c7e2-7245-434d-be8b-ccabd4014a6a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e75ccb29-d281-43c8-8863-51f011919693", "sighting_of_ref": "indicator--58e5d0c2-0315-43ff-bb54-6cbbe32d5fac", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9beacf88-1588-48cd-b8b5-71a337ac6e90", "sighting_of_ref": "indicator--1364de08-9965-41b4-ac46-8724a5fbd631", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96580cd1-bbab-45c1-92a5-ae7ff3680c4f", "sighting_of_ref": "indicator--73bc592a-2f99-4cb7-bce3-0f03c281dbd0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9ccd2c9-2f74-4177-896b-74196be824fd", "sighting_of_ref": "indicator--e9901d70-4ff0-4c66-84f6-f07ce31aba1c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09b066d6-339b-45a1-8100-962bf5eb8f7e", "sighting_of_ref": "indicator--17adc778-bc5c-4445-b287-4fd368947acd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc0a60eb-0709-47e6-a683-6b4cd3d3709e", "sighting_of_ref": "indicator--a353675f-f070-46b8-ab53-da0a1bfe30ed", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b4d6161-0e69-4b4b-be5a-a5a3d9ec5559", "sighting_of_ref": "indicator--1bbe85e9-59ad-416c-8fda-1b2a7eadba3b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf81b04b-7f5c-4697-94ed-84d15d3d84fd", "sighting_of_ref": "indicator--c7f08378-9c22-4f8f-aa73-5f86979800c1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--531fc2b9-9251-4b19-9cbe-93a5074d5dd5", "sighting_of_ref": "indicator--31081406-35b6-4936-b250-d4802e915723", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0861cb0c-186f-4083-8ec5-eb2b3cf5526d", "sighting_of_ref": "indicator--2fd399c1-1a9a-42f7-8ccb-8176a03d4b77", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0274039-f5c3-4f66-a929-2c418f8ad9b8", "sighting_of_ref": "indicator--f96946a7-267f-4cdf-92bd-b7fbf7d0f840", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40b087de-46c2-47e0-87e7-c3e8392180a1", "sighting_of_ref": "indicator--1ceea768-356b-4890-8af0-00eaaa0824e3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--544f2f3e-825b-4c27-a75e-4af73fa8b027", "sighting_of_ref": "indicator--b62b3343-95fe-46f8-9372-4d96fbc7df98", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52a81fcb-4e6d-4bc1-99d6-50ec5d8ec619", "sighting_of_ref": "indicator--a75fa44b-56f5-4a96-8aeb-522ef1dc7ffc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8899c058-b2df-4296-a700-3e14157067b6", "sighting_of_ref": "indicator--2646d17d-5368-4528-9af2-0e442d285d75", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0501f262-37d7-43df-9347-4644cd623ebd", "sighting_of_ref": "indicator--2a5db07f-9006-4b49-bf24-9d4d89f65cf8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20a080f6-58f1-42ad-8cb0-06efe51ccf9c", "sighting_of_ref": "indicator--1d0297e6-8de2-43be-a28f-35ad5c11b5ed", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02b8f763-78b3-45dd-b162-b19e5bfa2093", "sighting_of_ref": "indicator--f7aa5693-50b1-4c73-b90d-beee0a601144", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b1c0b19-a6dd-49db-9720-118dda8c5902", "sighting_of_ref": "indicator--6a07a117-bb4d-4846-aac4-b7c103379e35", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55a565be-c376-431f-ad3c-8cb79bc580c7", "sighting_of_ref": "indicator--79b015f5-dc61-4cd0-aa3a-28901ca47b26", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3477c84b-3c42-4b8c-9969-2c5409ddae35", "sighting_of_ref": "indicator--c36cc5c5-e4c5-4c03-b981-7a98ae0a5728", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b744721e-2a8a-488b-aab1-4916beb66158", "sighting_of_ref": "indicator--00fcf89e-7f31-48e0-a419-62359f2af530", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--542b0e84-4f65-4d95-900c-d427611982be", "sighting_of_ref": "indicator--c777cc7c-4577-46ff-b018-34b69c738a30", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0a1cb8f-2ee4-4d49-bb75-e1b2a9f8ceb9", "sighting_of_ref": "indicator--301a7a11-4c9e-4c07-b3cb-9cb5842b085d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37513634-9e20-44b8-8a56-547797640ca0", "sighting_of_ref": "indicator--cde7e7a0-9dd7-421e-9f62-bcb391a0d977", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--775b9674-b1df-4c2f-8355-449552793e95", "sighting_of_ref": "indicator--e5d90c97-232f-4822-aa1c-69fb340f2979", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0184907b-4622-41af-98f0-e58253285e80", "sighting_of_ref": "indicator--d5445461-b4b6-4ebb-8e2f-91fd0fda6543", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61496fca-fb1b-4330-a29b-0dd57df628ab", "sighting_of_ref": "indicator--ddebd4ec-c83e-4a92-b384-6e90a69f6ebb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7c05ae6-ce0c-4ca3-b5e9-b9b57131ed81", "sighting_of_ref": "indicator--23c7194f-8cea-48a3-af2a-9b27f5492ec8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba5553df-fbec-4b79-b864-99d1de56f9cb", "sighting_of_ref": "indicator--a601d914-c896-49dc-8843-9183032c4ec3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--862b6626-57e3-4be0-a938-a3ba9389e69f", "sighting_of_ref": "indicator--5301aa8a-3d27-43ea-a7db-22618eddb247", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65bd1c1a-3455-419a-bef1-96da5885bfcd", "sighting_of_ref": "indicator--02ccb755-95ce-4040-bd59-ce5775f6d20c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab44f076-13b5-40a5-9a7b-70ba71802444", "sighting_of_ref": "indicator--ba43c540-31bf-497f-b306-e566edc2dfd9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58d6787e-fd0c-4d1e-bb8a-4c73ee38b205", "sighting_of_ref": "indicator--c1c09911-3266-46a9-854e-c6cebd8a6023", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ded2073b-f031-4257-9496-7d022a470a10", "sighting_of_ref": "indicator--6bf76d58-69dc-43c7-b264-1a4a41c0d4c0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d5f0197-a1e8-4159-8505-c9ac070dd92e", "sighting_of_ref": "indicator--97f4fffc-ee1a-4ad0-a54b-3c884b1ad22e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63633342-1de5-4428-83ae-2472c7c33652", "sighting_of_ref": "indicator--a51fa559-7bb3-4db7-bb93-39355ab6c19d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eefe735c-8979-4757-b556-aa7f4612f075", "sighting_of_ref": "indicator--29eb4017-a653-46ac-b3e9-338805a635e3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2adf415-42c8-475a-86b5-331a4d2964bb", "sighting_of_ref": "indicator--b4a37996-f158-43c5-a407-b3ef19ac85c0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd7a554c-c082-4799-9738-20287dc3aef2", "sighting_of_ref": "indicator--63a73695-9e22-4faf-9ea7-856e1df4899a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e332d50-ee41-4f3a-a510-c693a6ad2a56", "sighting_of_ref": "indicator--7ec0cfeb-30e4-4bad-9a67-165746942d7e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--604020c3-1ca0-4b2b-a66d-13aaa9627a85", "sighting_of_ref": "indicator--f101ef13-76a1-4d3b-bce9-d8993c0da1a0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fbc9895-31f2-4f28-b23c-df4cfb03022a", "sighting_of_ref": "indicator--e6f69647-b503-4715-b6e0-52d59ec3fc4e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91ba06e9-8781-4607-bf1f-15182aaf902c", "sighting_of_ref": "indicator--583dac8f-b170-4827-8c15-5f10228350fe", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f51a984-6ca7-4123-8880-6b8de6337393", "sighting_of_ref": "indicator--cb328a63-512f-48bf-8077-56bccdbccbc9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1f62524-6c9d-4788-ba1e-928ce42b1305", "sighting_of_ref": "indicator--c0ac4c4f-004d-4f6c-8fc8-3d8a5d92a0ea", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb4654dc-ac53-4cf1-b1a4-a7e2e9ad630f", "sighting_of_ref": "indicator--39ac1119-dca9-424f-842a-8e09c56240de", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c4eba05-8b90-46de-9d2e-b06d4d523500", "sighting_of_ref": "indicator--ab089b5c-edb9-40b4-86d9-51f120cbacb3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b92a3b5-9cdb-4ac8-b23e-4facae47dbf1", "sighting_of_ref": "indicator--f7944146-87ff-411f-8349-e373f966031d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--825b9821-2892-490b-b7f4-136d61030f6a", "sighting_of_ref": "indicator--549ef47e-b8db-4bd5-89b6-e18f6fbce7dd", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ba1dc92-e7a8-4085-8d75-57129c308c36", "sighting_of_ref": "indicator--447c0d94-b3cf-494c-8f40-7b72ae6a2a68", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--888fa5c2-22af-4094-8473-b16da866a089", "sighting_of_ref": "indicator--a12bd930-9007-43d9-9846-4e301d79e9cd", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afdf3953-aeab-45c0-88b9-d3503378145c", "sighting_of_ref": "indicator--860c4ea1-9745-4e38-853e-7d27d95eac78", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60a2087e-f4e0-4423-ad4a-7b9ce79f296c", "sighting_of_ref": "indicator--55f9dbf4-741a-4948-baea-0809db1e9200", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56b8147c-9084-4d5c-ae62-dd71a3b002fd", "sighting_of_ref": "indicator--9a69934a-db76-419d-bb8a-db2ba545b0db", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88e4572f-e253-49fc-a19a-fc1c82bd439e", "sighting_of_ref": "indicator--467da565-649a-4721-a86e-5334e6650984", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e51dc5df-2e7a-4f0e-b7fa-d091b99d13fc", "sighting_of_ref": "indicator--0c95379a-e909-4f6c-8569-ecbc31ac4fda", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00595bea-a12c-4729-b81a-f6e117626988", "sighting_of_ref": "indicator--c9a29124-b54c-48e5-8e1f-4c566494fda6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01e6c96f-9933-47e7-88bf-7af008258154", "sighting_of_ref": "indicator--24979941-8723-4523-9880-50a6670c239d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--142e3628-49e7-493f-a856-5035b3d9d6c6", "sighting_of_ref": "indicator--4368a345-d8ba-4d61-a770-888a964d4311", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86c8fe88-b7c0-494a-a32b-d8bff700cb79", "sighting_of_ref": "indicator--946d880c-53f2-4880-bd46-f3307d60af73", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3324cb6f-b9d0-4333-a3ca-cdb9b1bacab8", "sighting_of_ref": "indicator--3d848d7f-b55f-4c06-8380-1b4255d57447", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b38c704-77d0-42ce-a83f-5914f385d07a", "sighting_of_ref": "indicator--67e29bc7-7748-446b-9455-e281a2b53732", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb067250-5ec7-4b4a-acc8-68037f18ca69", "sighting_of_ref": "indicator--3792f774-77c0-451b-9fee-2145d0465f3e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--535e95d6-9d6f-4cd9-9e80-c4001c58bd5b", "sighting_of_ref": "indicator--40f100e5-8d67-476b-bfb5-7ddd993c8f7f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a1cf09f-57eb-4674-b03d-4492a656ad2d", "sighting_of_ref": "indicator--da47c5e0-d310-4625-ad97-8db065db5afe", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4176465-300b-4c64-a3d8-1168e74352a4", "sighting_of_ref": "indicator--5cdbf98a-8cf6-4918-a2ee-a34685a3dd9c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cb14df6-de5d-4009-af78-df710b02250f", "sighting_of_ref": "indicator--33cbff55-6248-40c3-a80b-bb2dad3d471c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--726aaacc-cce1-44b5-9beb-a3c8b6f0da96", "sighting_of_ref": "indicator--cb794e8f-02dc-4af0-bb82-c0100cb0aaa7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0960bb52-3837-4a78-b2ed-644349be9048", "sighting_of_ref": "indicator--d247c3f4-998a-4c74-9aca-ec089cd9c409", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d70d64a-537a-4845-9e6e-4ac62d17a3e5", "sighting_of_ref": "indicator--492f8db2-8271-4c84-aa8e-785fd0142482", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f514ee57-d3bf-4e9a-ac00-c331f1141d1f", "sighting_of_ref": "indicator--b1e48b69-6a74-4723-a28f-3ddba1a33a81", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84dbcbf6-a566-473e-acbd-eebda1ddbd78", "sighting_of_ref": "indicator--5702e851-6481-4753-982f-a5c7ef1d5ba8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--795df95f-2d6f-4b32-bc6a-b69a9d9337a1", "sighting_of_ref": "indicator--3c891746-bed8-46ff-ab5a-12459cbe4de2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a0f2995-45b6-4920-b441-c9da30dd35be", "sighting_of_ref": "indicator--169c325d-b84c-4154-b019-1ec6b8e41842", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd345950-12e6-423f-b200-6d9ab1db5c90", "sighting_of_ref": "indicator--25021948-f0c7-4307-93bb-052f09a97b75", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b23b1867-7ed4-4d21-8691-0f4f88df5273", "sighting_of_ref": "indicator--eb995a96-838c-4291-ac53-8de247efd25c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b8df45b-e4b0-4f40-bb6b-dc756cea15d0", "sighting_of_ref": "indicator--eb995a96-838c-4291-ac53-8de247efd25c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4f1f199-b4ce-45cb-8b8f-8fe2c9976a57", "sighting_of_ref": "indicator--8cd5c65c-ade8-46ce-9dd8-f7b4a4f9eb71", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--843d21fa-b756-4d97-9b3a-4a4e752d30f5", "sighting_of_ref": "indicator--40d1c64a-9d1f-4acc-bacf-f8016ece4a86", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7608e75-dc58-438f-9a60-3703c4d87597", "sighting_of_ref": "indicator--40d1c64a-9d1f-4acc-bacf-f8016ece4a86", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1323959a-bfc3-46c8-8580-5857a664a23f", "sighting_of_ref": "indicator--1304d96b-af97-41a3-ba31-dbdf410b8cd2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa94095e-6c59-4838-b302-515441336244", "sighting_of_ref": "indicator--b9a46351-3b17-46f2-9c45-48007a8ccad5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f91b97b5-a615-47cb-8b51-285921b273fd", "sighting_of_ref": "indicator--cc62278b-8f70-4587-b5cc-e3be558d52dc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5809dd9b-536f-4a5f-9260-5d40e3e2ce29", "sighting_of_ref": "indicator--c9e54e55-10c6-4b3d-86de-cf9016c830a8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2c2010b-d06e-402f-8e59-7660f3501888", "sighting_of_ref": "indicator--7dbf6bc1-631a-4d11-b11f-27f304318175", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c35c403d-4b0a-4d2f-aac1-5fb76295338b", "sighting_of_ref": "indicator--5bc96b54-bb88-4763-920f-e80e2bf09462", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dee5f51f-599e-428b-92a6-40a3c95b51fe", "sighting_of_ref": "indicator--5e4e6d17-a871-449b-a8a8-3c8c17a79e4f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feb89350-4406-49ee-b142-bda1276dfeca", "sighting_of_ref": "indicator--b25636e0-10ba-4a19-b5db-9bd36180c9d5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17fa8042-125b-436c-b072-24ac3ab9bd6f", "sighting_of_ref": "indicator--9fcee618-95a8-47af-b716-3a979bc9f43f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f231f64-a48a-465e-8add-346557ac4266", "sighting_of_ref": "indicator--5d611466-6e81-47af-afd2-aefe5a2e976a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2911e006-fd08-4b00-8b9e-cfcc38a791bd", "sighting_of_ref": "indicator--3c68eab0-837d-41d3-9205-2430045cccb6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63882e06-29c2-48c4-b6a6-bb2a89c6748a", "sighting_of_ref": "indicator--a523df7d-484b-4476-a582-2bea5a8b8a3b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d876748-b897-4396-8de1-9558116aad7c", "sighting_of_ref": "indicator--003756e4-2b75-4518-afef-88c47d6ff31c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf7a6de0-e9f0-40f5-9e9f-72fd8ef20c09", "sighting_of_ref": "indicator--993a5e1a-0902-4b7b-bfa9-5b2e37c4af2b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbf534df-dd24-4efb-bf3e-e670016248bc", "sighting_of_ref": "indicator--993a5e1a-0902-4b7b-bfa9-5b2e37c4af2b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d7a6674-2fb1-4eca-bee4-c29f060a0c2d", "sighting_of_ref": "indicator--ba5d779f-a133-49ce-a4e2-3f6fb5e95ccf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51961f13-a196-4668-b71f-d96fe41acc65", "sighting_of_ref": "indicator--1a7ba2a7-5ec8-453d-a4f3-fb6107401d64", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6114ff0e-6c49-4675-be81-49c99700644c", "sighting_of_ref": "indicator--36043f8c-6270-416e-b837-aca72c550854", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a56138ab-43cc-4e0b-8d02-5e6c3e002286", "sighting_of_ref": "indicator--8c839c18-6a2b-44cd-99aa-4034be0817f2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7699e5e6-da5e-4dfe-b828-8975197ea779", "sighting_of_ref": "indicator--9f1d1710-f989-4aeb-8a63-86637fed005d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6467b51-de68-4c5e-af76-36462fae8795", "sighting_of_ref": "indicator--d70f6491-6843-4b0f-8662-d80881565621", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed08871b-d655-447e-9dee-b80b199012bf", "sighting_of_ref": "indicator--d70f6491-6843-4b0f-8662-d80881565621", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e34008b7-6ec2-4a7a-8227-4492b61d1d5a", "sighting_of_ref": "indicator--a39c0a17-0ce9-4567-b635-39751abeb667", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1598d84d-c6b7-4915-a495-b9d02711dffe", "sighting_of_ref": "indicator--6ba79d83-31e6-46e0-8b11-f92d9b9d3207", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f03d8548-4648-47cc-bf59-81a379405599", "sighting_of_ref": "indicator--664d0df8-24f3-4e5f-97ef-871a3e44ed91", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--460e3867-a3cf-4754-8bcf-672cdca27b20", "sighting_of_ref": "indicator--d40989e3-a874-4c98-bd8a-e1ffe547911b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84081769-1068-4508-997d-d1e99443ad1e", "sighting_of_ref": "indicator--d19b917d-4c0b-4c37-a341-5d4cbdd8968f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bdcfd4a-fe81-4f35-bcc1-840cc833644c", "sighting_of_ref": "indicator--19dcbe04-1992-4af4-95bd-5d39ca1a106f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b22465d-fd90-4c98-931c-3515623ddfa1", "sighting_of_ref": "indicator--eec25718-dd39-4e38-bcd1-dcb26685389c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfc5a3fb-7202-488d-a9d3-03ea85c2e6d4", "sighting_of_ref": "indicator--0c79e977-5619-4185-a9f9-d4d15eaabc62", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06e029c5-1856-43a7-9682-6063dd715f25", "sighting_of_ref": "indicator--df8ed965-396b-4141-809d-7320537e35bd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e5f98d3-6873-405b-a144-64cd510c8122", "sighting_of_ref": "indicator--888297e4-a67e-4a39-8e47-5346c90fc955", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d93e8693-1746-4a38-9bd1-e032b8114b92", "sighting_of_ref": "indicator--21e32d8c-154a-48e9-8b49-d706c9b691b7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69dd7faa-2656-42a9-bac1-13e3d5feea77", "sighting_of_ref": "indicator--d6174b47-bfd4-4ae7-acbb-0c1d8b43d2d1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3718a933-0ec2-4266-947b-0dc625013b49", "sighting_of_ref": "indicator--5d08d71f-548f-44b9-a7fc-95c2e4914568", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--566633b7-0799-4c0a-be8f-3d6ec57360f7", "sighting_of_ref": "indicator--abe557b1-e3de-4fc2-ac7b-d110e44bcff6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a0ca114-1ae3-494d-adb2-3a877e43b049", "sighting_of_ref": "indicator--7f38add8-925d-4de8-8039-ac05142c21ab", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7048d400-de6b-475d-9414-5653e29744a3", "sighting_of_ref": "indicator--9d3db47a-814c-48be-a6ac-034c6973e309", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ae2031d-362c-4af4-82f8-3ceedb7ebae5", "sighting_of_ref": "indicator--cb35af9e-5075-49ca-8a5a-c73363d2fe5a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9821cf63-0bd5-4a30-810a-762e6e11ddb4", "sighting_of_ref": "indicator--d5bfdb21-fa1e-4957-bfd6-83d782143a0e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16e0aab0-d3de-45cd-96a1-2e1ea4fe72fe", "sighting_of_ref": "indicator--ac799fc8-5513-4c68-b980-a1c248a38846", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e83db40c-01ce-4dc5-9c3f-379a20327fba", "sighting_of_ref": "indicator--4054d6da-f78d-455e-9008-9808f8a2ee91", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d95113f6-0a63-4710-ac79-422d3e20932a", "sighting_of_ref": "indicator--4d26aebb-7be6-4e9e-b49f-bdf8e4a38d81", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f525f08-c94c-4183-9c4d-6636e5582237", "sighting_of_ref": "indicator--b88a6e54-e51a-448b-86b2-ec00c4c2063f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbdbd3d8-eb36-471a-87b5-c7716db6318e", "sighting_of_ref": "indicator--addd6467-ad63-40c9-9ba0-932dbf88b8d4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--717bfc3d-79cd-4ee6-aa2e-09c10c1754df", "sighting_of_ref": "indicator--518c8f94-fa97-430e-9f59-3aea457fdab4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef451fd9-4d9b-4a4d-aa53-2ba334796fd0", "sighting_of_ref": "indicator--8a60905b-3e0c-4d7d-8858-82ec9cc70892", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75323a0c-9801-44b6-a94a-cebb0b3407fd", "sighting_of_ref": "indicator--55586b6b-2a28-49ae-adf7-7fa313fd1aae", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c221d73b-6e78-405d-9362-1542eb002f79", "sighting_of_ref": "indicator--63e6b12b-b131-4d8c-abd6-5cd4c8bbb138", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9edabacb-b25e-4d3f-ba5b-c0af3dad621b", "sighting_of_ref": "indicator--9d635c61-f241-40de-a8d5-d8b099f82f7d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3793ce68-d7f2-441c-a96f-cd1beaff7bf2", "sighting_of_ref": "indicator--9c8422d8-4d2e-489a-acc0-3e6def0051f3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--449b8dbc-24d8-40c5-852c-a1a0904ddb8e", "sighting_of_ref": "indicator--58001954-d190-484d-acba-08c37b52514a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee1827fc-db61-4c1e-81a8-e01e27aedca1", "sighting_of_ref": "indicator--aa892267-4b51-4bed-9db7-607eb11c0772", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38f52cdc-b92a-489f-9376-d0b534841ff2", "sighting_of_ref": "indicator--aa892267-4b51-4bed-9db7-607eb11c0772", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baabba33-bd54-4549-9ce9-464b997dd364", "sighting_of_ref": "indicator--3f81b5b6-b484-4638-8cd0-c7c481e10029", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--754d587d-ed2e-4ab5-b1ed-19cd5e72c792", "sighting_of_ref": "indicator--076fd925-1514-4a33-a47c-c65ed984019d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17731c11-7f69-4ace-8e83-60d678ed5f45", "sighting_of_ref": "indicator--c65dc378-c88b-4bf2-b6a5-e8e67c8859b9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dfc74c9-7704-48d7-a196-c527f493a448", "sighting_of_ref": "indicator--28e2d5b4-c3b2-4d25-83a5-7c53220370f8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f29acdd-4db6-46e9-bf3d-9c31e7105e8e", "sighting_of_ref": "indicator--6be73b05-e66b-4286-8fde-953221437a94", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ee7ff60-8928-4334-b39e-9edf69875500", "sighting_of_ref": "indicator--4af67c6a-5c80-4801-8bd2-f3d293a830c9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16135d29-624a-476e-a2b0-faa1f9f174a2", "sighting_of_ref": "indicator--12c2d076-7222-4f9f-aa4c-661bef098d7e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03601563-f091-4a46-b007-92d316bcfb76", "sighting_of_ref": "indicator--06b6ca52-6a4a-4f72-8795-c6eb8224f59a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bdd9720-860d-460d-aa03-5a52b8dbf34a", "sighting_of_ref": "indicator--c7d11438-9467-4c91-b470-23e4016980ab", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54d66732-ed91-49d8-96e0-a8d4bf4a7a4a", "sighting_of_ref": "indicator--e04e4cd1-05ca-4491-ba63-f824595fccc3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26ec4b81-537f-4941-aa55-a69dc074face", "sighting_of_ref": "indicator--e86739a3-1da9-4d76-883e-032695f9c17a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc56d3ba-75ef-459b-ade8-8cebc5092f03", "sighting_of_ref": "indicator--eb9946c5-7136-434b-9c0e-3da28417b688", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa9ba565-61a9-4657-b71e-54688aa5f8fe", "sighting_of_ref": "indicator--0316c5b1-eeb7-48e9-a58a-0252f5d73be4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4af16b3-2026-4ace-81d2-ee7403cccd47", "sighting_of_ref": "indicator--48f6579b-68cf-49a5-bba4-391384d5248a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d697084b-ef69-408b-8653-6488cc14513e", "sighting_of_ref": "indicator--a78e6d1a-1365-4e03-a9a5-cceb8fd8cb78", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65671363-3d3f-48b3-b346-2e3425cee73f", "sighting_of_ref": "indicator--a300b0cd-9133-4845-a083-d3e20cdf984a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71b098a8-465e-46f4-85f8-cdd90dabeb74", "sighting_of_ref": "indicator--8fac45d5-ab40-4b53-8e48-526f4bb47cbc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--220c9d74-b6ce-439f-982b-f244a86b82e4", "sighting_of_ref": "indicator--f9091958-9c06-4d51-ba6f-96bbb6652871", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47280a90-16cc-450b-acf4-c3aa1314177b", "sighting_of_ref": "indicator--54f08310-0540-4c09-88fe-b4cb0a95f39a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1631999c-83c7-4fc7-8df5-8a4bbca16123", "sighting_of_ref": "indicator--66c8ca1c-f372-4f6a-bd93-8f82a7da6578", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a10e43e-be72-48fe-afdc-925e3d18b089", "sighting_of_ref": "indicator--8651e304-247c-446c-93c5-dc7195e5a827", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1952d428-326e-4106-83df-752eefa47ec9", "sighting_of_ref": "indicator--5041d3db-26f9-4723-af2f-945d1b30879d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5833d070-80ca-4ba2-b543-d9fb75994ad9", "sighting_of_ref": "indicator--9ebf4ccf-761f-4586-9442-61ca2fb2334e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--938e76ff-1cf2-4c53-961d-70aa7fda2db7", "sighting_of_ref": "indicator--efc1f22d-16cf-42e8-8833-d2ef4051a68a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a3d1b6f-3ee7-411e-9aa6-754466e6c05a", "sighting_of_ref": "indicator--580d22ba-db32-4f9a-bfb1-be68a6f4dfe4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd0ca91c-4fce-4517-8714-b6e3ad39fc2a", "sighting_of_ref": "indicator--9afd051f-b776-47ac-8598-718d5862ac92", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4249f63-674b-4ef9-abff-a16a07466336", "sighting_of_ref": "indicator--7bdcbbe8-dfee-45d7-b85d-ccd189daa5b2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--996475bf-4e6e-4d4e-881a-9527d6b4ac0c", "sighting_of_ref": "indicator--7bdcbbe8-dfee-45d7-b85d-ccd189daa5b2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2140e80-d207-4ee5-b27d-2d2498931da3", "sighting_of_ref": "indicator--7c254318-0d64-46df-bdd7-161b0626c37f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--007e6491-9f97-457c-a086-d9bc39bb7bac", "sighting_of_ref": "indicator--b71e57d8-b576-453c-adde-481439b2b410", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eee167ed-2ab3-43c0-b642-6777f9b104be", "sighting_of_ref": "indicator--60b2214a-af40-4098-973e-92a4d69ba650", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb3f0330-f9ac-406c-a7eb-914cd4dbe0de", "sighting_of_ref": "indicator--5f60e356-0289-4c38-b511-2d94bd304c17", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--928a0d6e-3146-4887-9fb1-1960375c6667", "sighting_of_ref": "indicator--7d5e83e6-742d-4128-b6ee-a4dc591aaa5d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd5d1acd-949d-41f7-9e8a-956224bb75df", "sighting_of_ref": "indicator--19594647-f4fa-474e-8fdb-1302c3f7c2c4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a0befaa-2e1e-40b3-a90c-a0e0927bc59d", "sighting_of_ref": "indicator--9ce077ab-94b9-472e-b4ba-c991bf3549da", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b59b9baf-f9f4-4241-9ab6-4b1fa8de07d4", "sighting_of_ref": "indicator--456ff76c-e7b8-4ec6-98cf-f326c81ac876", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e4ee0fd-6330-487f-81f7-c58966c4b0b4", "sighting_of_ref": "indicator--c8ae3973-136e-400c-addb-a3a594fad865", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d5b58b2-a848-48fd-96bd-89772eb3d220", "sighting_of_ref": "indicator--75301d9d-9d52-4496-8c1a-565390be7277", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5d72d17-b28a-4557-9366-e0ab5546d03a", "sighting_of_ref": "indicator--4c027b34-bcdd-4cff-b728-972c0cf522b1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d967d5c-5a55-4362-964c-c59b98ee6e6b", "sighting_of_ref": "indicator--d66e7fb4-5f5e-4af8-9e9d-1be5d4e8a643", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60dffc2c-7f2c-4c0c-9b5d-2186e560c11d", "sighting_of_ref": "indicator--90b27cad-bbd8-4fa7-904a-d6755c5d31d3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82a0c3fa-581f-4173-a800-4bfc40a5ed2e", "sighting_of_ref": "indicator--faa9ad56-3ed0-4cd1-a799-d70cae61070a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c58b0854-fdf7-41c8-b658-c86722bd064d", "sighting_of_ref": "indicator--a5aed5fa-bcfa-40c3-b315-a34fcbebf048", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48a92673-0a2c-4f2e-917f-0ab41970fefb", "sighting_of_ref": "indicator--8e09a791-b1de-46ce-8f18-10c7e0bb172b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b7930e5-d352-4ad3-bccc-b4e7895f8c76", "sighting_of_ref": "indicator--4f2fff30-8d58-401e-a417-1a98b9edbce8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--961e99c9-2619-4653-b360-e017ed8fd503", "sighting_of_ref": "indicator--26ff04df-6996-4407-9c5d-b8cd79ee7788", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4a0572c-56ac-4935-ac9c-f2645dacf2cc", "sighting_of_ref": "indicator--ed2028d5-cf25-4b68-bcd3-88774979d39e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4dbc554-b950-40f8-af79-907f1c619fe2", "sighting_of_ref": "indicator--98ab404f-7d77-414d-aac6-def9b0aa8aa0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2de1b643-ebcd-4d1d-980a-f3de1c00bf2c", "sighting_of_ref": "indicator--ea5725e8-8cda-402f-aa31-e254fd8b66b4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45e6f829-25fd-4ea2-b613-8cd4db35334a", "sighting_of_ref": "indicator--a9dd3e4b-7a54-46e9-a23d-a07e2dfb703d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76ae1417-f554-4339-b81e-490218b8e165", "sighting_of_ref": "indicator--8210d7bb-cbe1-4190-b7a9-1ba70a2a352a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f605fa2-f425-4615-acdd-b3fa864379e5", "sighting_of_ref": "indicator--9e034748-6a2b-4e00-9dcb-002f903cb3bf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfa0cc1e-0ca9-4b45-a3cf-2652c78e7342", "sighting_of_ref": "indicator--64b9e802-a487-4302-a5a1-4a51e93e1e06", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eea10de-00f9-4adc-998b-e089eaa406fc", "sighting_of_ref": "indicator--920b8d05-eb18-404e-b43c-0cca8edf6494", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0e1e7f7-b7a9-487e-a3a4-c297fc449525", "sighting_of_ref": "indicator--74625f7b-62b9-4efc-b4fd-e26a9bc68ab9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c772c13-03cb-4cfc-b812-74be6fc12dcb", "sighting_of_ref": "indicator--973c8843-a953-463a-b62b-c13e563ae2d6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64870ebc-fedf-4d15-8bfd-98e8f7de6ff9", "sighting_of_ref": "indicator--5a05f6fd-2941-45cc-b296-271f8956edd2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7e9fa36-d751-418c-a0b6-5758fb2935a9", "sighting_of_ref": "indicator--22a2ca52-6a00-4cd8-8f4e-fb487c77f496", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98746ae1-5b52-43a3-90c2-6b380d6402dd", "sighting_of_ref": "indicator--66ba3062-40aa-4677-9a27-13f04139f817", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6dc0806-da04-48c9-b20c-35bee5aac4c0", "sighting_of_ref": "indicator--18dc92bc-9ad9-482b-bb28-3132baa29b1b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1f0b50a-ac82-4032-995a-9ec6778bc984", "sighting_of_ref": "indicator--91e68e0e-c6b5-4855-a46f-2c1d30a60efa", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b2f4373-e732-4a35-aa62-77bdc960ad02", "sighting_of_ref": "indicator--00a7d646-2698-489e-aef4-724c84f1e5e7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74f983e9-545b-4f3f-9ddb-57e41b4aacc1", "sighting_of_ref": "indicator--d40f94f2-bb38-41c2-bf9c-89e76118a279", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f19eca3c-9c96-48d5-8a72-63321c8294ac", "sighting_of_ref": "indicator--0338ca67-8e1f-474b-beb1-a9189e0fe824", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d753c9c8-2d74-4884-afeb-c187745b4044", "sighting_of_ref": "indicator--a0eed590-1c2b-453f-9a28-1e736826da40", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2facaab-1876-4a5e-b452-7d5afe119902", "sighting_of_ref": "indicator--1fb5e9fb-df01-4a39-ae34-43322f70e4ba", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--260982d4-e9df-4973-aafc-f2fdddcef8e7", "sighting_of_ref": "indicator--5d469f78-53d2-4ebe-9ab7-fcba352c8e77", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e109ead-16b5-4195-a764-a3b163098811", "sighting_of_ref": "indicator--c47d75b4-87f6-4aa3-b682-2fe0a7c9440a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2acb9610-26ac-43a0-b0e5-bdc03eba42d5", "sighting_of_ref": "indicator--cf30a095-c57d-4831-b29b-2e9c7cfef120", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad69d2a5-a6b1-4cbc-a47e-b9e88bf53afc", "sighting_of_ref": "indicator--6dbef4c6-f749-40ad-8473-7b3725f13e6a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a33b0a0-2e0f-4591-8310-365db1314dbe", "sighting_of_ref": "indicator--af143a7b-f86e-4510-b192-9ce0ef6e9287", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--163d8902-d62a-415d-bc2e-7a5d86815adb", "sighting_of_ref": "indicator--3ace2fd6-2532-4a3d-a889-4cb3ea63c3f6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77196f69-18af-4e69-bfac-414bb07d4b37", "sighting_of_ref": "indicator--70fe766c-1afe-49ab-82ad-562dfec05cfc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cbf1303-1516-425d-9aa2-add7fe2c8548", "sighting_of_ref": "indicator--e773d081-0361-4aa3-babd-d8630f412a7e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e09eaaed-12bd-4e7c-8d9e-2d59f13691de", "sighting_of_ref": "indicator--60b62ced-e104-4b69-bf9c-28c17fc6dfe1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3de20be-65ea-48b2-be8d-ac1431978ee6", "sighting_of_ref": "indicator--45a51497-b857-47d3-85ce-ceefd167f8d5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--945a2b09-8f83-426e-b16e-7e2a8d6c3ac6", "sighting_of_ref": "indicator--9594ab98-70bb-4ff7-9f11-37ad559094ba", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a926c4d6-9819-4553-8031-9aa20f37ce6c", "sighting_of_ref": "indicator--1a91ba92-be0e-4e14-a0bd-a935511c9591", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28a366a0-2065-4336-80c8-9ea66d117c16", "sighting_of_ref": "indicator--a1c79307-c4df-450d-83f1-44d228a4407d", "where_sighted_refs": ["location--c71c2550-5849-4a8d-b050-635a93ef5467"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a93f4d49-a07d-43b5-8a2e-8050c5f3238c", "sighting_of_ref": "indicator--db7865ad-52f6-416a-bedf-489658e6a22d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0201774-7f70-4f63-8e41-e894b6bcdb3a", "sighting_of_ref": "indicator--2bc0c93b-bb38-4d01-a06c-7df45022accb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a02db72d-a62c-4d45-9fc8-6778a4c76438", "sighting_of_ref": "indicator--409746e5-c7d7-4129-942f-c275bc0b7905", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fb4cd21-a8c5-40ba-8287-2fd9deee89d7", "sighting_of_ref": "indicator--4e93211b-2754-4e14-a56a-3e75377f0153", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d7f5fa3-d871-4878-9fe0-e2af73a4540a", "sighting_of_ref": "indicator--e0e48152-fdbe-4a47-9c37-f010db80646e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b3bb4fc-b282-43db-9464-3d42a492cf03", "sighting_of_ref": "indicator--ce18c609-3406-453c-a619-059364b4f35d", "where_sighted_refs": ["location--c71c2550-5849-4a8d-b050-635a93ef5467"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--313ed783-9f6c-4fe6-8b5a-e3bbdae0523d", "sighting_of_ref": "indicator--ce18c609-3406-453c-a619-059364b4f35d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ba2c019-ce31-47de-b60f-c2a31c58bf73", "sighting_of_ref": "indicator--558a2e86-fe80-4e76-b984-2b7a17cb39f7", "where_sighted_refs": ["location--c71c2550-5849-4a8d-b050-635a93ef5467"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe4d45a8-17f4-429b-b688-be0fdaa40557", "sighting_of_ref": "indicator--558a2e86-fe80-4e76-b984-2b7a17cb39f7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36246ef1-ccaa-4b49-9652-33b03e868cd5", "sighting_of_ref": "indicator--0b56fcf8-6099-4fd8-a23c-4ab7ad22edef", "where_sighted_refs": ["location--c71c2550-5849-4a8d-b050-635a93ef5467"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--213e04d4-35ce-4bc3-9547-4499b4c34427", "sighting_of_ref": "indicator--e4334ff2-a3b9-479b-b107-41e17b3518d5", "where_sighted_refs": ["location--c8625a69-b7e6-4cad-99d8-76632a875c20"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a3d06cb-be6c-4dc1-bd27-01746b367512", "sighting_of_ref": "indicator--1e01a6f1-7ff5-4e6f-ab3b-ca01707ad561", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fde1ebd5-86b4-4568-927c-294b729171cb", "sighting_of_ref": "indicator--42f54fce-889b-48fa-a639-5bd65585b247", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7147b3d5-c7fc-40be-aebc-c5139ac511fe", "sighting_of_ref": "indicator--408afc3d-6512-4b00-898d-6ad40f29b41e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6018b3ad-0c80-49d9-8c7f-03509081a63e", "sighting_of_ref": "indicator--365f67ec-f427-4861-8322-f4b8a191626c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2aab3a4-1c8c-4174-aab1-c9d5c2551146", "sighting_of_ref": "indicator--2c8d0fd0-4df9-43d0-bf14-59628c2d76b6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2811ef48-427b-4d83-a0c7-3abb16fe3345", "sighting_of_ref": "indicator--f74d23a2-496a-481f-bf5a-323b389fa001", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fa2897f-8fdf-4451-9298-a9965596a1d0", "sighting_of_ref": "indicator--6f3d8ad1-27f4-4ee4-80ca-d86a3a1c0c02", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b69106a-bc95-4dd8-a86d-656119a03d24", "sighting_of_ref": "indicator--ce947c90-805f-4457-b190-eaf258cddf2a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69e42875-114a-4285-a251-5dc1dfbaa11e", "sighting_of_ref": "indicator--cef7daf2-1094-47c7-8edf-85b6baf7b149", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ed3c97b-6f6f-4dbf-aa01-193355f80a1c", "sighting_of_ref": "indicator--8a2050fa-5373-47c7-8e5d-c37c5520c8ed", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac1784b0-d7ea-4817-94dd-95fb87ddbb4a", "sighting_of_ref": "indicator--f39d3b37-3119-45c7-b7b5-2a41237932ca", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29368757-d99d-4a69-9ecc-e999b877d316", "sighting_of_ref": "indicator--a9558b38-ead3-44c2-8322-1a94b0ec3ec3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1d6382f-7255-47f3-84c6-1346ec244170", "sighting_of_ref": "indicator--2049fc13-805b-4eed-aa0c-34830aecd4e0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb723cd2-bbf3-497e-9342-7b69a853487a", "sighting_of_ref": "indicator--c0f01b49-57bc-496f-900c-1303fd1fd37d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4144d4e2-482c-4c23-802e-d79b898102d9", "sighting_of_ref": "indicator--7334e6ca-ee6b-4d2d-aa55-b4828b97404b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a403677-504c-46cf-b3a4-5eaba7f48bd3", "sighting_of_ref": "indicator--e45184c5-70fb-46c3-aac8-696f1e1d4c7c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18f68f0b-9727-4832-b43f-d8b10ad50f85", "sighting_of_ref": "indicator--e8033723-f0ea-4e47-ad58-a2bc7bddbd22", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--308e04e7-b6e6-4d06-8baf-3a1941387870", "sighting_of_ref": "indicator--3f515e3d-ee70-421d-ae16-7779571f9fa9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab910b99-9b53-4920-9194-a59dbeca30bf", "sighting_of_ref": "indicator--08a1bd55-daa7-4aa9-aff1-71f586aeccb9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2af6a9c-3ced-4c0f-a1d9-ce633613e308", "sighting_of_ref": "indicator--c305c2d0-d393-438a-af60-e4ea50059138", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8cb647d-0225-486b-a0c6-ca3a0aceb582", "sighting_of_ref": "indicator--ded3b134-0f97-46d6-b68d-0ba10565bd8f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b02c5417-4096-4b41-9711-325bcfc1d130", "sighting_of_ref": "indicator--ea1c894b-25c3-4a4b-b69e-734b0da6dd11", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86c456fd-0ab0-4d63-8419-bff652d01c4c", "sighting_of_ref": "indicator--9c9c8cfe-9cce-4df4-baec-db17f6c0d7b6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f16fd92-38d1-428a-a5a3-2e1424bcf44e", "sighting_of_ref": "indicator--ea6b5f03-ec1e-4bea-a2cc-f1e74833ea83", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f8663c4-82c2-4792-adb5-45ef78318853", "sighting_of_ref": "indicator--38eb58e1-65cb-437a-8e73-d6e2eb9a93e1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e528b9a-43f4-4400-8c6c-15ff4410043e", "sighting_of_ref": "indicator--b302e321-d92e-42c3-ae11-1edfcd10815c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd425117-2744-46a8-a3b0-73d1c2ee0ff3", "sighting_of_ref": "indicator--7d2f230d-471f-47b8-b32e-90cc52523edc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a40556e7-448e-4c25-b6c9-a7408ded2325", "sighting_of_ref": "indicator--e176b273-0558-485b-bf38-96520f3cb01b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c85ba0f5-6557-4add-94fb-280c08511811", "sighting_of_ref": "indicator--49837956-228d-46ab-a6dd-96e472dc3268", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfb5e815-4ef4-4772-be70-b743329d9831", "sighting_of_ref": "indicator--7fdafbea-7258-4800-b107-32cdb1295f44", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97aa8e73-ef34-4113-a88c-1024e91086d0", "sighting_of_ref": "indicator--002bc2bb-f8e2-4c6b-9f20-55842626e5fe", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d53c7c1-902f-406f-a2ac-94fb6270e267", "sighting_of_ref": "indicator--11332c09-0f81-429a-8b05-09ec23e05485", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a65d55c0-4155-4e3e-8100-edf5a6cc9069", "sighting_of_ref": "indicator--6a3b8aa5-06b9-40b1-913b-ae0686bb3b13", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d45de1dc-9bfb-446e-9e1e-b026219addc7", "sighting_of_ref": "indicator--dd687983-cd2c-4f78-a8c6-140ff3801a44", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e59b42f8-423b-48d7-a87a-f56929010273", "sighting_of_ref": "indicator--462f85a7-b69f-4ca7-95d7-4c046253a84d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1d57611-373a-4640-a8d0-d1be9e9c94d0", "sighting_of_ref": "indicator--a37553fc-6310-4439-b442-469372b12250", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f3429d5-235d-4072-9833-88498c08a2a9", "sighting_of_ref": "indicator--58bb9abe-8620-4c98-9a24-07b5f7b35cc4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19c32fb1-98d0-4330-a33a-a793ab135cab", "sighting_of_ref": "indicator--676b5808-986b-4d85-9856-97db59d91d9d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6c59dc0-cabb-4d71-851b-31a517d08ab5", "sighting_of_ref": "indicator--f16d62ee-abab-4307-bbc0-e6a163846135", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a253f320-7ca7-4b48-83b1-17eb36275237", "sighting_of_ref": "indicator--d813c93e-5c5a-4a4e-920a-3c285e1cecdb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d4a7f53-e7ca-416c-967f-399fa746295e", "sighting_of_ref": "indicator--7183da72-c0e1-4bd0-a329-f8d46d51171a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b1f4744-500b-46da-83de-ed69353cf2a2", "sighting_of_ref": "indicator--82eb781c-86e0-46cd-b10f-958ccbaa5aab", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af326dab-c769-4999-8d90-4a865d2da98a", "sighting_of_ref": "indicator--eb387d53-d8e3-438a-b2ec-9bd4fce929e2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07b31b51-f6a9-4612-9a28-d25ba4608be2", "sighting_of_ref": "indicator--b0832980-4f4f-4c42-a846-cd5a8e3b593c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cebc02dd-2818-4968-910e-7d719d154833", "sighting_of_ref": "indicator--242e9c63-de87-4a9b-a086-44e8badc3814", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ff5855f-2d6c-42fb-85dc-432b372a2aa7", "sighting_of_ref": "indicator--22868930-9285-43dc-b855-a689b32a15a7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c0d4b3c-5fe9-46a0-987e-ba86b965f775", "sighting_of_ref": "indicator--47680e97-d863-44c1-ba0b-18712324457c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--292366fb-596e-4841-a988-2ac7c84c9da1", "sighting_of_ref": "indicator--3ebd0a54-d8c5-455f-b583-d7d0b9dd7006", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9576ad6a-95d5-46c5-8644-27151d927a4a", "sighting_of_ref": "indicator--4a35b351-d73f-4a7c-b82a-0022d305f917", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cefd961-b9f6-48af-afa0-839b23446664", "sighting_of_ref": "indicator--6f201763-4855-433a-a088-ee2f777f2210", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2337f512-afdf-445c-a070-ce8e4bc1c60e", "sighting_of_ref": "indicator--dbc4a511-fd20-4539-a15f-80c0c117e8b1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26ee4842-7646-4c7a-8234-98ce370d9244", "sighting_of_ref": "indicator--ec7fbbf3-8450-4ed9-8e5f-80d8e4e96968", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4373997-e8a9-40de-ac13-261969a39747", "sighting_of_ref": "indicator--2b3522cb-92ae-4729-939a-1281c9350e6e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4f5c71a-80c8-4655-96c8-b2039c947f34", "sighting_of_ref": "indicator--a24a7dbb-c732-48a4-a444-a9fecd5b1e88", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79e13ec0-2003-4c38-b738-d382c0262b3d", "sighting_of_ref": "indicator--d7c4d27b-6b98-407f-9b4d-62f23371b60c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97d9f2ce-edc1-4604-aa68-4657dfeebaaf", "sighting_of_ref": "indicator--3551b8a7-d745-4fb5-9fcc-aa5096709199", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28ebe175-2b38-4731-a3e2-cf21242a7be0", "sighting_of_ref": "indicator--7f9b7415-c2a4-47a5-93fc-29f8a638d3c1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05e72fef-f906-4395-b380-f739fe7ae123", "sighting_of_ref": "indicator--bbdb5fd2-ec68-4999-acdb-50da4a75d3c6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54186940-cd43-4567-80d8-0c08a31e0b13", "sighting_of_ref": "indicator--ff8c8422-cb15-43ca-bdc9-ccb9edeebb79", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c2e9bed-4fcf-41c1-8f5b-692fc89ae00b", "sighting_of_ref": "indicator--707c7432-a30b-4a80-b35c-9683acf1607d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7599c27a-e0d2-4731-b93f-78e609cf6bd4", "sighting_of_ref": "indicator--b6c979f2-6afe-471f-b816-b9c6d7b75c34", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58d7d263-19df-480d-a1cd-add6588a7f0f", "sighting_of_ref": "indicator--d080a1df-526d-49b8-9bf9-34e384d13128", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ecffd6a-54d1-4ad5-a235-f900669c048b", "sighting_of_ref": "indicator--ee8ea6b5-710b-4aa5-9da4-5b3cee4df011", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--075ae0c0-0bfa-4d6c-b515-3647498f6bb1", "sighting_of_ref": "indicator--fca05a96-d1bf-4d1e-97f8-739115e7ee5a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--512eb682-5801-4bfd-a1f5-e83eeaf19235", "sighting_of_ref": "indicator--fc00ba5c-30f5-4837-aa18-c66e491e0d12", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85a26e6f-373a-4f5f-8783-ea6d87bb67a6", "sighting_of_ref": "indicator--66f539df-044e-4292-b056-8e8984f7c341", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b428b36-7c02-45af-9290-9a975b07a241", "sighting_of_ref": "indicator--f6d60069-974c-47c1-99f6-9e9531058bb3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--839a5e02-755f-4648-81e1-cada5148f1aa", "sighting_of_ref": "indicator--fe6650a2-7477-4537-8d0f-9cb03403f895", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33f910d9-8b06-459e-8265-8afd92ced344", "sighting_of_ref": "indicator--f2053fa3-0f97-4b63-8ac1-f479ed1f125b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--115d9764-994d-41c2-9098-34af0722db0c", "sighting_of_ref": "indicator--44681d71-96eb-416c-bdb9-95956787c2b1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d032002e-6b50-4d1c-bd09-11b3bd426a8f", "sighting_of_ref": "indicator--59098a70-addf-492b-ac9c-ac73b6d6db08", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7e43db2-c527-4643-a908-ba67df6c9f15", "sighting_of_ref": "indicator--e4cd88c4-7d78-40b4-a30d-39750b8abbaf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05f5a4a4-b4a3-4491-924d-c825ddd32ed6", "sighting_of_ref": "indicator--6c8a3d79-3695-438e-8125-a007c8aab34d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c946e0b-1a8d-4b85-a9c1-d1d65021ab20", "sighting_of_ref": "indicator--750f4fd7-d24a-4c61-ac24-eda580264ce3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a87bac78-2783-4d03-8956-eea34ed537d1", "sighting_of_ref": "indicator--d8d98b12-beb7-4dd1-b9f9-f3b9fa2eebc8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3e324fe-2788-44fe-a539-8af42bc2108e", "sighting_of_ref": "indicator--398164de-44d4-45b4-be64-3622815d16ea", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--201d9de6-9f22-4037-89e3-d603b99478ee", "sighting_of_ref": "indicator--d876fd12-e083-476b-9779-aed4206a0faf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de922ef3-4c21-4a16-a25a-e3685f6c6705", "sighting_of_ref": "indicator--cb7a679f-0a09-4412-92b0-2e268591d318", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ac4073b-e0ba-4b76-a699-c22ebf643014", "sighting_of_ref": "indicator--9605b8ac-463d-4069-9edd-981e57a9c770", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ee3decb-af22-46e2-bc4d-ec89670381fe", "sighting_of_ref": "indicator--927be2c3-20c3-4f72-8330-17aade97be94", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73fd72ae-8d6d-4e15-91ce-53b4a134befc", "sighting_of_ref": "indicator--f30b4fe7-4ca9-4912-9183-6d8521e4ec2b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a6cc3fe-9ef1-41cf-8f83-84de220bd003", "sighting_of_ref": "indicator--a7acbb32-c9a0-4b31-b1c2-55f18af83c36", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff889f38-e6fc-404b-a6ea-4e7636b00cb2", "sighting_of_ref": "indicator--f9f91383-60a2-4917-9d80-b3e0657314e9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8db9102a-7672-47a8-bb3e-73692e23b201", "sighting_of_ref": "indicator--0445b2ff-730c-4dd3-a94c-1725df087389", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc05a21d-f8c1-4569-872a-9ca05c7c476c", "sighting_of_ref": "indicator--adf1031e-af63-4e43-b2bb-49034ad5f4ad", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--320fcbe1-6edb-4422-979e-9bd97a318560", "sighting_of_ref": "indicator--7bde0adf-9912-41d5-bd8d-694282fce5b9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89768afe-cf54-470a-9859-ae49ee6251a2", "sighting_of_ref": "indicator--6f092e92-2c30-4491-8df6-d98aaf02f01b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b98df5c7-edb5-44cf-b57a-bb8bf562551e", "sighting_of_ref": "indicator--ddc56d2e-15da-4008-bbab-53abebbe712a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eeeb469-a104-4dc6-8760-3a72f8e3ba4d", "sighting_of_ref": "indicator--6dae6280-ba83-42f6-aa2a-a4404452b41c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--945019d4-ebe3-4a8c-a3de-84cc7e20df85", "sighting_of_ref": "indicator--918372e3-a1e4-4a11-a3b9-e3a93d30c5a2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cecb949-0153-4e0a-9a7f-034c29453d84", "sighting_of_ref": "indicator--3ff01f9c-cd38-4116-a86f-52a8dbf3176f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50c4452a-ec33-4992-9513-572d7c3ab7b1", "sighting_of_ref": "indicator--2727f60c-6a94-43a2-bbea-af02bb5be8ed", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd481da3-cb93-45ee-93ba-f9d60e9c8c7c", "sighting_of_ref": "indicator--e9b14e58-d964-4f49-8ba6-5fc68390a9a5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ce31fed-3986-4ed8-b198-dec52d626582", "sighting_of_ref": "indicator--0ab3a319-c6c6-4d8d-b21a-2152ad378db0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1be9a8d3-26b0-4d56-b125-87495deca6d3", "sighting_of_ref": "indicator--0888b9c5-dd1f-451c-b917-4550022b3d96", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--362b7f01-ce11-4fc5-a883-985c987c84db", "sighting_of_ref": "indicator--65a4c9c2-f8e9-44ff-ab3e-0bb21815f5e9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c51e20c-15cf-48de-8509-206c5759b832", "sighting_of_ref": "indicator--c645e626-d0f6-4001-a64d-c4893e028fef", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dc71c73-738c-463c-b386-89c733801c68", "sighting_of_ref": "indicator--727674a1-a627-4466-a92a-777b4ae59473", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3553e5c2-7fb6-4312-a77b-e60ecb98ed13", "sighting_of_ref": "indicator--2c564b38-929c-42a0-a51c-197d861f3a24", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2e394f6-ec4c-4b14-8b7d-fd3fc03ab3b1", "sighting_of_ref": "indicator--40e58887-3269-4290-942b-845dc8b507ae", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--088dada2-cf55-4427-8802-d5b7a9410d19", "sighting_of_ref": "indicator--49e8a4c0-efc7-4905-a90b-2c197b2a3559", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1e60510-1f8a-403c-b5de-6a19656ec814", "sighting_of_ref": "indicator--ffd6e49e-b27a-45d1-89d8-e9bd57993e8c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--132025d6-90f9-48f2-bd15-3c561f72e1bd", "sighting_of_ref": "indicator--8b6ed787-9f8e-4e64-8f7f-24d4fc2b624c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b690a1f-3c3d-4a7f-809b-fffa21e46761", "sighting_of_ref": "indicator--43985d45-829b-4f78-b870-7f583b5f7445", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1da4cc64-dc19-4222-8da6-02773c31f26f", "sighting_of_ref": "indicator--92c1266d-81f5-418b-a3ec-9f570c984855", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13b364c6-662c-4611-99d7-b598fe401b02", "sighting_of_ref": "indicator--a7e96ef0-c58f-4403-87ae-f912534587d1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f55c16e-00a7-4ac2-ad18-55986d235846", "sighting_of_ref": "indicator--a31f65b2-9cab-4a21-a2e0-0a2da10a1cdf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffb1c74c-e487-47ab-8e81-049ba4286698", "sighting_of_ref": "indicator--ac723836-18c6-4b5f-a917-ba796b078bcb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f2bc4b4-49f1-4589-9d8b-ae06aebe1bb2", "sighting_of_ref": "indicator--34efc5d0-be72-44a0-a3e6-80e691f4568f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2e12ae5-b0be-41ec-92d0-50e457b62f3b", "sighting_of_ref": "indicator--42b7ff45-49d5-454c-90a7-ca4b6e203b3e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a2e2003-b36c-4bcd-9193-b1a21da31d6e", "sighting_of_ref": "indicator--e8a4ce7c-1d68-45dd-a056-29824d9216b7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--388248ac-f4d0-4ba4-b05e-4331299fb400", "sighting_of_ref": "indicator--f839ad30-d7fb-4950-83a0-b2749362c569", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c29a62e-8f23-402e-813a-d17efdc21cb5", "sighting_of_ref": "indicator--de7126f4-fe45-49aa-8c09-a22bc7bab0a1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69c6cb31-b3cd-4d3c-83cd-9b6a367bb9c9", "sighting_of_ref": "indicator--4a508e12-a1aa-4a32-8107-a9c27fe3446d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--320accd3-77cc-40b0-b401-faae633c2f46", "sighting_of_ref": "indicator--5541b92d-bb35-4faa-87a6-56da1808dc6b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--947c1118-1ab1-4c2a-8cd8-9379b791a6bd", "sighting_of_ref": "indicator--676e4531-3740-403d-846f-e09225830666", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc41b2aa-feec-4857-9561-10d304ff6d5f", "sighting_of_ref": "indicator--50633c90-6783-49a2-bd58-7ad953f9aec1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a21365dc-2f51-4478-83bb-a3d1b801d7ea", "sighting_of_ref": "indicator--0c4ee50e-a9be-4e45-8b9a-d2201f421e86", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebe34fab-4bf3-4676-95a4-77ff00aa3dd4", "sighting_of_ref": "indicator--eda6bfc9-ed01-4524-8d9d-43cc3fb1d96c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--292d939d-2111-4b2b-9585-03dc8c5515de", "sighting_of_ref": "indicator--da6f5336-c919-40bf-9bbf-2fd368fb590e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4612f243-0eca-4c69-b988-1b9a677019a7", "sighting_of_ref": "indicator--f35b585b-45c0-4ad7-ba00-99d3ac5897c8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2eb92459-819f-4533-9e2e-fe9041db4c12", "sighting_of_ref": "indicator--6b4ca6b2-ca10-4fec-bd18-694ff0cc333c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6789c01c-e4b7-4688-b57f-7ec7b9359b0a", "sighting_of_ref": "indicator--c4227111-9e74-4a29-ba5d-8e43bc221795", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91d637fa-6302-4aab-9ed7-72ce1c6c95a9", "sighting_of_ref": "indicator--1e6b971c-0fb6-42db-88fa-436d08718ae1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f6abb67-3e37-44cc-ac77-ef640cb88437", "sighting_of_ref": "indicator--ff9f8e7d-01ef-4936-bc58-c709d967f8d7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9026bb3a-2a38-4b84-a978-b3f950973b59", "sighting_of_ref": "indicator--1d0af783-5070-4d73-9bb6-08e15b317255", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df04ad69-ccc4-4157-a56d-a8afcc0fe801", "sighting_of_ref": "indicator--0d5e5601-542c-440e-90a2-ed2b6223f7d0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3880cdd7-55c1-4de0-bc3a-26ff490f59e5", "sighting_of_ref": "indicator--bd9add92-1be5-4769-9bbf-ffacaae15322", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--148400f0-4bee-409e-b3d9-f1efc25f3b81", "sighting_of_ref": "indicator--abb10c8d-cefc-4d8d-834a-af2a51f49287", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baf64ed9-c1b5-45b5-8498-bf294d08cae0", "sighting_of_ref": "indicator--2f12c40b-4849-432a-8ce7-598b4a62d615", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7fa4d57-8d91-4efd-97c9-6b53068c7661", "sighting_of_ref": "indicator--70cf54c0-35a9-4e69-80ee-22caaaa3bf5a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d948e218-1d26-4846-a1c2-505c08cc3cae", "sighting_of_ref": "indicator--53284660-5b24-4ed9-9197-27880797ca25", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5091a7e4-9ea1-4d92-abaa-3bd60d58e2fa", "sighting_of_ref": "indicator--ec10881c-97ca-4610-a4db-3200494a0dbf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa88f1dd-d0da-4493-b420-9ee5bcc2fb93", "sighting_of_ref": "indicator--a4ee5952-b89a-405d-93eb-7693dc604a4b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3c04e89-769b-4d28-b1f1-285a9efb6fe3", "sighting_of_ref": "indicator--76ef84bf-609d-4494-82b2-a8c38b9289be", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27508fa3-ab5f-4c7c-b575-bda5a51bffe0", "sighting_of_ref": "indicator--88424fe4-80d1-4ed4-96a9-e033f1e8e9d2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e672e98f-9c80-4e52-ac6b-a4d9395c3f9b", "sighting_of_ref": "indicator--5cf0f90d-aaf2-48e9-80ae-8dc246a3064a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f242d2c5-b1c6-4b69-88c0-263ab46edd07", "sighting_of_ref": "indicator--934c5807-ee4d-40d8-a179-71bdc5af488c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c63e302b-054b-4fad-9bc2-6bd2e4751c43", "sighting_of_ref": "indicator--a335d3f0-8897-43b5-8d94-2f27248eab50", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--119270c6-1d89-431a-9e26-0db249152f6b", "sighting_of_ref": "indicator--5877c841-8d8d-41ca-8d8e-3f2d0afea5f0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c07234ff-e7ac-41bc-b0de-31c334600eb1", "sighting_of_ref": "indicator--7368cf35-4067-4e38-8b58-41f920e8cf98", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bc7d956-77fa-4f92-8304-579ce6eb085e", "sighting_of_ref": "indicator--d1f15299-67cf-4b48-970f-cf8f44749c92", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8e1e93c-98e5-403f-ba03-88be58dadcf2", "sighting_of_ref": "indicator--01d7a5db-c834-460c-a67a-5e4d1cc5af2a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67cb81d8-25e8-4eea-85ad-3a244c8d6c50", "sighting_of_ref": "indicator--1fb50c3f-6ec0-4e44-862a-39238f6d7e30", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da4f6b30-13b6-468e-bc72-660736565759", "sighting_of_ref": "indicator--820d4ce6-ef41-4ba9-94c2-49d67a12911c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90fff123-6949-453d-8d3f-7b513d647705", "sighting_of_ref": "indicator--4c237eca-0a8e-417b-8a47-0ed5ef05d659", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--127097df-7c2f-497f-8ebd-eae7fc0f9c9b", "sighting_of_ref": "indicator--506bf82c-ecd6-4955-9e2d-93e9884e7a2e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8332004-d2b8-400b-8f48-c5192a085d2f", "sighting_of_ref": "indicator--8cd1f2e2-4b03-47cb-b278-7e720c0b7b9a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93ac41f2-9396-4124-b42a-651dda767e91", "sighting_of_ref": "indicator--27ef2532-a015-402d-95fb-6f3fae0d77e1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d3a0d13-059d-479c-b2db-f55dfb8c6221", "sighting_of_ref": "indicator--072e3dbb-b782-4502-97f1-421cd8b8eca5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--374dcc20-f5f8-4ebd-a6c2-a7634339d723", "sighting_of_ref": "indicator--0c67e5a3-b2e4-4cdc-9229-79d8d2f88b56", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84b91451-ef87-4cd8-8552-745c23d0a93d", "sighting_of_ref": "indicator--cf30e6c4-8a41-4cc5-a206-853a73eb0b35", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fcd5bfb-bfae-43dd-8b41-b145ebf0bc72", "sighting_of_ref": "indicator--059fca75-48cb-44ed-84cc-499ffd804417", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35e42c38-5bf8-4e38-846d-907af4edc00d", "sighting_of_ref": "indicator--ecb622c3-1932-4f1f-b09f-fe877f73154a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54469110-5608-4839-ab1a-dec7032eae6e", "sighting_of_ref": "indicator--064502d9-c096-4405-a010-ec1e302b6c10", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4fdd8d3-a31b-4176-bb02-807115117e67", "sighting_of_ref": "indicator--8c7013fa-8e0c-43e3-899e-0ff8b508a283", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--648484e1-aafa-4e74-9ce5-858d019ec653", "sighting_of_ref": "indicator--65ec203d-a4bd-4818-b46b-bfd9b3ccfc1a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9b0a744-2e75-4294-bb6f-9517bfafd43c", "sighting_of_ref": "indicator--d6f1c5da-c0e4-4813-bb7d-107e62c1af44", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b756553d-e18a-468e-ba46-1130915e0545", "sighting_of_ref": "indicator--ce08f6e7-7d56-4af3-9ac4-4a087b55968b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a6f4edf-70cd-4941-b5ea-c67151b0d7ff", "sighting_of_ref": "indicator--832914db-a4f4-4a5f-a138-f4909996d512", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cce78e32-91d2-4333-85ae-d171da93050c", "sighting_of_ref": "indicator--a5071ca4-58a7-46f7-b50d-7a2e4e26b5f9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0079d2a0-2430-4b10-b197-0899c12c5530", "sighting_of_ref": "indicator--3df8bfda-4f7b-40c0-81a0-b6ba87a27dbf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96b83417-34a5-49af-98ff-c9c6f488a662", "sighting_of_ref": "indicator--e691e3c3-5723-4baa-bd89-93a343814820", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f9f0d6b-95ca-4eef-a82c-76284c174fa8", "sighting_of_ref": "indicator--03d65f32-9062-4cf4-8fa9-58280385dd22", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11527a22-fe67-49c6-bb9c-68a7a6e9e24d", "sighting_of_ref": "indicator--e54867c5-0148-422b-aebc-7f9e93d2e2cc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b24bb98-9983-4a9d-9c32-80eb80430405", "sighting_of_ref": "indicator--0e8eecf5-0fca-452c-bf17-eec309c02c6c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94a20804-ea17-433a-8c01-653d70cfa26d", "sighting_of_ref": "indicator--da4d52b7-c8c9-4274-98cf-151dd13ac995", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32877fe3-0081-4e56-85f4-1edb0982bf3f", "sighting_of_ref": "indicator--2819fcae-6a96-4f1e-b999-f615e6485779", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a1d477e-59a5-417e-9136-cfcfc306fb27", "sighting_of_ref": "indicator--ea0f1e0c-bff2-4c07-ac79-551706861c81", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--351de0f3-8747-41ea-934d-fcaf642278dc", "sighting_of_ref": "indicator--15545494-38d1-4686-82f6-1bf6792eaa2b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77a83e5d-adba-4b3f-813a-0599290e0f2b", "sighting_of_ref": "indicator--7e950811-b2cd-4266-8260-ff2b692f3d88", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b99a1dd-b311-4d8c-9131-640c65c39cea", "sighting_of_ref": "indicator--da87c2b0-1726-4cba-9630-e5c071e20c22", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c3f35f8-8f15-422f-a8f5-a26c694a1f19", "sighting_of_ref": "indicator--4e8bcf1e-f8a4-4f64-b7ee-9b7b2c106deb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd784f20-5640-4a44-b495-09a6b0841171", "sighting_of_ref": "indicator--0ae1cd5b-6217-43a7-b5d8-a3d2fb14be41", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83135419-ce01-4437-ac62-772d8c3738d1", "sighting_of_ref": "indicator--c9a7512b-3a2a-46ab-aa5f-86c37afc01c9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5eb4057-6f2d-4a68-a244-3137ca9e0aad", "sighting_of_ref": "indicator--c6a87b00-49b8-4a51-ae8b-e4d9e915d900", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfb10423-ccdd-493f-8360-67a3363e5bbd", "sighting_of_ref": "indicator--71683bfa-e00b-4988-b5ca-5daefa560291", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9275cc84-8b6f-4a18-83d4-07e5670d31bf", "sighting_of_ref": "indicator--e9adf551-53b3-4774-9e9e-ba8443fe404a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--848f5699-6f77-4cef-961e-71fe45f74ab0", "sighting_of_ref": "indicator--0e68c61d-fd7f-4749-bb4c-d0fc408a8a26", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--603adb91-352c-4e10-9f85-297affe731ad", "sighting_of_ref": "indicator--23e5b725-5be4-4820-9fca-5ba75356a38b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7232604d-4f2a-4c2e-bf27-73a120605893", "sighting_of_ref": "indicator--71de27c2-dad0-40c5-b0c8-fb352aebc1e8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d5736c3-96d1-402c-9f56-ba10ae3985ad", "sighting_of_ref": "indicator--155aaad5-fd63-42ec-8b2f-3a1bf571e598", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ac99b67-24dd-491c-9d29-99d78a857c29", "sighting_of_ref": "indicator--fed583d7-65a4-49ae-9ac6-51bb6e1f5ead", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab8f5330-cdec-4e1d-9077-28f219ba22d3", "sighting_of_ref": "indicator--94643ba9-1ca1-490d-884f-b14ace2ef2de", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90b496d6-150a-4a5b-8be7-98a181e2ea1c", "sighting_of_ref": "indicator--117cf6fd-13d0-4251-bdd1-9e8f499c4601", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02046897-3078-4f1f-a4d6-223f1ac46da4", "sighting_of_ref": "indicator--fb29f656-a448-434c-a56f-639a81b605d5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf8220fc-2527-4fa3-860d-4e3b48ae6567", "sighting_of_ref": "indicator--0a0c97cd-e441-46b9-9cd6-8c697d689378", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5144bf22-0510-440c-af88-406571793b18", "sighting_of_ref": "indicator--ef3eede4-138e-480e-9157-56d9eca1f190", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be602b81-fef6-4e14-85cf-28cd4055c3f9", "sighting_of_ref": "indicator--1d393430-044b-47b3-b7fa-8c40f95e601a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ab8b208-e274-4f18-a60b-f151e5bcc25a", "sighting_of_ref": "indicator--8a2c9ebb-1e87-40a6-af98-14c70a6c1846", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f491fd2a-0524-42b5-8f9d-a736b2ae1a67", "sighting_of_ref": "indicator--bcf45c37-9bb8-48b8-8e0e-c492c946f433", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--173d282e-1c21-4cd0-a53b-9b112c1d7054", "sighting_of_ref": "indicator--ee43942e-ac14-44e0-a499-3485e3444aaa", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1142f96-9099-44f2-8f5f-d1200cd0a80c", "sighting_of_ref": "indicator--c3093b43-e2f4-49e5-a10f-7b33b6f3bf9b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f6b178f-0aa6-45ad-a90f-eb6260a415ad", "sighting_of_ref": "indicator--a783ee47-9add-4921-ae34-0b893f33e632", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fb116c5-3637-46c1-b97e-6dffc0e29e38", "sighting_of_ref": "indicator--530d1835-39e2-4854-b03e-92f58b69e43b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e820cab-f6a0-424d-bbdb-2fa83a398177", "sighting_of_ref": "indicator--bc81740f-8cb8-47b6-a2c4-d47cdf8e0843", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af6f8d15-454c-4edc-847d-c01ba8fb9017", "sighting_of_ref": "indicator--5d14b273-0b41-42b5-9722-aa9eabd3b59b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92522ae6-de37-4a38-b8de-5337ec3ed375", "sighting_of_ref": "indicator--9fb1624f-1ada-4bc3-8642-c10062eba863", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6b9099f-843d-4aef-8885-3590ff4513f9", "sighting_of_ref": "indicator--9fb1624f-1ada-4bc3-8642-c10062eba863", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5afff282-6c6f-4548-b9c8-9acded9c8300", "sighting_of_ref": "indicator--d4e12ea0-29e4-4f6c-ad69-4e8ed4384500", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2522ad6a-5ac4-4b86-b94c-9c25657c6432", "sighting_of_ref": "indicator--2f33fe7b-cd4d-4b61-9d26-8756056c6dad", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--274e8cde-56ea-4d9b-b7c3-96b3751c9877", "sighting_of_ref": "indicator--a4e44423-9ea7-4e67-8f88-9ead7f4aabad", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3ae00d7-9425-4e1f-81fa-eae1356a1876", "sighting_of_ref": "indicator--08a3dda8-8497-4453-9352-eb18a3ecaa8b", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd1316ab-109b-40eb-84e3-a52e27ec3df5", "sighting_of_ref": "indicator--e5081fd8-1388-4c23-8459-a7f908bf8460", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57f7367c-01d5-4ee7-a7b4-257c3e523df8", "sighting_of_ref": "indicator--acb090b4-b2b3-42d8-8886-de0f0b2bd5aa", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2561dec6-80ba-46f6-8479-ff1dc06afeb2", "sighting_of_ref": "indicator--d770fea5-0e65-4fcf-9efd-54a5d6af0e3f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd5d6cfd-09b9-44d3-8242-9d9a66fbd25d", "sighting_of_ref": "indicator--07757988-f5e5-49b1-8a0f-17fe206dec4f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b10a4522-7dd4-48a4-aa67-328eb1db12ce", "sighting_of_ref": "indicator--bc44797b-5de1-49ad-8374-6544e4637bb2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1251c0f8-ba6a-4854-a619-ba0b89424529", "sighting_of_ref": "indicator--9115f9c6-4b09-4380-8c28-211060d30ebe", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d6879a3-38ff-45e0-97a4-c44ba8506ca0", "sighting_of_ref": "indicator--36baf879-af50-4502-938b-1f6cc9f7d429", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef6d0656-4df0-40ed-98d0-057e4383e4c2", "sighting_of_ref": "indicator--0ef363e5-e664-4fea-99eb-29da75fcda79", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d619e83-0451-4407-aa4c-8f37255f59f4", "sighting_of_ref": "indicator--62a316c3-cfed-4349-975d-622f28305570", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b19dcde-1f90-4afd-8c03-776958d42d1d", "sighting_of_ref": "indicator--f6d78263-b0d4-4d77-a90a-2f10d60a4acf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edbe7b95-ef4c-482c-a8d0-7e89c67c7dfb", "sighting_of_ref": "indicator--bf4b427a-d606-47a1-a303-b1498bf1718a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c6aa593-5c1c-41f1-b5b4-a5860cc9f1e4", "sighting_of_ref": "indicator--ec6f6d0c-d893-4fd5-9631-9a99984fd0fd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ac6a093-af6d-44d4-8bc4-f39be2278b40", "sighting_of_ref": "indicator--ee668720-b503-45af-98c4-33c8eb6742dc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ef9e2cb-9664-4276-81b3-8bb07a5f7789", "sighting_of_ref": "indicator--5cf05a7b-b3c5-4d3f-b5d7-22bddc3b3061", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c59d0d5-1596-4111-acd6-f9c27219322f", "sighting_of_ref": "indicator--a5f8805f-830f-40f4-aa45-6be626ccb2de", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60eb2dfa-0f7c-4c52-8f5d-acf443728cd2", "sighting_of_ref": "indicator--88f81a65-c603-4b60-ac00-3595a7eb436b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0c529f1-a87b-4a14-874f-6e18d818064f", "sighting_of_ref": "indicator--88f81a65-c603-4b60-ac00-3595a7eb436b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d73e12c7-1e5d-4691-b22e-cb7d7c55079f", "sighting_of_ref": "indicator--78370a3d-a382-4604-9a4e-5cb053c0e450", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07a9c6e8-7847-4b55-885b-5b7040dea87c", "sighting_of_ref": "indicator--307d3132-d1e2-4349-bfe9-127c6278aee4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--480eb76c-6c43-47df-a8aa-85b1d036c358", "sighting_of_ref": "indicator--b633fc3c-c170-4e8f-83bd-b9730058c3f7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--142d2909-6e81-47dc-9a30-ca14f5476a77", "sighting_of_ref": "indicator--046472d9-fb39-49f5-b4bd-126f5f1fa36c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fd9ddf5-0850-48ad-97ab-e336474557d9", "sighting_of_ref": "indicator--086959c6-5f7e-422e-bc4f-cccc0fb5cd3f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55c3069e-ab9e-4b10-b2db-17cbd7ba559f", "sighting_of_ref": "indicator--086959c6-5f7e-422e-bc4f-cccc0fb5cd3f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3a6b9b7-89b4-4f8b-9cb6-f8d0b7927969", "sighting_of_ref": "indicator--c79988f3-49ee-4cee-8025-2cf242606619", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--370d94e4-41d5-43af-8726-6b82fa9f29df", "sighting_of_ref": "indicator--c40a441b-d864-43ae-8d04-cf094ee8b7e5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa55faa4-5a04-4883-971a-84a24d4cb0f5", "sighting_of_ref": "indicator--1893e85c-34a8-4562-bccd-ea422dc07885", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0875e17f-f00a-4130-b429-ec56a6a752dc", "sighting_of_ref": "indicator--3f03158c-f3f5-4e61-b5f2-af16412bf0fb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b681b78-c3f5-44e4-8b81-196ef880cf6e", "sighting_of_ref": "indicator--34d80216-3fe9-4075-9f61-07a139e1401b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68648154-26f2-49dc-8cdb-dcab617fff27", "sighting_of_ref": "indicator--43b61439-50a0-4865-bda1-112729761a20", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8ca6d3e-73ad-4ee5-9fa8-cfb7394a707d", "sighting_of_ref": "indicator--7c67ff6e-6e5e-4c93-a8ed-1c7cacfc240c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ae6493f-010f-40fe-be17-dd5454293dca", "sighting_of_ref": "indicator--3149aa93-7b0c-4cb1-830f-10566b05e7b6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07b0c368-856c-45fd-9664-8a79238cd753", "sighting_of_ref": "indicator--3149aa93-7b0c-4cb1-830f-10566b05e7b6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c259557-58f8-4f4f-9438-c81c36e56935", "sighting_of_ref": "indicator--f984aa00-31c1-4055-97bb-477dad6a7cd0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8a51791-548b-4d50-973a-5acf6b09d73a", "sighting_of_ref": "indicator--fd4581bf-55a6-4791-955a-67be03a447ad", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f35ef7da-db59-474b-ad14-362170c48aa1", "sighting_of_ref": "indicator--fd4581bf-55a6-4791-955a-67be03a447ad", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abf7d87b-bb3a-4a4d-8e0b-bd99ee355a14", "sighting_of_ref": "indicator--53c6e9a2-b0c1-46a0-b443-3c123204c717", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e23d5888-0b02-43aa-a102-fe93c25a4d40", "sighting_of_ref": "indicator--53c6e9a2-b0c1-46a0-b443-3c123204c717", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--804c8594-9155-4d54-b902-cab38548c365", "sighting_of_ref": "indicator--b77ad6d9-4d7b-4f0a-8cf5-d2042599a39c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95556fbf-2623-4a05-b836-273cbaba5bba", "sighting_of_ref": "indicator--6a9faf82-d8a5-4e61-92dd-5d384feac3d3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f36acffe-ea82-4bd8-948e-f73f8a080afd", "sighting_of_ref": "indicator--f173929f-6d8a-4311-ab28-9edb5dc55a44", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01e903e2-ee32-40b5-9cff-7a48dcd8838a", "sighting_of_ref": "indicator--4c4624a6-623e-46b4-b238-fdf8a5b86dae", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b304734-6f16-45ee-b512-bf46145e781c", "sighting_of_ref": "indicator--18b432f1-9a97-44de-b986-ef5de009fab7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33c6bbf2-3949-40b1-9646-124d6ca104e4", "sighting_of_ref": "indicator--fd37a7c3-6c71-4142-9518-10adfe01e224", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b850e3a-e3f6-49ac-9c2b-2f1ebb1b0d80", "sighting_of_ref": "indicator--2d064a57-fe92-42d9-81a5-055158f97427", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbae67b5-9b6f-4369-9962-73f9d00889c5", "sighting_of_ref": "indicator--8c347885-3cff-4b80-bdc6-1e46dbd5dd39", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b956c4d0-6b1b-4f45-8db0-bd16f2a734f9", "sighting_of_ref": "indicator--4c253b31-eabb-4108-8b9d-8bb7bcf94b98", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87311577-a4c2-4f81-ad27-22c6114a346a", "sighting_of_ref": "indicator--f1fd7b71-d8d4-4561-9422-68f6ff59db5e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--167b8811-1f81-4aa5-974e-44137f6e9c08", "sighting_of_ref": "indicator--92f8f9e3-b123-4d89-81d4-ffdd4bc9cd7f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d462796-8dea-47de-9030-7cb575a2c8d9", "sighting_of_ref": "indicator--3596cd3d-9538-407e-8dd4-1bb7c5dc37d6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6530872-a74f-4d90-8ea1-64ffb65d715c", "sighting_of_ref": "indicator--f2c81cdb-818d-4095-b6bd-12a8b862ae60", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--441f94d7-deda-49a0-b030-539d985e98fe", "sighting_of_ref": "indicator--5232b56a-2eec-41f8-b0c3-78a983960751", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cceb469-f421-47c3-be47-16c24d582472", "sighting_of_ref": "indicator--71c9baf6-92b1-42d2-aedd-1baf58262dba", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c6e040c-8b78-4aa6-96a0-2dbc63ec2cdc", "sighting_of_ref": "indicator--71c9baf6-92b1-42d2-aedd-1baf58262dba", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef840d83-f4b3-4f30-afff-a20bfb3adf17", "sighting_of_ref": "indicator--ee0eddd8-58b1-4491-9a75-7a74e3f31c17", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0707e620-937f-493f-bdec-38a5d838712b", "sighting_of_ref": "indicator--c9c9b1af-79d4-41bb-b240-41ebd4fc15b4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--477423fe-cd58-456f-925a-88b4965fa417", "sighting_of_ref": "indicator--c9c9b1af-79d4-41bb-b240-41ebd4fc15b4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d344a1d9-aed9-40b6-8fc3-5a4660ccf637", "sighting_of_ref": "indicator--1602994c-784b-458a-b0b3-717e884251df", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcefc516-fbce-4d0c-83ec-3b97eb44c94d", "sighting_of_ref": "indicator--840d441d-db2c-4bf5-bc03-c814d1622ebb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25418a08-8693-4f93-8f17-b226102f00dd", "sighting_of_ref": "indicator--840d441d-db2c-4bf5-bc03-c814d1622ebb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d962412-2c2f-4f40-9b88-46c37a5dc0ad", "sighting_of_ref": "indicator--023abdf9-ff1d-49d2-b808-c579ee281824", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4551d32a-8359-4c7e-adfc-03a0ed85d179", "sighting_of_ref": "indicator--f8683c5a-00cd-4efa-ada7-263ce370324b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63c75232-3113-40e5-8ec5-f92403b4cfca", "sighting_of_ref": "indicator--c2c4bd8d-01d4-4d37-916a-adb05b3f2280", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc267d84-be30-40e9-bd65-9dcf36bbc877", "sighting_of_ref": "indicator--a349f89a-ce57-400a-8cd3-6ba1cf146b13", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7bf7cad-42e2-4b82-b6b2-91dfa8f963ca", "sighting_of_ref": "indicator--142abbe0-708c-48cb-ae1a-50de8e0f9806", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--860cbb05-8490-4462-b0d4-a3149e55fcb5", "sighting_of_ref": "indicator--24607cdd-4ca1-48f8-a6cb-5c16e76ec97a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd0d8bad-e4bb-4d33-b5d1-290d1b5cf616", "sighting_of_ref": "indicator--8ba2cae1-f71a-4646-9fe0-1bfcf70f10ae", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aff313e9-f81f-407b-9c84-254c4d8c65b3", "sighting_of_ref": "indicator--c56b6ca4-280b-4fd9-a994-43a76a0a1807", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce5f6433-8a35-41a2-8a26-ae1640e885a2", "sighting_of_ref": "indicator--d9a89a0a-a95e-4db8-bb34-b45ff1a3e9d1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--437a1069-0a85-4116-8822-ee21e065356b", "sighting_of_ref": "indicator--0b61d9b7-652e-424b-ab28-9b53df993da5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--905371e2-2a60-4ad2-ab45-0a86c0a03cbb", "sighting_of_ref": "indicator--e9b10b15-b77c-4456-b0f7-354038501580", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be354702-03bb-41ec-baff-ee51b8c1e6f8", "sighting_of_ref": "indicator--e9b10b15-b77c-4456-b0f7-354038501580", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc9591f2-2736-4cc6-a296-3fa31ad1c828", "sighting_of_ref": "indicator--9c36f2b3-a143-4ad0-a4b4-55661c0d150d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa6d69d3-be79-46b4-9ce5-c1f08c4335ca", "sighting_of_ref": "indicator--c9f800ef-e47c-425f-86c9-18047b385902", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0757d412-7bb3-40d5-b1a8-d0aa8f4b28df", "sighting_of_ref": "indicator--0ceca47b-9b0f-44bd-acc7-dd3a22f9e459", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c18a5b00-66a6-4171-bce3-aa4d25b9a136", "sighting_of_ref": "indicator--54584eba-eb11-4bb0-b7c5-345f53b8c724", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61afbb6f-ec50-4d47-8f46-a311a9690d15", "sighting_of_ref": "indicator--54584eba-eb11-4bb0-b7c5-345f53b8c724", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c25d5c9e-88b7-46a2-8ba3-70da096aa181", "sighting_of_ref": "indicator--ebeffead-2084-401c-863a-bf877483c10f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--561f819d-eb60-4b1a-ba92-192d7097d63b", "sighting_of_ref": "indicator--3d244833-4a37-403d-9eb7-80972eec207b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3493c0d-277c-43a5-ae71-08a41456b205", "sighting_of_ref": "indicator--42c208b7-60c4-4be4-8b0c-5a39ca78d2b1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05a61072-891c-43d2-86dc-534053b3a29b", "sighting_of_ref": "indicator--42c208b7-60c4-4be4-8b0c-5a39ca78d2b1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23095ab3-1253-4344-b6f5-62c5747b5c5b", "sighting_of_ref": "indicator--45f367af-7e49-4232-83f8-56dd959d5640", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--422fa0f5-3f04-484a-b39c-57c70168aa32", "sighting_of_ref": "indicator--576bcccf-ce46-4c4b-be8a-9c0f11d4eb6f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47dccbc5-778d-42ca-b69b-45d5e697e657", "sighting_of_ref": "indicator--32a431c1-812c-4c04-a57e-93f91c1edeea", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7021e91d-b21a-404d-8756-8fd334a51869", "sighting_of_ref": "indicator--e1a72ae7-f708-4afb-ab31-c779c1821246", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58a1aea9-14f3-48ba-ad59-ae46b2ea626f", "sighting_of_ref": "indicator--e658ab20-158f-4e7e-82f3-79903cc07259", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c87e18f-ceee-4e89-a26b-0f4c47530e12", "sighting_of_ref": "indicator--85891acd-1556-4b3a-9d14-a46d441e3fc2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68b6ee9b-f195-4bef-b73b-c7cfc5a983fe", "sighting_of_ref": "indicator--cefc6d4b-5057-4068-bdc9-c45349ee0bff", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--accb589c-b032-4828-8909-5c5b71549020", "sighting_of_ref": "indicator--0657ff02-d6cf-4cd1-a0d7-5379ef66ea6f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbfa8784-9e27-4a28-8021-50d0d78abba1", "sighting_of_ref": "indicator--193bbac6-bdc4-4ea6-bfdf-9ba3024c91b4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dc9f030-31dc-49fe-a943-6046bfa5f970", "sighting_of_ref": "indicator--6e94d54f-a86a-4839-8932-cfd430c8d1d7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1860a8a9-6a4a-4554-8bac-34fee7d7923f", "sighting_of_ref": "indicator--b5060723-0259-4db5-9730-d2467bac1abb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41268133-3cd8-4085-9390-30beaaedba14", "sighting_of_ref": "indicator--4d36aaec-9506-473e-b797-e3cb2470f020", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2724418-012b-4452-aab0-0d928d0b7529", "sighting_of_ref": "indicator--e41b6860-5b37-48de-a9ae-e160cf1fdc53", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acd00e4b-325f-4d30-9195-5d76a856dedb", "sighting_of_ref": "indicator--0384e440-5af1-481b-b6cb-f6ec9c5b0e9b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d5efaab-1d78-4673-8d1d-6153eae34d69", "sighting_of_ref": "indicator--0384e440-5af1-481b-b6cb-f6ec9c5b0e9b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dd705b1-f5a0-4a22-a27e-861cb03aa4a3", "sighting_of_ref": "indicator--12fd7a09-2334-476d-acea-16ab693f3661", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eec0ddce-45bb-4266-a0d8-3ebfc855afa4", "sighting_of_ref": "indicator--5c92bb32-22c6-40ba-a828-1bc09a49d698", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--260466cd-03b0-4ee5-a762-e030ac83a25e", "sighting_of_ref": "indicator--7a136e83-05d8-4ff6-a600-eebaecc3cae1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1948540a-0147-4f25-aaa3-bbbcd4e9cab1", "sighting_of_ref": "indicator--209ccf05-cd31-4400-a0d6-14f17655e2fe", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dff0b39-797f-4034-9201-ad0376aec736", "sighting_of_ref": "indicator--209ccf05-cd31-4400-a0d6-14f17655e2fe", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27e3aea0-8e00-4fcb-9286-ab05569798fc", "sighting_of_ref": "indicator--4b6b5352-67cd-4814-a009-aa4438aa2ac9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bab81c1-a608-48d1-9455-8cbb03415ce7", "sighting_of_ref": "indicator--84e0ae34-770a-443b-bf1c-81785e5670d7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3457862b-4f23-44f5-9ccd-cb51fac99739", "sighting_of_ref": "indicator--84e0ae34-770a-443b-bf1c-81785e5670d7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7300d82f-eb42-4d92-bc06-8102b08687c3", "sighting_of_ref": "indicator--b2ca9b23-18e5-4b55-9118-c3346c4eb7cd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d6b059b-46a5-4db1-b655-2702211b793b", "sighting_of_ref": "indicator--b2ca9b23-18e5-4b55-9118-c3346c4eb7cd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed9ae99e-4a70-410a-9a5b-bb410aadaaf5", "sighting_of_ref": "indicator--584bb680-3425-4ee4-a51a-21e3a8dbc316", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97a0eb7e-ca75-42bc-871c-28ca691a08de", "sighting_of_ref": "indicator--ee238b0b-a4ae-4f3a-83dd-e8a3a307d384", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14d7669e-2fde-4757-9205-f6a67476e4f5", "sighting_of_ref": "indicator--585344af-ad05-4cbf-bbf7-af0896b045e8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eeffe3c-7f5b-4a74-8c09-2116742ce07d", "sighting_of_ref": "indicator--f360d290-33bb-472d-a08d-3d0c7839938b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a393678-e65c-4d87-94ad-e080f60f3123", "sighting_of_ref": "indicator--a090f513-cb4b-4aae-8b1e-d8ed6c2e317c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2232ae40-841e-45dc-bc6b-d08aff1ad117", "sighting_of_ref": "indicator--adaee53a-0f65-45ac-af15-dbbf676a42f4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d62a780-cef3-4eef-8b89-211e299ec15c", "sighting_of_ref": "indicator--adaee53a-0f65-45ac-af15-dbbf676a42f4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--887247b8-e9ee-4508-94e6-8726979147fa", "sighting_of_ref": "indicator--58548ebf-839a-418a-9f3e-693d1cf10daf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ede05cb-6ad0-4702-b39c-2521505d3709", "sighting_of_ref": "indicator--cec7178f-0082-4d71-a547-ffb2137e26db", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aa2712c-826a-4b7d-aa06-e09b7caaa043", "sighting_of_ref": "indicator--6f43dc95-ac70-4a2f-8247-c025a76d340d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--271cfdd5-23e8-48d2-8232-a6c2cefc75b5", "sighting_of_ref": "indicator--03d45b5a-e5f1-4561-b5a3-a9795c865704", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3d86321-9bb8-4f14-8aa0-f72ca65e1ab8", "sighting_of_ref": "indicator--c1c4460b-cac2-4d7d-bd9b-766b2b1ba269", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4302c654-e310-4e69-9672-d9039820a0a2", "sighting_of_ref": "indicator--79f01b40-d32d-4993-8984-816c22724d25", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da9ad787-5753-4d72-81fe-f0fa704f2e53", "sighting_of_ref": "indicator--eb541c06-947f-44ea-a2fd-4ebf48e7f299", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb5df0f5-6611-4412-a563-f9dca3ed3f35", "sighting_of_ref": "indicator--acda592b-036a-43b2-a63e-3d727c5216c3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d37a52dc-f84f-4666-a83f-2e79f2f6d16c", "sighting_of_ref": "indicator--e8bb8670-9999-48be-b70a-ae6d7e33e19e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed0444a8-9656-4770-bffb-46e9b663e35c", "sighting_of_ref": "indicator--8cf175b6-a2c3-42f9-b579-75456b968f5f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0450900-cd12-4d00-8ad8-c20e9a1cf1c6", "sighting_of_ref": "indicator--b4f6646a-ffbc-45e9-b510-7b32de07e705", "where_sighted_refs": ["location--c8625a69-b7e6-4cad-99d8-76632a875c20"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04ca0a2f-f7df-4784-9755-69e6c05bc6fd", "sighting_of_ref": "indicator--7313c148-ff28-4dba-bcac-1761804a069b", "where_sighted_refs": ["location--c8625a69-b7e6-4cad-99d8-76632a875c20"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caede831-f1cc-4a16-bc47-58e8f330a9b3", "sighting_of_ref": "indicator--82ddc7a3-854e-43a6-a800-9fc8ce43fa8d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a471401-1743-4327-8ba8-54b8e7883c3d", "sighting_of_ref": "indicator--9c192d49-1b81-4029-b587-162a2db8872e", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf4d933c-17c4-4daf-82fa-cf875e470c91", "sighting_of_ref": "indicator--0cefaaed-b9a2-4b0f-88e3-8f9133a116d7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff70ddf6-d54c-4725-892c-592601fbb6c7", "sighting_of_ref": "indicator--b309555d-66b4-49cc-a63e-29be95aeabc4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2689542-8f02-4914-86a2-c345d8add381", "sighting_of_ref": "indicator--a112daa2-7e62-4c2e-8547-408be9f2e37c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e308e702-03f9-45de-b9a1-39466c4a6547", "sighting_of_ref": "indicator--6a85fe2b-132f-44b4-859e-6d31498031d1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea892802-0974-4967-83a1-f8659e1aee79", "sighting_of_ref": "indicator--d70a8015-a08b-4c62-bb9b-a1b43f7cfd8f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dc0a320-c511-4f71-a421-519c1ad2ab52", "sighting_of_ref": "indicator--5b3e782e-cc6b-489a-9be1-f5d9b8b2d230", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aa2239f-dbfe-4124-aefa-2e91703c786c", "sighting_of_ref": "indicator--60d42fb7-477e-4610-88dd-bde620a91041", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--696d6323-d207-4f6a-a91b-e47d67140d8d", "sighting_of_ref": "indicator--cc34ab85-6bc9-472f-bba3-c3ada324f1b1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8935c20-13fd-4700-9d85-5701574f9df0", "sighting_of_ref": "indicator--1565187c-2928-425f-a071-d455392cd452", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6858f01-3ab1-4935-943a-c0acb6a96efe", "sighting_of_ref": "indicator--7570457f-db89-4931-8f53-2eddc780902a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c58ca434-20d3-4bca-bf95-17d87acb92c5", "sighting_of_ref": "indicator--7411d80d-f71e-4cfe-891f-edeca046cd12", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5c60a87-712e-4ac6-84c6-ebabc16af5c3", "sighting_of_ref": "indicator--5cb55cba-4bc4-4fc3-bf70-dc1b1f75d39a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f7a4091-60dc-4ab1-955a-c9e4917809c0", "sighting_of_ref": "indicator--af18f368-e792-41ca-9e7a-342d80de520a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb284a9a-2362-4628-b4ef-053a11261276", "sighting_of_ref": "indicator--10fa4a1f-7d18-43fd-9b12-8f20c77f75ec", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--642a3da6-a81e-4d19-a0e2-0cd90c6916f0", "sighting_of_ref": "indicator--01d73afb-4f0a-416c-aa32-73eaa6b55209", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2e1ef86-4c37-4770-90b1-6b21a5872732", "sighting_of_ref": "indicator--6df3477b-9b5c-4ea4-aa2a-da9585e27d1f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae4475aa-6b60-4800-82eb-b597e7358bd1", "sighting_of_ref": "indicator--dd61d90b-2332-4459-a08b-f927679296c1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35a18a6b-11fe-4f14-b9e6-35831564a1a9", "sighting_of_ref": "indicator--f863c457-5cf7-4dea-ae71-5b9eba2d8cf6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43843eb3-a42f-4708-ae61-24a908ce1237", "sighting_of_ref": "indicator--46e2ce4f-6474-4523-ae93-2fb1459b5e98", "where_sighted_refs": ["location--c8625a69-b7e6-4cad-99d8-76632a875c20"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48831272-8d4d-4821-90cd-4310ea42d375", "sighting_of_ref": "indicator--23a5de6d-6aa5-40e4-b5ec-da96fb6e7702", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e48d6a87-fe92-4571-b5b4-61e4eb3be0a4", "sighting_of_ref": "indicator--a2c9efb9-58e3-4cac-bd50-22a614185a95", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fff95c21-d23f-4629-89c2-62c94934406e", "sighting_of_ref": "indicator--978a61ee-84c0-46c9-9562-9fbdb59ef14d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b87f367-3d9e-46b4-b65f-22cbe9678325", "sighting_of_ref": "indicator--94ac0218-68ad-4233-af2a-8fe22a8add27", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60de1d5c-d41a-40ed-8ce9-3b3be3e1c645", "sighting_of_ref": "indicator--8b043613-3755-4d4f-9774-4d7f8ac3105c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42d2687b-fe76-44bf-a8bd-0af3a8eda6ef", "sighting_of_ref": "indicator--cc69e196-8124-4d34-803e-7c6b4d2b5aea", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1401fdda-f19b-4552-a5ea-e3873d02583f", "sighting_of_ref": "indicator--0fc465c1-233f-475c-82d7-0ef33905d08c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e15c4d3e-088d-49b8-ab82-c0aa44ffdc0f", "sighting_of_ref": "indicator--5e2008fa-f093-4e2d-a2ce-17d54a50b619", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f1c1e5c-a1a1-46aa-b547-72bf742d4478", "sighting_of_ref": "indicator--c4b2bd19-5df7-4375-9ace-73e2bfa77820", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9b1c4ce-60b4-4f28-870a-90d494866959", "sighting_of_ref": "indicator--3fdc5309-62c9-4cb4-8d8d-59c81bb5002c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--953a6e1a-51c1-4cc0-86d2-844b4c5e7028", "sighting_of_ref": "indicator--84f7ba15-0f06-4efb-99aa-3ae3b861a780", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18fcf5ba-eb67-4840-9177-42774a028e69", "sighting_of_ref": "indicator--143dd9c6-e61b-49c8-8c67-9573a46fdbaa", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76554576-7f27-4766-9cb8-d50935f36b3e", "sighting_of_ref": "indicator--070c5e09-9256-4d3b-84da-ef0e5d5b5a86", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab0e0d3a-40a7-4bd9-840b-492adc792deb", "sighting_of_ref": "indicator--071fea1f-c210-4d76-8846-99ff5f5742a5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e162c81f-15d3-4fa6-b538-dcba4c1921dd", "sighting_of_ref": "indicator--45f05e14-575b-43a3-b06a-8503c8f60114", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88b6aecc-f1da-4ce5-8d08-cf77ddb27ca8", "sighting_of_ref": "indicator--bac573ce-0802-4181-8663-d8690541e534", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5577d233-2b6d-4cc8-9da2-b9b31e352d8b", "sighting_of_ref": "indicator--e78a617b-0cac-4f24-8b7f-dcf9631927e9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b2b5533-4f36-4fd9-a458-0b562a548450", "sighting_of_ref": "indicator--c0ac398f-9a42-4010-bedf-a47cbb356a9a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1310ed6a-7331-4662-b181-468fe24a67fb", "sighting_of_ref": "indicator--00530cf1-e6a2-4f56-9e45-03f0d85c10d7", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e02041a-bb39-4b52-b8ba-811888388ec1", "sighting_of_ref": "indicator--c71fb67d-b4d8-4f2e-8391-58f4337a2d26", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88d59b8f-fa7a-42c1-82e0-4abcea1d3ab6", "sighting_of_ref": "indicator--73b53513-b3aa-41aa-97fc-46e4e396ded5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8a5fa41-1c40-4f4a-98f7-3579f108fb1f", "sighting_of_ref": "indicator--4b13bfdc-feff-48cd-9b49-fc8e4c6b77cf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebbc2013-b025-4abb-962c-421e46824a97", "sighting_of_ref": "indicator--86faf7f9-e302-4036-aa00-c8b188b2847b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5abd565-818a-47da-97e9-e4737d32ae7e", "sighting_of_ref": "indicator--3b8c4122-debc-4251-b19d-ecf4d0abe692", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--859a564d-4f3a-431a-9572-380033ede5e8", "sighting_of_ref": "indicator--4d99dbc5-e907-492a-8e0e-962daa5ba695", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7764315c-f1fd-4cc9-aaf4-de7a8699fed6", "sighting_of_ref": "indicator--b503e431-82bc-4459-a5b1-c32eec2980d8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7153628d-9927-4396-a746-127e9983dc57", "sighting_of_ref": "indicator--1a1f42e0-15c1-463d-8f38-b3ef2a376394", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c6d5040-6e72-4c3d-9d4b-5bc09d7efd3a", "sighting_of_ref": "indicator--c00bea10-a476-403e-a3df-2689987a2c8d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6196aa28-5c3f-4701-9a16-91ac69a180a8", "sighting_of_ref": "indicator--3bd73d50-c929-4b81-abbf-05ded940ba42", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd6b0107-3c92-451d-92ef-37091bfce433", "sighting_of_ref": "indicator--f6685539-e32c-4699-bb8f-227db1038d7b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cece9649-a865-410f-9cfa-a04e6a9a7827", "sighting_of_ref": "indicator--516e7ad4-c369-4d26-81df-7a28aa2132ee", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b826f7e-4e87-44d5-a52b-7819563c2c63", "sighting_of_ref": "indicator--5145db60-c0d6-43f3-b656-e4eb760300e5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d3b7679-5900-4086-a987-0f0174a4a8ed", "sighting_of_ref": "indicator--485296a9-6026-4164-a31f-cb47a14f2062", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be1997f0-64ed-482f-830b-0924eb200f98", "sighting_of_ref": "indicator--88bb99d0-755f-430c-87ba-e6e2d6d309ad", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e398045f-7a1c-4ec4-8f4c-a9501b359f70", "sighting_of_ref": "indicator--75b17281-114e-49d1-98d7-23a336cb4d83", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba6fbd09-9193-4fba-80ce-dbf9b7fc318a", "sighting_of_ref": "indicator--5e3ba0cc-dea4-4ec0-9766-b4f17176c3cd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f552f015-a113-421a-a10a-e72607604c0a", "sighting_of_ref": "indicator--08c7236c-0f28-47ee-8bda-c485c6da6a24", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47756d3a-9c2f-40f2-b6dd-fe11d9eedeca", "sighting_of_ref": "indicator--94d4b42d-d549-491b-8d7b-10aa9819a75e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dddc13b1-3879-4a04-81ff-98d9aac49127", "sighting_of_ref": "indicator--65273466-5c3d-4772-97e1-06f49dccecb6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a89826a9-86f4-4f5d-a3b5-8339f54610c7", "sighting_of_ref": "indicator--712a20e7-fed2-4ff8-9812-3e9547509966", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ce12e57-e592-4228-bad4-2d37fc06ba4e", "sighting_of_ref": "indicator--d8049e37-1f92-4ea0-a2a9-3bb17843216d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cade1bd8-63a1-49d1-9b7a-ec5004f238df", "sighting_of_ref": "indicator--05cc884c-4e98-413c-97fe-cf2139884ecf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--295f5c45-c53c-48a6-b708-67e28b4a721b", "sighting_of_ref": "indicator--f579774a-d10f-4f12-984f-90470f182769", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24654390-79ab-439a-96de-2071b9cdf4d6", "sighting_of_ref": "indicator--f127dd3a-fd0e-42a7-826a-d138482fc846", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5632c9e3-ebfe-417d-855f-a418604491e0", "sighting_of_ref": "indicator--4a52e151-691f-4acb-8857-fa6b3a8d6745", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e75e3e2a-db1b-48d9-8578-8b3471843c93", "sighting_of_ref": "indicator--eb6a1f7a-e7e7-4167-8036-b51f25860491", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--203a40a9-f582-4f7c-a6bc-bfb05bd20bbe", "sighting_of_ref": "indicator--6c8325af-2231-4df6-91ba-96974747f3be", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c7d7ff6-121d-4346-9599-f9152da1e9a2", "sighting_of_ref": "indicator--ef51bcbf-f067-48f3-975d-7e2b29bb39b1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f877747-5784-4d8a-8dbd-29dc3ceada01", "sighting_of_ref": "indicator--baf870fc-8742-4daf-9d74-481ac2388f49", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b07d037-160d-488a-9374-86781b445e75", "sighting_of_ref": "indicator--fdb090be-1eb6-4f28-a1ff-b0a69f333b00", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65c2ee63-b271-4c61-a363-e1304ff4c62f", "sighting_of_ref": "indicator--89f42668-f1f7-4065-b5f5-37dd11235b4a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4f6b4e2-dc4a-4a90-9119-e0f1379b7d54", "sighting_of_ref": "indicator--cdb6b774-7afb-45cb-9f5d-812459a208ba", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--143d0cb8-59f0-4b05-ab90-8de598e71da4", "sighting_of_ref": "indicator--38faa046-c6f7-4190-ac82-dbb36a2eddeb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ca0fa17-100e-4526-8d5e-afc2ecad70bb", "sighting_of_ref": "indicator--95b78714-1e29-4e77-9268-92af4a8750ad", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3e9a1a3-b6ac-4c71-a353-6e65a2428148", "sighting_of_ref": "indicator--699948bd-ec8d-4fda-981a-6a5741e18291", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--922e851c-4a6c-416a-99d6-b9f69d427466", "sighting_of_ref": "indicator--3f92e80e-2ac9-4907-b13f-15df19537184", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf94e635-f066-4041-bdf2-e578a95d568d", "sighting_of_ref": "indicator--9d02d9c2-9944-45cd-9876-12bdcdffc9bf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d55ce4e8-3c7e-4eed-829a-aa79e41dc9c3", "sighting_of_ref": "indicator--8fdb6ca5-3d09-4a50-8b82-cd96d825b8a6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bfc55c3-47d6-48f7-babc-1adc2611e754", "sighting_of_ref": "indicator--9e30595b-f05d-4175-a248-41ee6a735778", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--864b1b93-f6eb-4f1a-a0ab-acf0f1aac9b5", "sighting_of_ref": "indicator--c173b6f0-b782-4457-af0a-d4fa743d8b07", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32cac7b3-5fcd-4503-ba3b-9c1c920745f6", "sighting_of_ref": "indicator--fb007be2-83c9-40b3-bd14-c0f024853584", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22884b3d-5d0f-414f-86d4-29ff8b3f6539", "sighting_of_ref": "indicator--95a2ca2e-334f-4948-833c-fdb3783863ce", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eac36f24-aef3-484a-ab23-384052dd7bab", "sighting_of_ref": "indicator--8574f1fc-f2a4-4720-8194-2cf5a9a51e70", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--462e980e-837f-4f3c-bad4-0bcb9217a6de", "sighting_of_ref": "indicator--e27e3105-8f0f-45e6-b052-e32645e67524", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae61e7a6-5294-4f26-ae47-adeb6fdcffbc", "sighting_of_ref": "indicator--f0b94681-5fe5-4f03-9be6-568751b657f8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5ec1be3-4b42-4b38-ac14-122765e56780", "sighting_of_ref": "indicator--4513ae08-1d42-4dbb-a1c9-44e4d9ec7af0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64c13417-be55-4725-82e7-1ec879a67a7e", "sighting_of_ref": "indicator--b3530a90-24f7-40da-8f56-2e0c2a772936", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aab9ce0-c8d9-414c-9a96-4d19286e26fd", "sighting_of_ref": "indicator--883cd828-39a2-444f-8598-8c3704de109c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8479810e-6269-44f5-a5c8-0e06a8afc488", "sighting_of_ref": "indicator--8c0f6dd5-27bb-4380-a14d-b5b42556ef28", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a79ec139-bcf6-4ac2-9637-5fca12b4513a", "sighting_of_ref": "indicator--959a2a4a-b295-45fe-a2e9-5eb2513f4f93", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3131745-a16d-4ac7-9b34-bcad8d20d7b6", "sighting_of_ref": "indicator--82899192-f14c-4857-9ee9-33201896b2c5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48d0a54c-e127-4365-a75a-fd7bb27fe876", "sighting_of_ref": "indicator--e1ea5d1d-5aa7-426e-93ac-7f31dd4fba90", "where_sighted_refs": ["location--c8625a69-b7e6-4cad-99d8-76632a875c20"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc82fb62-0007-4479-b65a-b6007b2e44c9", "sighting_of_ref": "indicator--e1ea5d1d-5aa7-426e-93ac-7f31dd4fba90", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a24a3e31-f127-4264-b68e-ba876c292aae", "sighting_of_ref": "indicator--de9ee9f4-d570-4a9d-8c52-e94326edafe8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a00488bf-d7f2-4f1d-9590-1fce7e1ec5df", "sighting_of_ref": "indicator--32571810-0b80-4ef5-bcd6-68aa105cbb25", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aafeee20-066c-42f7-b0e4-519b2ec48e7c", "sighting_of_ref": "indicator--3168d521-a8c9-4ed6-9051-9a31a6973e90", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df7d4d46-e7c0-4a03-8a3f-55327fb3167f", "sighting_of_ref": "indicator--eed1d98a-fd77-42d1-ab0f-ab93d7ac6c42", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5517662-a7d9-4e4a-9d95-66379b81e96a", "sighting_of_ref": "indicator--116e2e3c-92e7-4a3a-a238-3718f274097c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e5b070f-15b0-41b9-b818-f8fb21b7bc89", "sighting_of_ref": "indicator--ba076f3c-82ea-4998-a87c-8ca573e0d46e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c3036bb-25b2-4a89-b600-f858491a95d6", "sighting_of_ref": "indicator--1c0f496a-fb12-4987-b25f-b7463056ccbe", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab991aa1-71fd-49f8-945e-6950cce05d75", "sighting_of_ref": "indicator--7edcbf32-c7a7-4139-b3bd-d790114101e4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d49a82a-7774-467c-9ebb-0d3de2566b66", "sighting_of_ref": "indicator--15bf4a20-b092-4ad8-b2aa-032416928392", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3454da2d-3fa5-48e4-bafe-c4ef5eb96e2d", "sighting_of_ref": "indicator--13bd4e8b-9c17-4e4b-849d-df16b8da75d5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abead3d0-4eca-4525-a17e-9efb71777f73", "sighting_of_ref": "indicator--779ba2ac-de7f-45e8-8514-0802743d5cab", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c00eb273-cf69-408a-b5b3-7c0f73c50c90", "sighting_of_ref": "indicator--e0e3b9f3-f81f-40b0-a796-8b2d61340dc8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--250b108f-2327-41cf-b1fa-5e109ad41279", "sighting_of_ref": "indicator--3cca3c35-c0e0-4a11-bdcc-189fc0cfb064", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0246e50-3f21-4a45-8c81-29152ba1843f", "sighting_of_ref": "indicator--cc3827c3-5954-4ad0-ab10-329c87997d93", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e747dcb9-0d65-4182-ab06-3868bfbababc", "sighting_of_ref": "indicator--f0f58c14-4811-4ce8-ad88-aa247e5a5d18", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe683793-2236-482f-b5a5-5cf7512b4599", "sighting_of_ref": "indicator--b2922543-da2b-4ceb-9877-36635b0b1b65", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7b830fe-f820-4c52-9868-2b8a8128df6d", "sighting_of_ref": "indicator--438ade94-1e97-4312-9425-14b868e3f03b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1076ed3-d22b-40e9-9270-eb42ea9338b7", "sighting_of_ref": "indicator--88365309-9e9c-4b30-b727-78f3cf671520", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2161cc7d-c200-4a39-8d2f-d803fe7191c5", "sighting_of_ref": "indicator--fa12c560-f8d2-4dad-8fdb-a77c0751d9e8", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12c066f1-87e5-490a-8697-6811184a5414", "sighting_of_ref": "indicator--fa12c560-f8d2-4dad-8fdb-a77c0751d9e8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcb5566f-8c95-4af9-b2ea-465723dc93ba", "sighting_of_ref": "indicator--8a613123-2d86-4620-9f1b-0bc6fa82a55a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fe58562-368e-4387-ac89-5d49461895e6", "sighting_of_ref": "indicator--18a531d1-7984-422a-baa6-2c86b6ba93a5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d53cd8e4-834b-41cc-b0ec-e3dd7dd05c46", "sighting_of_ref": "indicator--253e4bf9-0c5a-46cd-8843-4464006d55ed", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57d7d658-3e3a-4e55-843f-77e979c82340", "sighting_of_ref": "indicator--4b7ac358-80cd-498b-8fe9-d2ad510b96ec", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92baf32a-4f43-4260-be89-2d42ef995999", "sighting_of_ref": "indicator--35fd26b3-e234-4283-a408-f43d78de00da", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b02d614-1d38-4fa4-bc03-d23831820038", "sighting_of_ref": "indicator--cec03530-9c19-461b-ab0a-8cef985a718f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bffe626a-65ff-4363-9134-617fbc45b7b2", "sighting_of_ref": "indicator--341f86a8-7dfd-4c36-9850-817f9e2dce1e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccd794c2-c4ff-4cd0-96b2-ac5bd452b2c7", "sighting_of_ref": "indicator--00abc31f-96cb-414d-bf14-c4482844d51b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e0df2a2-6921-4b9b-803d-71c692e5f323", "sighting_of_ref": "indicator--728fdaba-4bf9-4fc4-b2d2-321b46807fc7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2905af86-6c0b-493b-b85a-7d65c3ca364f", "sighting_of_ref": "indicator--50f99a89-600a-4a9b-838c-d9346bde0183", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71e605c5-596f-4bcb-be3d-35809d7bfe82", "sighting_of_ref": "indicator--d87c72e9-5997-46c1-85cb-ad5b1905987d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5859f821-a26c-4e83-a814-f51f54f7c454", "sighting_of_ref": "indicator--bd9e3f75-5fc0-43fa-b4b3-aff149635d00", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1c5c4f2-cc65-4392-9415-c2ea7194e4ac", "sighting_of_ref": "indicator--dc5606da-bbc2-4cd4-98cb-e459c6f49efd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a6c53e6-13f5-441c-bf2c-fb0505df4b65", "sighting_of_ref": "indicator--97b9f9ed-cb87-4f1f-8ab4-c3fca9e7f402", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7469f752-9b5e-4e57-a91a-673d34a67db5", "sighting_of_ref": "indicator--9a49fc3a-69e2-4295-9be7-ef82f1a1176b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cef725c2-00fb-4573-807b-4a027988adc4", "sighting_of_ref": "indicator--8d6852be-07f5-4cdc-a6ed-bdf572091d73", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10576c5b-b7f6-460b-b53d-d65bda7c9fb7", "sighting_of_ref": "indicator--e6025083-79a5-41cb-a787-a3edd62e9659", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff68444b-54c9-4fa3-b8e1-f5c843527818", "sighting_of_ref": "indicator--92c3d4b9-734e-47e9-9f80-481c9c891855", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98cb67d2-13a7-497d-9851-df48b421d98d", "sighting_of_ref": "indicator--5cd0c81d-ecb3-41d6-b0a8-ce43b6341dd8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--062333cb-a63c-4eae-b05f-d53000eaa4d5", "sighting_of_ref": "indicator--abe6b920-73e0-4635-a2fe-fa427d87c280", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a60c8911-52a5-40ce-b601-c54cc9514819", "sighting_of_ref": "indicator--c2d29391-2cb9-4866-a239-d7bc21c82c15", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b503e1ce-ff91-4c4a-a8fe-7eb3ccd99873", "sighting_of_ref": "indicator--28ccd28b-6813-4b00-ab1c-96466e807682", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab26e9a8-7337-422f-8225-d62567c97954", "sighting_of_ref": "indicator--9d1fd0ac-2919-4438-a474-e9db3745e3ef", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24c026e4-5e52-45ff-ac20-ffa6bd3259c8", "sighting_of_ref": "indicator--f9f6c7c8-23b6-48a9-b773-e4fc241357a3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7a77b70-2cbb-44cc-8ce8-6300ddeb6296", "sighting_of_ref": "indicator--90b9bf9b-f7e0-4ed5-8e81-611a985dc1a9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2416891f-1758-4354-9455-134b8f713358", "sighting_of_ref": "indicator--c98f61bf-5007-4695-a06b-30b7dbd76c1d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1664ab1-2ee4-4bed-8053-ca51f13b8b7f", "sighting_of_ref": "indicator--e588e0b7-68b5-41ed-a1e0-996a70d597b9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0bb15f4-00a1-47f4-b875-463b241f5bc0", "sighting_of_ref": "indicator--24a9dba3-43d8-4d79-b29e-39815622da65", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e524a9af-b43f-4af6-8c45-9bac0cbe2d07", "sighting_of_ref": "indicator--6f5427a3-95b5-4071-a59d-e2f230a151eb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9bde82c-2733-471d-9f4c-b46461d417e7", "sighting_of_ref": "indicator--3cd12c0b-62b5-425d-9bb6-ec7b3ab0693c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a28239ad-755d-46aa-81f9-64c7b90bfd85", "sighting_of_ref": "indicator--fd1c85a0-b469-48ec-9855-44f0f45f12cd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--508ca9c3-9577-478a-86ac-9947be487115", "sighting_of_ref": "indicator--bf1900b0-934b-4fb9-b1bd-87f8959aded1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4c3edbd-cb1d-48ed-bc05-ca307bd58e60", "sighting_of_ref": "indicator--2af2844c-5978-4a8d-958a-bd25458f29a3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f921c57-e344-4429-ab99-71aa908fb567", "sighting_of_ref": "indicator--658e3d30-cb99-433c-b1e7-404005c6723f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8774ed1f-9a3e-4b7c-bbc7-2f895d6f2723", "sighting_of_ref": "indicator--b97c5735-384b-4bde-a323-3b6fa9db4fea", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6305990-a8f1-465e-b86e-a8cd9ccfeaf0", "sighting_of_ref": "indicator--7d66fa45-4dcf-4733-a47b-a56b22922299", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bae0727-8ddb-4e6a-9986-1ed5f91defec", "sighting_of_ref": "indicator--4b265bbf-55ad-4d8e-bd19-21aec398c6c3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f46c118a-7d81-4d36-8bca-718d0e59fd82", "sighting_of_ref": "indicator--a73b0d23-b826-4284-adc6-59c8b6fdf5db", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--642ec215-2af4-46ef-a67b-494c3ad1cb8c", "sighting_of_ref": "indicator--882b13b6-02e3-457e-93c2-7cfab00ebdde", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f30259e0-7512-41e3-aac5-3f0f33fdf600", "sighting_of_ref": "indicator--dacfd1da-96e5-4088-95f0-de82e2cce121", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12849275-a9ce-4af6-89bb-1e402ef1fe19", "sighting_of_ref": "indicator--5d16dbaa-977c-4f09-86af-b0ba948333c9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ffda24e-c532-452a-ab39-b944fa7c6c42", "sighting_of_ref": "indicator--0f40282d-2aeb-4a87-a390-15d4170756b1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8be7051-aea8-4f6e-91e0-e7594b93c006", "sighting_of_ref": "indicator--ccbab703-5208-42c8-82b7-b7f2b250a758", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e07e4115-507b-4c45-84fc-d854e108d899", "sighting_of_ref": "indicator--3036cd61-d467-4145-bcd0-a8b72dcf7471", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9d55d20-2514-40bc-a618-be0959d38243", "sighting_of_ref": "indicator--b371f1a0-cc52-4b6e-853b-b9e248830c5c", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afb003b5-d4bf-42e8-bca9-ef8c2d44c500", "sighting_of_ref": "indicator--466eca68-6901-43fd-8726-8f0782f0f277", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bea4d33-ffee-4284-b173-274f8f6e3124", "sighting_of_ref": "indicator--6b6f3b4e-9bf4-4748-9440-9c77fbc1b96e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eaeb032-90ca-42ca-97af-fc02abaed24e", "sighting_of_ref": "indicator--d774c90a-ddf6-4cab-a2c3-2e2bef106dfd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--008e3a85-100f-42b0-a903-7ab3243bad72", "sighting_of_ref": "indicator--752ac5ba-f65e-4fa8-b417-35ea864ad219", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e76e848-370f-4c4b-b5b5-6f83ee07ab55", "sighting_of_ref": "indicator--b975b64c-0f30-413d-a75f-6a2b4355a463", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9f47fe3-c38d-4dc8-8d2b-a473649f1a4f", "sighting_of_ref": "indicator--944d2a14-904b-4748-ad99-82b5e70932e4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88fd3768-d8de-49ee-b455-3e57e3d2631f", "sighting_of_ref": "indicator--f071f2a0-2b5f-4055-9efa-61d3d2778b39", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4abc212-d6e3-4710-97ad-52e2d75929c4", "sighting_of_ref": "indicator--132086c4-908b-41d1-88ac-674ac53fd3cc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--060c16f8-14c5-48dd-b185-e20518375a9a", "sighting_of_ref": "indicator--33183c1b-14c3-416a-9f7a-6be5d3239bb0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63ca15d2-f97f-4f01-a0d9-3313b09755bc", "sighting_of_ref": "indicator--ff6211c0-36c4-4463-87cd-4891c8d3afb0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c808b88-ec0b-44fe-99f5-2760eade8265", "sighting_of_ref": "indicator--270c03d8-211e-4bd6-99f3-b42f75466e05", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1265bfe-e635-472d-b0df-325f1374b191", "sighting_of_ref": "indicator--520f430f-7db3-41e2-9937-fced22c46d09", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6912c1a-b130-4b93-986e-3ef8eb812666", "sighting_of_ref": "indicator--22027ab3-1030-46a8-bb9a-71bb25c92762", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbfdcefc-50f7-49cb-a758-9d934da65506", "sighting_of_ref": "indicator--b63daf5e-8a28-4bc6-bf94-2d24f5a4d092", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c66666d-4253-469c-9245-99e280b569a0", "sighting_of_ref": "indicator--3a6c4a1f-3c97-4618-ac7c-2a22b5e4b30d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17107633-9bf0-46da-aa25-a2144156b72b", "sighting_of_ref": "indicator--5e8b2163-7889-4114-9953-3701f4ed4381", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--730d94ee-ce4b-480a-915d-07429e7d50eb", "sighting_of_ref": "indicator--79404583-0ac3-4df3-ae0b-f3fc059cee3c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f5daf34-bf2d-40dc-bd4c-b0e7a54ad0d3", "sighting_of_ref": "indicator--c179cc12-e260-47bd-9da0-d0307b94db10", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--275cddf8-1347-45f2-930a-3cd0ae9dd017", "sighting_of_ref": "indicator--8e42f0ee-7bde-4535-abd8-572b32d3c9b8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--726e509e-b11f-4a15-b798-a7c2766873b4", "sighting_of_ref": "indicator--d05ba064-4e68-49fc-acf2-a33cf5d008de", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8aab439-6578-4e33-93aa-310737a74088", "sighting_of_ref": "indicator--2eb23da7-50e6-481a-aed0-483d9285a688", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2518e4f2-af10-44d1-89bb-42413abd0a9c", "sighting_of_ref": "indicator--a1d6a12e-dd00-4d1c-993a-1930b9728b98", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2200cb0-7485-4f98-9945-44a570985ffc", "sighting_of_ref": "indicator--46fca769-9ac2-4ad5-be30-796d7bc388cc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c7054e4-920f-4287-9d46-7c8a457f4bde", "sighting_of_ref": "indicator--ae3201af-97e7-4eee-8fca-58226fc1914a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fe8060c-cb58-4892-a1c9-03c7c8166273", "sighting_of_ref": "indicator--ecd94e61-8c06-4ffd-80f1-9576bebe11da", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--275c7db7-1b60-4cd6-9aa0-fe7f86517a3f", "sighting_of_ref": "indicator--6b13bdae-084a-4887-8eea-316b20347776", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b96237de-22cc-44b6-90bf-9f9ac027dd45", "sighting_of_ref": "indicator--a026d51a-6a92-4692-9bc2-fd27025a83e9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a90f146-1598-4188-844b-e5288cd83402", "sighting_of_ref": "indicator--96d758c5-27c5-4992-a784-52a71c4e5b13", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfba8ad2-3d9e-4638-827b-39316a84467c", "sighting_of_ref": "indicator--c935fc39-e1ec-4a65-bd8c-0c1eaa2758a0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d49aaed9-f238-425d-98ba-ee606ffccb0a", "sighting_of_ref": "indicator--c4dbb7aa-7b15-45f0-814d-180f99710afe", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50b4e1c0-6154-410a-aa96-0ac4ebdd801f", "sighting_of_ref": "indicator--77a80601-9c00-45ac-88cf-bcace3a4e991", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f29e2c96-644c-452c-b356-9571f9b83d16", "sighting_of_ref": "indicator--932d4305-5543-460a-90be-08cb3811d5ba", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3166dc0e-fcea-4d98-b89e-45921d1a3dfc", "sighting_of_ref": "indicator--24319215-4d41-45bf-bd62-04f970112ad0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bc83312-3cfc-4406-82b5-fd3c8ddc38e5", "sighting_of_ref": "indicator--e8d6d8ac-9d70-4743-94fb-e7c6accee9c1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76861aaa-7684-48f5-896b-26800b231a70", "sighting_of_ref": "indicator--2e971578-9546-4fde-8e08-b4f6156a8264", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c55a141-6123-4d6c-8354-6d1578758ef1", "sighting_of_ref": "indicator--779fca0b-5d3e-45f3-9cea-2aadd560506c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57b391da-6a14-4c2f-8d9d-46ad16eb2d63", "sighting_of_ref": "indicator--773bb91d-148d-4ffe-ba3e-517668655e8c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa8ca980-a118-478c-8622-77827b6fecc1", "sighting_of_ref": "indicator--46542607-0ca7-4e29-9c63-09bcd933a13a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecb002ff-1a95-4aeb-bd66-a8e30bd97c31", "sighting_of_ref": "indicator--126080b9-9e05-4203-a968-b44631fd0c4d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40604625-91c5-4faf-8365-3ade2d4ba42f", "sighting_of_ref": "indicator--ac74cceb-0f28-4632-a712-8e3de69bb75b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3bae863-b73c-4af4-ba57-4a27bac41d5f", "sighting_of_ref": "indicator--83517df2-eb3c-4348-b3a7-30c6a2896371", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e9d92b1-7b86-4c81-b3ba-d37806f959b3", "sighting_of_ref": "indicator--0af3781b-b6c4-4bdb-ac7c-cd9998b62b27", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e5513d1-8495-482f-8664-72d483474d64", "sighting_of_ref": "indicator--fff88a3c-b1ab-49e9-82f8-c984a873d14e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d5f4f35-377e-47f7-8bea-e80ce6183c20", "sighting_of_ref": "indicator--244f14f4-ef51-4114-976e-2095d1fdcf6e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fb0f7f6-6e06-4339-9c9b-4bd9e91a0707", "sighting_of_ref": "indicator--49278d27-c2c5-437d-8c9d-def9920665fd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e1fc024-0615-4a57-afcd-bb7400f22332", "sighting_of_ref": "indicator--58ec15c3-a147-4d47-9461-b2120a4a7e7a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26518d53-83be-4a04-bcc8-fc085afabac4", "sighting_of_ref": "indicator--cdffedfd-331c-4d1d-9b9e-5c257004c156", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d149a1d3-5b64-46ae-b4a0-108654a09494", "sighting_of_ref": "indicator--e8c77c28-e4c0-49b4-bba9-8d3de5cce360", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--891329d6-7351-46b7-8435-6f0bace94e81", "sighting_of_ref": "indicator--77a0c12c-9479-4c95-b519-00c02e2f4a78", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acd67352-b31a-4b5f-b659-b9655490ee9a", "sighting_of_ref": "indicator--f2e016af-143a-47f3-8a9b-1c222a4d79a4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d101b7e-186c-425e-b796-202f94f55075", "sighting_of_ref": "indicator--c57a7f13-326b-41eb-b2cf-9b8c200dd50a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7efc8b17-9da4-40f9-98ce-0220cc381969", "sighting_of_ref": "indicator--b8224cee-7fbc-4176-ad2e-2f345fe18f06", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51262811-9780-46bd-bd2a-f95ed2d1db0c", "sighting_of_ref": "indicator--7ce44d0c-fafc-4aeb-9a5d-ec40569ccbea", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33f408f2-907c-42cc-8947-2aa7d37a9903", "sighting_of_ref": "indicator--89993209-6c13-40eb-91ce-ea3e192be6a4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d8b0436-6ad4-45e8-a776-2ed30ca46cf5", "sighting_of_ref": "indicator--5330d4e9-58b1-4e53-a0b9-3b590e4d36b3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca0b8494-007a-4e01-8a00-019d0d2db99d", "sighting_of_ref": "indicator--25e9d6d7-15a3-4ab5-991e-4e09eb97712f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d61a560-9324-457f-886a-142c0b918995", "sighting_of_ref": "indicator--8faccc96-3568-4972-8695-756ed3ee3d13", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--245ef0e9-7347-477e-a067-f9dbba0a1a52", "sighting_of_ref": "indicator--c8f4b939-d858-42c1-8762-77bd77debc23", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f36590e-b6eb-431a-91d9-d4117a29284d", "sighting_of_ref": "indicator--9cb544d5-34b0-4c78-a8a5-708b7cbdee7a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59545e53-dc71-45ac-bd1d-053572b1b80c", "sighting_of_ref": "indicator--b98ac3db-d9f6-4080-8916-dbd0efbef426", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b14e369b-9899-4bcd-abb0-614a56ff5a2f", "sighting_of_ref": "indicator--9fedd643-cf41-4d55-b1a5-620981a846c3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53c2e3b3-ea63-478f-9757-d049aede7e72", "sighting_of_ref": "indicator--30b9881f-d39e-4dbd-95e9-77b2541ab9f2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebde192c-26c7-42ef-b86a-274b2be4ed95", "sighting_of_ref": "indicator--5d0ed8c4-a18a-4ce2-9d93-c9de3bd41558", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7e16446-7967-4b2f-a4d1-22931dbb96aa", "sighting_of_ref": "indicator--6f5688a8-80fa-434d-83f3-e0134fe6ebdc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1727736-50de-4130-b9fe-e01fa9b3508d", "sighting_of_ref": "indicator--70ef660e-3c41-42a1-bd4f-2e4fdee335fc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a7ac841-20e4-43cc-ab94-7653715cdd4c", "sighting_of_ref": "indicator--d9c2de56-5f1b-472d-bc10-596987a99dcf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--306d9dbc-e55c-4d95-8e40-32c41b550bbd", "sighting_of_ref": "indicator--e2dd8a7c-9c5d-40c2-8707-e8e306b15849", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec8a46fa-6e16-4d82-8954-cc34604c0da2", "sighting_of_ref": "indicator--8bcb617e-c91e-4e0d-bcb6-4818cff20092", "where_sighted_refs": ["location--c71c2550-5849-4a8d-b050-635a93ef5467"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e3ca950-49c7-464b-a7cf-46e06f0bf37b", "sighting_of_ref": "indicator--cbc1a206-dae0-4e0e-91b0-da0b2bcbe195", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d411bd4-7c57-411a-910a-52ace4d26a2d", "sighting_of_ref": "indicator--b9a36c04-6f21-4f8b-b10c-8f7af22ef879", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13bcaa04-2074-4704-ac39-4482476b4581", "sighting_of_ref": "indicator--3985fa3d-eef3-40a9-84ae-05d31e07216b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e552eb3b-5a1d-4a1a-877f-6db46c14b6ac", "sighting_of_ref": "indicator--fbfdb33b-df1c-4d16-a8c9-f4be27fdeef1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--394e5294-9a59-431e-ab3c-dde390476fa1", "sighting_of_ref": "indicator--c8e75764-ed15-4723-98ba-5c2e2e947681", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dffc1ec4-f5f7-428e-9eba-6476faebc034", "sighting_of_ref": "indicator--74a4e184-8c77-48bf-9184-001740bfcc58", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d56b5ca3-7792-40d7-aa13-88dfee01e258", "sighting_of_ref": "indicator--afe71cf9-7bbc-4c49-917d-9181fce27a9f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c7dd987-b999-4aac-8c17-c56ff0cdb09d", "sighting_of_ref": "indicator--b2b7c437-8b73-4c83-baab-2ff8f31a24ae", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb0c0e32-13bb-4166-9cb1-9506e45b173e", "sighting_of_ref": "indicator--1171d715-d41d-41b3-bd5c-fa2120ed2608", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8af3f202-5a6a-41f4-9ee8-799b3d062110", "sighting_of_ref": "indicator--c505bcdd-797f-409c-a33a-043d5a71ec4a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5afa10c-d3df-436a-993d-c7460b87bf1a", "sighting_of_ref": "indicator--2bc78208-efd1-4138-af19-e29f8fc7d9b0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e076dda5-2bf4-4889-949b-4bea8ae75646", "sighting_of_ref": "indicator--f8d01a58-105d-4c5b-b904-90bc24317a7c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2701a4c0-f5b8-4c50-baa7-b03e301d8188", "sighting_of_ref": "indicator--90b1ecbf-5d6a-4ed8-b04b-05fa729513aa", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba2c2116-1928-4e93-b4ba-f60445df89c0", "sighting_of_ref": "indicator--0538f1c4-7ba9-44ac-8aff-2747ed774ef4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57de8c20-b121-47f8-89af-b863267341af", "sighting_of_ref": "indicator--ab73411e-235a-41a9-a08f-fb326729b1c3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e60ee5fd-2042-427f-af96-44a5653d8853", "sighting_of_ref": "indicator--69c28f1e-6dce-4b02-b3d3-60af485e8bec", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04b492ad-3d70-45f0-9cbf-c7c3fd262774", "sighting_of_ref": "indicator--ea683be1-3a8f-4f1d-a2f9-a9ae3874b887", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--386df0c1-ada8-41b1-8e9a-1c3be5f7078e", "sighting_of_ref": "indicator--ddab99e6-10f6-4347-9192-7f011829f37c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--087007a6-98e8-496b-80fd-12d93b994cc6", "sighting_of_ref": "indicator--1aa73400-567b-41a4-b057-5b99b02986fb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e062748d-8280-4836-a317-8bd4245120e2", "sighting_of_ref": "indicator--6eb6c6d3-ef60-4b39-b4c8-31923caea342", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8d8bbfc-1d87-4f32-9d44-d2f982c64a38", "sighting_of_ref": "indicator--7f99febb-8b40-448f-8be8-da8dec0040ca", "where_sighted_refs": ["location--c8625a69-b7e6-4cad-99d8-76632a875c20"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bed3b8e-2bde-4dc0-82b9-8e2e8023dc28", "sighting_of_ref": "indicator--045c2c04-eb45-4f89-b184-242ca6d40499", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82dc2390-5470-41b5-9c8e-2a1d76804dcb", "sighting_of_ref": "indicator--dc5b2551-abbd-4f39-8e03-a09b6fb608ea", "where_sighted_refs": ["location--c8625a69-b7e6-4cad-99d8-76632a875c20"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fe0ff9d-4c43-47c7-b8c0-13b302a323eb", "sighting_of_ref": "indicator--277a5440-e6e4-47d3-b312-84c683a0ba53", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd96278d-1b6c-4004-9590-ec2dbf280d90", "sighting_of_ref": "indicator--44c9005b-340c-4e86-9b70-980ac0927caa", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6528c7c-427a-47d7-aaa1-0e5669ad07fb", "sighting_of_ref": "indicator--2498c7c4-8d2e-4c9e-b6da-8d8cb29d2a62", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--709068f5-b74d-4bcb-b3a7-e70416df758e", "sighting_of_ref": "indicator--dea5445a-89d0-4efb-9db9-27b18860feb2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df1e7831-b124-45fe-aec9-af04129a99ff", "sighting_of_ref": "indicator--c56404c5-430b-4b7f-a44a-1d6723a8e875", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5fee2f8-253d-4f8d-9fa7-2c85213f1a6c", "sighting_of_ref": "indicator--7b8ee924-a65b-4810-8adf-a9d7e66b41cb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eb562e0-514b-4b9c-87ea-21d931d233f9", "sighting_of_ref": "indicator--9fcd7fba-e84c-4609-b823-cc41d3d85fbd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f72aea43-89cb-4e16-aa44-70616651c141", "sighting_of_ref": "indicator--a67f0b95-5a66-480b-83ab-becd57a3fd0d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ec26316-9622-4f6b-bf8e-f8004af2c8fc", "sighting_of_ref": "indicator--475bc9d5-5580-4260-af1e-378126c2ff35", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d985c6c-519a-4a35-8a53-a9070e17752e", "sighting_of_ref": "indicator--1ffa6bcb-a1bf-45f9-b590-2fd92e566a31", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9be983e6-2aed-4043-8aaa-8a6014b7a969", "sighting_of_ref": "indicator--b7f12f7a-d380-43a8-8962-7c96c0d1c75b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12e7b48a-ce95-44fd-898a-7bd5bec641c1", "sighting_of_ref": "indicator--5a21e47f-44de-434b-9959-27a6ac88fa42", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c57d1e57-69df-4d29-a9ac-69daa45b2e3f", "sighting_of_ref": "indicator--08baca71-ef22-49fc-ae73-a1091b6d9ce0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e96272e-4057-45bd-946f-937d4d477213", "sighting_of_ref": "indicator--2154b364-e502-4299-bf02-576905cc56d4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c8e237c-75d8-4e57-8895-7cefe8d0fd8e", "sighting_of_ref": "indicator--e0b2f410-6e29-4bd4-9785-20db211e3d0c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a6435e4-c80f-4f37-af40-1e10fc100a1a", "sighting_of_ref": "indicator--286494bf-1d57-474f-8572-0df400bbccb6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e30c6f10-8922-4192-a448-0f7081dbe7cd", "sighting_of_ref": "indicator--26d00995-2401-47e4-8391-fdac34d36c82", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b044323-d879-417f-b309-ba9899d3be71", "sighting_of_ref": "indicator--c7ff957c-cf55-469d-b27f-829f9a576a9b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9225517-498c-4ee4-ac01-c5bbf98f902c", "sighting_of_ref": "indicator--dbc0dd24-be87-4adc-b9f0-16335a3d34dd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3afc42bb-3a0f-4a62-9e83-d5f9626cfe9c", "sighting_of_ref": "indicator--217be6d0-1905-487f-88d7-23d49499596f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a68928f-4092-443f-9a1b-6bc7f20394e9", "sighting_of_ref": "indicator--7d8a3457-89ea-49fc-9bb3-89428b2be741", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7d22ec8-527e-4015-9442-240404100289", "sighting_of_ref": "indicator--f998e869-1702-4a04-b436-6d87dd15bab8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65719c13-a2a5-40a0-a4ce-f5e63edddeb8", "sighting_of_ref": "indicator--9b1eb71b-5316-463c-92bf-dab8c7c1bc4a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35716773-9658-4d26-abf3-97adec3c3069", "sighting_of_ref": "indicator--47e9fe14-f6a3-4571-a979-8803830f9587", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dfe618a-48de-47fc-873d-192c1e177628", "sighting_of_ref": "indicator--67d69b93-a945-40d2-84b4-426e83a35b4a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd20e083-ae69-4575-91d1-2bb60b15bef7", "sighting_of_ref": "indicator--71cc8d2b-ef96-465a-917c-0f6ee0abeeef", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2659b5ad-3af2-4086-9e85-6a2231dc2719", "sighting_of_ref": "indicator--73672795-fefa-4c8f-b7c8-0c8475f05fd8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a641fc4-1d17-4e44-9326-7ee44c0b3c4e", "sighting_of_ref": "indicator--59923efb-dc2e-4bb1-9794-bec02a7b67b4", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fed2ddfb-0491-4d45-9c74-31412e579901", "sighting_of_ref": "indicator--6bf83732-8313-4e1b-addf-a92371077cca", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98e8d6a2-14ae-4b34-97d8-79fae06a7c34", "sighting_of_ref": "indicator--7773f9fc-0c40-40dc-a773-5c8817386b38", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6c8a704-429e-4d21-a213-ed19a6a1a343", "sighting_of_ref": "indicator--87660468-4300-4f69-b3e1-22cbad50d88d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--952920b2-d539-4d21-a2e0-49688a4c8281", "sighting_of_ref": "indicator--b7240924-625b-4912-a41e-079aa848228a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d26084a0-a809-4b1a-bc88-2b645f98958e", "sighting_of_ref": "indicator--d49db4e7-e0d5-4c44-848e-b06d7cbe080e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78072e55-550c-4848-a26d-8627d7fb0037", "sighting_of_ref": "indicator--4e4b5958-ae17-4c10-9fc8-7c4f292ce027", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83faa651-51b4-4e6b-9ac6-3c9638f2aa3e", "sighting_of_ref": "indicator--fdfc6d11-f8e9-494c-9ceb-714ab42d0354", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d2e8b56-09b5-4e56-ac16-8c41423eca34", "sighting_of_ref": "indicator--c4b65eab-9d55-42f5-96cc-8449627e81d3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c4bbe71-9f4e-49aa-9ff2-4691a111406c", "sighting_of_ref": "indicator--41bd21ef-9b09-48d4-b8de-66a99352669d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8dfbbba-ba2b-429c-8f10-5cd7a8e50860", "sighting_of_ref": "indicator--5a2316a8-3c91-4da6-a5c4-c479e9bc790e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9aad3e3d-929b-49f4-ab91-3aea360d0f0d", "sighting_of_ref": "indicator--ea72efe5-5950-438c-bd70-3771bd5cf9c3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9032bd12-1b40-40b8-bce6-4a013f044325", "sighting_of_ref": "indicator--321a67b9-6ce1-4fb5-b4f0-f90386af2829", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d10ea1ad-678a-4400-830e-268840969c8c", "sighting_of_ref": "indicator--cc6e207d-3300-4db4-8c38-7cafd0f04042", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13ab0bbc-0508-476a-a035-25f290493485", "sighting_of_ref": "indicator--f02504db-df1f-4aeb-89fe-27f38e8c4a33", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76044769-3e11-43c7-947e-d0cd18ddd1dd", "sighting_of_ref": "indicator--36e8de8d-34c0-48c4-a3db-aa010cfe21e6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0ac4fb6-4655-43e6-98b2-0baeacca0304", "sighting_of_ref": "indicator--f00f47f1-5d6b-47eb-a08a-fb28ee4a6cdb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0952f43-0ebc-4326-a4d6-a0628800630e", "sighting_of_ref": "indicator--afa2f532-85bf-4f47-8d6c-0f33fc265fe6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ecd3710-6f3c-412c-ba7b-741b3d6a21db", "sighting_of_ref": "indicator--456b04c9-0204-4069-927f-245e850a5ed8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d619dfad-9174-4dc4-9556-46c241def961", "sighting_of_ref": "indicator--6b5f091f-b2b2-4de1-9061-6372f70155c1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b7c7326-5923-40df-93e7-e8eaf21d826a", "sighting_of_ref": "indicator--ac3151cc-8070-4593-afe8-0e2e7c719e3b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8dadf38-32e8-4cdd-8c6f-2d0e17a4407b", "sighting_of_ref": "indicator--2221b1d7-5410-4fb5-b99b-a876a2074f0b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--372a6517-36aa-496d-8d87-345f8898e79a", "sighting_of_ref": "indicator--958584fa-babd-45e0-9c5a-3da4e377bcab", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bd5d9dd-7a12-423b-86ea-c4ce25c7f8f3", "sighting_of_ref": "indicator--9a40919b-fe08-4596-b7df-44d4aa59fb7f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6bddf81-2c14-4839-ad0f-b9686f32ae50", "sighting_of_ref": "indicator--8040508e-ba21-42c3-b5ec-8c7e9f8c6fcb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d0b8989-1b94-4403-8df4-2b3dfc4f9b5d", "sighting_of_ref": "indicator--64328c6c-d148-4b3e-beb3-27db7c95e355", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a5f5195-bcec-4a68-bb20-cf4de73f65bd", "sighting_of_ref": "indicator--4fa59e54-1bba-4c20-9d6f-f11cc2dc8fc8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a11f82e-bb83-40d9-84d7-a9ee28e69be6", "sighting_of_ref": "indicator--18a5dced-56d4-4461-94b5-232a1094644d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b43a910d-8a58-4492-ad39-1e8f6151dfc0", "sighting_of_ref": "indicator--62d57a6c-058d-4729-a26f-65dd3d0c172f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2481f928-e8e2-484f-a84e-f69dd1e9ad99", "sighting_of_ref": "indicator--279051d3-6a0e-4245-ac58-726ce4398e4f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94e0c296-49e3-4d15-b6cb-c2fafbf54e4c", "sighting_of_ref": "indicator--ee027ec2-3296-4a45-821e-706857dffef1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0675d4a3-4d40-4758-8c9d-3b6f7a3639a8", "sighting_of_ref": "indicator--6581ecbc-31dd-41a7-900f-bf36f35cfd5f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1179623-c41e-4b68-9152-9c3a57452aac", "sighting_of_ref": "indicator--1475a8ad-0c48-4f49-9b1e-7d31fc4286b1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6664de5-8f01-4bd4-9cf8-0fc61070371c", "sighting_of_ref": "indicator--84536afa-f220-4e86-b0a4-807b274fe8ee", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00e11fe8-ac08-4663-8226-c4b9c2c3b835", "sighting_of_ref": "indicator--5e039e0d-0ba0-4784-a397-997e489a2721", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d623108-ec8b-45b6-9b2b-a2603c7f1468", "sighting_of_ref": "indicator--ccd33465-d97f-416d-9238-d18e8467e73c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d69394b7-d1eb-457b-be80-70a40fc71dc6", "sighting_of_ref": "indicator--d261050f-e247-4cad-8240-9a0578f345c4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13873fdd-c8cc-4629-92bb-7a39902f9040", "sighting_of_ref": "indicator--6bfe04d8-ce7d-4859-95d2-0cc545f76009", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c915e64-2321-458e-93fe-754409c48cd3", "sighting_of_ref": "indicator--3cbb942d-2628-40de-92d5-0932abf7e24b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b368aef-c673-4a87-8c5e-0b5dc4dd3b1a", "sighting_of_ref": "indicator--a9eeb920-ce7b-4a57-a197-cdf291377bdb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1d9f135-4060-449e-997b-268ae1162957", "sighting_of_ref": "indicator--90297b04-cc06-42a8-9560-52284693046b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f886c5c-4d17-41de-bcd2-5c1003701be8", "sighting_of_ref": "indicator--9b114bfc-2c14-4bfa-ab67-724953a72950", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--274244b6-3dae-498c-b78a-04894a6673d3", "sighting_of_ref": "indicator--5ff968cd-bd5e-4361-842f-d9bbd65c2928", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aaab3db-e7b3-4bfc-95a7-bc8fea555867", "sighting_of_ref": "indicator--d0f6247b-05fe-4aab-a563-2cf6d4964d2a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b201918e-4e7e-4333-9db2-df58ee4b9a1b", "sighting_of_ref": "indicator--e8beee1d-2093-4d48-ac7e-7f1412fbe593", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1db94ac-3e4b-403e-b15c-72d5cd0b1d9c", "sighting_of_ref": "indicator--39ec13a4-f483-4d22-9143-f6579bbbeaef", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79487c3c-3f1e-4001-be06-6e7c96b87b15", "sighting_of_ref": "indicator--5cce525a-4d25-4644-a91c-43ead5387266", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c585ef12-6fa6-4121-a084-a66a3be5ccf0", "sighting_of_ref": "indicator--dc3f6229-f717-4cf7-b9b5-ae0da372d41c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2981105-282a-423f-bce1-5178cd52bd2b", "sighting_of_ref": "indicator--fcbc6532-cacb-4a5f-bfc9-6c7787d6e6fb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc4b2fd8-2e72-45c5-b785-f533b2fa21bb", "sighting_of_ref": "indicator--e1aa322d-c129-4fc7-bbb1-a08962c943a7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf024ff4-5a48-42f8-ab4c-2baf16ebb84b", "sighting_of_ref": "indicator--7be0f160-abe7-493d-a638-de2f9910edd9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a632d90-ce3e-4626-8124-00824b6bc37e", "sighting_of_ref": "indicator--cf0ced12-4a4b-41d1-bb99-8c484b54aeff", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--155e5412-dab2-4c97-b103-5b9ada42cba5", "sighting_of_ref": "indicator--86e89918-c653-4b7d-b562-2e2e9e8c984e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03824a47-f66c-4135-a389-34badb5103e8", "sighting_of_ref": "indicator--3acc0a53-713e-4dfb-be52-81940fb69769", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5a0e5b0-d42c-4466-acc5-83da0cad3f7c", "sighting_of_ref": "indicator--3d3dcacf-07cd-44dd-b2ec-6810c49daf19", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc7b90a6-a20b-4007-a434-98884a3e8ec7", "sighting_of_ref": "indicator--1c39f2e1-3e7f-4f15-bdae-4bec4a6c5379", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86e6f2b3-7a46-4f02-9faa-1845ddea6c8c", "sighting_of_ref": "indicator--2327d372-b3f7-4a00-bfd4-d34c5cc2040f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ed42ac3-93f2-4f0c-b0aa-4d8b4c3c2aad", "sighting_of_ref": "indicator--793eaaa6-03bb-48b7-bf36-15ff27a2a9ef", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21cf0ae2-f1e8-4a06-b166-392b631fbad9", "sighting_of_ref": "indicator--258b387b-1e78-47e4-b4fa-46d234ea291e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57045fa8-006a-4e9c-a04f-54f4b7f4ad88", "sighting_of_ref": "indicator--2a14c893-de36-4f40-8509-313793444cf9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afdaed35-3627-4952-866b-a714e3c2e9eb", "sighting_of_ref": "indicator--a568895e-a774-413b-add5-5950cca423af", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d08f579-4a2b-4ac1-ba26-0d5b67bfc2f1", "sighting_of_ref": "indicator--8c02db9f-7944-40ab-8243-3c4cae7da650", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34900092-519c-4203-bdfa-b0dd8b114e55", "sighting_of_ref": "indicator--480b0f59-e9c3-43cf-97fa-004519166aba", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac0fac1c-7ad7-416c-841a-a2ed16d570cb", "sighting_of_ref": "indicator--23620a0d-46c0-40f5-afcd-cee14198b0b8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--534fff55-a752-4eb9-b4a3-a2aff0c0c585", "sighting_of_ref": "indicator--4bf2c08b-397b-4d97-af73-d672c7e1f48e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37f18b80-4283-4759-831e-8570a4cb80d9", "sighting_of_ref": "indicator--8a246640-3a8a-4ff0-9300-3901327b4d97", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb23fbc1-6491-4a32-aac2-4dbed54000f9", "sighting_of_ref": "indicator--3850956b-f6a1-46c1-9602-051b163e8918", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af763a68-7b33-4309-a2b0-6b9539ee81f4", "sighting_of_ref": "indicator--c30ea221-3123-483c-882e-a73d791dea0d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4795b2fc-7bf2-4ce0-afd1-c02c61780d5f", "sighting_of_ref": "indicator--41f5ad04-27ec-47b8-b20f-6954348dd36a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a40396d3-52c6-46f9-b654-1f076e4714bb", "sighting_of_ref": "indicator--50543e8d-4619-4730-a227-b2fe0f7c465c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5e064ee-38e3-473e-8069-3915755b2fc7", "sighting_of_ref": "indicator--88270556-57aa-4c07-a9b1-3794b74a3a23", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--837577b5-8408-4869-8353-4ea5a7423538", "sighting_of_ref": "indicator--77f8e2ff-3b61-4886-bb0d-29112626aaf5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--097727f3-3636-4b35-b05f-e6923078a4cc", "sighting_of_ref": "indicator--7448d375-023b-4ad3-9bd0-e182a755de6f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93a664dd-9d60-43c3-b583-2babb0558ba8", "sighting_of_ref": "indicator--dae982f8-22a5-4997-8fe3-6e24b36563a5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2744c7f7-d8a2-470f-b558-b965ea9231bc", "sighting_of_ref": "indicator--fa868ccc-8c7b-44ce-9618-0d1a68da3ffa", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cff444d-482b-4301-887d-1e1ea586cc79", "sighting_of_ref": "indicator--076b0ded-ab36-4c5f-ab88-73970be6ee53", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--285b1276-2a0a-4d25-a2d4-6343dcf184b0", "sighting_of_ref": "indicator--e02bedc9-a204-443f-87b5-d9b4cf33ee87", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72319cf3-b270-4bbe-90cf-6e8d1bf51a67", "sighting_of_ref": "indicator--9c6793e6-0e19-4e24-9486-49ee1827a504", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7f03b2a-16f3-4497-be51-6a1ea1133200", "sighting_of_ref": "indicator--54420774-b38e-49e4-b8f0-398b3a1b1693", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bed7fd3b-096f-4dfc-a7fd-928eb47af9f1", "sighting_of_ref": "indicator--c5d72172-10ed-4f44-b27b-9fb3356b5390", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4693140-2388-40fd-9a53-7014ee83a44f", "sighting_of_ref": "indicator--a0f6e79d-e32b-4440-84ed-ad815b3467a8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98d63856-3fb5-4e84-b08b-fba0af25e0f5", "sighting_of_ref": "indicator--82d8acc3-33c1-463d-a2de-81cc70a4fa85", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e22d2d6f-c121-4e70-ac38-067e0b19c204", "sighting_of_ref": "indicator--adb1275f-1dc8-432b-87e4-7befd1907edb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc9debe0-4151-462c-a30e-fe9c5040c1ac", "sighting_of_ref": "indicator--ad1128cf-409a-4f5b-a75d-6ba5dbb4b0cb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51df6ccb-1d79-4530-9bf1-8cdd8bbdfaaa", "sighting_of_ref": "indicator--c2b633c2-4904-4202-9e90-246ab41f6085", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceeb7ac9-f745-4c94-9318-8a39682e33a7", "sighting_of_ref": "indicator--393365ac-cd27-459a-9c0c-58230cc78e53", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ba40e4a-a99d-4688-9c45-1703cdc7dcb5", "sighting_of_ref": "indicator--a535df69-e562-43dc-9fae-e4c2a603ae60", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7c58ed6-19b5-49e7-94d5-bda10917fab4", "sighting_of_ref": "indicator--eb6565d3-eeaf-4e93-8360-160945ac3bd3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--938de09a-6e57-4ac1-8411-4a2b5cd5e961", "sighting_of_ref": "indicator--8edd3d3f-f914-4197-9e8d-bab297fd5215", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df94c210-9474-44a5-8566-2d21663f17a8", "sighting_of_ref": "indicator--34774b4a-15c7-4d13-987d-4332dfdb79d3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a31091b-ac39-47bf-8950-31427dff356a", "sighting_of_ref": "indicator--4ba30eac-6b63-4974-b5ae-e580db9f64bc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--407d5b7d-9099-4621-a028-a7bc52c50f45", "sighting_of_ref": "indicator--cdb7972a-d482-4d9a-953a-2c51b3dea20d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51289960-a261-4136-a113-0a6702d4ec25", "sighting_of_ref": "indicator--287766ed-7ce0-496d-8889-3c31fb2dd310", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3be1a0d1-72ca-4f42-94a6-a80bc27fc0b5", "sighting_of_ref": "indicator--7f74ccf3-3b8e-455d-8cac-0f61f0f21bc3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--829d19a6-66d8-46ad-8c1d-27a8617fa52f", "sighting_of_ref": "indicator--3ef64c63-f340-4e32-87c2-973eace1285b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c12b8c0-1812-410c-bc1c-9258c2b44916", "sighting_of_ref": "indicator--c1806a26-54d4-46a0-8b88-66e2a24d43b9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9a59482-ff07-4a11-9384-882c2e173344", "sighting_of_ref": "indicator--586e7c25-f42b-4578-a371-be28f77c6088", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a75fc5e6-822e-4384-a56d-3bef51c5f972", "sighting_of_ref": "indicator--64ee683f-e6d7-49eb-b878-78a996f7363d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--377e0fc5-a731-434e-98b2-8642caaf74e0", "sighting_of_ref": "indicator--7887b53d-9a98-4426-9813-6686c68c17ce", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1036acd3-c53c-4b47-9863-5428b9f797a3", "sighting_of_ref": "indicator--0eecd75d-dfed-499c-a02c-fdf9cc88b636", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cab8f61f-3256-4dc3-9945-da0893d80d39", "sighting_of_ref": "indicator--44b5f55a-1e27-4534-87b9-01551f4ea535", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea099cfc-e842-45d6-8d5c-851f08bb91be", "sighting_of_ref": "indicator--d54cd6d6-34fe-46bf-8bd5-d04cca9b172c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--556bcd52-d20c-4fbb-a7fe-dc4eabaca790", "sighting_of_ref": "indicator--732b812f-3876-43af-8eab-259a647e7d0a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3857004-4975-4985-896a-0fbdda16422d", "sighting_of_ref": "indicator--f07bd360-5a79-489e-808f-c77b25f13394", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8535dc66-9cbf-4a3a-97e0-13b4bcd05142", "sighting_of_ref": "indicator--ec2757bc-3701-46b5-bb42-d669720452d5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf6ee3e4-1fb3-43d3-95ab-b5010a60f0a8", "sighting_of_ref": "indicator--4648610c-2ef7-4896-bfec-485d86eda650", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40816d8b-2ad0-4e9d-af0a-280ab0dc1da0", "sighting_of_ref": "indicator--970416f7-5360-4118-80b6-41865a52a180", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47b47cdb-fab5-4ece-83e7-b43b5e5afe2b", "sighting_of_ref": "indicator--4308671a-c2fa-4cb0-86cd-1d7a1210f3c8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2752473c-2c84-4e00-b667-0ba05b859679", "sighting_of_ref": "indicator--5a82a308-e6ab-43ea-a987-7d110a603c19", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b31a5a26-ff2c-4d9f-8142-28320e295fae", "sighting_of_ref": "indicator--8b9cfafb-97d5-4530-82f2-609234c2fede", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--349d5767-6f6b-4001-baa2-2901209d1457", "sighting_of_ref": "indicator--2d085cf2-9000-4d86-9815-659938fae094", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7d3c004-0f4c-4efc-a471-69ead11d685e", "sighting_of_ref": "indicator--e6aefad1-6a19-4820-8e2a-d4956948861d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48ee57dc-93b1-4e04-a619-46f3258fd134", "sighting_of_ref": "indicator--935254b9-bd2a-4ca2-82ff-86de3186f975", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2f110c3-12a1-45c7-a7af-196f3f114958", "sighting_of_ref": "indicator--0030141a-9dfd-40e8-9579-ed78fbd15cc7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a04e4fa-0208-4871-b632-ce4e89d0fff5", "sighting_of_ref": "indicator--545db6b8-f70b-4cab-b698-3f27cb5784ed", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--224b1c6c-2687-4c79-b8a0-f7282eb3bffb", "sighting_of_ref": "indicator--bfb52fa9-967e-4d89-b405-7d75dc2d82df", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6b6989f-86f6-4e81-a9a4-7fbfaff22809", "sighting_of_ref": "indicator--f8613238-7517-4a39-bce8-3e600092d3de", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32b0c1a8-a11e-4685-936a-6883c6470acd", "sighting_of_ref": "indicator--c524e58f-614a-4fee-b724-6e3b90547f11", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--806bb3c0-51f8-4de1-abb3-9dc9276bb117", "sighting_of_ref": "indicator--9263d58b-2cfe-4537-8d84-38ac0e9d1b68", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2de07aac-3f9e-461b-abae-62c40f04e838", "sighting_of_ref": "indicator--9340b737-3774-4a3c-acd3-48aa4a472678", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb2ea6e6-3bdc-42c7-87c9-231c1e9c716e", "sighting_of_ref": "indicator--1b043342-9fff-46b9-ab4a-70d3afdd4b0e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0edd57ec-6273-4590-a6a6-f9c2041c016c", "sighting_of_ref": "indicator--1f88ff16-e1de-49b0-8a6b-863edd84f18a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de04c2a0-b386-442a-ac1d-b9230c094475", "sighting_of_ref": "indicator--d73d9441-3c7b-4530-99f3-ed17db16c1c8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7b7de46-36eb-4aca-aa3d-be5936c32b7b", "sighting_of_ref": "indicator--2d686868-4dfb-4155-b489-206b3828cdad", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--752df15b-c485-492f-a296-ff36a5ecf2d5", "sighting_of_ref": "indicator--9c537d3b-f06f-4882-8fda-08d2f9e17d40", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3f531a1-7690-4780-81c2-517b24ee1584", "sighting_of_ref": "indicator--0b46ba76-2686-4279-b5a0-cee12b742d18", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28f96bd5-51ea-45b8-9d6d-5c06b1a0b3f4", "sighting_of_ref": "indicator--1b971a8a-0962-4b5e-a1fe-85082ce51821", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26e1b643-a317-4537-adfc-16aa9e2d0885", "sighting_of_ref": "indicator--f89a1ff3-556c-4ce2-8159-ae07148fee8b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9d32223-4633-4870-ba75-6a84c8697a0a", "sighting_of_ref": "indicator--e2b45282-ecb7-4007-ab04-480d1bf03b66", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d48617d-3120-4e88-a073-9ff01c95d57a", "sighting_of_ref": "indicator--c350a60e-7ee8-4c59-bc70-f013c9c0bc09", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e9158db-a59f-4830-aeed-e95490e54d39", "sighting_of_ref": "indicator--d03528cb-c6b3-4216-aa99-dfbac69e0cca", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2878f29-b7d7-4894-96c9-ac04faa210d6", "sighting_of_ref": "indicator--7fb755b2-f033-4aca-9e9a-ec57f6e0a07e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d3ef0d2-2a84-410f-99ed-8333218acb86", "sighting_of_ref": "indicator--b8f98417-1728-4bbe-890b-853fef7b9bca", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ce5d079-f9bd-4287-990c-0da42e6d0483", "sighting_of_ref": "indicator--9b915c90-6092-4309-95b1-8491812a9e7c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4705446b-2976-465e-b4e1-8732c6a8fe89", "sighting_of_ref": "indicator--3100edba-ac5b-4447-8b06-fad7071dca5c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13764024-ef91-402c-9008-6b91142820b5", "sighting_of_ref": "indicator--c5ff2036-c439-46dd-acb4-3c18d589e7ee", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60b4778a-c0cc-4b5d-8a40-a4ca7d45dc77", "sighting_of_ref": "indicator--4e18670c-19b7-41b3-84d9-46df12667b46", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2edfce3-7cba-4fc4-b62d-85126e1db437", "sighting_of_ref": "indicator--893bf704-e8c5-4636-a065-c10d4c516982", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92e0e188-072f-4d94-a119-2eda23a0fcb3", "sighting_of_ref": "indicator--216d3933-820d-4218-8f7b-d5a893cad308", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec9779ce-eeb5-48e1-9df7-c898d6eaeb9c", "sighting_of_ref": "indicator--cc5887d0-ebb4-4923-885f-ec74f3a97f01", "where_sighted_refs": ["location--c8625a69-b7e6-4cad-99d8-76632a875c20"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b6309f8-6a52-43b7-a6b6-2e2f50b3ec40", "sighting_of_ref": "indicator--91e79b34-3cf0-4165-9568-89fcde7e75dd", "where_sighted_refs": ["location--c8625a69-b7e6-4cad-99d8-76632a875c20"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa9a21ad-2bcd-4bd5-a853-c332684d40c1", "sighting_of_ref": "indicator--048cca84-25cc-4364-908f-64e0f0e0b757", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ace95780-69b0-4284-ab52-8fd7a7c221ab", "sighting_of_ref": "indicator--ebd38567-9b54-4c55-b0e5-c1eec688a5b7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9bfc805-dd74-40bc-b8a2-5db22e3561fd", "sighting_of_ref": "indicator--3f275cc1-2f7b-4d98-8210-d022c71ae490", "where_sighted_refs": ["location--c8625a69-b7e6-4cad-99d8-76632a875c20"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--451ea83f-b105-4cd1-830b-a07225607004", "sighting_of_ref": "indicator--244e338f-a89b-4123-9f45-7204eb5bce11", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cbff7dd-aba7-44f6-a7e4-cbf9cde28af5", "sighting_of_ref": "indicator--869c5c10-5198-4c0e-a801-fd5cadc2da24", "where_sighted_refs": ["location--c8625a69-b7e6-4cad-99d8-76632a875c20"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d587a8fa-2a83-47ca-af80-9c16d17a3dbb", "sighting_of_ref": "indicator--6bb44fb8-24de-47b6-86c5-5cbae1d25774", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48d6ba22-84d0-41ab-9b27-c618807db13a", "sighting_of_ref": "indicator--017dbb24-af93-4345-b144-d8d02e6833a0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73dbe203-2484-4417-b5da-a5fa00edcef3", "sighting_of_ref": "indicator--ef1874e3-d664-40e0-a3e7-21b559a380bd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02dede4a-9868-4a9e-87b0-8269a34f9d79", "sighting_of_ref": "indicator--91036be3-dfc8-42ad-a3eb-d73be2964099", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80b36e02-7f18-4e40-8f10-14dfc7914bff", "sighting_of_ref": "indicator--842e3edf-40fe-4a1b-95f0-4ccb6f256227", "where_sighted_refs": ["location--c8625a69-b7e6-4cad-99d8-76632a875c20"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--372d17e7-f73b-4fd3-b30f-fcf5006255f7", "sighting_of_ref": "indicator--60d4b4de-3a47-4569-b274-d53026bacb30", "where_sighted_refs": ["location--c8625a69-b7e6-4cad-99d8-76632a875c20"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5b40acd-b189-4547-b147-46a4a15608f5", "sighting_of_ref": "indicator--2d885b79-4e32-40e8-90da-c2c45098c049", "where_sighted_refs": ["location--c8625a69-b7e6-4cad-99d8-76632a875c20"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ad845e1-85c8-44e5-8151-2a4923c52700", "sighting_of_ref": "indicator--c646a606-4d7f-4cec-9143-12d6244db0e7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e12482e4-d831-4ca4-bb3a-b7206dccb217", "sighting_of_ref": "indicator--ebcae3ab-bc95-4da5-b01b-b497c24d501a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2903990c-f6ca-47ae-b3cc-2a69a77e7512", "sighting_of_ref": "indicator--f75565d7-e1f5-4c31-b667-d6f2ebb3c65a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8d2a7dd-82fb-4b94-b29c-565c0e7e89da", "sighting_of_ref": "indicator--98253902-3583-4b5c-8c44-87b40b8d005b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cad5475-3065-4d4c-901e-dfefc6e8d701", "sighting_of_ref": "indicator--ce532fcc-c143-4a1a-9d6e-45596893aee5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad278b8d-155c-477d-b567-f7c8199633c3", "sighting_of_ref": "indicator--0ce80e90-284f-47e6-b301-0a2b8e99f265", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--414b09bf-3163-4b2a-8686-37ca08b10856", "sighting_of_ref": "indicator--504424ae-fc63-4a34-957e-26e326eb1bc4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d991237d-ee5a-48bc-8f7f-22a8a0252c50", "sighting_of_ref": "indicator--389861b4-35b4-4231-a74f-f35780ee21c7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8691dc8b-dd28-4c44-933b-636056ec24e1", "sighting_of_ref": "indicator--6d09d30d-8459-4ca2-95a5-045647adc636", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e0dc1e4-6d2c-49e8-b262-ca0c9b5d164a", "sighting_of_ref": "indicator--04475732-c0a9-4cb3-8c7b-157a68b7df01", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef2922d5-bd87-47d4-a218-19bc06c534ba", "sighting_of_ref": "indicator--748c9255-7c04-464b-9f02-51de2e032412", "where_sighted_refs": ["location--c8625a69-b7e6-4cad-99d8-76632a875c20"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0823ee0-ae0c-4c1f-ac42-bcad91a78848", "sighting_of_ref": "indicator--5236e1d6-8627-4f98-9f7e-03bda3f9a205", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7528f363-a57a-439b-a93b-555b10315086", "sighting_of_ref": "indicator--beb00493-9f4f-4ab7-b175-1cfa0df4f1dd", "where_sighted_refs": ["location--c8625a69-b7e6-4cad-99d8-76632a875c20"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e7caf0b-60fa-4480-8ea4-1e49fcd25336", "sighting_of_ref": "indicator--f8a548c8-966b-456e-b247-da6c7a56757b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12a8ebe7-5113-408f-a191-da39fe5ce1a5", "sighting_of_ref": "indicator--7cd436d4-b5e4-4e80-b02d-0519d07fe99a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bf5ffdd-aea3-4987-8e5f-10241763beeb", "sighting_of_ref": "indicator--eacfbc10-0b05-4a4a-9e75-d731d3bf94ee", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7820984-c150-4423-b67d-02db19fb4975", "sighting_of_ref": "indicator--f017a523-cd8f-4c9a-be9b-074a4584ba54", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c52b8d7e-a5e1-4098-9605-6a7554e44c98", "sighting_of_ref": "indicator--69345aed-7fb8-456d-a6bb-17a0bd967993", "where_sighted_refs": ["location--c8625a69-b7e6-4cad-99d8-76632a875c20"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b5ff3e9-8278-49f1-be01-bbd56029d651", "sighting_of_ref": "indicator--3648ce2b-8a8d-469e-984e-72727b954b47", "where_sighted_refs": ["location--c8625a69-b7e6-4cad-99d8-76632a875c20"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--669a777c-c260-480c-aa34-feebd96fb368", "sighting_of_ref": "indicator--333f0e5d-8af4-4264-8f4c-967aea53fe62", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b86e1139-e8a3-446e-9c15-c5b6e29e0fe5", "sighting_of_ref": "indicator--fae12888-a7f3-49c6-90ea-4e3ae47d56cf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0a79b8b-3487-454f-bea2-8c410150c92e", "sighting_of_ref": "indicator--eb26b447-4711-4a82-8d75-71c42d451fb2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c71180fb-3dc0-4963-985e-7a80da29f72c", "sighting_of_ref": "indicator--6b8c5dce-1ed1-463a-98ac-7dfb7ba75a86", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20eac521-9907-48e3-9c0d-6d311381c089", "sighting_of_ref": "indicator--11e24d18-c3e6-454b-80a9-1fcc3c5b9297", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd7bbd69-3881-42cc-b559-6b2478934c9e", "sighting_of_ref": "indicator--45a8f887-1fec-45a1-a2b6-8f7002316254", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa3ecb78-1d6d-4071-8936-00a253dda91e", "sighting_of_ref": "indicator--30f42e08-216c-4822-a50d-cfdca9e44f3a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84a0e37d-f22f-4dc6-b90b-09ff9f083eb4", "sighting_of_ref": "indicator--2de0a9d7-23e3-40d5-b08f-123c2132feeb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60db4047-52b2-4c7f-822e-15e7dba09daa", "sighting_of_ref": "indicator--6e9a77d5-b91b-417b-826d-6eae0fe10545", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdf5de58-4b0c-4a76-90ea-18ae6bef1f68", "sighting_of_ref": "indicator--3d14d3cd-950f-48a2-81f4-711a79ebeafa", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be3703bc-4855-40c9-8e3a-ca2063967164", "sighting_of_ref": "indicator--3db8cb11-cfc4-4d87-9a2f-2cadb2585867", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--954ae8a6-ab2a-46fd-ae60-9e4a7cefd835", "sighting_of_ref": "indicator--584b18a5-a78c-4c9d-8682-d1efa8f5da04", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b40bfea1-2a08-41cf-a685-fc3c68a71979", "sighting_of_ref": "indicator--421357fd-72a0-439f-98f2-ad67525362e2", "where_sighted_refs": ["location--c8625a69-b7e6-4cad-99d8-76632a875c20"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34bd160f-0c92-4211-b9fb-d2569d550efc", "sighting_of_ref": "indicator--ee64c3f8-acfd-4ca6-9f90-b94bfb6796db", "where_sighted_refs": ["location--c8625a69-b7e6-4cad-99d8-76632a875c20"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e641426-bea0-4cba-8fec-559685227e12", "sighting_of_ref": "indicator--199abe64-aa17-40d3-ad4a-cb90b0eca726", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b03a81b-bbb6-4d01-ae51-586224936f5b", "sighting_of_ref": "indicator--f9dcddb7-ccd0-4136-870f-797addb4a9aa", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45a0b6ab-0755-4dd8-adaa-a273e1cc7cb3", "sighting_of_ref": "indicator--948318f7-52da-4915-8c4b-4d289d44fbcd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43fd9801-e6f8-4531-97ff-782b02239e84", "sighting_of_ref": "indicator--73971b95-31a6-4181-835f-8b5236224068", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc99df86-ea9e-408b-978c-03636e9a64fd", "sighting_of_ref": "indicator--214e94a0-454f-4c4a-bbda-5e81ad1faac7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a420e299-d3e7-4ce1-9484-b1db6f2c4b2d", "sighting_of_ref": "indicator--6a67138e-bf4a-41fe-9f15-0f6de4f10fbc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--013ddccc-28fe-4849-b92b-31683d9cc909", "sighting_of_ref": "indicator--8d62bffc-41df-40ea-9c01-5c9a171db018", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90312d5c-675e-49f2-a285-78317116eb06", "sighting_of_ref": "indicator--93f0d5b7-481c-4fc4-a8aa-11484e68fad1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d650efe4-311d-440d-8b05-b2678f36a4bd", "sighting_of_ref": "indicator--4d8cd8d9-c2a2-4317-84e1-951726d69e1b", "where_sighted_refs": ["location--c8625a69-b7e6-4cad-99d8-76632a875c20"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12e0b120-b245-4294-be45-50994d1db273", "sighting_of_ref": "indicator--9bfd815f-9574-4fe0-a18b-6b7369622afe", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78b2baaf-df4b-4ef7-8af2-645852089297", "sighting_of_ref": "indicator--c031f7d9-9a2a-45be-8d0a-d4b8c288b2f0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad67dea1-5afa-46b9-9713-d78a9422a9cd", "sighting_of_ref": "indicator--23e20f63-73f3-436c-8af0-048ac8b752b2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc51ae3c-261f-465b-9109-ed62f74d86dc", "sighting_of_ref": "indicator--0ade4c3f-2fe8-4fa4-ae79-beb318e0cd13", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b35ad0b-1979-4f8d-9847-79ccde4f7f38", "sighting_of_ref": "indicator--6e513ad7-7315-42d5-9423-6540d94d1102", "where_sighted_refs": ["location--c8625a69-b7e6-4cad-99d8-76632a875c20"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--310204b9-069d-4882-880e-13f83dad7e0e", "sighting_of_ref": "indicator--f1cc61c7-e45f-45bd-9868-b7956cda1218", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--766cb69e-883d-4db6-9d04-4b8bf827d07c", "sighting_of_ref": "indicator--6f5bcfd3-5e5c-41aa-9f2e-951def3ab45f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52f549fa-466a-4b59-b1ff-cdf81a6a1669", "sighting_of_ref": "indicator--457d9081-aeae-4edf-a5c7-789198ac1920", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbab190e-8879-405e-8c67-2449cc9054d1", "sighting_of_ref": "indicator--5cc8f9b5-1bc8-40a9-9e9d-912b70ed7dec", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--075d5669-4276-4b81-b8a4-12cd0c288627", "sighting_of_ref": "indicator--258ec422-8a98-4838-b21b-92c801dc0d74", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d400393-90f4-4921-8669-7222f4a78dd3", "sighting_of_ref": "indicator--4d607af2-8a13-446e-976d-c77179057745", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffd36aaa-a98f-426d-9854-abba5f35ae79", "sighting_of_ref": "indicator--586d1e59-bad9-4cf7-a649-1ac5a2aa2de1", "where_sighted_refs": ["location--c8625a69-b7e6-4cad-99d8-76632a875c20"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eb11109-205c-4879-84eb-f81a329dadf5", "sighting_of_ref": "indicator--5b907087-6ecb-4ad4-92a6-e04ef522ad6f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb85a711-7ee1-4b27-8e5d-7a0a25d07b8d", "sighting_of_ref": "indicator--da2727b5-e9b2-4cbe-9b0f-9a54fb49cc1b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fb4c413-0cf4-450e-90a4-1cb5c6c4d45a", "sighting_of_ref": "indicator--abd03115-c792-4f6d-838f-faeccc82d677", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92329379-ff55-4559-9101-db0c5d2f9817", "sighting_of_ref": "indicator--f7e3d176-16b0-4966-8b7e-f62ed2cebfdd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00363d01-1c97-47b2-afe3-a9fc2345da5b", "sighting_of_ref": "indicator--8e4af88b-cb3d-42f3-96b1-2d99027bbad1", "where_sighted_refs": ["location--c71c2550-5849-4a8d-b050-635a93ef5467"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e9d7d1a-b7ff-4011-8783-be79094b4e41", "sighting_of_ref": "indicator--f19c03df-7ba5-4bf9-b37d-e7ea9a26f818", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc103617-0714-469f-8e04-a8853baffe0c", "sighting_of_ref": "indicator--06f03f9d-b759-4ec7-b1ed-0108bd345492", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca202c1d-343c-4ad8-a8a4-2f89c2d40d81", "sighting_of_ref": "indicator--93a44013-d508-4fa8-981f-a601cbd0026c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f3c92df-ae80-4590-9958-29ec90cbd30b", "sighting_of_ref": "indicator--a104f5de-e7f0-420e-9001-fbf1f7578690", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23f8f0a5-f147-4efb-ad19-f841fde6731c", "sighting_of_ref": "indicator--22c32214-8f49-43cc-aa43-64826155a602", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0f10923-be0f-46d4-99be-05e4eb922a89", "sighting_of_ref": "indicator--800a6f75-612d-47b7-8673-ff791a416e66", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c13d95a0-a805-4fbe-99b1-1046eb4699dc", "sighting_of_ref": "indicator--32af3c8d-db66-4969-b021-810fd5ad60ab", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0af6b304-1d0a-4cab-adcf-8e6d7d3e28f9", "sighting_of_ref": "indicator--6f7d45ba-2750-4d78-b49c-5fceb984726d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3719ba1c-a025-4b3a-8f6e-ff5d927dbf7e", "sighting_of_ref": "indicator--b641977a-92a1-4794-ba7f-02092a387702", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75570263-bbbc-474e-a059-1f8df52b8c17", "sighting_of_ref": "indicator--18c7f799-b2f6-402b-82a2-3bb58d031763", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2784d558-5605-4771-b8cb-9565a25a1c7a", "sighting_of_ref": "indicator--cdf968a0-ca69-46e5-8f2c-1fca3648abad", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8678114c-bdae-4fe1-994c-e78bdfd9dd66", "sighting_of_ref": "indicator--c3a8459f-3f49-4141-acbd-f169cc413e60", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--679f6523-6e76-4cc6-8222-cdad0d27d2c3", "sighting_of_ref": "indicator--7220be16-4cbb-4bcc-baf7-e097992d8a0f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa509303-17e8-4d73-8957-a7d028f897fa", "sighting_of_ref": "indicator--53e579cc-8b4c-4fb4-b18e-e23fc400754a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c0a4383-0b8a-4175-bf6d-aee8edc11272", "sighting_of_ref": "indicator--e3931040-8925-47e7-a3d2-a7f1d79385f6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--990221b5-12b9-4c3f-a527-efa54ff0e53b", "sighting_of_ref": "indicator--f68d59f8-9488-45c3-b328-7fa8317f57e8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a89f707-364f-4a4a-b0f8-2c660f2db586", "sighting_of_ref": "indicator--78775456-da11-4c50-92cc-06411f10c219", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d1a0a3b-a204-42a6-a4d8-915ca0140d71", "sighting_of_ref": "indicator--4b05675f-b0ba-4dca-970f-fe1d821e9439", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a05edbf1-4282-453c-b456-dda503200f2b", "sighting_of_ref": "indicator--8d1913b4-4653-4555-a9a8-ea633cbeb537", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e574836-1b97-405b-b272-e4728ce238eb", "sighting_of_ref": "indicator--bfb32d62-5ca3-4779-b7d2-06e9893b9c76", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2479c807-1e13-41da-8ed1-66451ee120d9", "sighting_of_ref": "indicator--f4b62c10-5f3d-4b61-93d8-aa3eae5bf6d6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--476d2af9-7315-4133-822e-62c69d89cb73", "sighting_of_ref": "indicator--a150c40d-4cba-4bbf-a02f-11177342605e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5184164c-47b0-498a-8ac1-21b9dc8b5125", "sighting_of_ref": "indicator--ba879b84-aa4e-4612-af7f-c11e29912a77", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69989838-09b3-4367-9707-775ae7b0b570", "sighting_of_ref": "indicator--1b80e0d3-1af6-4187-9903-41644a7dbdf1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3542e98-0176-4bb6-8fc1-fec42e6ba4df", "sighting_of_ref": "indicator--a099e51f-d240-465b-9945-415daac740a7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed87a75e-8be5-492e-b33a-f710657d6394", "sighting_of_ref": "indicator--6a5970d4-b834-4098-b0cb-75db0601db84", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bf71ce4-1c8a-44d1-afae-e1a3cb6ab37a", "sighting_of_ref": "indicator--87865f58-b97b-443b-8b76-f52b8a32209b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--437db2ee-8b7a-40bc-9860-993e04ff381a", "sighting_of_ref": "indicator--adb1375d-1d99-4c90-8c0f-544693481832", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfdeb5d2-11a7-44ba-9dd5-38e344356cdd", "sighting_of_ref": "indicator--f1f27904-26f6-4690-a16a-591f34a2b1ec", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b55290e-3f2d-4cf3-a78f-f36b40105a70", "sighting_of_ref": "indicator--c26d287f-bde5-4aaa-b829-c94b2b00c58c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c0fc936-1516-4ba8-8fc1-d41882964355", "sighting_of_ref": "indicator--3507c625-ad57-47e3-a5f3-2ecf227bea53", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--279fbd0e-6e42-456a-8fc0-29ad084ea70e", "sighting_of_ref": "indicator--12d77efa-c29f-460e-ba94-498f09e78cfc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dcda891-761e-42c0-ac73-c337a74f4a5d", "sighting_of_ref": "indicator--573d5e96-d6b4-4468-a802-17805dbecdb3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deab7d42-ad6f-4f26-87aa-ff17287b0bf6", "sighting_of_ref": "indicator--bfe15b88-3740-4ff5-8464-1ddcc3180dab", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d304327-fdbf-4bdc-81f6-a30a556bfe69", "sighting_of_ref": "indicator--429bf55e-a8a9-4062-be35-bfbfcc7f4d12", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de471891-d7d1-47a7-b0a4-8a0206f0d7dd", "sighting_of_ref": "indicator--8c2649a4-be84-4cb4-95c1-e9549ec1bcbd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72ce742e-1636-4260-a53f-9abf9f70440f", "sighting_of_ref": "indicator--985e3590-0323-419b-9769-a11d2a7b15f3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0a02785-8315-4ed7-8c4f-8cb55d45c706", "sighting_of_ref": "indicator--c11f4b43-5c73-4f02-9c58-6f6440afc2cb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--766ebd6c-d3c0-4bfc-ab78-976a5716c8f2", "sighting_of_ref": "indicator--41420d06-74ab-4402-ba99-c395382b259f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14b7876b-245a-45f3-a9cd-4a4a7aa30474", "sighting_of_ref": "indicator--48544fd8-c8b4-4ed4-92fd-f0d0f638c8e1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7a150c8-d0e3-40b4-8e5e-d7b75fce6d0b", "sighting_of_ref": "indicator--49cfd67c-894b-4160-811c-a683dcfed72d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--972a5f9a-fb76-47d9-b60f-d65686b9bc10", "sighting_of_ref": "indicator--2a6a3b3a-e953-42dc-8cfc-70264c6f8dbd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dafda0f-77b9-4d34-9e6a-3d1fbcfbeb4e", "sighting_of_ref": "indicator--859be43e-8a95-475b-876a-b6831e86d231", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb664d0e-3353-44ee-ad34-f28d1b47bb6c", "sighting_of_ref": "indicator--2d868e2e-9216-401e-b9f2-056998e07c06", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--518b11e9-be5a-4b05-a640-340d8178f54b", "sighting_of_ref": "indicator--1844c1c1-ffdf-4c5c-be0c-d2f9a9e53cfb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27e4c26e-bbaf-43d9-8246-33e472261c04", "sighting_of_ref": "indicator--ffbf8020-fc77-43a6-b1cf-b45819c17e6e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bb577d4-fc9c-4d21-879d-67204dc86c98", "sighting_of_ref": "indicator--58de0e81-c7a7-46fc-a100-abf71a946a68", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f27b88e-713f-42f7-898f-7a69b318bfd6", "sighting_of_ref": "indicator--ee285ffe-42fe-4955-bec3-b12f4109355b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96af8df1-b8f2-4001-a49f-e3e5c19ca488", "sighting_of_ref": "indicator--d45fb188-dab8-4337-8a62-64d5a25d1c51", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa341d63-551b-493b-9e3f-52d60898301f", "sighting_of_ref": "indicator--d96a364c-23d4-4192-a500-5f15c7450cc6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0afbd3a6-0fbe-41d9-abac-b4b96f45986c", "sighting_of_ref": "indicator--a4cba030-849a-4571-b509-a7cea2c54f03", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e6aad1f-5260-49b4-a80f-4a115f0f2c8f", "sighting_of_ref": "indicator--d67b17bf-9bef-4fd5-99ef-fed2e06757df", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb183333-31af-4999-8e06-a2dd6185ca55", "sighting_of_ref": "indicator--4357bd45-162a-43a8-868e-89fb55c21671", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ceadb69-e2aa-4b11-a5c3-2d0da4146739", "sighting_of_ref": "indicator--6933c9cd-38b4-4667-bc3d-a21c184972b1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3611cc27-a4bf-4955-b02c-7a585268a02c", "sighting_of_ref": "indicator--46293bd2-655b-4687-948b-14a7a3face21", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b86a6ec6-f736-44c3-9cd0-6ab3a0b9d1c3", "sighting_of_ref": "indicator--ebcb2000-1eb0-4cbc-a765-ccfda696d4dc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54ac65f4-f9e1-4801-a9d8-6b0b12bb1076", "sighting_of_ref": "indicator--854eded8-aeae-4030-b131-a4db5f6849bb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19b0e474-9f73-4848-b391-31fa137fe214", "sighting_of_ref": "indicator--5525cd02-5424-4fb9-8e00-dc7bea3e8e71", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a99c4ba5-9a05-4b37-996f-8c0da326cf45", "sighting_of_ref": "indicator--7ff87e93-c218-4028-a06e-c4f9dd32da3c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3294b32-7df1-4df2-a354-eaffd67e4bb5", "sighting_of_ref": "indicator--0c8b3778-5df7-4863-85ac-15787400199f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43700fa6-d7e8-47fd-9395-f960076d8403", "sighting_of_ref": "indicator--041f2f48-08bb-4016-8b28-8abde45905f1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f57ef07-d095-4483-a578-6c554b9e1db5", "sighting_of_ref": "indicator--69de5fff-da3c-4768-af07-f67c8eb6241e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19880caf-50ea-474b-881a-1e88581735c6", "sighting_of_ref": "indicator--8d922942-9b3d-4870-8cc0-c13fad06ec67", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4a939f0-d5d0-46b2-8b74-5af8d8072f76", "sighting_of_ref": "indicator--52e46203-90d6-4aa8-90cb-b93a8f93d599", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47499b54-7ef2-471d-9648-95c8cadc20fc", "sighting_of_ref": "indicator--6289d7f0-2ba5-4213-9c2f-0339e330325d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bd32652-be8c-4255-85b0-ad90bd47659b", "sighting_of_ref": "indicator--3b2cf61c-ed37-44ab-a68b-e577ba96de00", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42583b8d-5145-45b3-a92d-cd492ee5bb34", "sighting_of_ref": "indicator--b261e2e5-caaa-4c52-a68f-0b346c8da331", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5305c028-d28f-4b0b-b934-cb5de418a7df", "sighting_of_ref": "indicator--87e0d55b-d336-4000-8ccc-5cfe929adcd2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6e68b83-bf1f-461b-b502-c8b9f79743bd", "sighting_of_ref": "indicator--afb84fd0-20a4-4e09-b874-10bc7f3765e3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3bbc28e-4b72-4bfc-aa3f-9dda8002bb46", "sighting_of_ref": "indicator--7ad884b2-97c6-41ce-ad6b-4f4b6facb20b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--481053b1-20ac-43a0-8e35-171af218f5df", "sighting_of_ref": "indicator--7464fcb3-6d9e-4e74-b758-fcb3225b564d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0771796-0ff2-4259-b675-25b2b90fc71a", "sighting_of_ref": "indicator--581de3d6-729b-4254-988a-c89f8b9bba4d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6a640b0-3214-4fa4-97d0-a87430a02162", "sighting_of_ref": "indicator--2e9ead63-504a-4daa-9a10-c1aca6e34147", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--711fb39b-97cb-4427-aac6-85b05d55cd05", "sighting_of_ref": "indicator--8f7b287e-010d-4da6-8cc0-0bd41c12217f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fced661-be11-4262-aff4-9d58daad75b1", "sighting_of_ref": "indicator--5537ba12-5f9a-4846-8259-9b591f3dd46c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--668188f0-aec0-4399-adec-51c547877fbe", "sighting_of_ref": "indicator--aa503286-4652-464c-803e-e03954a12021", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b718da1-d558-4d0f-a8fd-71f3935adc2d", "sighting_of_ref": "indicator--dbb88caa-e8a3-4de7-ab5f-0d814c98a7c6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3047c3a0-235c-462c-b08c-5711cf5da41f", "sighting_of_ref": "indicator--9a8a9378-917f-4890-99a5-50ad6fbbd84b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d5f6cd0-7443-4c3c-b756-d3164157ccdd", "sighting_of_ref": "indicator--15a99710-3da3-4ec9-b2d6-fa8c75c98c0f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63e4c674-60d3-45e0-b5a7-1991dedd26d8", "sighting_of_ref": "indicator--34c57764-b7dd-4f4b-a82f-5522f6c5c91a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b471c88-5bd0-4b3a-b92c-4f9ce5dbd265", "sighting_of_ref": "indicator--a0df71b0-129f-47df-b4af-f213243ce354", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1747534-d844-474b-910d-5e1656a8cd72", "sighting_of_ref": "indicator--49846117-6b93-40d6-8642-be6fba551655", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4034f5a1-6d43-4547-b3ed-ea8f00a99ea6", "sighting_of_ref": "indicator--79936b0d-3cb8-4cbf-80df-6dbec69b1f7b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e741803-e832-4d26-b3dc-a71281c6d3e4", "sighting_of_ref": "indicator--aac45760-cc61-4508-ba4a-37fdcad5d963", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9a7d6ff-82f2-4586-9d92-2abd0c7af806", "sighting_of_ref": "indicator--752c6b00-5f7d-4cb8-ae02-907b25a78a3e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25811eb8-e36e-4452-a598-9c1ba52a5e24", "sighting_of_ref": "indicator--0229e8ad-92ae-499a-94a9-d4ee740f12e0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de108f36-3ab8-4389-9773-e5aa2f4644e1", "sighting_of_ref": "indicator--8bcce6b1-2fcb-4b3c-9128-515f8a54aacb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11e81fde-4e0f-4fe6-97eb-fab4da5101bf", "sighting_of_ref": "indicator--e0ebe0b1-5838-42a3-a266-e8ca0829edcb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88cfc0a6-a167-4845-8aa5-b6f5bda0d1ed", "sighting_of_ref": "indicator--873e9e93-ffa1-4dd9-83c8-77e7a209efe2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d74edcc-36d6-47a6-9438-9fd4e1646f58", "sighting_of_ref": "indicator--cd8669da-9d88-47e7-bac0-75ebb9589578", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8df6b5c-f842-48fa-89ff-a34e300ca419", "sighting_of_ref": "indicator--93f739ac-f6fc-45b5-a97c-c4364c531731", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--635169cc-ced8-4603-8383-f85781fa7cec", "sighting_of_ref": "indicator--72ea47ab-44aa-46e8-8404-6418c02547cd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d933f00e-9a22-43c0-bbee-8622eca106b9", "sighting_of_ref": "indicator--6a6c35ee-5895-4b68-9b95-c5270b98de39", "where_sighted_refs": ["location--c8625a69-b7e6-4cad-99d8-76632a875c20"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caf0fba8-e8d1-4e6f-b3ec-0ed4c43af639", "sighting_of_ref": "indicator--02abe708-6827-4269-bd3a-bda623c5b899", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--732b4400-f05c-4243-b896-8a829ed97d70", "sighting_of_ref": "indicator--d334eb46-5db3-47af-af7d-9e34eab736c2", "where_sighted_refs": ["location--c8625a69-b7e6-4cad-99d8-76632a875c20"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8112399c-c854-4bfa-b279-999c2db1929d", "sighting_of_ref": "indicator--1d584807-6528-40fd-b4be-28848c67b32b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c714a686-ce90-4db4-83fe-7d3f8a134af1", "sighting_of_ref": "indicator--1bc52afb-21e9-4f35-bed9-8a6a8d607bbe", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8722c0ba-be07-44b4-a7f9-e8fc2bb7072a", "sighting_of_ref": "indicator--8574cb74-82a9-4edb-ab19-5f529d725c6b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cbb8e40-3b19-4597-a60b-ec708e5ae231", "sighting_of_ref": "indicator--2d56cf7a-b6f1-4136-abef-d858910e0ce2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a97350a-cf0f-40b3-81b6-60dfc7743cb0", "sighting_of_ref": "indicator--c9d3f085-2a4b-4440-9283-a7713956bd9c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08d7b575-807f-4389-8630-c06e3b143617", "sighting_of_ref": "indicator--efe84bb0-51be-431a-ae75-4bd5093e259b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f468799-2934-4568-978c-c116c61bf0e5", "sighting_of_ref": "indicator--730b04c7-7baf-4773-806f-0400583604b0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fff8e52c-f224-4174-a39a-84329b76046a", "sighting_of_ref": "indicator--79b48d21-069d-46dd-831d-056db06b2c5b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f87739a-85c4-40dc-a3c2-5b09a2b7304f", "sighting_of_ref": "indicator--8a0b6787-c663-4afc-94e0-2f5c6044bd7d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cf324ab-814d-49f0-8a8f-bd361a26748e", "sighting_of_ref": "indicator--ebc297d8-be8b-48ab-a9f1-7a8852ff9381", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88badbf5-f7f2-470b-b7b3-919587492227", "sighting_of_ref": "indicator--cb297e6c-0e4e-4707-944c-c62b83c7bdb8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccbaae2c-e18a-4d33-97f1-a0d682bb56ff", "sighting_of_ref": "indicator--af2bcb10-3954-4e2e-8120-5355a743a589", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93c00ede-945b-48bb-8d0b-713eece9412b", "sighting_of_ref": "indicator--ca5aec07-7098-4c52-814f-9baa4d544cd1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1214a271-0cee-41de-8235-81170495aa85", "sighting_of_ref": "indicator--b17752ad-9056-41b0-9339-ee609974d9c8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acf8d2b3-2cd3-4b12-8bce-4ddf6cbbd0fd", "sighting_of_ref": "indicator--b2b40b5a-9ed6-4cbf-9ea1-253d230d094c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e92d0a4-6af5-4831-9e27-a7ab3c7cbe19", "sighting_of_ref": "indicator--dc668467-8c7a-4cf1-b8ec-7a1b22c2698c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cd2a88e-2749-47f1-bfc4-5b4967b4b925", "sighting_of_ref": "indicator--86941e4d-8643-40d6-99d8-152246bc96c2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c99cb08d-2cd4-477e-ae36-04591c91afb7", "sighting_of_ref": "indicator--eec2ecb4-640b-4580-be11-6f645d40cf96", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--916c719d-ff6a-4254-bb8b-17ec5a5c65c3", "sighting_of_ref": "indicator--21ea0d27-6910-4d48-aa52-89704c24a4c4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9c1abfc-feae-4dba-8ff8-2a7de44360cf", "sighting_of_ref": "indicator--16ea797c-f270-493c-934f-afc3ef01c602", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49727657-5c96-430c-97f2-f6dd55f7e737", "sighting_of_ref": "indicator--4c3930d8-3812-4eac-abf0-4d319eb4667d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--363f62a4-72e5-4db4-8ce7-d8cdc68c10a5", "sighting_of_ref": "indicator--f0d5715f-8ce2-4d78-b7a2-8559cc25f38d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b425aa37-f024-4d34-b05c-55a8e6978c8f", "sighting_of_ref": "indicator--8aa4efd0-1dbc-4428-82e8-ce6ac0a04588", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4671e744-3b1e-4150-beee-16c96ee8e753", "sighting_of_ref": "indicator--a91396fe-63f3-4c47-b48b-8b2a7eb6af27", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--625680c4-4a01-49c4-b69a-2adc4ce5a014", "sighting_of_ref": "indicator--e58d46ac-0216-4e58-b961-1c37753f68da", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8b527bc-8734-438b-ad1e-83f28868f628", "sighting_of_ref": "indicator--4051a2ec-10ad-42b9-a038-1e211c7c2f53", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dc15664-0b7b-4c50-b112-2eecd02526f5", "sighting_of_ref": "indicator--da2a7539-a83e-4d11-8945-3b215cad0964", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbf45b8e-f1b9-4f5c-8fc7-9a7ee87bb9af", "sighting_of_ref": "indicator--3f6a7844-b25f-4133-95aa-d3ff83f61cbf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fef2824-0c70-4efd-9129-4cd96edd0cf9", "sighting_of_ref": "indicator--74185e05-78c2-4470-b08f-bbb030739e74", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e1dfb75-7764-4a08-b679-74b4374f5d6b", "sighting_of_ref": "indicator--9a8b7d8e-eee7-40d7-83d5-d9da6b9314d9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8c289ad-3e96-492b-b230-97b4cb237d75", "sighting_of_ref": "indicator--49eab03e-3cb3-424f-9a1e-d5b546a60b5a", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--428cc804-1b5d-4e4f-b71d-28a218e77f81", "sighting_of_ref": "indicator--dfa9881c-0caa-4f6e-beac-af86cad2edf6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19dbf646-b3d2-451f-8b0d-bc81e9a6735b", "sighting_of_ref": "indicator--f240a360-19c7-4ec5-88fe-1994184f06c0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dcc6867-858e-481b-b3f0-0a3a1ab36c75", "sighting_of_ref": "indicator--3c6186ed-dcb5-4d41-80c4-0616a73c8645", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67667d82-233a-4e74-8c0d-c9ae5bd3a049", "sighting_of_ref": "indicator--55bcb04b-9ad6-4be8-a064-0de87a496baa", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fd76d70-ff49-4102-91a8-b52c63697801", "sighting_of_ref": "indicator--8e84c988-bfb6-4492-b467-359a13ccadb1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdd4d8c5-9403-4552-93d3-9c7416491902", "sighting_of_ref": "indicator--6696d6b9-e749-4ca1-8ebb-e14dd54f7da8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--101894a0-b8f6-4337-a6b8-f4ddf3af0134", "sighting_of_ref": "indicator--a712feda-6a5c-441a-969f-de60456bc44f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--168de3eb-32f8-46f6-81b5-86d4e6bcd3e1", "sighting_of_ref": "indicator--f7ea74a0-d763-482c-a541-a6e5aaf8a3fe", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d83bd1b9-adc3-494d-a7a0-6a9277740757", "sighting_of_ref": "indicator--7da6f5a7-13d3-4b42-bf2b-097b9c6661e3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e45ccd7-59f0-473b-9fd7-ab323fe0f720", "sighting_of_ref": "indicator--0b8e0c72-caa6-4abc-8406-eea6d0904c28", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--528289de-5a29-4622-ad7a-87a30b14c680", "sighting_of_ref": "indicator--4c4dedc1-1bc7-408e-866e-5caaf35373cf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--581a4c4b-fa8a-41b0-a059-b3d318f21eca", "sighting_of_ref": "indicator--f27e3cad-fd1b-4469-a050-7a87dec62910", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc17a32c-f6c1-4fee-b59d-a49f17ba7ee6", "sighting_of_ref": "indicator--116011cd-034c-47b4-ace7-003656dcdbd2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41526b21-9257-4588-b2b6-b950ad4a7ce5", "sighting_of_ref": "indicator--8fa30def-e592-43b1-a72d-517c1f6c461f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d4a4d55-c318-4469-8816-09b83687b1de", "sighting_of_ref": "indicator--bcc057e0-9361-4eda-bf78-4ff478757c78", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da3a72fe-4f41-410d-a2a0-3aae631c102f", "sighting_of_ref": "indicator--8e408b76-111a-449b-9ca2-874fdee59ed8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa98ab21-8f3b-4d8a-a225-4c97e7caf05f", "sighting_of_ref": "indicator--68c4028d-2e04-417e-bdbf-b59f4bb9052d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f561b1cd-c43b-4dac-8ff7-01d59c629868", "sighting_of_ref": "indicator--8107525b-a707-48b8-a7de-fe2976c13f42", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bae098f-a03c-4012-938a-9ed46da22b02", "sighting_of_ref": "indicator--8cae83e2-0762-4059-9f20-82bf15280c11", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--080b2d90-5423-4cab-990f-0868a405f6e7", "sighting_of_ref": "indicator--9637f460-0472-469c-8853-a7b2f63d74df", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--291f97e3-5b7d-40c7-81ce-94f23b1913d3", "sighting_of_ref": "indicator--89effa05-01f0-4b39-860a-9dcc16db43b7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--100392b2-4b1b-48df-b414-7b9aa6938271", "sighting_of_ref": "indicator--e13a943c-a4b9-4947-ad1d-791559d663f4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69450419-a874-46a9-b1d8-355427432afa", "sighting_of_ref": "indicator--73293b89-f669-4829-9f04-d65c31b5913b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f39ce665-7366-498d-b018-ecae47909f77", "sighting_of_ref": "indicator--b1ca39c5-0c12-442c-adf9-d86806bca02a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3af29937-64b2-4d7f-b150-25d76b4f1d93", "sighting_of_ref": "indicator--6eb2a238-1264-4f34-940e-13e28b1f8c6f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d34167b3-4691-4367-b464-8e04c95335c5", "sighting_of_ref": "indicator--ac3fa437-a606-4c8d-9ddf-a84f9a4b19ef", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e374ce9e-a4c9-4691-9afb-043eca173871", "sighting_of_ref": "indicator--c324a14f-78dc-46d1-82ed-e3c235069efd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b63912e8-7673-4c4d-b78b-3ae7b974da45", "sighting_of_ref": "indicator--0b503ae3-9eeb-4a9d-9e3a-ad73145b6eab", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ad29bdb-cfcd-4c6d-ab00-ecff934a51fc", "sighting_of_ref": "indicator--b41402d8-e97b-426c-aa57-ffba4a51122a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c52a8b62-c08c-4f83-8a34-3c99d9dbae3d", "sighting_of_ref": "indicator--62d46160-44b9-4f8f-8af0-4afb45efc462", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4126e5e1-4c49-4f86-a086-86ffbe2948b4", "sighting_of_ref": "indicator--6d86f8a5-40c0-418e-a1fc-13f0f46f0f84", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca16f2fc-c8aa-4c6f-bab1-98a0ea6eafaf", "sighting_of_ref": "indicator--928420cb-a083-49fd-a60c-ce210184a72d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dba7b9cd-8392-4d78-aba8-95bd56f31c3f", "sighting_of_ref": "indicator--95ad5786-5496-44f7-abb5-35ff0b4c0add", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0489fa1-bdea-48e3-93bb-a9101c3b43f6", "sighting_of_ref": "indicator--6b2d8cd9-840f-48ef-bec5-952a11e37d5d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96992597-1ba1-47c7-969e-676b49e356e9", "sighting_of_ref": "indicator--256ae901-a840-4469-93f1-9de3aebad298", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3512ffa6-7d26-45f9-a5c7-6c41b98b5944", "sighting_of_ref": "indicator--4608f50f-265a-4cc2-980f-a05706252877", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6007ce4-d84b-4cd4-8479-7b2aa7718dcd", "sighting_of_ref": "indicator--250a96a4-9f0f-4902-a951-c82bf4ae0b86", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bd47a8e-c512-4b64-a807-5e8d997317fd", "sighting_of_ref": "indicator--31ce06b1-3035-49c7-bd1b-c0bed1727a5c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7c99c30-2bf3-4d10-ab83-0b15788d629a", "sighting_of_ref": "indicator--b3a1bb3a-daad-46d9-aa45-59cd67f08bd0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3652c90d-c457-4b34-83fa-9118b030173f", "sighting_of_ref": "indicator--22ba194f-bbd2-4906-9caa-98789ae4521c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0f36a01-480c-4162-9c78-af277420ecfe", "sighting_of_ref": "indicator--33640018-c79a-41e1-8514-a3ab419a0ab6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c796994d-315c-4a3d-90a9-2902a37845f2", "sighting_of_ref": "indicator--c0a35786-1c7e-404a-8949-2b964e79dc95", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a95a651f-acdf-4985-8fbe-e160f5f3cf62", "sighting_of_ref": "indicator--67e112ad-45a2-40ba-a78c-42ba412b1b32", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--441b98fa-f68b-4199-a550-08725f410900", "sighting_of_ref": "indicator--84d9c8c5-ad48-4d8b-b6c9-82a5ebe62d7a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dae496e-db6f-4da1-b095-c22b301ab459", "sighting_of_ref": "indicator--cbaae222-3b45-4a5e-baec-3ecdbfeb5486", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4f9c90b-6af3-4b84-ab94-efc84d6f0a1a", "sighting_of_ref": "indicator--182cdbf2-1f49-44c6-84a6-aca6d3be0b0c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ced7d6f0-3000-422b-ace4-00a35bf9df32", "sighting_of_ref": "indicator--b72762b6-d5a4-4cdf-bcb8-54c455f45252", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df289b33-3dec-4cb5-ba0c-06a84bb42915", "sighting_of_ref": "indicator--0343c0fb-db90-44d8-82b7-c7377b207d19", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c15dad7-257e-4a38-a10c-3b5def7a04b7", "sighting_of_ref": "indicator--7972dc4b-ad89-433a-ab65-591b7040bb54", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33ac9887-ac33-4308-abc9-98af70613ef3", "sighting_of_ref": "indicator--f74d5039-6ed5-43c3-85f8-946715f6a048", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c5cc305-f850-412f-9335-cfa91a89b65a", "sighting_of_ref": "indicator--8c72e3fe-7216-4fbe-ad9b-12e89ec00f76", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62ef06af-90dc-4c3a-b265-55b10b633e80", "sighting_of_ref": "indicator--01a9b2e5-6111-4602-b293-54ec23cadf74", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cdb7608-3355-41ed-a25e-53eb25783d75", "sighting_of_ref": "indicator--ef5762c3-9636-4885-95b2-043064755fa0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c64ff8f-8d41-4cbc-9fcf-3b6a954fac1a", "sighting_of_ref": "indicator--53b212c5-dfe8-4858-a86d-09dbd8f9a1a2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6024e1df-5c39-4f70-ace7-aa31c5942832", "sighting_of_ref": "indicator--eba3b622-3e25-4b34-b736-a3851f10cfb7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebc75911-b834-4247-941c-c785f02134b5", "sighting_of_ref": "indicator--da23d414-b218-4d78-9c9d-a0bfcf0af35b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38a3e21a-44fc-4dc8-9212-fe91232a8a6c", "sighting_of_ref": "indicator--962e9817-8987-4424-a643-e705c0297f63", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28a7e795-c3eb-4a81-96a4-cb1491f52750", "sighting_of_ref": "indicator--07b0e126-2112-44ca-976b-42674360510b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--703a163e-03c0-4471-aa1c-8651be25896a", "sighting_of_ref": "indicator--23df030d-e8f6-4750-a963-27d9d9c3efc1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--394088f9-30d3-41c0-899d-06687bcefa13", "sighting_of_ref": "indicator--0bcae0e9-bb1f-4ae0-9ca3-990aeef2f441", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b53bc66-c0ee-4789-8b4d-fcf674a1e4b3", "sighting_of_ref": "indicator--c4f6caba-a250-4614-9f40-21e9444667c9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e287c619-5f58-45e7-9c79-846f92ae1ca3", "sighting_of_ref": "indicator--f44201e8-876f-4ee6-b4e9-267a25acf4f0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22314ca8-ddc5-473b-8718-9874d6167eee", "sighting_of_ref": "indicator--ccb70805-8e0b-4e2e-848b-adacb06f0912", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dff3d818-6616-4222-b2f6-f4cdc56e05cb", "sighting_of_ref": "indicator--382b1880-b5ca-4b22-bb21-e876ffaef2dc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff150a48-1597-4bd4-8341-0a247ea6592f", "sighting_of_ref": "indicator--0315c16b-fbc0-4b5f-b685-7b78f18ba58b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--644da57d-98c8-415b-9fe0-56ba129d98a1", "sighting_of_ref": "indicator--38422dea-c8ee-4110-be72-89a441286891", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3592d43b-8e03-4750-a71a-cdcff9052f69", "sighting_of_ref": "indicator--cb8a1e3b-cbc6-4d39-b956-8e0da16ad452", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9a7e0f6-faba-4c8f-adf1-ceb7d573aebb", "sighting_of_ref": "indicator--ff6c6380-be9f-4c20-8c8e-a76ea5266d3e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2c93a7d-d791-4ce6-9d61-5ec11f6d819e", "sighting_of_ref": "indicator--76f42510-78da-48a0-845a-29e1e7d783df", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--444c3017-c875-40b2-8808-a2bcd5f48ee1", "sighting_of_ref": "indicator--9796972c-d691-43d3-9d95-b420096909ac", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a998daba-d374-485d-9705-f066a53c7ff7", "sighting_of_ref": "indicator--a444dc62-aa3f-4eca-98be-493bfa23027a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00879ac6-768f-4972-88d0-165f5725914f", "sighting_of_ref": "indicator--b2b8642f-f520-4707-835f-d4ea4b3987e5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63d82431-3e6d-4f67-a4df-ed61b268c44b", "sighting_of_ref": "indicator--c472bd70-6ad2-43f5-8f09-d1c674534874", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5aa5c88-a6d7-4af1-954c-6e5c969327f0", "sighting_of_ref": "indicator--22e52d1c-6f32-44e1-b0b7-414a8ad6a6f4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9effad8b-ef60-44d5-89b0-61eca063f013", "sighting_of_ref": "indicator--fb7f4cff-0acf-4ea5-b35c-f1fe3763ee19", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6285ff0c-0f4b-49a0-959c-505b500c3c7d", "sighting_of_ref": "indicator--44c31937-4b71-436c-9231-704264feb121", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19b63c89-545b-4679-a8ea-5e0cec167d19", "sighting_of_ref": "indicator--927c26d9-b658-48f6-994c-deb8955f36d6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02180c90-6378-4ec1-bf45-0100edc116f8", "sighting_of_ref": "indicator--1dc455aa-6fb0-4131-a25f-33feb8e1a034", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c959890-1e71-4c3d-a43a-34401ba75aee", "sighting_of_ref": "indicator--85bd01b3-cbc5-48a5-8719-7e63736e35fd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d878f4ff-0834-45ac-9a90-5efab5354094", "sighting_of_ref": "indicator--92eb1cce-f568-41c2-9b43-2e4e5e31e8b3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20bf7c77-df53-431e-ad44-76ca0fb99984", "sighting_of_ref": "indicator--24ba9cd7-6107-4667-ab08-208d737bc1bb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01aa6c2e-fbde-4623-abe0-5e092db28840", "sighting_of_ref": "indicator--b8016650-ab68-4902-92c0-2a7ff9fedec1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1052933c-8b6c-4709-b2ea-ace89116bad3", "sighting_of_ref": "indicator--5e4f189d-2b3f-4d10-87d4-edc5c53e21ce", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4973c157-0573-4b3a-8e32-f292f4ab6dd8", "sighting_of_ref": "indicator--5bce5fbc-6c17-403a-be1e-0972966bd54d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--849a0399-c123-4633-bebc-a49e8ce41bc4", "sighting_of_ref": "indicator--5305c05e-aa4b-4a2d-9053-0cbc406c6869", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39232e88-b448-4ff1-bf4f-dd109e85f65e", "sighting_of_ref": "indicator--8d8ff8a4-706f-4f74-b01f-20be0e1b71ad", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8da14672-923b-4fe3-bee6-15982b15fa8f", "sighting_of_ref": "indicator--51d576d2-41a8-4351-bb39-7a295a80e073", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9de123be-2de1-4215-986f-df5b1fb4a48e", "sighting_of_ref": "indicator--82fad51a-5c90-404f-99e3-5f59dbe01385", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1ce1922-625a-4f42-8f9d-019f4c66e592", "sighting_of_ref": "indicator--73281697-2e62-4ccc-a244-e00d18e52a4a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e74a506e-bd68-4d84-982e-128af27b4d33", "sighting_of_ref": "indicator--20fba942-5935-4117-8857-2f04aa52d5e6", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6eee8dd8-031a-405f-91fa-b3dee314f568", "sighting_of_ref": "indicator--73b7064b-1422-4032-961f-157e2bfec84a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0c5321d-8e3a-4c16-8d56-96d81c75dd81", "sighting_of_ref": "indicator--5be507e6-162b-4b94-9003-38f52063d3a7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09c804ca-d570-4065-b1c6-ecbe45743880", "sighting_of_ref": "indicator--bc0efdf1-7704-4e1a-ab90-a13c3e210512", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e127aafd-9bbf-4f40-b347-5d35203479f9", "sighting_of_ref": "indicator--36de3653-9b45-4535-9a94-2be722ef851f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--195133cb-927a-4e7e-b68e-0d22201f3d5a", "sighting_of_ref": "indicator--34922206-31cd-481a-bd8d-5739424321ce", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1198e76-d969-40ec-9f67-a0c8f2f96e4f", "sighting_of_ref": "indicator--8f144a39-d3b7-4138-91ac-06972b94a393", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca3b5d9c-781f-4aa4-bbe7-70ce35add4f1", "sighting_of_ref": "indicator--d53e601d-8d2d-4ff8-b191-c0ca895e7898", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5ebe9a0-4ad6-4f39-bb60-32f0ad614cb0", "sighting_of_ref": "indicator--6913dc9b-fe62-4651-b446-6569d32e60fc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6d184bc-40ca-46c2-b96f-5d34def84db5", "sighting_of_ref": "indicator--0604e6e3-ba0b-4e67-a0a0-834501cb941a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2255f318-9999-4a0a-bd83-fbe62f916926", "sighting_of_ref": "indicator--119445fd-1db4-4843-a766-6dbbcab01269", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e17c229f-3a30-4b3b-9bcd-b8cf404cd464", "sighting_of_ref": "indicator--dd8f5d49-907b-4d4f-b1fd-3ae51644e643", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a364c41-bc3a-4f26-9897-f381e1afa0c4", "sighting_of_ref": "indicator--ac815ffc-8bbc-4b85-ae07-ba69b65751b3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cf63b1c-e831-46fa-b16b-ffc42da7f9d3", "sighting_of_ref": "indicator--8f7ab863-8918-47ed-9a96-a3a40c96608f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dae98099-7522-4a9a-abcd-cafa3b92002d", "sighting_of_ref": "indicator--3748f0ab-9f04-465a-a2b0-3bee547c30d1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23ddbb16-6317-4898-9c3e-692a617b9e68", "sighting_of_ref": "indicator--5126da4b-8a54-450c-8702-a8488e9add42", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29f77080-9d0d-44d0-a869-96bc20d22d75", "sighting_of_ref": "indicator--a8760dfe-4a34-4c52-a93a-64f19944968e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f73503c-6adc-4093-b947-48880a7fa42b", "sighting_of_ref": "indicator--e6e1607a-acf0-4e91-a1b4-b3556b6554c9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dc9b9d2-5ea5-418a-b63c-edd925e974e5", "sighting_of_ref": "indicator--1ac43e9a-8cca-46d9-8695-bf87eb103659", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9790c49d-7a24-4ec9-9e3b-091ab024c733", "sighting_of_ref": "indicator--2edbc0f9-1bbd-443e-b802-d1fcd672acfd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbdbb00d-3aea-4e26-a79f-6b9fc6b46291", "sighting_of_ref": "indicator--53a6b401-8782-40a2-a91f-cd87aeec1b73", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c8fb037-bb80-4e37-be6f-498856d57960", "sighting_of_ref": "indicator--e608e3f1-a0ab-4e2b-a3a1-511f5f905340", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cac276c-65a3-4630-a257-91047a7a404f", "sighting_of_ref": "indicator--5b8126d3-528c-47cd-9f74-2e72a49fb025", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f39f658-d916-4ce9-8dde-165eea075621", "sighting_of_ref": "indicator--99ae4744-65c0-41c5-bb9f-7e0155c7c734", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e68a7108-0c34-4e0f-a92b-39ee92ba950c", "sighting_of_ref": "indicator--705906a7-9f60-483f-9e9d-e14ac3dd35c2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c31d0134-1de9-4ce5-b7e9-d4b757b87da4", "sighting_of_ref": "indicator--2c0d7be6-c15e-4c36-8e44-5cef46d99ef7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d93325b-197a-4105-b209-c5e34dd1333a", "sighting_of_ref": "indicator--1b586dd2-257a-4796-9b0a-dc554ccd8aef", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--032d06db-ac03-45f2-997b-54d0955fd20f", "sighting_of_ref": "indicator--0a412d74-df6c-45c6-8131-b1fa394f582f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf767078-48d5-400a-b591-272189e20ca3", "sighting_of_ref": "indicator--3a637239-6dff-48c0-abd3-3ad2d7eea978", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fccdfc94-0cb2-4774-8dc4-efe0e071eeb6", "sighting_of_ref": "indicator--ad79c92f-e11d-4d96-a196-7cf3428d4165", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80d074b4-5d37-403c-a179-aecd098a94b7", "sighting_of_ref": "indicator--a34ecf2e-fabc-4af1-85cc-bddb085f2938", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e16c60a4-9e6f-4cf6-a350-48165d5675c4", "sighting_of_ref": "indicator--b3854ac6-2e99-4dd3-ae94-f486cb4498f7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95478018-20b5-49db-bdc1-eda05f826ab0", "sighting_of_ref": "indicator--af55b917-4d5a-4b75-97c1-a894c692aaa5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fb55a9e-a53a-4da1-8a7a-7dfa22c8a438", "sighting_of_ref": "indicator--f5fc7f4a-5ea2-40f9-b1fe-97640d6a4164", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4fab58f-7257-4fd8-a133-3ef89b834655", "sighting_of_ref": "indicator--2dcfd977-846a-42ce-9c9f-7bad388a3e5c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--137a2f86-afa2-47cb-ac8e-a86057e707d2", "sighting_of_ref": "indicator--4204fc5d-7936-44d9-ab8d-5f6b8a5e3c98", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebf5c5af-bcd8-4677-80cb-648d0f14fec3", "sighting_of_ref": "indicator--0a5d0b1c-4750-4dc5-a4d9-d0e3ebf8456c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b571ef9-2c72-4e2c-a4ce-2932d3294b7b", "sighting_of_ref": "indicator--60f6e5fe-eb53-4daf-8466-8e86c91be750", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc590b86-fc99-478f-87aa-f2458825544a", "sighting_of_ref": "indicator--18c1d8e5-3f1f-4a39-857d-ec72d869f16f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96e8aa85-deb8-4944-bec1-669bde6a4629", "sighting_of_ref": "indicator--2f11e0cf-af6a-4263-92d1-b19cdbed9d93", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc0a7bf1-7b5d-41d3-af9c-810b3e08d859", "sighting_of_ref": "indicator--395129fb-caa5-48fa-aae6-ee0d1cc7dde1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba3b88de-3407-4006-9cdc-2fbcae55fab8", "sighting_of_ref": "indicator--9ebb478f-4f5c-4578-923f-ae4091365af7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--481c07a3-0497-440e-9b91-650b2f741d45", "sighting_of_ref": "indicator--0d136f22-7b16-49d5-8b0c-22c9a0e08926", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7af87de4-f038-4529-860a-c9b70bfe9ed1", "sighting_of_ref": "indicator--7db78a78-551f-4344-a541-afae14732105", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b740239f-478e-46c1-a67f-3e1f013c55d5", "sighting_of_ref": "indicator--0ff29204-3daf-4dd1-9d8d-67d6ee66f0c4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d1687c8-66bf-4250-a926-f5181ab6d020", "sighting_of_ref": "indicator--47b1fa32-cc89-4194-9ca5-a4515d80ffa8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60af47ab-37d3-4add-b07e-c54b0415d705", "sighting_of_ref": "indicator--a471ef6c-e716-498f-bd0a-21be4e544b5d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26cd1846-91b9-49b7-848e-a069930b9daf", "sighting_of_ref": "indicator--73a1de43-871d-4309-a856-f8de042a97cb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d35c2f5-f9bf-44af-aa24-29f5283e6f63", "sighting_of_ref": "indicator--a1c4d72e-dd8e-4c87-a19e-4e35e7f03787", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ab9efa2-9d9b-4c37-a736-863c7b07f518", "sighting_of_ref": "indicator--10de39fe-8f04-496a-a8e0-56faf88a51b1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e2f63b2-6788-48eb-868d-c8b8b803b20f", "sighting_of_ref": "indicator--e659b526-7896-4364-81be-08a0c82d7430", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21054bce-74e8-46e2-a6d6-be2bda8a1965", "sighting_of_ref": "indicator--7c60de2a-6a79-4003-86fe-ad34b3033b7d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--900d00e8-98cf-4928-926e-b59b0ed9ff11", "sighting_of_ref": "indicator--021dcef3-d529-4b16-8c4b-869ec4ad3c81", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51afca17-62f3-416c-b4c9-63c888e780e7", "sighting_of_ref": "indicator--0f5b25bc-4bf7-4155-a06e-f38e2d1b98bf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--422d94c0-c32e-4251-b1fb-3426aef03a71", "sighting_of_ref": "indicator--ec622057-4f43-42ed-8b50-d7fe7990c0e5", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a861244-3633-4b29-8cbd-742bf8ebea52", "sighting_of_ref": "indicator--c1826ee6-b4e4-4702-8d2b-7efd6a605131", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4843422-02b3-40ba-912f-f05ea0bc7bd2", "sighting_of_ref": "indicator--65184352-c9c7-4dea-82d1-675491098c5d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b6a06e0-240c-4fa5-b8a1-c792b6618e48", "sighting_of_ref": "indicator--2e0a16cc-17dc-486e-b25b-3f70cdfd09f7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c38b36ce-7af4-4e34-a931-aadab34c7a1a", "sighting_of_ref": "indicator--4cad8164-a84a-4902-8694-2f3c566d157d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c1b1631-aa2a-4a22-b25c-36841ff6a583", "sighting_of_ref": "indicator--45723dec-62d5-46f6-9c89-58028e9461ef", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3cb9221-2984-4c5d-bee1-ddf238abab74", "sighting_of_ref": "indicator--abbed48e-6463-4317-85d6-da46e03d3789", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2600f8b0-ee2a-4916-ac16-9d8db14536ad", "sighting_of_ref": "indicator--b0691f60-52c1-4316-a952-643d68dbf39e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56407788-0de5-4ed0-9997-d0a71a595e5a", "sighting_of_ref": "indicator--d74abe3c-0169-49ee-b0e9-848557c0513d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5735073-5f55-4440-84a8-324b3f053b72", "sighting_of_ref": "indicator--7959c8d8-411b-4e4a-81ef-87ad0c4a6357", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e436c95-1454-4799-8ad2-d9d3b06b9d4c", "sighting_of_ref": "indicator--3315034a-3d94-42b2-9c61-196939466582", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ab1bbf1-dbe2-4f7d-9b9f-5cc67b502594", "sighting_of_ref": "indicator--f2f88c90-d69d-4bdd-b586-0ed00fa74204", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24077c18-40ce-410e-a6cc-633a735a4339", "sighting_of_ref": "indicator--f7dfea80-3d6d-4d2b-82a2-2f6c266d1a46", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--503897a3-0898-4c3b-a874-1ca317b73eff", "sighting_of_ref": "indicator--c25a6c9b-4a70-4ea5-8f79-bead64813fca", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7c44051-a40c-4074-bd6d-0d8d36aca553", "sighting_of_ref": "indicator--c7ecbbb5-5b2b-4701-9dc1-460f1ec9fbc6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb2b9d3e-aab4-4534-be88-b1922b292288", "sighting_of_ref": "indicator--45bafa3d-8b5f-4913-a261-abb48fb9bdde", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cbebf52-e3a5-4dcc-b19f-a478f88095f1", "sighting_of_ref": "indicator--cb32d59d-6179-4632-a854-9b816aec6350", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9d4aa5b-cd9c-4680-99b6-df388c28152e", "sighting_of_ref": "indicator--d890174b-9dab-4f14-b149-23fb3c1160dc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb1fd2c3-81b3-4831-b23d-a79f370a6c35", "sighting_of_ref": "indicator--996a841b-dffb-4845-b49f-8e2b6d086b8f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d2168a0-7523-4598-8aa6-1c1012cf80cb", "sighting_of_ref": "indicator--49ddcd65-f18a-4ffe-8042-69e28f12cc23", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e416fea7-a3ed-4bde-944d-39fb55eea4e9", "sighting_of_ref": "indicator--b61f429d-1447-4857-9755-b94484600793", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2a8f468-a1c7-46bd-aba9-33020eea5a7b", "sighting_of_ref": "indicator--25f90a3d-db3d-4360-b7e6-43f6521ac47a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73d45050-a2ae-4da3-a93b-339af571c067", "sighting_of_ref": "indicator--eeeb8ce7-da63-45c7-9a7f-086d358f0ec5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aa0ef23-6c6e-46db-8b5f-c9906a28c141", "sighting_of_ref": "indicator--ff8efd63-63b5-4635-8cc4-0388555b4a6d", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a5b148a-ecc6-4515-9a60-49f983513c98", "sighting_of_ref": "indicator--cadbbd76-aef0-403b-aade-1825c540f34c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--187fe3aa-ba88-48f7-8e8f-b705ed6f3aa5", "sighting_of_ref": "indicator--7dc19830-eba9-4240-a770-f1e6d010e2ea", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62b1650e-9190-4529-9c4a-fbc069c9c79f", "sighting_of_ref": "indicator--fc9951b2-a217-45ca-91c6-a894939ce979", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--287f6470-3fcf-4116-9c4e-e54e6c600b05", "sighting_of_ref": "indicator--a23f5e83-95d4-4d0e-b203-a423f07560dd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1dcdc9c-035f-4dc9-83f8-5c9a4b45b0d2", "sighting_of_ref": "indicator--de697308-12ef-47b4-bcc1-971dde3502f9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0440105-8c63-40e0-8533-71bd357e63c2", "sighting_of_ref": "indicator--96731c22-c823-4aa7-bd94-ac220540829b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c078959f-dd8d-4532-99be-76f4199f8b2e", "sighting_of_ref": "indicator--b11a5f78-2b52-4ed9-be06-22ba1cae2fd2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4954b135-c061-4a3b-bac6-b7708b7cc870", "sighting_of_ref": "indicator--f217df35-fb52-4760-9a93-e04b847e39e3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce51dc66-aaf8-4865-982a-486e0b358884", "sighting_of_ref": "indicator--089df095-f61c-4d38-8743-6f515b46f787", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd86cf61-6f12-43c0-ad94-1c375fe70c6b", "sighting_of_ref": "indicator--b2de56f1-fd0d-425b-95af-64e7e0743973", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fad73d6-1012-4ed1-b872-63a99a2fe79b", "sighting_of_ref": "indicator--cca359bb-6820-4bab-987a-257dd9c4d3e9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a829018b-8d0d-469a-a0c7-c4cc1bdc2512", "sighting_of_ref": "indicator--4e97319d-d0bc-42e9-8852-b0d6013c349e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70d84e61-4e00-4a23-84cf-79d10ff3f787", "sighting_of_ref": "indicator--d4f8578f-9cab-408f-a362-993d28e15bd1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb869afd-6697-404e-835f-c8722622525e", "sighting_of_ref": "indicator--173f4b9b-f70c-467e-b898-441b004717df", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--682bf245-9daf-497f-a735-9d201d9cf16b", "sighting_of_ref": "indicator--19e9bc3b-da1e-4780-a5ef-dedfa440fd14", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08355287-7961-4214-8282-c69b697ec45b", "sighting_of_ref": "indicator--da728650-2f5d-45f1-a5f5-7e38bfaf12fc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef081e45-af1f-4878-999c-8fe9674ae796", "sighting_of_ref": "indicator--bb380a05-e360-4794-a120-41d1ecfdfc7b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f472a421-ae6f-4de0-9c2a-9d0b44632d50", "sighting_of_ref": "indicator--4bf79094-8f28-4713-a4a8-c1b5f0ffc384", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fd6b33a-5034-4267-bf57-5d28c4f701f0", "sighting_of_ref": "indicator--8fb13760-d174-4d29-aed3-7eafc0a5f86c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97f84bf5-e06e-4657-8586-d1c86f8aabbd", "sighting_of_ref": "indicator--a0c2580e-f4e5-4fab-9e68-d31923aef90f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd9adced-2a66-4b66-a9ec-f984929dc409", "sighting_of_ref": "indicator--7754b3b7-1b3c-484e-88f6-e308455a6686", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5a51de3-26f5-4706-963d-dd20ed33f66b", "sighting_of_ref": "indicator--f2ce55ba-ad1e-4c10-ad6c-155ab7dc09df", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e56e54e-f28c-4cf9-8e2d-839b41967fcd", "sighting_of_ref": "indicator--d798f023-ceb0-4d52-b387-42f5b87ef633", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c1df16c-9087-4995-9048-8789279accb1", "sighting_of_ref": "indicator--5bafa55a-9366-4b33-b08a-5d92a924743a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1715dab6-6a90-495a-8a14-464e1a2cd2ae", "sighting_of_ref": "indicator--d954198c-b9bf-4014-9223-a0602b058c7c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a436b33-9e90-43f0-8bed-35be892e654b", "sighting_of_ref": "indicator--954a0e91-f4c0-411b-a6fa-11c0b725ebfb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de07e790-c8c4-4396-9086-5588b635e712", "sighting_of_ref": "indicator--971fb4c5-b3b9-4211-b1ff-90cd10aca0b0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53e11bbf-5de9-4bea-a305-bec744ab2a62", "sighting_of_ref": "indicator--0d5e81b3-e014-4b94-9017-7b123f4032c6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d41b567-83d5-41e7-bf77-5ad22c5971d5", "sighting_of_ref": "indicator--5c5200d3-613f-4193-8a65-f04c0ffd1445", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ab7f41c-d8e3-4eb7-9be9-4d0df0819e24", "sighting_of_ref": "indicator--6415d02b-776a-45c1-beb2-f835ae30be68", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f31cf4d-f4cd-49bc-a0e2-82668cb1dec7", "sighting_of_ref": "indicator--77bee255-1b9f-4db9-a41c-9abfc22a9613", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18c755f5-18fa-4a90-9b57-39a8945bea17", "sighting_of_ref": "indicator--05ab4a6e-b522-4a45-906e-f61910551ca5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faf8f13b-a37f-4ced-8182-80ff85c66a76", "sighting_of_ref": "indicator--66dfc58a-cabd-490f-9754-376cc2085d9c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a33f4d67-76a1-45d8-8e6d-be16d4c4e31d", "sighting_of_ref": "indicator--0d59234c-b281-4e95-96da-c8b2b072efbd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91a6ea7f-adda-42d9-b734-82cf41c4cf95", "sighting_of_ref": "indicator--314d613d-e4d0-423d-ab31-cae01e5dd76f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a669be3-64d9-4bff-85d4-e28c6abfb0ff", "sighting_of_ref": "indicator--80abbca4-91ab-4efb-a51b-1bccfa812b1f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a2aa6c1-74ed-4125-a9b5-1bfc11c1418d", "sighting_of_ref": "indicator--6dd04f54-8567-472a-a1c6-4a26516b54d2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e09f520-cbcc-4fc5-9135-5688a0c4d959", "sighting_of_ref": "indicator--2768e1e8-ad28-479e-96d5-22e7a8ac4fa7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb262e94-20f7-4e15-af2a-c3bfa0a0957d", "sighting_of_ref": "indicator--1decbee9-978a-4439-bd67-e2d4dc73b5fb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bd24aa8-4f84-47d1-8ac5-1f9da684a180", "sighting_of_ref": "indicator--2f2649a4-82a8-41e6-a43f-67aff617963b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a815624-16b9-4f1c-9cbc-cd336d98fd26", "sighting_of_ref": "indicator--2f518f14-868f-44db-8a16-9f07adb570e9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--568338e5-9f4f-410e-a94d-6f36061b58c5", "sighting_of_ref": "indicator--0bc8f041-7cfa-4654-837d-be21c9308756", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--996ea837-e349-4dcf-9b86-48c40ae18e9d", "sighting_of_ref": "indicator--e4f5e71b-7008-4795-9ff1-bee4c0b85a06", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28ecf26f-2d1b-4028-95de-10f05f817092", "sighting_of_ref": "indicator--5d16c571-5967-4e2a-b3a0-8214fe07047a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7175bf32-542d-467f-9fe3-f25d70138f03", "sighting_of_ref": "indicator--8a03891d-ef94-4cb0-95ed-734bdc92773e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41727248-4d3c-449d-97a5-ff08d17c511b", "sighting_of_ref": "indicator--44599448-99c4-4a77-ab4c-a3a5e7f4c6b2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec49ebe4-cdf3-441c-8201-89f27b17ddba", "sighting_of_ref": "indicator--a3a67e74-0c18-4ed9-a870-ca6cac68244c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d468d71-0ec8-4da2-95e0-ed37f307443b", "sighting_of_ref": "indicator--45f7b3a9-0278-4689-93ff-5c73025986c0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dd79ca2-896d-497d-8315-9220780dbb2d", "sighting_of_ref": "indicator--14c63527-4816-4626-98fd-26351a30527f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf954610-3952-4f2a-a2b6-9bb590684825", "sighting_of_ref": "indicator--0b37b82c-b126-4538-bb26-65529bec82e0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd3bcd94-5f94-44bc-b138-f433ccc85a89", "sighting_of_ref": "indicator--2728a285-1ab7-446c-a0eb-a91156658c40", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04acd928-ef84-4d9c-a5ad-55ce2390976d", "sighting_of_ref": "indicator--87f9f35a-e780-462b-8925-c35081db44d2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05847ce2-0248-4557-8575-8f421f73ee42", "sighting_of_ref": "indicator--7eab0b82-dc8a-4cf6-be57-0ea6bdfe1a71", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c84acd3-f499-4b95-81ab-3184aacc5b56", "sighting_of_ref": "indicator--7195e003-fc6f-4d7c-909c-f561eef87bd3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bdca2ce-0122-42e6-bc65-1c17df8088bb", "sighting_of_ref": "indicator--11317944-eceb-4043-8bd8-407465ab0336", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc55910b-592c-4c8d-b336-0919319fd620", "sighting_of_ref": "indicator--31632895-4362-47de-9703-6746ceb17434", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c66a680-f563-4042-9cc7-08be1ca2cb56", "sighting_of_ref": "indicator--b5d5b927-aa6c-405f-88e3-563781fbdf69", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--009640e2-ba98-4e19-b78b-ad9687cd7d08", "sighting_of_ref": "indicator--8a2ae47b-1b7c-4146-9558-76ed6712c51e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b414b86-6336-479e-92d7-2ba6c3f5c37a", "sighting_of_ref": "indicator--599b0b26-c398-47a6-b733-a8f82af51c86", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1a0a15e-dd78-44aa-92ee-4e49f12e666a", "sighting_of_ref": "indicator--a7bea538-56f3-4bf2-9633-ee0a1c844490", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d815b78-37dc-478e-80cf-4ff2b017257f", "sighting_of_ref": "indicator--455ee843-4e8b-4897-9a5c-def4fdaa929d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--555f8fd2-28fb-441d-b3ae-8e0abc1ce93f", "sighting_of_ref": "indicator--eca9ec56-bc7e-485f-9206-c7b234a6c4e8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61388fa0-bf48-408e-bc8f-119818e2cded", "sighting_of_ref": "indicator--4f2c5723-f200-40e1-aac0-3707fa2dd858", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0846ba27-bdfa-4ed7-ae9f-862dca15cc9f", "sighting_of_ref": "indicator--bcc2ba9c-c20e-4db2-931e-2e807b2edc45", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--303fb7ce-bdae-49a3-b41e-32e5906f95df", "sighting_of_ref": "indicator--deb12ce8-4e80-4efa-b6c5-6f828f08ddd0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dfa5415-2f3f-4b1e-94dd-9bb720a323c0", "sighting_of_ref": "indicator--0de68aef-079b-4672-8176-2e1c36e337fd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83df79bd-3837-4a74-af11-434f84143a15", "sighting_of_ref": "indicator--5034d1af-0cc9-472a-8ad5-2e697e52020b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db4e1123-e19c-4c54-b46e-f61749af372d", "sighting_of_ref": "indicator--b3a7f380-8f5e-4f3b-8a60-3d3aa86b37af", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f001e16-c408-4d76-aba2-3c2d88cd3ba2", "sighting_of_ref": "indicator--210e9b3b-cfcc-449d-9be8-bcd45b42a25f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bbd54c6-d8f8-40e8-88e6-82c33f595361", "sighting_of_ref": "indicator--44a1ece5-7017-47d4-b107-acd081c205f5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09674bdd-6634-4025-ad20-863939353e24", "sighting_of_ref": "indicator--4ab063cf-3276-45be-a22e-d86bed326a8b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52dcd7e7-261e-47a4-b2e8-c68ef6602a9d", "sighting_of_ref": "indicator--fbf7ddaa-d76a-402f-a2e1-c0eef42826f2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b9468a8-bf11-4064-b099-5960268d8ec1", "sighting_of_ref": "indicator--7362d59f-ed63-49df-9071-23c778d7d11d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d985c45-2b16-4e14-8cd2-c0ff773638f8", "sighting_of_ref": "indicator--cc6f9592-9cdf-47c0-9ba2-f44b8b6d2a1c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a48ff86d-10d5-418c-aece-00eda0a7450d", "sighting_of_ref": "indicator--9d1cf60f-85a2-4c16-af39-fa1f4b6d1bd1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--721ecdef-cf6f-491b-a5bb-7fd48b301bb5", "sighting_of_ref": "indicator--17e2e7e3-b0fa-4963-9d78-f0111ec8167a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d244f333-720e-476c-8a8f-044e529ffd58", "sighting_of_ref": "indicator--d8f3764f-a5b2-446f-9d05-9371e37f9ffd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3b40b11-47de-460b-ac69-13c33d0c4d17", "sighting_of_ref": "indicator--e9dc5272-4671-46c4-b58f-c4e54002c0f1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ba75b55-0a0f-4c7f-b284-b35dccdd5f30", "sighting_of_ref": "indicator--75f95e93-db92-4915-8964-e47d5e65d5f0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95236327-4ab1-452f-b0dd-7b5a6c731523", "sighting_of_ref": "indicator--61f2f383-9427-4747-800c-a7e5dbf5f508", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c904b31f-009a-4496-9082-b39a8088c875", "sighting_of_ref": "indicator--83327ab8-7267-4f91-b25c-017aa1c61543", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f603e12-49a5-425d-9aad-560c17486290", "sighting_of_ref": "indicator--97b55993-3edb-4871-9709-a119b07f498d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be9ad159-4d00-4ada-adee-ce7fbaf135ed", "sighting_of_ref": "indicator--3df72de2-4cbe-4ae2-b873-0bc94640c146", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00ba95fb-82d1-49c1-8b08-137df59a5429", "sighting_of_ref": "indicator--9c05d1a7-2dc9-40d9-b0e5-bd588b78f37f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc4e768b-a5b3-4677-b035-4c2e4bb571e2", "sighting_of_ref": "indicator--63bc6335-6605-4c51-8ba5-46a5bc671c8e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a80abb7-a088-49d8-9ebe-0b77b4e81bcc", "sighting_of_ref": "indicator--389272a2-6d31-4c15-8c0d-2146abdcd2f7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5186d4d7-91cc-472a-8880-6d3c361e50d7", "sighting_of_ref": "indicator--2cbcb5e4-97a8-4d1a-adc2-a568389b4e64", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3458f35-18da-4c24-a083-20cbd7c95f75", "sighting_of_ref": "indicator--1c7bce45-d7c9-40c0-95d5-1c6bdfcef136", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34c87378-2aaa-4688-9635-88087a3e0e09", "sighting_of_ref": "indicator--aa21267e-c099-44aa-99cb-3922d1886c79", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc548171-6a16-4fc8-befa-4a18f92efdbe", "sighting_of_ref": "indicator--70e84522-3f78-4cae-bf83-6bcd81bb1b77", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e72741a7-e970-497d-8b81-21d561b39f5f", "sighting_of_ref": "indicator--e0b1ed7d-ee84-4829-a83e-56671f96e9f6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8da25cea-b969-40ec-8c2b-4ba0bea6c4cf", "sighting_of_ref": "indicator--43fa1818-d07e-463f-93ee-a96554f1c087", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74363963-3021-4a89-85ea-3cad1c2ca14e", "sighting_of_ref": "indicator--6f9cd971-9a3c-4854-b89f-3ccc14a86bf2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c8e2d6a-b314-4aeb-9147-d78f8adfe2f2", "sighting_of_ref": "indicator--b630b469-9676-4481-a19d-07fa76234133", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d6d0aa0-64a2-4b06-9146-276038f03c00", "sighting_of_ref": "indicator--05d97f71-436c-4aee-b71e-bf66f1c50301", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51ecafad-4b3a-4c44-a983-cbd59efdf744", "sighting_of_ref": "indicator--6aa7c5ff-0ce4-4e6f-b969-dded639f5f1e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7783518d-1800-4551-b77f-f504da56edc7", "sighting_of_ref": "indicator--41581e27-43be-46ae-bb19-9e161ee56e0a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2443fdf0-1a49-46ce-8f36-f710b93333ae", "sighting_of_ref": "indicator--aea55f3d-c4c3-480d-9c1a-c4cd1aae4f6c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72eb2a9a-b74a-4c02-ab1b-4b1cd4357e64", "sighting_of_ref": "indicator--da5d4e4e-ec2e-405b-a43f-0078be9aff9c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--665cfe49-8136-4c5a-924c-722e00468be3", "sighting_of_ref": "indicator--fbb746c8-11e4-456d-a75e-d70e2ce295fa", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8404789b-9f35-4b4d-ab1a-5c4cc022d3cc", "sighting_of_ref": "indicator--289ae87d-ea86-4336-9266-1469a791ad9e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77b4f208-9b1b-4dba-b997-bb2f4bdcd965", "sighting_of_ref": "indicator--5761bf09-ba58-4a1b-a000-33c8afe9f51d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f7f2a1d-67e8-47b6-8df2-fef398e5acaa", "sighting_of_ref": "indicator--499d84b8-f3a0-4550-989c-97fc47484824", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f3df089-056d-4d6b-b3f6-a1e5bc7602fd", "sighting_of_ref": "indicator--9fadb147-0556-42d4-8f8d-47a3d00b7753", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72eee79a-5ad2-44d7-a387-1a8408628c28", "sighting_of_ref": "indicator--e783da4b-cc71-48f0-b622-d4b0d220758b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79c5f416-3308-44c6-9944-865bf09b171a", "sighting_of_ref": "indicator--833a22bc-1068-455b-8bac-27938fe54c2a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71ba35cb-1d4c-4856-a84c-4b6521ac51d6", "sighting_of_ref": "indicator--8d42c3b0-5420-4dd4-9ace-011eb518e4af", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90531e8f-6382-4c20-bdc3-74378d01eb50", "sighting_of_ref": "indicator--2351034b-7b3e-4b5e-8491-102d3c2411c6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--597ba55d-72df-4c7c-9fee-082af6949125", "sighting_of_ref": "indicator--bb4fae96-d640-4f1c-b60a-773691924eb4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba603063-8ad9-43ce-8bab-b575a84ad3c8", "sighting_of_ref": "indicator--65e5e083-993a-4686-af94-9b2c3d32fbf9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f22edb2a-64e6-4a69-aaed-dbcfadcf6220", "sighting_of_ref": "indicator--3043c3a8-ff4a-4230-a9b9-4b889919c125", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1b85d8a-c076-4306-ba08-c211715430b9", "sighting_of_ref": "indicator--da96a744-3d33-493f-8888-f35a1d2bddb3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de3c1b87-7440-4a95-bda0-1e448ea2c053", "sighting_of_ref": "indicator--1e246fc5-d30b-4ace-bd27-b1034c03fe69", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f5af9f7-b502-41f1-89fc-83da8d64c094", "sighting_of_ref": "indicator--a9cef92f-f429-45a2-94ed-60c57977f17e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42c22592-4cf9-4dde-96a7-afe199735db4", "sighting_of_ref": "indicator--43222f46-9c70-4ed9-8bc4-7d9deaea268e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f16b366-164a-4343-afc9-09387c649d26", "sighting_of_ref": "indicator--519b128f-32a3-4c22-852b-790619dac55e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77f0c13e-2f39-40ad-b080-b1b835048946", "sighting_of_ref": "indicator--ac7456b3-780e-4dab-b491-f953e568bb03", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc940b1c-7e8a-4783-9cea-104aea6c24c2", "sighting_of_ref": "indicator--5399ca78-9f32-4e2b-a16b-d61a03247fdd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2298bf36-6a97-4955-9d02-781e2bbf9558", "sighting_of_ref": "indicator--ef9cb986-1a46-410d-9fc7-8d214d21043c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d74ba3fb-7953-47ef-8ae1-7ff4ad517c63", "sighting_of_ref": "indicator--928a6dd6-8375-4e4b-b711-2f29bbd25982", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af098451-0332-4bad-b1db-fe97079c99ad", "sighting_of_ref": "indicator--315b420b-bf5a-4066-8aa9-ebe9c60796a3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--255eb9ef-14ce-4dc5-8607-99861363ec2a", "sighting_of_ref": "indicator--ab5fba6a-9df7-4e6c-a39a-306541f34cdb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2416424-b684-45bd-b796-a819ff2ff0ff", "sighting_of_ref": "indicator--cfcbb7c4-ea65-429e-8521-74ef38bfa493", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f897b89e-8b71-4e16-b3c7-debe2fda2e9b", "sighting_of_ref": "indicator--cbd5ee02-8a31-45b1-b58b-26c7a8798378", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d1889b0-19f8-4b1b-8855-ea75ae18f0fc", "sighting_of_ref": "indicator--c141d744-9e17-4a4c-a4b5-fff08c5ba559", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dd82bf7-c4c7-4239-a1eb-640507c76e78", "sighting_of_ref": "indicator--63c97f83-da1f-4c50-ae98-b88a612e1cb7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a4e0fb7-2f0d-434c-a064-7fd38f0ccb46", "sighting_of_ref": "indicator--e2e7e45a-8c43-41a8-8b7d-995ed05904f4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc51d13b-a923-498c-b005-efcd4840aad3", "sighting_of_ref": "indicator--6c0659a4-c071-4580-b9eb-f5048b39de8e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19980fe1-422b-425e-96a7-81e8451b9860", "sighting_of_ref": "indicator--006c7b1d-c78e-4006-b44e-9dd9ab88bf2b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--542edb3e-c87f-450d-b29e-6a43dfe9b7dd", "sighting_of_ref": "indicator--268cea9b-d052-4e5e-a297-0add795a2735", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62a94376-2131-40c5-b383-d7e1f827b51c", "sighting_of_ref": "indicator--bb273581-5858-4c73-9931-9cb8ba6915a7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1c78172-a884-4486-a9db-7fe0edb65357", "sighting_of_ref": "indicator--83bd6dfe-481b-4aef-82cf-6492125fef19", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddb44f61-bc60-49f6-b590-69887068f8be", "sighting_of_ref": "indicator--9d9c1ad1-baea-4624-8366-acf3a1f36d60", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c40667f-8925-4f8d-a58d-183ae95121f0", "sighting_of_ref": "indicator--526df72b-01d4-4455-a0c9-c5fa00dd35bb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b27a17db-8107-4128-bebe-4439cbfb45b8", "sighting_of_ref": "indicator--b0d1e72e-b923-4cdc-a92a-6bd941cfd4e6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20a54978-035c-4562-8d67-1f1dfb3085c0", "sighting_of_ref": "indicator--9368cb77-523c-4042-8f82-ad8d781177af", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20874d04-062b-402b-b607-c315f2ae488d", "sighting_of_ref": "indicator--02424cc9-00de-48c1-b21c-a7ef62b28bf6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5338f4b5-eacc-47df-a67c-13d31208ae4c", "sighting_of_ref": "indicator--bb3893df-a35c-41c5-b0c2-57ddafd7d57d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86e08ce0-01b7-45ee-b535-9f99d54a8679", "sighting_of_ref": "indicator--8e1288a8-8a5b-4bc1-81ed-42a3c0191168", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71f32ede-8fd3-412a-9221-afedec7ad2f6", "sighting_of_ref": "indicator--5318503f-5084-42f0-a012-e79a4e6017da", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db937ec5-09d9-4d6c-bf8c-2d415067a972", "sighting_of_ref": "indicator--07612897-e7e9-4094-b672-9a0acb1b3dd2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4676cb8-e42b-4713-80fb-a9ddd614d8c8", "sighting_of_ref": "indicator--6631c9ee-d594-45d8-b19e-2a036adc9a3e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64d3dc1c-d9ce-4be4-9847-b0b304493074", "sighting_of_ref": "indicator--29039e55-9da9-4eea-9069-217f0aa7847a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f04bbd91-5aff-4ba3-83c7-ec35a09f1844", "sighting_of_ref": "indicator--83df044b-f97c-4385-8662-5433b30bcdcb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee19a6f8-639c-4dc8-b111-2edb8f95c968", "sighting_of_ref": "indicator--1bb740cb-26ec-4bb2-ae60-4f612e757995", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f606cf7a-e9fb-44f7-8d9c-1c42023513f6", "sighting_of_ref": "indicator--822ee9f5-7a16-4fdb-8f92-4adced7ebac7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48d21a1e-45e2-4382-9254-38f6ebd2590c", "sighting_of_ref": "indicator--81559563-2398-41fe-9bb7-be158dd6f699", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88e603c9-5360-4eb2-8ab9-1504ea185902", "sighting_of_ref": "indicator--aa05b2a3-b0f6-4e83-8057-cb3a90045147", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93da0b7c-71cf-4524-ab23-f72488dd849c", "sighting_of_ref": "indicator--c50bfed5-ebb0-48f9-8c37-b92228e7a609", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbfcb942-4e1c-495f-873c-78b0f7d92643", "sighting_of_ref": "indicator--4112db1d-414d-4fd9-832a-8a36dd170c15", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c25a84b6-2c7e-41d1-a758-847075738a5c", "sighting_of_ref": "indicator--13c0482c-0f4c-4651-871b-4f43d4d9c24a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4138bc5-b1a6-4f71-8aea-0c99e39d0d62", "sighting_of_ref": "indicator--1c6faaea-5f7b-4720-8aec-6b4738d9d76b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21d4a46b-716d-40dd-804b-0536b73e0990", "sighting_of_ref": "indicator--70d9b8f3-6c6b-4d6a-9a17-ef8517a79226", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be50a90b-230c-4117-b0df-acdf1835c4ab", "sighting_of_ref": "indicator--e1f9a707-6671-47ae-b629-09e73c2b2f7f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc75159d-c30b-4124-904a-85243f930942", "sighting_of_ref": "indicator--12724877-c87f-4cca-bf57-8298e4c37d1e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3137b73-a772-43d5-98c3-fbe2aa408efd", "sighting_of_ref": "indicator--e4c682f7-871b-4ef4-b0cd-3dbcc0833564", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aa4d28d-832d-48d1-b379-55886fa7272b", "sighting_of_ref": "indicator--52084626-303e-4151-aa96-b7eddb5f8256", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e605f79-9f54-44c2-8b0d-5c61f756105a", "sighting_of_ref": "indicator--7b0a91f8-a72d-4d52-afae-03f5a89e4857", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--160279aa-12f6-4104-8e6d-4a35ca20c002", "sighting_of_ref": "indicator--d5ab884d-dd4f-4a86-9900-6852ada79d35", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d4dbdaf-5451-45aa-9e68-d86ee097ddde", "sighting_of_ref": "indicator--15a5b076-3f95-48d9-a6b2-4d01ebf0cc9a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bac701c-4e6c-45ed-b7ab-3b9504408b4d", "sighting_of_ref": "indicator--f79a6d1d-4b39-4189-be12-8733fa079343", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aba8eabd-5708-40a2-a500-dbbcc272d3bb", "sighting_of_ref": "indicator--d0142851-03fd-4ec6-9ef1-4d4dbe837140", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da0770d8-8fcc-486d-b268-1aeca90ed613", "sighting_of_ref": "indicator--14baedf4-e750-40d0-bc0c-72efc6aa7d54", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53981bb0-75bf-4f2b-ad37-79ecbc285df5", "sighting_of_ref": "indicator--4a399862-5885-4e08-8c84-099b423ed4ba", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e368ab8-2376-484e-b7d8-c554e45f7075", "sighting_of_ref": "indicator--ecb762a1-805b-4a82-8971-6e21974cbf5e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c36d7250-868f-45ac-b900-03270b5652ca", "sighting_of_ref": "indicator--5e24f49a-f363-42b4-8a05-e4da8811eb1a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8448c9d-88f3-4b23-86e1-527767b27280", "sighting_of_ref": "indicator--ac907c7a-1a6f-4c56-8802-dbef64186aa5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc42e56e-6e37-41ea-aaab-84f6f3b41858", "sighting_of_ref": "indicator--999cd79e-36af-44d6-96bd-0a8dab78965a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e566b0a-9aab-4acc-8ec6-36e810897b3a", "sighting_of_ref": "indicator--181948bf-3dcb-4820-b026-4be7ed93cbb9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20cc9faa-0c05-4f64-b2b5-50e2c241fd09", "sighting_of_ref": "indicator--a6497f76-fb62-470d-9059-8ac058046c7a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a10e717-53a1-4872-a784-7e64a615dfe0", "sighting_of_ref": "indicator--1b1e211f-bc49-442a-97ad-943bd6ce295d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a23af192-151b-4ebe-a71d-a5d57c40b499", "sighting_of_ref": "indicator--325e44ac-c66f-4953-9b35-2a5b46c3a671", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7246908-2560-4d02-bd86-e4fb84353d7c", "sighting_of_ref": "indicator--f749b8bd-dd48-439f-bda8-90ae0fe2d7f2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1a12a22-c171-466a-80ed-688c89d7a0de", "sighting_of_ref": "indicator--37f02aa6-518f-4b58-93c2-3f14949d3d9d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75fbb245-adc2-4ba8-b9f6-3fd1ebfdbbf1", "sighting_of_ref": "indicator--87746d9a-a209-4e4a-99e4-e4f16a331ddf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3d8597f-0a5c-43b3-abca-9a0b3a7ecbe0", "sighting_of_ref": "indicator--9fec25bd-9406-436d-88a9-121896b77127", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5af9ccaa-1795-41ac-85b5-eb4920c02b12", "sighting_of_ref": "indicator--a258c4f3-c256-4097-97f7-f492e53b07cf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5af63152-fe5c-4969-b79f-7f3782a970da", "sighting_of_ref": "indicator--4710a56e-cb31-460f-a21c-2582b44b57d0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a7a2cc1-2806-48ff-a0e0-f7b50397d991", "sighting_of_ref": "indicator--29c1ccc6-0414-4516-a81a-543f926bfadf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b56e3e86-fb0b-44c5-9014-de670bdbac43", "sighting_of_ref": "indicator--04deee12-0630-4cdb-9920-3097f2389233", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a556de2b-6e1c-41be-bd66-d14594cf372c", "sighting_of_ref": "indicator--bebf69d8-8a3d-466b-a047-11af06b3e117", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8551a18a-8d0e-4123-91b0-57ad5cba8283", "sighting_of_ref": "indicator--933b71f0-de99-4aa0-bbeb-621d85f8721f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34f2cb23-1e6c-427c-81fc-826a06ff13ef", "sighting_of_ref": "indicator--2edc2db9-ae34-4fc8-b51f-e3bea876ba60", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--590d2f3a-60ff-4941-8d8f-e02bb04277a0", "sighting_of_ref": "indicator--797dc880-373e-4d70-b521-c6968d60441b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fbed1fd-6e4c-49ce-8e61-f26125f629de", "sighting_of_ref": "indicator--79894548-0d3f-46ce-896e-65e59b4577e6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f5acca0-a085-45bd-9bcd-62c5b03d6acf", "sighting_of_ref": "indicator--bae5e87d-bda0-40b1-8e54-25dd38f45b2e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dc833d5-0a60-4492-818e-b88548a49bb3", "sighting_of_ref": "indicator--bff58fa8-37d8-423d-b6a4-3dbf0b1df4dc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--719c9c00-8c8e-4ee9-a39a-15bbf410f7fa", "sighting_of_ref": "indicator--d41eb2b9-3a94-4043-8bd1-dfdcc0e8ce00", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29df00f3-2f7b-4e65-849e-23bffb14df95", "sighting_of_ref": "indicator--b0773035-1c3b-48a4-aec8-195e622aac62", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc6f1f6d-86a4-4353-a345-e2bbfeed4865", "sighting_of_ref": "indicator--cd79ace2-d937-42b3-9bd0-bc9aac1641a7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec5e3951-7702-4b02-9f78-18a3d2d5762c", "sighting_of_ref": "indicator--622af699-3bf3-406c-a8ba-8694c88118d0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34d6893c-b493-4c46-82ba-bed778875fd6", "sighting_of_ref": "indicator--335cdc13-3e41-4fd1-b715-fb802df5eadc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4944d7d-d577-403d-a4a2-8e6203e12323", "sighting_of_ref": "indicator--e4a35987-f070-4195-afac-e054a49ddead", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5856a199-db2a-4264-a332-5c6449a8c796", "sighting_of_ref": "indicator--32a85296-b185-4260-a9af-18f4c67b0723", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7dd98e5-28a8-4e57-8cc9-00b58f06d30a", "sighting_of_ref": "indicator--04a0be58-0b28-4c9f-8fa2-12cb6923f309", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c09af32b-3ac7-415b-b73b-d6624290fd92", "sighting_of_ref": "indicator--d5dc86cf-0e22-4bf1-901c-b45700d70a84", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--673c58af-fb6c-460e-b666-1f9cc77acf71", "sighting_of_ref": "indicator--cc6c89cf-6394-471e-b182-e751fb6f2ca7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62a0f944-39c7-45eb-a964-70b6c050331b", "sighting_of_ref": "indicator--0006e66a-3f57-4e77-a72e-5e497b743d14", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--925af148-0269-49a2-9934-2a0eec0c2fb9", "sighting_of_ref": "indicator--b800c588-3482-43dd-b2bb-050f2f84a858", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aee31728-e21b-472a-a78c-aed75018de98", "sighting_of_ref": "indicator--c7f01c50-fbc3-4f00-9d1d-52feda42d144", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cecd8fce-b4f6-476e-a896-5308d04008cf", "sighting_of_ref": "indicator--de14b699-d572-4e26-b993-315bdce5c23d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f89b235-5bb7-41eb-9b1d-12621319072c", "sighting_of_ref": "indicator--191cc364-7336-4f47-bc5a-4d00006c81fb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a35557d8-7814-403a-a377-1319c04f34ca", "sighting_of_ref": "indicator--5baf6e5c-63b4-4fae-ad3b-2c5ab93391d6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8368f031-5874-4478-8a02-c8598d42ca6b", "sighting_of_ref": "indicator--5e77fff4-7734-42eb-ad2b-a5b577679dfc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--119c92d3-7f35-40f4-a897-98ebe0f46c6c", "sighting_of_ref": "indicator--3999d052-79c8-4bfe-8ca6-3a178acaa48e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f06ff384-6774-4df2-9d3d-abae2f44d431", "sighting_of_ref": "indicator--2aae5fad-346c-4cfe-b819-45f308c327c0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7349d84-1542-45f8-8a39-368d5cbc1512", "sighting_of_ref": "indicator--5a2da224-9fc0-446e-8e13-f727ef61638c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--090b5577-2e91-4484-ada0-9d423b142718", "sighting_of_ref": "indicator--c1bee49c-8755-45fd-b13e-74612dc8c308", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91b7833c-3851-40c6-8c98-036e63005c66", "sighting_of_ref": "indicator--21b509df-de25-4290-aadc-150fbda6788a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff9920f0-b481-442d-a6fa-830c36b28fac", "sighting_of_ref": "indicator--8e88959e-6e4f-48da-b3bf-ffae085f80e1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--beda0424-b552-49a5-bee9-7de0ad69f61b", "sighting_of_ref": "indicator--e1c79a52-a385-480a-982a-9ec68e0e24a8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7df01545-645d-4e85-808f-edf25e01f081", "sighting_of_ref": "indicator--9e4198a1-4c5e-4707-a487-2371fc5fe818", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a7435e9-ac44-475e-bc2b-946d55e4b5ed", "sighting_of_ref": "indicator--510005cd-ee94-4bc0-9f0f-c6bf55c278ed", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10493c23-1b5a-4d98-85b6-4c4e6e6d87dd", "sighting_of_ref": "indicator--58477131-f6e6-4752-ad52-544b24e395b5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab12564f-9a73-4a59-a182-2b05f85a3d71", "sighting_of_ref": "indicator--b5d514ab-db7a-4c26-97cf-689db9fadd29", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7da4c51-d2dd-467d-a916-3e69ca1da553", "sighting_of_ref": "indicator--34e96b66-131d-48f6-bc59-6cea12409835", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--803060c4-4e1a-403b-b82f-cbf9d129daa0", "sighting_of_ref": "indicator--1399066a-6d02-4e3e-8f6e-40e8055a2c57", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e87158da-943b-452d-bf10-02081607ed5c", "sighting_of_ref": "indicator--f0fbfd85-43d0-44b1-a89f-bed17ada58b2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75f85d4e-0deb-4e5c-a591-8749ef5fe961", "sighting_of_ref": "indicator--84b55cfd-e4d6-45fa-b555-fceb25b1e059", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fa2f919-c5ea-43d7-bdd8-8f812fda2a0e", "sighting_of_ref": "indicator--4763d979-3233-43bb-ab4a-092d1ed56fc5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddac138c-6516-4482-bf0a-b6bf8290a74c", "sighting_of_ref": "indicator--72c8424d-3cc0-4129-b820-d28c9d34dda2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d86a076-c7b4-429b-b72f-dde8376a8b09", "sighting_of_ref": "indicator--20fb6c23-3212-442a-98ec-76f69347f904", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0409c7ae-f85b-4275-a9b6-002fe3bbbc8d", "sighting_of_ref": "indicator--b8a4182e-4e6e-4408-8705-c129454f1549", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee81ce04-5374-4c19-958a-df767020cfd1", "sighting_of_ref": "indicator--5a35a6ef-81ef-4477-89d6-60cf448d15fe", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--623ae637-0433-454b-ac85-3aceddf62209", "sighting_of_ref": "indicator--bd6ca64f-68d1-4cb3-80c4-06f426c6ebf3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--366b7f53-2279-495b-94b4-76cc19c60aa6", "sighting_of_ref": "indicator--fbe43c19-9ec2-48f4-9597-bf5d9662a91f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e4abba3-64a7-45e7-95c0-d8c2da8300cb", "sighting_of_ref": "indicator--91905411-b789-404c-9973-c83690890d47", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cec3487-1748-4f13-96b7-2a4be99211bb", "sighting_of_ref": "indicator--8927a536-4978-4a6a-b17e-17411596b750", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c21745f-298d-4036-9707-ca922e164923", "sighting_of_ref": "indicator--135451a8-e4d8-4418-9ded-81fed97850cb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbe9e3aa-3b40-419c-94ed-54d5e0f5970d", "sighting_of_ref": "indicator--4261b2a9-efc7-4354-bce4-37bb64e8f4e6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f042e36-db22-49c5-b129-a4af12f7177f", "sighting_of_ref": "indicator--ae3a4747-66b8-4b4a-8d6d-1e65f8aabc03", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f887c099-a8d5-4e92-aac9-fd62db33ed3a", "sighting_of_ref": "indicator--fb8e5d65-dfc7-4410-b577-2606d4a400ab", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11e95413-e249-45ae-8c2d-b493d3329d4e", "sighting_of_ref": "indicator--822565ad-ce3d-4e77-9636-94b267b046f5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99b2ddc1-fdcb-4f43-942f-896df5c6ee7b", "sighting_of_ref": "indicator--f8390343-d254-4615-a443-4a2c9fc83fac", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcbf9025-1381-4a50-a7cf-fecdb1c166a4", "sighting_of_ref": "indicator--159a51a1-c31d-4aaa-a823-c4982cf6400d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8080e33c-5c7d-4ce6-be8c-000afebae52b", "sighting_of_ref": "indicator--6ce2fafa-1997-4eeb-b945-9f73d3811c89", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--279fe11b-8b6e-4122-9ff4-fffabd15b1ed", "sighting_of_ref": "indicator--f48bcfd5-af79-406b-8f02-c2efa0c3b034", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a46116af-5727-4dbd-8e70-3d25b8fcbcee", "sighting_of_ref": "indicator--70343aa4-ca8c-478e-accd-5a002725aec3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e516716-bdae-4477-b172-951c94712afc", "sighting_of_ref": "indicator--ac4a3641-745a-4efc-9929-8e059fd01c9d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa219464-c7cc-48ab-8548-bb98b502c9b8", "sighting_of_ref": "indicator--87003e52-6534-4627-81b3-f6f0a542a9df", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--909648b3-3352-4b8f-99a5-9ac80040a71b", "sighting_of_ref": "indicator--a81823b2-a107-4876-beb3-6418d3cca4ed", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d5d6cf6-b2f0-4736-819e-5f15948757d8", "sighting_of_ref": "indicator--51595c6a-4fa0-4fe6-8b20-1633869f5dbe", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46fc192b-c8e0-4bb7-8bbe-ee95022e6d9d", "sighting_of_ref": "indicator--16e499d4-09cb-4201-9e2f-c2e284f36af2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b9c5ec2-9128-4526-b1cf-24f8f8d6bc45", "sighting_of_ref": "indicator--b3ff0043-3ad9-4e8a-a94a-ff6d13dd5b9f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa285924-4c66-47be-ba67-36bab70b3f6b", "sighting_of_ref": "indicator--6da1ed00-97d0-468a-b98a-dff566abe2b6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57b8ef09-4dbc-4894-b526-8e4065b8b5bc", "sighting_of_ref": "indicator--530872be-b9d4-4eda-b176-f5c0c1e6e959", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72ebac42-c7d0-4712-9524-9f4a88517c28", "sighting_of_ref": "indicator--e4815f92-2bc4-44d7-bc62-3daf4f61fbf0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--837c30fa-4703-4988-ab55-ad6a77a35627", "sighting_of_ref": "indicator--8ff22946-992d-473e-b16e-2e559e94bebb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8fff18f-1e01-4903-889a-c0080aa31da0", "sighting_of_ref": "indicator--657670f6-44c3-4a24-94cb-8574173f6b6d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--954f71b5-a481-443d-881d-d1bc7840dd76", "sighting_of_ref": "indicator--6c0bcb88-91c0-46ce-b365-f4cb5d091f0a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34f7e3a3-6f3b-4f56-99ef-47c9f3e967ee", "sighting_of_ref": "indicator--cbcea1b3-4ca4-46f3-90b1-ca869185dcc7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c82b9bf-d6e9-4d2c-9205-e2ef940ef51b", "sighting_of_ref": "indicator--3cc0e3f6-f832-4888-a008-039e33111e1a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30b0a9b4-2f64-4e7e-87d4-d7dd59638984", "sighting_of_ref": "indicator--c385daa4-68c6-435b-ab5b-45dead2bfa38", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70886b02-95c5-420c-83e6-7f4c9ff356a8", "sighting_of_ref": "indicator--5b8a847e-740d-421f-82a9-0fafe1fabf83", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c111cd2-3bac-4c8d-9b31-cb85875cd106", "sighting_of_ref": "indicator--0f6654fc-4ea5-4b6f-8f15-127b00369d3a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea4355c9-7cd0-42af-bce9-84aea4be0318", "sighting_of_ref": "indicator--c2bd0055-0026-4ae4-baa3-393be84efb8b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d78e2c22-f8ca-4922-b69c-20728a2a159f", "sighting_of_ref": "indicator--75ff59f3-a58d-4c74-8741-82fea67d9049", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--251379f2-d9f8-41bd-9e96-dca4c74a394f", "sighting_of_ref": "indicator--8200f76f-8de4-4ead-be55-fc93ba679989", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2178b66-1de3-4d7d-9709-39ca53ba9c7f", "sighting_of_ref": "indicator--896de2f2-d297-4d00-aa7a-af44f9f2f49f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85dbc74d-3e53-4deb-be28-533406e3b422", "sighting_of_ref": "indicator--f8be51f8-924e-4475-a275-05df1e4be000", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3cb3423-d8e4-4d82-ad58-99708923a03d", "sighting_of_ref": "indicator--f837ad9f-7cc4-46ab-8ae9-dcfe7ee4fc53", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51d73381-75ea-4d72-ae9c-77dc8339d36e", "sighting_of_ref": "indicator--e27086c5-33dd-4545-8813-a5cd022fc407", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c0885c8-77d3-4869-9133-ac1a0d8a407f", "sighting_of_ref": "indicator--3cc41870-8dfa-4a32-82c6-ac8f3f0fb775", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3460cb9d-e278-41e1-bda5-b47f7bd15eea", "sighting_of_ref": "indicator--9785f86e-eb31-4dd0-b0ef-3e0629053a4c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa0dd5bc-1182-4f68-a01c-9e84814a2187", "sighting_of_ref": "indicator--b61315d0-f389-4380-ac90-b1a50249b24c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9ceddbb-9ffc-49bf-a891-61db445d2f9e", "sighting_of_ref": "indicator--da83a654-718d-42ba-8b91-c19aeb345ec8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4061c283-cece-4395-8267-19ce1f1fbd6e", "sighting_of_ref": "indicator--3f9cd9c7-66cc-4060-a74e-85ea461146e0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa76c281-bb38-4898-9ae5-9fce7ebcdd2c", "sighting_of_ref": "indicator--44c0483d-53ea-4c0e-9844-de8a602dcf6d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9400f4a-cde1-4d23-93ae-98086fff3e10", "sighting_of_ref": "indicator--582bc147-7053-4b35-92a4-16c60ff4bfd6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8016b2c-05b6-4c2f-bb86-bd273f933586", "sighting_of_ref": "indicator--fd1c5f93-58d9-4b69-872a-0ed5831aa935", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32871ef3-6a0c-463d-9771-c76d4c5b5dac", "sighting_of_ref": "indicator--12a121be-b84e-4f0f-9028-e27eca71d46c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07cf5dab-77a2-4fa2-a205-2254d93638c3", "sighting_of_ref": "indicator--0577cbaf-89a1-4781-a731-bf929de562f5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c50b867-876a-46e0-b49c-a1f5ac159226", "sighting_of_ref": "indicator--1ffcb32d-26d2-4a32-9955-6154d1febfc1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48467654-6a44-46b6-9aba-6e21fc8eb63e", "sighting_of_ref": "indicator--e8ca6c7b-f180-4ff1-82a2-b6f8eefb6cd6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b51be16d-315c-45e2-8844-c7d2b739616c", "sighting_of_ref": "indicator--12c95c21-81ba-4201-8a07-d1f2e583cd17", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87d491d7-d303-475f-b08f-56ee779c80c9", "sighting_of_ref": "indicator--fd8fbd87-6061-468c-b5f0-37aa37de26f2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--259e1533-b259-4bfe-ad4c-841de69113ff", "sighting_of_ref": "indicator--c55bf6ec-83b2-4320-9785-c440c247f8fb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2238eee-8fbd-42d9-b113-53dd0535907e", "sighting_of_ref": "indicator--d87ff29f-4bca-472e-92d7-a7c1eb07907f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb9d5de5-2da8-4137-bc11-62efe8b6026c", "sighting_of_ref": "indicator--597f4f53-bef4-4a82-aa58-e7b869858aaf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b618c1a-139c-491b-aeb1-0170cac4f98a", "sighting_of_ref": "indicator--8d1c4614-7374-4da5-87e3-17156b52cbb6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0ac1903-ada5-4bf7-af81-1548c97ab3a9", "sighting_of_ref": "indicator--e42382a3-afed-4811-a7ff-339a8a6b78e1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd58759f-a5a3-4a45-8147-8e4bacacffc3", "sighting_of_ref": "indicator--39aecc4a-5012-4540-b5de-5bc4a9ecc608", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa40f2f7-2069-4874-8e8e-39a2290f8fc4", "sighting_of_ref": "indicator--40f01280-30ba-4c3d-9f05-9844af12d27e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c081cff0-0ff1-4463-9654-a61d2432c60d", "sighting_of_ref": "indicator--a8c0acd4-9037-417e-86c6-2cbdb7c0bfa3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e8f28de-d35a-46b2-be3a-a54fa236772e", "sighting_of_ref": "indicator--f05fc85e-10ec-449e-8f97-83aa7de8b2f5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73529c86-569f-406d-95c8-ef4c65d98f5b", "sighting_of_ref": "indicator--6fe83e7e-5cf6-4191-aeb0-5ccf97af1e8a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e183a92-82f4-48cf-8ae4-f60af11fb89c", "sighting_of_ref": "indicator--98ee99e5-88e1-4290-bec3-e8904b474bbd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41eb1867-11cd-4d96-b9b9-d323f04d4aa9", "sighting_of_ref": "indicator--9c2f4f82-32bf-426c-bc9c-5d89344b3105", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3da60737-41c3-47da-857a-d664811f9d54", "sighting_of_ref": "indicator--f0b04e08-962a-483d-abe1-f4f0f31f36e2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70e3b1df-cb23-442e-80a5-7cd7421f0227", "sighting_of_ref": "indicator--5838e695-1212-46fa-af0a-d8d4b08938ab", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a33aac22-eb4a-4231-bdb9-2dafa0453e48", "sighting_of_ref": "indicator--fa4ab368-7fb6-44c5-8cff-c05812cccb74", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00976d54-5052-41a1-962e-8688ad0a846a", "sighting_of_ref": "indicator--6371d9c6-8a58-414b-9daf-b08e6f923b20", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad5a9713-747a-44ca-a87b-4ce3f49c334b", "sighting_of_ref": "indicator--1eadfcae-1e8b-419c-b077-28ead2d49161", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b943850d-469a-4d31-a244-f77367e67c16", "sighting_of_ref": "indicator--f5c1fb26-9fc0-4e9c-99ef-d470a18b6955", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3896236-b1b4-4a05-a628-722937426109", "sighting_of_ref": "indicator--5d641622-230d-4148-a06f-b530cfc530dc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6023ad5d-fa60-4e80-867d-684cb42e06d6", "sighting_of_ref": "indicator--f174a46a-d787-4651-b665-45070357c352", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b956e0fc-b6f4-47a7-8668-d3ec2de4b7d5", "sighting_of_ref": "indicator--aa60e6e3-120c-4543-9ea7-6736d0f4b823", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5bf47f1-88ea-434b-a4d8-78c00ea199dd", "sighting_of_ref": "indicator--df4397e5-60d8-4002-bef8-1493878d6040", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d37396b5-85c5-41f9-ae79-6b64d9cfcef0", "sighting_of_ref": "indicator--6528e916-1a72-4cbc-b5aa-909c0f15acf6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--377e8278-c1cc-468f-982d-b41d3004ee26", "sighting_of_ref": "indicator--74480a19-ce36-4c57-a2d4-c236ba7cadb1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cbd4e1cb-1cf7-45c7-a52d-e5f435f733c2", "sighting_of_ref": "indicator--9351bb29-6a4d-4618-86bf-70a14ae057a0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c815ab5d-99b8-41fb-9256-afb65f4fd478", "sighting_of_ref": "indicator--7ec39775-bee7-4f7a-8447-37e5bc1a846a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--196dafa3-7799-4efc-b5e2-74376e77750c", "sighting_of_ref": "indicator--ac1dd712-b566-4f3d-bdbd-f785168ff7f4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd3492b0-8ab6-4aaa-a35c-c55b77777bd1", "sighting_of_ref": "indicator--cf948266-edae-4366-84f3-4c7f9bd20988", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e575ea2-95f2-4d05-86bc-40362eab25ff", "sighting_of_ref": "indicator--51ace58d-ce16-4b8e-8907-dff694d664de", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b2ba6af-e4ac-4b3a-a9ff-73eb85032892", "sighting_of_ref": "indicator--b2dd88e4-310f-41cf-a2f7-509b0e7eb2ae", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04baed42-e697-460a-9ef8-32143b6db89e", "sighting_of_ref": "indicator--fac161dd-9b6a-4db2-823e-63cec6c7e624", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23b2437c-5bda-4ec1-b7d6-3d738dee6200", "sighting_of_ref": "indicator--a91dcf56-b20e-4244-b9e1-1453ec2f7876", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a746eb24-1dc2-4692-9171-e0b5a289caba", "sighting_of_ref": "indicator--40e9bbb1-330a-49da-960f-0342a9d47137", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dd33910-9cee-431c-afff-75c76562f60c", "sighting_of_ref": "indicator--ad8510e7-a698-43c2-afc0-7ffa7a137a7c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e322a7f-7188-46e3-b0e1-be427c566032", "sighting_of_ref": "indicator--f75d29ae-0a86-468f-bf93-e19b9fa1a4da", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d1f37d7-c710-466f-88ae-3f32d97103e9", "sighting_of_ref": "indicator--8d3d38a4-a7d6-48c0-8ae3-8e9f149f23d1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50208e5e-e164-457f-b48a-3dddb95a3ed8", "sighting_of_ref": "indicator--4753ef06-e0c2-479b-b24a-8eeb15cf69fb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3804b653-b4da-414e-aedb-9cb9f6dacc1a", "sighting_of_ref": "indicator--60db7825-383b-4b40-8ced-62cc4f51eb14", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bda15a7-12a4-4cd2-8a2a-2251e1e43d3a", "sighting_of_ref": "indicator--6914d973-67a6-4b29-b2dc-b56a43ce36d1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d9663c5-28e9-4982-b334-48f8cb93b746", "sighting_of_ref": "indicator--0831fa95-6efc-49e2-a914-7b214629e039", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf53f622-fa77-4198-9298-cb08244ed057", "sighting_of_ref": "indicator--1d82fd44-c74d-46dc-b673-0b901154526e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3ba92fc-469b-4f30-af14-8e09f8b2f38b", "sighting_of_ref": "indicator--338a3e81-8924-4a9f-92c2-f5583a49c866", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a96d8e4-05da-437c-bd00-77c9e630ff2b", "sighting_of_ref": "indicator--56f86ecc-ec1c-4fee-83e4-1dcd565dcaa5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4265db28-f242-4a82-ad82-7f39e95b57f5", "sighting_of_ref": "indicator--cecbb19a-e325-4737-8d1f-ef1d9f139726", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ee3400a-7ed9-47fd-9b21-241a1cd7cf34", "sighting_of_ref": "indicator--26561f09-2b04-4e0e-b3cf-a10e0d6dbe28", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02c7cff6-4d11-4960-abba-bb1690baeb30", "sighting_of_ref": "indicator--0c93127c-4522-4b82-a24f-ffb7ccd5c9e5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--888a2df8-194d-4faf-914c-38e9063fb605", "sighting_of_ref": "indicator--4e19c38f-81ba-4c54-aa39-bb7d83e433ec", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b776fe6a-c1ee-4eb6-aca4-b790a15d4ed2", "sighting_of_ref": "indicator--17421dd9-c01c-41bb-a12b-c031c4c1d596", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6cad0f2-7c98-41ca-8e96-43014929d93f", "sighting_of_ref": "indicator--5232f1a5-43a3-4e3e-a0cd-3f5b7bbfa070", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5952c97e-57b9-4524-8ba1-cdeff6aea387", "sighting_of_ref": "indicator--19e44c7c-f955-4042-b357-2ec84748b561", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25fa8bf2-80db-4956-aad8-51acfef70804", "sighting_of_ref": "indicator--ddb2ffc4-10fe-4b8d-b4d5-c378e748d4be", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb83eb53-3576-423d-a4ba-77e4c583b39c", "sighting_of_ref": "indicator--2261edd2-7404-4162-94a1-d160638e5db9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--305d05d3-8f86-4752-b693-42a14b8233c8", "sighting_of_ref": "indicator--ebc3f190-24b5-473c-886f-1b45a44fde79", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95fd35e5-2dd2-4f5a-888c-20f4d70961aa", "sighting_of_ref": "indicator--faef4169-feb7-4f49-9a15-1142c6387f1e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--114bb7a2-26e7-4a31-a7db-d9ac47d8a6f0", "sighting_of_ref": "indicator--90a9aa2f-a1e5-4c50-873e-6c5232b6c307", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebeffbfb-d81d-4280-95f9-0ff881b8df97", "sighting_of_ref": "indicator--d72f17b3-46fe-418d-b763-b5425dc49414", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71bec767-f312-432d-8b50-751cdb2aafde", "sighting_of_ref": "indicator--459f37c2-6508-4a0b-b124-c95980ec087e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ad63a83-2e64-4841-9e47-c556475bd262", "sighting_of_ref": "indicator--b73b8c67-cd03-4f7b-b569-e0555a0c11c1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--504afe17-5167-4653-82ea-b2f05550c348", "sighting_of_ref": "indicator--16aba732-7e3d-4290-bb1b-e2fdd2874bca", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37202830-1660-47fc-a35c-db631dab8c16", "sighting_of_ref": "indicator--13419ff8-f76f-4756-a21e-3299ea8bdf99", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4255bff6-2d3c-45b6-8c35-49dd66e2fc6f", "sighting_of_ref": "indicator--55ade7b4-61e5-4f6d-97e3-3110dc25568b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d44091d3-f986-4762-8378-42a071fa6d76", "sighting_of_ref": "indicator--185bca29-5a68-46c5-be25-b93464455188", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc3e7ec1-cf70-43a2-9869-027a80f6f731", "sighting_of_ref": "indicator--4f44b921-8155-47ad-a3f2-39c267131626", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--149e0baa-9587-4e16-9251-7205e1a2a233", "sighting_of_ref": "indicator--7efefc1d-51e1-4941-a39e-86eef5a72a96", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10451197-0833-48e3-a4a0-6412d7e0295e", "sighting_of_ref": "indicator--e315f222-b9e8-490f-9ae0-23fcf663eae3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9032382-bc34-4596-9dd2-52f68eb52778", "sighting_of_ref": "indicator--6e955b89-e233-4f62-9328-ab2e53ae4479", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c707b221-23c7-481c-9449-853907cca9cd", "sighting_of_ref": "indicator--b07e95d6-3bf4-47ff-8de2-e704e30a7765", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2be65122-2537-4f7f-93fe-af7430e1fb1b", "sighting_of_ref": "indicator--0f8badfc-7e0c-462c-ad58-ddfa497435a8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df8790d0-dd37-45c6-ab86-6ea941818a7f", "sighting_of_ref": "indicator--512d4184-d42f-4f0d-9208-499694886441", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ec10224-99a3-4bd9-89e2-79af68f5051b", "sighting_of_ref": "indicator--4fe41dcc-5b54-40db-aacc-8773b7705f3a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffa91576-72d2-44ee-a4fa-41fe90ec9567", "sighting_of_ref": "indicator--bef7f463-38f3-40a7-af6d-09c6fe8f0876", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38cfce6a-67a4-484a-9dd9-8dd10acddc00", "sighting_of_ref": "indicator--6191d827-6c57-4029-be30-51e8af4bcc54", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebf19067-61d2-4606-9b67-f41a77a63908", "sighting_of_ref": "indicator--a9cc350a-6362-404a-91c0-4575c2daaba8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c5ac2e8-35c6-44ca-93ba-e48bc43dd7dd", "sighting_of_ref": "indicator--d8abaed1-d5d7-455e-9f98-2bc9832764ce", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76c40f9f-4f6e-476f-8499-62bd6d90b09f", "sighting_of_ref": "indicator--ee83eb7a-72b8-4255-a7aa-c085dd6ef857", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bc7f94b-c347-46d4-8d27-2f399510bd8c", "sighting_of_ref": "indicator--8f3063e2-4d14-44b2-bd0c-0c9e6eb60394", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33803f4c-28d1-4725-bfe4-c7fa64694d55", "sighting_of_ref": "indicator--2813b098-386b-44e2-a365-88d001301cf6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcb63426-1d39-4a4d-99ed-4aa5bf7b06c6", "sighting_of_ref": "indicator--2920a763-a0b8-437a-84f7-d93eadd587f1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68c57260-065e-480d-bb6a-469fcae61a4c", "sighting_of_ref": "indicator--e95d58c8-abd7-46ce-b92e-c39dac27d13f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df8f456f-984e-41b2-8718-7a42fee1c1c3", "sighting_of_ref": "indicator--86b4e88f-0cca-4946-b229-106fb4c9abf8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62a9eb8b-a6b3-4745-9f98-ae50149f508a", "sighting_of_ref": "indicator--e82603d5-ea4c-4e29-8f9e-79791c982757", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e4bafba-b5a0-4690-a863-667e8f879bd1", "sighting_of_ref": "indicator--629a1a1b-10c5-47f8-814a-6d985260aa56", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a77cce9-a7f0-4d85-a3e3-8f302f83375e", "sighting_of_ref": "indicator--0c14b402-7aca-4624-a8e0-4bd45d4f1070", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f88387e1-5b70-49bf-ac5b-68e8e9741c59", "sighting_of_ref": "indicator--062eaa19-17f1-44a9-b30f-0fbb63ef719b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75286134-ebee-43bf-84ab-4dcdd2b48da1", "sighting_of_ref": "indicator--edfe1b21-8fca-4ae0-a6bb-ca6de65b73b8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fcf5eab-cfaf-4f4c-b576-8236dc8016fc", "sighting_of_ref": "indicator--07806352-96f1-470c-b159-20c21db8ac06", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--988409df-cf2d-44a2-9a0c-2dea47caab27", "sighting_of_ref": "indicator--e52c8510-8782-41dc-ac1c-3be501b04f58", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31089786-63c0-43b2-a970-42e389413d48", "sighting_of_ref": "indicator--733e8e52-e59c-4772-88a2-bdd05fe51883", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0958b11e-a934-49b4-8401-cbf5b57d6466", "sighting_of_ref": "indicator--dad3c7bb-251d-44c2-93f4-64d0a365f430", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdc45572-2e29-4931-92a1-969028f0424f", "sighting_of_ref": "indicator--7499e113-aac4-42ec-bc44-afbb574bacdb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0fc2717-1200-44f0-8705-da67d8ba1390", "sighting_of_ref": "indicator--e0570ce2-df9a-403b-a474-2b8b5a91ac78", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a1b17de-c56c-4749-b195-52f2da4eb1cf", "sighting_of_ref": "indicator--a5aa8c81-2429-41e8-9758-29e5086d4eeb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dfd3958-a109-4280-83cf-e2eb3ecfac8d", "sighting_of_ref": "indicator--3793bf75-22ee-4de6-87b5-8fc7dfda8ee5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01f0166b-6f28-4f97-8a33-8225994594fd", "sighting_of_ref": "indicator--f677a767-04e9-444c-8b19-610c2beee2ab", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5121237c-808d-49bb-84b5-e0492d9c29b5", "sighting_of_ref": "indicator--3d056823-d386-4b64-a5d4-eeef665738eb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b44ea5ae-8154-4565-96a2-2366d0c02797", "sighting_of_ref": "indicator--2dfdb2e7-dab4-4a8d-950d-16836e4429a7", "where_sighted_refs": ["location--c8625a69-b7e6-4cad-99d8-76632a875c20"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e93a74df-236f-47e7-b51a-430955f45dc0", "sighting_of_ref": "indicator--38e2ad06-b585-49c5-a11a-d53cd9e7aee0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29d3645f-4197-417f-8ae6-92983bce49f8", "sighting_of_ref": "indicator--c1594b4f-e1bb-4153-af0b-f5a1381db180", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e1accee-8be7-4894-99d9-1a4444d0cc9a", "sighting_of_ref": "indicator--88aa5cac-4b0e-4622-bf7a-ce38e43e18e4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c37edf6-21b2-4222-b65d-134048a01b71", "sighting_of_ref": "indicator--2957c6f4-bef9-4339-921e-ca8c8a4101c3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9836e08f-5893-43ba-9ac5-41b03723cd5f", "sighting_of_ref": "indicator--81f54e1c-fefa-4677-bdcc-4d71dfc9a4e2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cb25947-c19b-4bca-829c-9ce514fe632b", "sighting_of_ref": "indicator--c98eede7-586e-4e5d-9695-d7f277bbe9e5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--127d8b12-c20f-46b9-bdd5-b165d2e804e2", "sighting_of_ref": "indicator--3b2d5868-6cc1-4405-8587-05afaf9d0e22", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fef57e9c-b03c-46b2-a62c-2d3c43b5d6f9", "sighting_of_ref": "indicator--499182d6-e992-49d1-beb0-e8285886b667", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ae2646d-c498-4b54-a3cd-cc5e18b7bdff", "sighting_of_ref": "indicator--eef04bff-8301-4a0a-83ae-b8cbc9d88e50", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--866f1170-b94f-4112-b502-68dd15755d42", "sighting_of_ref": "indicator--ad0750e0-bf27-4437-8a65-7c2a04e73265", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--568a2bd9-23cc-4f15-83b9-5c7ff34b0bc4", "sighting_of_ref": "indicator--32f88764-a4ef-4785-b72e-75f375125c03", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--527a131a-8ce3-4dde-a3f5-ec8301554d66", "sighting_of_ref": "indicator--33973773-1129-454a-aac5-5a85f05441f3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7af65aaa-71fa-4767-9c62-6e2458345a2f", "sighting_of_ref": "indicator--b1d0fe17-3942-4e23-ba7d-5b98af6f7521", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0f32eee-c409-4e2e-9fce-1e72d421f9f4", "sighting_of_ref": "indicator--0cc0d56d-ab84-436b-b7b3-b269a92f8d1c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afe75ea6-ef69-43f4-8b6f-6d08df4ed1a0", "sighting_of_ref": "indicator--5e854c41-5c20-4441-b53f-411670762b2e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31ab7f2c-10f6-470d-a490-698bc29dce08", "sighting_of_ref": "indicator--43fe00db-4a1f-4aa8-950a-2e432b9560da", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a25aae4e-13da-4619-bd46-293ccd68f436", "sighting_of_ref": "indicator--481cf1df-b8cd-4ebd-9e31-28b0ee550005", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2e1887c-8947-401a-900b-876b5c511aa3", "sighting_of_ref": "indicator--7bc746f1-773a-4089-9d25-68ed32976e1f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cbf3e0e-3f3b-4a1b-9bbd-1fba59a086c7", "sighting_of_ref": "indicator--3c030cb2-168e-4acc-bef1-4912c2d4fe10", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd5a97ec-73dd-4919-9f19-c40d70bdd84b", "sighting_of_ref": "indicator--3b703f5d-c018-4cc7-b689-97b54aa7c6c8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26cbc17b-54d7-49e3-827a-a93b82b380fc", "sighting_of_ref": "indicator--b28fea42-f7a4-40a6-8579-952bc1710394", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--163b9bc4-ce77-4394-a148-733363bc8194", "sighting_of_ref": "indicator--388e4841-9a4f-4c5f-9cc4-57a0935f84e8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4f0a229-78fe-46ea-b502-d74c5b3f532c", "sighting_of_ref": "indicator--ecb6ad71-5f59-4e1e-bf06-10403fb8c1bc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b7d7814-346d-4b4e-b026-7a0f15bcf2e3", "sighting_of_ref": "indicator--30d028c3-66e9-493f-8a29-240c81059c0c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d21c4aad-e36d-40da-a5f1-2fcfa91141e5", "sighting_of_ref": "indicator--3741501d-b657-4373-b1cc-cdb46563d4d2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--898cf672-8fa9-46ab-8457-024c843844f8", "sighting_of_ref": "indicator--a5bcfdc2-ca2e-4d8d-a6da-6340b1d50182", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aad2704f-ba8f-4b70-8f8a-918c5def5380", "sighting_of_ref": "indicator--a393d8a1-e6a5-473e-9b16-0ed5bf0e0ea0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7fe0b9e7-5efc-45f0-b2a1-33f4342d46d9", "sighting_of_ref": "indicator--e1e989ff-2509-43af-a7ab-799bf95a0eef", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05f9e4af-1aaf-4f89-8d2a-9c59a698e148", "sighting_of_ref": "indicator--05b711d7-2adf-4b32-8a39-069c8b640bcd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eccad0f6-9775-48c2-b3bd-a5a57eddcc4b", "sighting_of_ref": "indicator--7ad66c61-78a7-4825-afe8-0692f09d61b3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--161c9952-685d-4ae5-ba05-c5368c408ae1", "sighting_of_ref": "indicator--f1d1ad47-cb88-4aee-98eb-b01365f7c67d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83638859-2b5c-429f-b4a8-e07cb86a0292", "sighting_of_ref": "indicator--2dee48c5-4cc4-48f4-a505-61583616f535", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--365b3c45-4918-4950-9c80-e1bca9713532", "sighting_of_ref": "indicator--13b26194-c952-40df-8179-23fca2fdccc1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11d2f25b-cfe6-4a33-91eb-6a8e826ab83b", "sighting_of_ref": "indicator--4cc9a0b1-8c0f-4b51-8aa2-89f0589354ff", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03053905-c71c-4df7-9cb5-ef14dfcce250", "sighting_of_ref": "indicator--83caa8d6-3e28-4737-b5c5-87aa98b6f97b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--229524cd-bb0a-45c4-8748-260a1bd13626", "sighting_of_ref": "indicator--21f2caff-c027-4401-99f6-45b79a0c7ca7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0695854-5264-4dbd-8f33-49dd0701eeae", "sighting_of_ref": "indicator--9cf16081-c818-4319-9f2d-0980859ec3ae", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--725866e8-3ee1-48b9-ae9c-ee02f6e1b3d6", "sighting_of_ref": "indicator--df1843fc-3faa-47af-8666-e7a36a8130e3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a10b82c2-710d-4815-b913-4dc4dec346f1", "sighting_of_ref": "indicator--37798401-4e23-46e7-b107-f2b8120b562f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb8b6eb5-370e-4f08-bd7c-d2cb039932ae", "sighting_of_ref": "indicator--7df9dcf2-a7de-4c16-8c72-ecdd902ffccf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf44119f-8c15-4017-9cbf-9a34983f9def", "sighting_of_ref": "indicator--d669434d-1a51-4243-b536-d8f2af2f0e56", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a559d15d-6fc9-4740-a617-d973929b1e3a", "sighting_of_ref": "indicator--8caf86c9-d714-4870-bcf3-d3b7ab66e527", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4becac8c-46f0-49a6-b75a-bb591f81bfb2", "sighting_of_ref": "indicator--218b86f0-4d64-4d68-9636-ae099686ad59", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9cd662f-d5c2-43aa-9b37-843b186b0016", "sighting_of_ref": "indicator--33dbfe88-d1c1-4c7b-8a8a-21d4ebcd5b09", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9995444b-7cdc-44b4-b176-cd79362e3205", "sighting_of_ref": "indicator--a2b7109b-0eb8-4254-8365-fb0b5e650cda", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5269c076-75bb-45c7-b639-54fd85203e50", "sighting_of_ref": "indicator--0e04c21e-0be5-49a9-ae39-ff4f6cd4eb79", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b294356a-78b2-4ce3-955e-557e0bc6b4a4", "sighting_of_ref": "indicator--16e2dfc7-cce8-4bef-a267-27652c1acdc7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffd2c908-6020-4567-ab5a-1554396fcca6", "sighting_of_ref": "indicator--136c78e3-6646-428d-b514-87742e602677", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--995854ec-37fe-4bb6-88fc-37a73d2e870b", "sighting_of_ref": "indicator--4b1edea7-0a59-4128-86ea-01ce9369515e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36448cc8-7d69-4bb3-adaa-60869415e0f1", "sighting_of_ref": "indicator--80725c39-2338-4d82-b3f4-c92641315335", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2958c6e2-b436-47fb-b83c-d66f9c89daa7", "sighting_of_ref": "indicator--16cd237b-c6ec-4062-9834-b6f1e9478ad1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c80ed853-2103-4457-9305-e23ea5606e5e", "sighting_of_ref": "indicator--f830141a-44f9-4a6a-bb67-b9e81ee45f88", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4317fa2d-a19d-4057-8be1-242f72c0ba5d", "sighting_of_ref": "indicator--a7584b4d-a934-4706-a83b-f69bdfd1170f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68f8a620-6b96-49bb-9ff9-c96d21321f1e", "sighting_of_ref": "indicator--4a3d756d-3ec7-4834-8f6f-c9e75a6b22f4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b24e7b1e-fbef-49dc-af58-3b3d07444347", "sighting_of_ref": "indicator--7d2b3104-dc28-4c52-8ec1-a6e57c4473f3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b8040a2-8766-4b96-8b7b-c9ce1dcdde14", "sighting_of_ref": "indicator--116791c4-4134-4998-b984-bd2c06570b8a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7919080c-185c-456e-9ba5-54ebeea9623c", "sighting_of_ref": "indicator--6073b126-0aad-4f64-92b6-5941507f9e63", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7976908d-5fa9-4788-853f-674779ae4e41", "sighting_of_ref": "indicator--cd87aa80-0efd-4aff-9b3b-c3081a04883f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44be1513-1344-4529-94e0-21a0b5dfaaec", "sighting_of_ref": "indicator--6fc97f2e-efa8-4f86-a8e1-2889a4b098e5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4de28e65-730a-40b9-a281-cda20ab7ad7e", "sighting_of_ref": "indicator--75a7111c-96d5-416f-ad30-6c905da92565", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eca33c00-2927-4a69-a4b9-e083a4bb8af9", "sighting_of_ref": "indicator--ac26cc6b-f4ca-47f8-9af5-61c553d79499", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fee3f25-147d-46f6-90d6-c32105b041f6", "sighting_of_ref": "indicator--d6b990f8-a41e-45a3-ba0e-f3a5931b12ce", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30294baa-c6de-4c69-b38a-1649b81576f6", "sighting_of_ref": "indicator--3cbfcbb0-642e-4819-ba07-19c82b992f85", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ae0ef01-5594-49d6-8e5f-26cc396be178", "sighting_of_ref": "indicator--37398a77-ecc0-4789-8421-18d6fe1c499f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6343ca8-2cd1-4259-a90f-871a764d0da5", "sighting_of_ref": "indicator--e77a8bf2-92fe-4cf5-84d5-4bd1848bd6f3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99fcd306-870a-4f7c-a416-842f37b7f5e5", "sighting_of_ref": "indicator--1e979936-c17d-41e6-89ce-ae2bcf057c50", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad357bf0-9863-4ed2-8b9d-9824552e5c83", "sighting_of_ref": "indicator--e25daf3e-d9e9-437d-b98e-c9cf36879e7a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1429f41-dfa3-4cd7-95e2-6441f405279c", "sighting_of_ref": "indicator--cb7336e5-790e-48b6-8670-3b4d9b9992fa", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23f29dce-6755-413f-8c3e-e9d35b1ab8ac", "sighting_of_ref": "indicator--de2bcbee-f59c-48cf-a823-6fc98228cd26", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3aed464d-7c1e-48cf-89d0-fbec3cd7e87f", "sighting_of_ref": "indicator--a56f9e51-b2ec-4a3e-bb6e-b22add428f50", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4b5961c-37fe-4453-b4cd-0b175f4cd192", "sighting_of_ref": "indicator--e28beaee-ffbc-4260-a701-b121b7545eae", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0778911-24e6-4a92-98ce-2a950e19291d", "sighting_of_ref": "indicator--6b0310f9-ea3e-450d-a396-f9274e8a6919", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6626a4a5-3108-4722-bdb6-41c056505302", "sighting_of_ref": "indicator--66061237-511b-4d29-82cb-b431573403a3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c3d9026-9787-45a6-ac58-987f337d9e50", "sighting_of_ref": "indicator--dea44679-f74a-4f31-87b4-be57a43d0be7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--366e3a5e-8425-45a9-8f76-e0fa3fa8791e", "sighting_of_ref": "indicator--3a8c593b-0e0e-40f2-b25b-4e9aa6d7af6f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e0561aa-03f2-45fd-b9bd-8858c559c5fb", "sighting_of_ref": "indicator--19708315-bed3-45d9-8667-eb58104ec106", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ffe76f6-04f3-465f-bbc4-2db9cf2b3ef3", "sighting_of_ref": "indicator--bad5f2de-9cea-4f7e-b5c9-5bd9767378b5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3b640b2-4d9a-4c20-baf2-fe8b3e09d2ca", "sighting_of_ref": "indicator--9aa1db1a-d1e5-4aaf-a755-cecce3e0afae", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e47b052-750c-43dd-a053-91db31039aff", "sighting_of_ref": "indicator--6f078944-c644-4439-8d67-0090c0590e00", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98e7f0e0-9f23-4957-a09c-75ea61225d81", "sighting_of_ref": "indicator--f123694b-16a2-4970-9d56-765ce64f49fa", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1dcaf95a-22ac-4c11-8288-3f791ec89b9f", "sighting_of_ref": "indicator--b6ff436d-61d3-4172-b9b1-5843e23b9ad5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dced993-dd02-47d9-9751-834c4b487554", "sighting_of_ref": "indicator--0fd9d774-f43f-4772-a5c2-68519a5246d6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b265afc2-5538-4b69-9f01-7a2a750f0a55", "sighting_of_ref": "indicator--921a99cd-ee8b-42c7-9cb8-0a519bc5b0aa", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0edfa48-0d7f-41eb-a6cd-3ab359200858", "sighting_of_ref": "indicator--84f9e5aa-5b84-4493-b83d-9ae694e6a979", "where_sighted_refs": ["location--c71c2550-5849-4a8d-b050-635a93ef5467"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76962124-79f3-4d1d-a7c5-dba5bc970443", "sighting_of_ref": "indicator--52238856-bc30-4f81-9c23-272c440d0a34", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46729e8b-ca6d-4dae-89cb-8a8dbb10f03f", "sighting_of_ref": "indicator--06be7f91-c624-45e8-88e3-34ff7702f392", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--548b3b7c-8d97-49a0-811a-d1165241b2df", "sighting_of_ref": "indicator--31d2b83d-9a53-4311-8f24-4fe5df9bcf00", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ca38a95-f381-44a5-b469-50e5368db241", "sighting_of_ref": "indicator--86ca826c-b5e7-4a6a-aa7d-94802b5c6b62", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d172a8a-2fd3-46ff-8490-cdce74158661", "sighting_of_ref": "indicator--20ca360a-3845-4645-ae2d-602d11c0c120", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d32b2c00-c5c3-4b56-a70a-1ae09c85a717", "sighting_of_ref": "indicator--72976923-975d-4b2c-9af8-3bca4dea7711", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--696ffe75-462c-45f6-ac5f-cd2153335dee", "sighting_of_ref": "indicator--d9f6e77a-a038-438c-b918-9b733464d237", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--990b2f31-fb08-451c-af2e-9ae565b69f58", "sighting_of_ref": "indicator--0e477f37-7ea2-487a-9cc3-d46bd00c804b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3705bfdf-96d3-4c35-b8e5-c96dc3b791e0", "sighting_of_ref": "indicator--08eb63c3-79b6-4c74-812c-49e21c3ff1f8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d05fe421-da30-46b5-a503-809ad22afbf1", "sighting_of_ref": "indicator--b917521a-43da-45b1-bce0-36d9933e5c21", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab4f074d-aadf-4ced-9811-d26296e60a85", "sighting_of_ref": "indicator--6b2648cd-25fb-4155-9237-56fb520bc1dc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8132a881-7fdf-4314-af94-c6697cdd0574", "sighting_of_ref": "indicator--1246c623-fb50-4306-9650-016ac316c1ea", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fd0ce1d-ff55-4180-aa9f-193b65efeb4b", "sighting_of_ref": "indicator--6458d762-279b-49df-81f2-be33c6dcd13d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9624b2a0-2d32-4985-a59a-0ee9dc100fc3", "sighting_of_ref": "indicator--0c8303bc-b4a9-4115-a30b-617840b41c60", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3844a00d-8462-4b82-9cb1-16faf4e4fe63", "sighting_of_ref": "indicator--004d0bf3-dcee-4cc8-b160-2ea00e04d501", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02350046-e0be-40e7-a1b7-a485854d0bee", "sighting_of_ref": "indicator--5be54f84-541b-43d8-8ecc-ae41fd5940e2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dc6c044-bad3-4957-9dfc-83d37c2db136", "sighting_of_ref": "indicator--d8198bbb-f99b-440c-8057-e1d9ac91e024", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1eedd97b-db3b-48ef-9c79-39bb3ac84a07", "sighting_of_ref": "indicator--2aa5f96b-9a60-4322-bd66-5e2a8fdbff56", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caaa7822-d73a-4f59-ae83-e6a209b0a513", "sighting_of_ref": "indicator--d7820aa3-c157-4038-9c58-b17ed783ba38", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7c06f29-1843-4962-8ee7-7b87b6d2ae1c", "sighting_of_ref": "indicator--a0d079c0-ee2d-4047-9029-257986ea3cba", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be7e4e8e-4bb6-4e59-8f12-f756112e5db3", "sighting_of_ref": "indicator--640db3fe-7ae0-4bcd-a922-51ed2ad22259", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d5246a7-b57e-4137-9d4f-ba7d38f19c2a", "sighting_of_ref": "indicator--e2efd5ad-859d-4d34-bb52-807e14f3c7b2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--975f6517-85f1-4668-9de3-f32ec3aed1f1", "sighting_of_ref": "indicator--5eb0df9a-70b2-41cb-b99d-e5a077f2f24c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3629ce00-ce63-4473-b680-a66816234b82", "sighting_of_ref": "indicator--08409af0-37ec-48d5-b30f-dd10673504be", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--741f50a5-283c-4150-a3dd-2340b00912a5", "sighting_of_ref": "indicator--0296ace8-0686-40f5-8f92-25afc8cbb808", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31626563-65f4-44b6-89f0-8e926797af3b", "sighting_of_ref": "indicator--e2693faa-3094-463a-b262-4624d0ce1502", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82937ae1-bd70-42b1-9bae-3ab780a10471", "sighting_of_ref": "indicator--6926e1fc-7640-47a0-bd4d-2fe565b3459f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--965f6450-2aa8-4161-b7a6-2c5eebb1531f", "sighting_of_ref": "indicator--62051eb8-b51f-424d-b6a2-fc576c0cb9e9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fced54f-f580-45a3-84d7-b99e983e72b5", "sighting_of_ref": "indicator--496f30db-8180-4857-a0a9-0d6f109f3a6f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64225265-71a4-4f4a-b624-5f4055985fc8", "sighting_of_ref": "indicator--4f4e08f8-8b7d-4891-b057-ac2f65d6a038", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0622d55-4236-4b93-93af-82f52d633da9", "sighting_of_ref": "indicator--9c217d65-c4dc-491b-ad5e-b4692ad415d6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab00e171-b437-488e-863e-a0a90edccc40", "sighting_of_ref": "indicator--7d2f0522-6493-46bc-a837-a15fd6e1e088", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69220dd7-0522-4ad1-84ff-d8b6ce6da559", "sighting_of_ref": "indicator--3455d549-dc5e-44fb-ab5b-df788da4357c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3460738-6a00-4dab-87a4-c65acaab2c76", "sighting_of_ref": "indicator--0677f817-255e-401b-b6ea-e5eb52222b27", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--955ea1eb-afef-4409-9463-f2d5d650a219", "sighting_of_ref": "indicator--ec29722f-a62f-42c8-8f70-e0f2d828c8d2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1937ab9-56e3-44d3-8b7b-6d4bbe58e7f9", "sighting_of_ref": "indicator--70118585-11a1-4cba-a451-c3294af1bf91", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e988435-3724-4c6c-89af-0fef35be52f6", "sighting_of_ref": "indicator--afd3053a-3559-48e8-97a3-b85654d069a0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c836c519-8bfd-4c03-8686-9809e579086f", "sighting_of_ref": "indicator--36bff559-30c0-4a05-9749-7244e34bb27e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6ffa8ff-ca4d-431a-94e3-98885a6d2309", "sighting_of_ref": "indicator--2a399ab0-5003-47ed-954c-2fdbdc70b397", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ec681d7-cc41-40e2-af41-8c665c604b47", "sighting_of_ref": "indicator--d6daa18b-a340-4440-b183-5b7ccacf99a2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--499f39a4-f2d5-4f2e-a404-89e55e778454", "sighting_of_ref": "indicator--fffe950c-1caf-4669-8ef5-510a4a225f37", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab1a2696-e54e-45d5-8ead-d9f44f221c54", "sighting_of_ref": "indicator--51c5be0a-d0a8-415b-bd35-b13736b0e9a1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1881e387-27b2-44ff-b490-b4fdaee50766", "sighting_of_ref": "indicator--02b56002-ec04-4e7b-bf3b-3818ead3796e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be2c26f1-04dc-4046-befa-a103062f3837", "sighting_of_ref": "indicator--bfb25749-7846-409b-a54e-65b35e2351e0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72bdae9b-44fd-4b6d-86af-40f26ccac9f9", "sighting_of_ref": "indicator--b67bbd75-f053-491e-ad47-ef40b0d636a9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b67fea5-701e-4dbc-b499-57d3e8760209", "sighting_of_ref": "indicator--dd2d4166-3c12-4897-8631-cbf76fc0ba33", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d5c8c73-4c1e-4fc4-8cea-2efb95b3999a", "sighting_of_ref": "indicator--a9f80f61-af5a-45f1-a87f-4f2e5a9a8cf9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20c87dd8-4a72-4fee-8111-1d82c0c85f12", "sighting_of_ref": "indicator--af4c98ae-7886-43c6-8c75-6d812c5c29a3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d53ae86-bca7-4902-b57f-d28604d08156", "sighting_of_ref": "indicator--02aa25ee-d862-4bac-bfe0-3e3bfd3bfcfa", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8d94c38-b541-40e3-8479-f41371d99cda", "sighting_of_ref": "indicator--3e23ceec-d8fc-4315-8f64-2289c7d08d8f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea0749e7-1326-448d-b931-ef171e49b441", "sighting_of_ref": "indicator--ad775b3b-eb62-48e4-b53f-caa3115c0a6c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2572dae-752d-4ecb-9a49-7252d6037ec5", "sighting_of_ref": "indicator--6e6848ac-c52b-47d6-b137-223df8b19011", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--806a3635-88c9-4b53-8cc9-891a14ee6013", "sighting_of_ref": "indicator--688f1ab5-2693-4c47-934a-8c90850505b2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecc09af8-de4d-43c6-9398-82c91718fde8", "sighting_of_ref": "indicator--81a3b78a-d879-45c9-8dd9-1ed9b091b9fa", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ce1e60a-8e2d-4ec1-a022-7b49d2112d8c", "sighting_of_ref": "indicator--b9bfd8af-8723-4f10-a927-5ae248bf51eb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51c79c4d-eaf7-47a6-ae8f-3359e6e46949", "sighting_of_ref": "indicator--cc0ad63c-7dd4-4104-a800-570f276ced7f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f340e07-5060-49c1-b5f7-6373c4240440", "sighting_of_ref": "indicator--908046ef-0f06-47c5-aa8b-9435391dff9a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d95d0c67-83e6-4991-a870-5854b19b3b44", "sighting_of_ref": "indicator--4dab57d3-2d56-49a1-9f62-4959b0936f18", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fac7e29c-76e0-43a2-80fe-127de3dd02f9", "sighting_of_ref": "indicator--e03cacd6-eb79-40a2-95d9-4791bccf198a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c167b016-14b7-4b30-8175-39033569e422", "sighting_of_ref": "indicator--1664c223-42bb-4667-904c-ee9e6dc7ff2e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df2d5f03-5c9e-4ef0-9347-827f7d6634be", "sighting_of_ref": "indicator--9fade3a9-d799-461a-8a37-47ced8cc5ca1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b789029f-4799-4e3a-bf27-8ea006d394d5", "sighting_of_ref": "indicator--ca0ac09d-1b1c-4b4c-82ff-9780475035fc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dfa0123-8b8c-4ec6-90c3-aa0ac0de4c18", "sighting_of_ref": "indicator--02220d88-efc5-43f1-8ae1-3de73c22b9c9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e998fe5d-ef19-48c1-a858-f2a60a245c19", "sighting_of_ref": "indicator--dec7f9e3-c6db-453c-8316-1b1aa2ebaef3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4814bb0b-5870-4ef2-b379-42d8e3384b3b", "sighting_of_ref": "indicator--3c257bfb-a8c5-4cfb-9ff4-6c60c6a242ac", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b317d994-36c2-4f64-9ed0-54e449051bc4", "sighting_of_ref": "indicator--43f75653-2cea-4064-a757-1ad7e3546653", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--796f664f-ee82-4725-9cf6-3e4467d10b0c", "sighting_of_ref": "indicator--a320f29b-ed99-4f21-bafd-2d84dfc83117", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--102fcbe8-564c-44d4-b848-5f3d61c4c6a2", "sighting_of_ref": "indicator--92be13bd-ca34-4958-8aa9-a452c2181272", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a3cfafd-abc4-42cf-b83f-b559498a1804", "sighting_of_ref": "indicator--a54c3b75-6a1e-4c3d-9976-9b277941ab5c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48706aea-8f49-4d13-8097-9d405c95a909", "sighting_of_ref": "indicator--48e99faa-934a-4c86-b8fd-ac60ff6004fb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--741fecc6-5e7e-4bf3-bcaf-58d189c888d8", "sighting_of_ref": "indicator--e9bf8439-dff9-48ab-9193-2309bd3d2d99", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e12c213-0852-4c06-a614-afb36cb7d4cb", "sighting_of_ref": "indicator--e27ad449-9f48-4b9e-97a0-9e90a7d2c5e5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc1ff108-895f-4382-b6a2-f03ba04afdbd", "sighting_of_ref": "indicator--0895ddc7-8229-4743-af6f-a37ae57283d8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--271f55bb-0e79-4e67-8b62-1ab588d71913", "sighting_of_ref": "indicator--a0b8427b-d234-4c04-8b68-65d5db03d4bb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c9f082f-79a4-4d8e-8720-4a36c17e835b", "sighting_of_ref": "indicator--aeabb6ba-4d02-4ffa-a99c-4b5921c534ff", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--800abe07-b1bb-4cd8-b984-68262eba7e34", "sighting_of_ref": "indicator--85c2e241-cc36-4eb5-89f4-db6cde555ed1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de9fd427-0025-4693-857c-4eef9808fdb3", "sighting_of_ref": "indicator--43b9f6de-9147-428a-b163-b9348f40d8c2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--076e5fc1-3dc3-450a-af21-575e5ca4f8c8", "sighting_of_ref": "indicator--f2681781-1d8d-4553-b7f5-afe41ec33cb7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b8dcf37-1d4d-4198-a1c6-1d3e4f03460d", "sighting_of_ref": "indicator--ff70e3b9-e312-4d77-9608-8c86e022046e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b1e36ea-9c34-4208-9679-7465941cb14b", "sighting_of_ref": "indicator--a5a86a63-2bec-4c73-9817-2dc202df9858", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--676a6e5b-0a90-42fb-989f-c03cfafd1396", "sighting_of_ref": "indicator--0c9dc951-6bb0-4399-a659-b926960af3a9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab7c9002-6702-43fa-8671-d098b4b02ebc", "sighting_of_ref": "indicator--d8380d64-8235-4e54-ac62-98be641437d8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aea7212-88b7-4a5c-be7d-40672fd5b224", "sighting_of_ref": "indicator--8cf8055e-f54c-47f0-8364-a3a40e897983", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9f31123-c498-40df-b014-20c88a173d39", "sighting_of_ref": "indicator--faa5d30f-5604-40d5-a850-b4fc5e2a49e6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45fa3767-b919-43ef-a6c9-156605337401", "sighting_of_ref": "indicator--aa53dc61-0a9d-4f1c-b8c0-6e26d2ceade3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ea5cd30-0b12-46cb-9618-e6f2b86f8627", "sighting_of_ref": "indicator--98eea281-9de7-4b7a-a803-36974f3ea673", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f066b63a-6000-4cbd-88a4-d7f310c5166c", "sighting_of_ref": "indicator--e9be5354-b8a8-4cb0-9fae-9ae88b85222c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b9e8de7-5e9f-4d0c-aa48-c9db8c442663", "sighting_of_ref": "indicator--6de9be28-6d54-4a5e-9512-097b17234764", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13bd6a67-d6c6-4e3e-a78d-5978085e148c", "sighting_of_ref": "indicator--845e4310-6ddb-4c2f-a182-760500c6f066", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--173422f4-2099-45c0-a831-a841cfe692b6", "sighting_of_ref": "indicator--17e80449-5129-448c-81eb-7af275214f9f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e5c3633-52bc-41e2-9805-3b7ad6427f89", "sighting_of_ref": "indicator--c5ab88d7-2ee4-4118-aed1-e098f1c20902", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b1962eb-1b7f-4743-b634-06e66fc0bd4b", "sighting_of_ref": "indicator--86c9b706-ad7a-4978-a1e9-60d33681700b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fd70d0b-35a4-4908-984a-2d88b2b47617", "sighting_of_ref": "indicator--8ec87281-66f1-4956-be04-33cf15c5bfd6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16a2ab06-7504-4114-89dd-b246608140c9", "sighting_of_ref": "indicator--ef7788b7-1cab-4571-83a4-2e8fe0d5bb6e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02c1055d-eac6-49b8-9b92-92ea83c6aa0e", "sighting_of_ref": "indicator--528e21e6-791b-41c5-9190-5fd4232a30a0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b835e848-15b0-480c-bafb-5417961168b9", "sighting_of_ref": "indicator--5f6daa92-f907-468c-816d-5fca0359eb34", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db558765-fe6c-4381-b659-899a1d644300", "sighting_of_ref": "indicator--4dd8de69-ddc7-41cd-9ca3-3502419359a7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f92b738b-bab9-4985-8397-2ebf671af8bd", "sighting_of_ref": "indicator--8e6cc6b4-1cf4-4ee1-926b-c29a4476cc28", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--643a31d8-fcc5-4f62-8aa6-453381ab8dbd", "sighting_of_ref": "indicator--32c279dd-d225-4b7b-90d7-a547fcb4cf34", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bfc52e6-292d-4300-a758-b00ba470f1c2", "sighting_of_ref": "indicator--0a2c0fae-8dbf-45ef-bcb4-e835b5e75bc0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce301abc-e299-4198-b796-381015b740ee", "sighting_of_ref": "indicator--c34c27b6-233b-4ae8-9258-0b879877ff2b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e71b8ce-b99a-48a7-b8fc-802d137ebaf9", "sighting_of_ref": "indicator--ef29621e-abb3-4951-a56f-0094f1431d82", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--479d3f68-8a43-413f-8ccd-4b12e7965b56", "sighting_of_ref": "indicator--2f0cba89-2662-4044-862f-31bfbb1c8eb7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71c14680-a879-4025-8ab6-d3b7201b9511", "sighting_of_ref": "indicator--5dc091c1-abea-42b5-a42b-0fdfe28505b2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d3ed6bd-d60a-44e3-b4ed-b996ab2a23f2", "sighting_of_ref": "indicator--f32a43ec-d6d1-4659-8b4e-561ddb3de82a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7566eecd-5439-4568-a90b-b2227af2a193", "sighting_of_ref": "indicator--3d670ee2-da0a-493e-9753-7ca8edb3af4d", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e58ea35-def8-4632-a87c-d8149d96484d", "sighting_of_ref": "indicator--eb117ecf-3c0f-435b-87dc-fc335d4c41ca", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7e75ec5-0dbd-4d14-9d4b-30d457e9959f", "sighting_of_ref": "indicator--5f306e40-738d-44dd-9e27-56b6ab6d4b0d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e56eca18-985d-4f4a-8f64-34aa78694048", "sighting_of_ref": "indicator--e89c8317-8b91-4f4d-910b-800f2f866cfa", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17769baf-e1f5-4a6e-9d68-28bafdaf7660", "sighting_of_ref": "indicator--7a53f77d-f551-4e35-9ae5-c0c142fb401e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--991c8d70-cfb1-4a3f-9593-29d6b4b89722", "sighting_of_ref": "indicator--f8f0db25-2380-4793-a952-c7e2b6f55620", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a92c2cd1-84d8-4eab-b58b-4f160cfea4bf", "sighting_of_ref": "indicator--a16d88aa-a313-4629-85e7-783cd69ef91a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fbcfcba-5ffd-499c-b11c-fc96ef2c8a1c", "sighting_of_ref": "indicator--e5fd5659-b3b0-4712-9c1d-1ca2480cb90c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c1a6135-78e2-4705-b554-9f91be612bf1", "sighting_of_ref": "indicator--7606abc8-77df-4d1a-b631-504d23f24cb4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--473f195b-1c3e-492a-8b49-fddf46af9fbf", "sighting_of_ref": "indicator--7112151f-6027-4faf-a54b-7cc547d2cd9b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db5628f9-cf12-4cab-892e-2cc05aaf9d73", "sighting_of_ref": "indicator--cd37f663-8d20-443d-99c9-3cc7e3e2d54f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--318d788c-9bd0-4e0d-b9e1-cb1bc3b346e8", "sighting_of_ref": "indicator--c2d493ce-7866-47cb-8549-c5320d03ad3d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--039d2c2c-5b9d-43d3-b166-199a8536d7f3", "sighting_of_ref": "indicator--17b03aed-bd08-4794-900c-25ddc7c58fa4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--603a797e-3394-493d-a034-a2d5ec87b775", "sighting_of_ref": "indicator--9f9a9c64-0de6-48a4-b3f2-5b5c5dee76c9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cf5c4a1-34db-4a76-a255-8444f5195c71", "sighting_of_ref": "indicator--45bfb6c7-a5f9-4982-a486-ef68f5614cff", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0698492e-dfe6-4931-a42b-178ff8be040d", "sighting_of_ref": "indicator--ffc017c2-a971-429c-bed2-6c38da2d45b4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd855f26-b09b-4069-a548-f67b6040ffa9", "sighting_of_ref": "indicator--891f90f6-79b4-406a-af7e-5e617c4898ce", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dc33d6b-64bd-4e11-923e-08757d9f1e84", "sighting_of_ref": "indicator--c22348b6-27c4-4be3-a79a-ccc7320dc8b0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe619638-5e65-4e69-83d4-c2939624ad5f", "sighting_of_ref": "indicator--6ece6311-de8c-4be8-80bb-d3ded37979d3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b13b35ba-0fa1-4784-a17a-28bc95e6d176", "sighting_of_ref": "indicator--c69855e3-3b43-4ddb-bc11-e7bbb8b761b9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6939dbb1-d292-465e-8711-5a0ac08c6408", "sighting_of_ref": "indicator--f3973373-5bb9-4cb5-9fab-cff156621ecc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fbc626a-2158-49a2-9741-2a8fc4b9aa75", "sighting_of_ref": "indicator--ed341860-f9d5-4ea8-a3cb-1f4034eeff04", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a40298ff-85e7-4305-af98-705978b9042c", "sighting_of_ref": "indicator--14e915c7-4a24-4df1-9033-b9d6af230c87", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de74e2ca-79a8-4fac-9fbd-fe3d3abfb45c", "sighting_of_ref": "indicator--b7effbd8-d3ab-4945-87c9-5486a961a4f4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c38bc506-0c53-4b0c-9206-4781be1a0994", "sighting_of_ref": "indicator--5fbd167e-483b-41bc-a5da-c5852dc280d9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22f4df34-3f75-48d4-817d-623590271b06", "sighting_of_ref": "indicator--d21db068-c59e-47bf-b144-c01f2ee78245", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fc85af4-28db-4739-82f0-3851cbf9df92", "sighting_of_ref": "indicator--adc10e20-8497-440d-8b4b-f4d7e8a52658", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73c8065c-b3bd-48df-a2da-edd9a3f39ce1", "sighting_of_ref": "indicator--231e53d5-d394-4cb1-965a-8fb7fcdb2acb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25730bb0-ca6b-46bc-8669-6573da2c74f5", "sighting_of_ref": "indicator--434930eb-6700-4dfb-8bb3-782440f6189d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--547603a2-7ea6-4621-b990-57f7b1ef0f92", "sighting_of_ref": "indicator--f8ac1428-4959-4e6d-a7ae-750220c8a77d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a5a3e12-ab01-4d36-a4b3-f06366a8a583", "sighting_of_ref": "indicator--569daee7-e92d-40d7-b4d9-c0216757fb70", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0b92d91-b969-4157-9455-5be177363c64", "sighting_of_ref": "indicator--05eb46c9-dbc3-455b-aefd-161d445cf1f0", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--129a8164-8f94-4337-8566-6aa863056d02", "sighting_of_ref": "indicator--b4f36edf-e55e-4606-b034-8b5b287d3337", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--445bb864-48ae-40c0-a496-4770d9372e81", "sighting_of_ref": "indicator--5c87e244-2eb1-42f6-a39d-adab120fc519", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d7b1b85-50c5-4528-891a-12ab0c2f1345", "sighting_of_ref": "indicator--9d902187-29a5-4d49-895b-a8f36ad1ea7f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc2a93a0-0505-4554-aabe-b856d465bc23", "sighting_of_ref": "indicator--7d1362d1-a10a-472f-99e9-2b35f8175b5e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--339eafb6-798c-4b03-8c0b-9b6f6e1bf8f3", "sighting_of_ref": "indicator--e0daf616-64de-43a2-a614-342b03374974", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0196a1e-6e6a-4688-95b8-426582fe0abf", "sighting_of_ref": "indicator--ad7f84e2-be3e-4cfb-a4c3-f6eb7e39b2e8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8f49b2c-0ada-418e-889b-98476fe5b9e2", "sighting_of_ref": "indicator--fc611121-99d2-4c33-a2bc-370929342652", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0830c079-8261-4624-8920-995611dfbadb", "sighting_of_ref": "indicator--9efdc84f-3e1e-4878-a93f-e51cfa436294", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01c2eefc-6c15-4c92-8c88-99465eb36017", "sighting_of_ref": "indicator--87b010b1-86d0-4cfc-8ce9-7d5ddba6dd76", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--170c4161-1766-434e-b637-5542a2836e6d", "sighting_of_ref": "indicator--b32ba915-3dd5-4491-a1a5-f947f4cee98b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--264fbb52-4d97-4664-b5b8-9d457f462e63", "sighting_of_ref": "indicator--6a9f9cc9-8064-4091-af66-d5a7277c8f2f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5c35fb8-527f-45e5-b8e4-22872bbbc656", "sighting_of_ref": "indicator--261a260d-79a2-4586-bc8a-1e1adc2539de", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--128e3b9a-a1e5-4ae0-9d77-3ba253b0cfbe", "sighting_of_ref": "indicator--237c62a9-e152-42a0-8089-fa0b0f911ab1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2bc4b40-1314-4218-b0da-a627856daa03", "sighting_of_ref": "indicator--dfccb0b7-f4ea-417c-bf4a-3aa134058637", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b86b9815-3dc9-46e5-aa4c-a654f244169b", "sighting_of_ref": "indicator--3cee863a-0e79-45df-8507-846cebbd004e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8514dd2d-fb88-46e4-aea0-c796a0aa2c9d", "sighting_of_ref": "indicator--ab8d2a7c-8b84-4e32-9626-0c427dbf6f98", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27d4dc8b-ead2-4ab0-a7bd-faa092ae07cc", "sighting_of_ref": "indicator--4ad0b008-f5ba-4e2f-a297-67a6676534ab", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7c48878-9342-4fb0-b355-5c04dbc1c36b", "sighting_of_ref": "indicator--8e12005a-f7d2-4272-b578-8c25240be089", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--765dad3b-157b-4b7f-ac43-381e2c7890b7", "sighting_of_ref": "indicator--b80f60af-a31a-4623-90fc-b3a9a05255f7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6194d9ed-fef6-4862-a3aa-f69748f913c8", "sighting_of_ref": "indicator--5c70e489-5c6f-44f8-b7a5-8943a20d8072", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5455109d-1988-47f0-a8b1-aa663f19d4f2", "sighting_of_ref": "indicator--7b7be1a6-3472-40a6-a344-9354edba69f4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a593ca70-f2af-4e82-8ba8-0c083e3e3c1e", "sighting_of_ref": "indicator--68a7afbd-2fbc-492c-bb94-97bede5344d5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c8518ee-c16d-462b-9f2b-3e43b8872887", "sighting_of_ref": "indicator--39159711-2322-4f4e-90c6-f60f6bfecf8c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d51ac354-302b-4f64-8fd7-9e9655f1668d", "sighting_of_ref": "indicator--8b64f098-2d55-4964-8577-71b62fd24570", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2575955f-fcff-48e7-a5b8-a534c4c221fc", "sighting_of_ref": "indicator--0e964673-6d13-4b72-b68d-5ee2ccb5ff94", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e159825-cf2f-4389-ac52-a361a1444e0b", "sighting_of_ref": "indicator--683f026a-32e2-4879-b2db-a68f5d5ea211", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a45a48ef-7c1e-469f-b26f-aaf25f54f655", "sighting_of_ref": "indicator--14e9d3d0-19ab-4d77-a12a-064afa61a797", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dffafaf-fdc8-4f26-894c-5602e47167c5", "sighting_of_ref": "indicator--5a214e36-f3a2-4d3f-924b-7eae6ea82f61", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3008b327-e98d-4baf-9352-28ae9cfd303f", "sighting_of_ref": "indicator--c9e9d354-60a3-45ed-a1ef-13a9ee877e28", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e28a4b2-ddc2-4c30-bd3a-0d83eacf4d1b", "sighting_of_ref": "indicator--c8f61924-478b-4ae3-9527-982670f4bcbb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea4bf875-0b76-42a7-8c3d-959436c91550", "sighting_of_ref": "indicator--fa99db71-51ae-406b-9f03-e7f72993564c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93766328-86d4-49a8-b547-b96972d9ec4d", "sighting_of_ref": "indicator--740df643-2d47-4152-8357-dea02ad7a8a9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acce0f99-8e08-44d8-bbf1-21d016abbedc", "sighting_of_ref": "indicator--41c8eeb8-4542-47be-9492-c26605d99dc5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a687c098-20e7-40bc-83f4-3e829ce296eb", "sighting_of_ref": "indicator--df87ba79-0eec-4881-8f84-a32cc1ab5ef7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--800bde65-3d19-4b04-9319-e352cfac8e77", "sighting_of_ref": "indicator--26f3b4fa-9199-41c0-a158-eef44d5e050b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--431007e0-c643-478a-bbec-bda3f6b1ac10", "sighting_of_ref": "indicator--f456133d-5f5d-4f0b-807f-ec6e5cbd94cf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--859fd696-a960-48f4-8afa-b527f07e171b", "sighting_of_ref": "indicator--af1fb868-2f1e-400e-82de-8d27f5bc4fac", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e4e09ed-75ce-41c1-a9cb-5aee74dabaa5", "sighting_of_ref": "indicator--2fc88c21-9362-4670-93e1-7957d7fb093b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18eac5bc-eae1-484a-b965-1749986cb285", "sighting_of_ref": "indicator--f21e9af2-127b-42f1-a85a-7fcf500f3f87", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bffe1bcf-d0c7-4014-a9f5-ff6e22111360", "sighting_of_ref": "indicator--39b2c2b7-e6ff-4871-9166-22302e30ce3b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33187a7d-9291-44b0-844a-4a0eef256718", "sighting_of_ref": "indicator--37e017b3-11ae-44c2-92b9-60c8608e8e46", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5a515ed-4d7a-41e5-b2bc-2cfe41794876", "sighting_of_ref": "indicator--b698ea67-228c-42db-874d-d52c40d9f4e1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--177b71d7-d0b0-44b3-bd93-e70f8ae007ff", "sighting_of_ref": "indicator--21240a98-d5d5-44a0-b1b7-fba494778c55", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1caad128-4191-451e-a950-ce221678eda6", "sighting_of_ref": "indicator--a3b7d862-c542-4ede-b40c-0072ee9894fd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef7be849-71a0-4073-9cc8-f74defacce48", "sighting_of_ref": "indicator--2f561f6d-333f-4a8c-8644-309835a13eef", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73aa791c-f9c8-4825-ad82-62be22485956", "sighting_of_ref": "indicator--fb2f3c61-67eb-4f86-a5e9-74326f5f639c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8cb9317-53d1-47a8-b326-9b331d9fdcc2", "sighting_of_ref": "indicator--27ea69bf-5218-455e-9096-76aac405e01d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3a6e784-aa7c-4996-96a2-5cf7a8dab23a", "sighting_of_ref": "indicator--c3de48d0-c9a4-4bc3-9d42-f593c6b255c9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03df5953-0167-4209-89d8-6a9ea9da3555", "sighting_of_ref": "indicator--c63b7cb4-a84a-4dbd-8a3e-126e3a2cf199", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efb7107a-461b-48a9-9d08-6bb1ac47477c", "sighting_of_ref": "indicator--d8600a32-139e-4ca2-9b7f-a718ff9b0378", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ff607c6-1ec2-4bbe-b4a2-af9911067897", "sighting_of_ref": "indicator--1c5d4a65-55f3-4205-9e88-cbe12bc23c75", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d76c529-d3d8-44dc-b227-92c8b3529159", "sighting_of_ref": "indicator--7a864503-5c4a-488a-8ee4-dcf60ce8e96f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60f85127-67b3-4646-a1b9-dd283a6d8a9f", "sighting_of_ref": "indicator--3e6fd044-045c-4207-a591-4f8fbe0ef13e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--940b2017-df0e-4b43-a83b-ff59b8634aeb", "sighting_of_ref": "indicator--1a9c708d-82d7-4949-b554-7a45ecd6ddf3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f95a25c-bb44-4a1c-8c9c-4da2aa813a12", "sighting_of_ref": "indicator--f90ffd65-089b-40e1-a4d5-67a6295777ba", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--864aa658-1950-4f18-8af3-5dfeb6fe4253", "sighting_of_ref": "indicator--cb034412-1fa4-46f7-acb7-10e31ce2c9e6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ec7da82-ec8c-4baf-9abf-84345d9b79f5", "sighting_of_ref": "indicator--cdace6d3-f826-4390-86f4-cc9e9c9565b1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--face8af2-1296-4550-a2b4-560792126c05", "sighting_of_ref": "indicator--fb6211fc-7c4d-4533-927f-e2f0237a755b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e61f91dd-b52b-4f0c-9e38-7360dbf9cd8f", "sighting_of_ref": "indicator--b4bee038-39ee-4267-a327-11e2b5f9d14f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6224ac55-577c-4f63-8f56-367f5654f4bc", "sighting_of_ref": "indicator--9c06d87c-ab79-4236-98aa-3c83a79adcfc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--214dd221-8e88-4e3f-a508-aec08396715e", "sighting_of_ref": "indicator--642391b0-c1ae-4478-ab74-5d8e0dffb62f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1971b43-2e7a-49cd-9799-14f54f9103ec", "sighting_of_ref": "indicator--71c15aa7-3033-4e4c-838e-03e4c2c06063", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e874258c-6b04-4517-8b6d-1c39305165e0", "sighting_of_ref": "indicator--89e563d3-38c1-42c7-b3cd-39969a730a44", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55c6ee28-9069-43f5-8323-6c24471cf5ac", "sighting_of_ref": "indicator--6b216954-a53f-44b5-8fb6-4f7466b492bc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bc5d1a7-23e4-4fd4-b439-bb921af9c693", "sighting_of_ref": "indicator--6891d9d0-d9ec-400f-829a-5a0adf84992d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--193710d6-a482-4004-ac46-042f522b46e9", "sighting_of_ref": "indicator--fd49d66b-76f1-412c-befc-e8fe8a649972", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a59288d4-de5d-4648-a0ec-8ad42ebbca95", "sighting_of_ref": "indicator--60cfc801-e1a4-4f18-9774-62d6b7037ca4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6a74697-bc44-4d83-9253-a3638f6e8dd5", "sighting_of_ref": "indicator--cd59331f-22d5-417d-92af-f95c6e09b8fd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7df11871-adaf-411a-ac3b-af94cecaf552", "sighting_of_ref": "indicator--d0c00538-c28f-43cb-94b6-01c171a5d997", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51ce7e32-cbe4-476d-a994-4b11c78ab73c", "sighting_of_ref": "indicator--640495fc-9489-4449-ae42-d84f650a90fd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e3a37cf-0b83-4a36-9603-39ec6d73a4d8", "sighting_of_ref": "indicator--b5faf5e3-5ae6-4f9a-a388-95fb414310c9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d50fddcf-b7a6-4504-b2ef-1369f2f2e288", "sighting_of_ref": "indicator--1a027e64-a86d-4fc7-b491-9d3263cdeaed", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1326cf6a-9e83-4d85-a038-118404b24fc5", "sighting_of_ref": "indicator--b4477d96-a704-48a0-b30e-c77d32c41490", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--028987e9-b883-4856-99a4-e8b48f81b650", "sighting_of_ref": "indicator--a596c80b-a556-41bf-a0a0-53be2cc4709e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1136857-b5fa-4013-9ddb-44da6bee6b11", "sighting_of_ref": "indicator--10b75fb0-88e4-4b34-9f5e-e22355eef802", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6ca7edf-b1e5-4c19-8a7c-b694e5e211a9", "sighting_of_ref": "indicator--af804b3b-437a-4ee0-a98e-58e9aad032d3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95a69442-024d-4f18-855a-76df5856ac82", "sighting_of_ref": "indicator--f4fb33c8-8856-4c3b-802f-ddac82ed6c24", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fdf8899-2ec1-493f-85dd-29dd1003b6ec", "sighting_of_ref": "indicator--1335ec44-5ffa-4caa-94e2-bd3a523ec632", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bac24250-5bd6-4f8d-b0f2-ff8d62cd6479", "sighting_of_ref": "indicator--6056f96c-fda4-466e-9342-d89cefd3ab66", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5011c278-fab9-4b5b-8636-b7b8c157ef88", "sighting_of_ref": "indicator--a7169fd6-89e8-488f-8d32-1c8cfadb0bb2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc2acc87-1fbb-4a64-b245-3e7d94ba0266", "sighting_of_ref": "indicator--5b3c4d58-6a70-41dd-86d0-ecf8b9eae2fe", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7867807-4e9d-4451-9f64-1c213d138717", "sighting_of_ref": "indicator--ea879c04-2ad6-4feb-aa76-fd964e48b7e5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f397123-47aa-48e3-b20e-a4866dfc9538", "sighting_of_ref": "indicator--0226c734-e753-47c0-b65d-103ce09ee525", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06d98be4-a72c-4936-8f94-f7f86cd2624f", "sighting_of_ref": "indicator--52b9cab3-4e9a-4ce6-9376-54920e110a79", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70e39895-cf93-4b3c-a912-6afe364d11ea", "sighting_of_ref": "indicator--6203e311-67dd-45e3-8753-2ceeeb78c6d2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afb49f21-4d1b-449a-a399-b8f707ff67df", "sighting_of_ref": "indicator--df2f8250-bbbc-49a3-991b-2cc8bef540eb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9435798-0dd3-4543-89de-b6ba2cce9408", "sighting_of_ref": "indicator--487f2ed6-7049-4f8c-8f74-9d949d640d75", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e63c1ff2-5c63-4558-95d4-550b3dec8f41", "sighting_of_ref": "indicator--85e2776f-232c-4ea0-b47c-6c31f526494b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--483ceaef-6db3-424f-95f7-c90ffb8c0321", "sighting_of_ref": "indicator--0125da4b-bef4-45f1-a029-7baa4b16d551", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ac21880-2015-4161-af62-2006d9328f06", "sighting_of_ref": "indicator--cbf3c8e9-6ddc-4541-bd2f-015fd838438a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d967d376-2cec-49c8-b223-710a83dbd233", "sighting_of_ref": "indicator--fb183c0a-ada1-46b8-8b5a-56edde3d01cd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--062f5843-b1b0-45b6-8778-0bacac8b9837", "sighting_of_ref": "indicator--44366bb1-d285-4d0b-bf17-5ea3c9cba0d9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4302b20c-4729-429a-b27b-22402d1e4b27", "sighting_of_ref": "indicator--257dc3b1-e6ef-4984-83ea-f794f5114701", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1965827a-5e31-4403-be8e-52ea3a3e1396", "sighting_of_ref": "indicator--e72e6fe4-c99e-4047-b2da-566a7c1d7933", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2355fe2-82f6-4ba4-8578-f5d0fcd91143", "sighting_of_ref": "indicator--413205fc-4e3d-452b-8b3b-8a2d6096764a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05c339fd-2d6a-4798-82ad-014a17cb9b0e", "sighting_of_ref": "indicator--7e165d9b-6462-4ba3-8487-1657dba54d8f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a410d40a-cb5b-417d-b999-b6b15fa4e144", "sighting_of_ref": "indicator--32cf3764-4f92-456f-92bd-16727843a881", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e86b4f94-e548-47f5-a01d-f053c94125d4", "sighting_of_ref": "indicator--fa32d61d-3916-4965-ba47-eafb4d1ab861", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f04df28-0c59-445c-a6cb-77634da6144d", "sighting_of_ref": "indicator--45a80bb2-6641-41c1-8d78-f0e7af19427b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8d260a0-8ed2-4dc3-be3f-f0aee9815425", "sighting_of_ref": "indicator--23009412-0bff-44d1-8043-940ada93b249", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93c6493b-810a-4ca1-876f-3baf4b1eaeed", "sighting_of_ref": "indicator--4d2114da-d86f-45cf-99b6-8cc3aab0b307", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b57a2481-f1d0-44d7-8c57-c6024a775ca3", "sighting_of_ref": "indicator--b7f6ca2f-c91c-4e7b-b8e8-75c617474db0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d09f9d6d-2e2b-4d57-922d-5f19cc55f48f", "sighting_of_ref": "indicator--44707e1f-b893-452e-b75e-0623a07e5648", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e71034ec-20ee-4a9a-9acf-0dec970e6dbf", "sighting_of_ref": "indicator--44d11e4a-a499-4f3d-8402-1272e41d1b19", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9a40036-012d-456e-b913-6ccb814cc4be", "sighting_of_ref": "indicator--30fb9a68-a795-4eb4-b26b-fa911beb95de", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd3afc7c-0b24-4479-a4e6-0a9410048aef", "sighting_of_ref": "indicator--c7c22547-16f7-4ff6-970d-5119c36560c7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21092acc-6827-4470-8cf1-8d3aac47e2d2", "sighting_of_ref": "indicator--03eaa27a-139c-4158-9009-e6f049ce5904", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91c94e14-20d5-49fe-8ebf-3bb297703ac3", "sighting_of_ref": "indicator--e6659404-0ec7-46ea-b942-59cd8dc9bf58", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2116e22-34f1-4119-a0fd-08167864e2a2", "sighting_of_ref": "indicator--d3cc1d3d-047e-43e6-8b37-4dc381484a18", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--124d9d6a-02ae-47f9-8dcd-1b2964098f82", "sighting_of_ref": "indicator--683cd011-7c15-41b3-a65e-7aa3885f4694", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ca9fe08-43ab-47a7-a177-4ae74802f96d", "sighting_of_ref": "indicator--06e32b01-db05-403d-bd6d-426d91fc0b54", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a6cfda9-5999-41e8-98ba-0d851db53c6e", "sighting_of_ref": "indicator--4c4eb9ed-55e6-49e9-82b8-9875239c3647", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--405dd458-05b7-457d-9848-635ba8847b0c", "sighting_of_ref": "indicator--cae0672f-7530-4f7d-85b6-114e6f6b15d3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40a67764-b533-42bf-b8fc-34fd93d0cddc", "sighting_of_ref": "indicator--0815a09e-694e-439c-85da-60ed9c5ab342", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0cbb4d0-7d1f-4af9-9850-91cb69ec59c5", "sighting_of_ref": "indicator--251bae3a-95b1-44c6-a8a3-e2839ac2fe1d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af588812-5613-4ef4-a2f0-fddfba394f1a", "sighting_of_ref": "indicator--267de943-8bf6-4b62-ada2-fe8ec3af3806", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1e01721-2792-414f-95e4-43f7b32eae5d", "sighting_of_ref": "indicator--560924fd-6580-4990-ad76-3dc4af7094f1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eef2a49a-edba-4667-adfe-5bbd260ac0b9", "sighting_of_ref": "indicator--ac2ca215-cc98-4f48-ab0f-b7c6030e5222", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5514290-b11c-4509-930f-8018a91fb835", "sighting_of_ref": "indicator--d87182f8-be1b-4f73-b9b4-eadc43122a39", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd97b9b5-94ea-40c8-a26a-6e6cc0ccda73", "sighting_of_ref": "indicator--a4f621d0-6a1f-41fa-9497-da883b29c2fe", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a06f09b-bfe4-4969-a083-b32ca260fe5b", "sighting_of_ref": "indicator--11ccae52-992a-44a5-afb5-f3aa524e008a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20ed1cf4-4979-49a1-9462-9d75eb4f796f", "sighting_of_ref": "indicator--04a1337e-e8bd-49ea-95b5-41e7feac3ac5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82fb4222-80b5-4aeb-80e5-4e70b9a19931", "sighting_of_ref": "indicator--5e0626a2-6ecc-4911-90d2-f639c7f13bfb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06f58e5a-1901-43f0-86c5-42b17668c038", "sighting_of_ref": "indicator--5c0644d2-dac2-4c2e-a67b-cdc17c375239", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a0441c7-d210-4012-9c84-c4f23c598ef2", "sighting_of_ref": "indicator--8bd4c9ea-8a9f-46ba-b146-1dd1d395b2a2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da664e3c-d95b-45c5-bc03-b52b1e8f56d4", "sighting_of_ref": "indicator--489021d0-f52c-445e-b74f-e5a8c802dfb1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46918225-ea76-4f3c-92e9-a78c0bd445cf", "sighting_of_ref": "indicator--a6fa8a36-a6a4-4aba-8fb9-760f7911296e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc6534c6-88c2-42d7-b1fd-38b221ff5c47", "sighting_of_ref": "indicator--6ff78187-8e34-40a4-bd89-05ed5bc54948", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--560e2367-9bc7-4a11-a143-5d0746c34e6d", "sighting_of_ref": "indicator--9516beab-cdcf-478b-871f-76732d5def30", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d40c63c-8d63-470c-ab83-dcc48b4c919c", "sighting_of_ref": "indicator--2bbaae83-aa64-4083-b351-9ef723900334", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51572daf-cc67-4260-80a3-320bc4a43c1e", "sighting_of_ref": "indicator--7525d46f-caa4-477d-bbb5-f8c680eb45be", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28d1ed92-5c0c-4ade-bd1e-973e9d094e81", "sighting_of_ref": "indicator--bd75224d-5915-472e-a1cb-d22ef218c6c5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24403c05-5c5e-4af1-ba0b-f628becce518", "sighting_of_ref": "indicator--8ff64c51-20e3-4221-bbcd-2b91fc5f8b07", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82e17bec-1269-468c-9334-de6cd0fa7ca9", "sighting_of_ref": "indicator--dab18acb-0356-485a-9145-76d46e05cbb3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2e580ae-98e5-47f8-b10d-f7d40e2dc0ee", "sighting_of_ref": "indicator--c5db833b-1b4d-4b93-add7-d0afb95476f1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc78ce76-89ad-4f5f-ae63-296b5418ef45", "sighting_of_ref": "indicator--8ad566ee-f52d-4ed6-bb31-1079b4879dc7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a3e6a25-d6c3-49f9-93ac-57560ce04769", "sighting_of_ref": "indicator--ddc089d1-f222-4e18-8a12-4d837966b58a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--398e0340-e74a-4482-b93c-b5832acd555f", "sighting_of_ref": "indicator--1282e538-c75e-49f2-8322-448fc9984dd9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b39e6c14-3a07-4aee-909e-cf14d033a4d8", "sighting_of_ref": "indicator--12dbf2cd-039f-4be5-a5fb-8c104dc559db", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab926014-9481-4c3b-805a-c2b8c3ade39b", "sighting_of_ref": "indicator--b6d63b13-6ede-4456-82b0-430e9b8e7a48", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78dcd53e-c39f-49e6-82e0-b953239976d2", "sighting_of_ref": "indicator--7a1a6dc7-4637-45dc-aca5-5d2838e271ec", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e4c114c-5220-43ae-8b36-6be4996ab3fe", "sighting_of_ref": "indicator--b2d2287e-a971-476c-a182-e3dbfa923400", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c91244a3-e763-4a23-a9df-e250b38fc2af", "sighting_of_ref": "indicator--57c89283-e112-411a-a61d-a88179863e23", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13e8da1c-872b-4293-87e5-e9791fd01d20", "sighting_of_ref": "indicator--c638022a-a10d-4d6c-8b93-2e0392585d08", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19108719-1c98-4915-ab8d-69999bc36f99", "sighting_of_ref": "indicator--8a80fe37-e11c-4330-a33d-efec19e8ab7c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c92558a4-ea22-4433-a308-e6dffb1a2876", "sighting_of_ref": "indicator--c87afdbb-8a03-4f8a-8beb-ba9f63a1cefd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a81d70e-31e9-4c80-be71-c0265d22c17c", "sighting_of_ref": "indicator--f3f4899f-9b08-49ed-baef-d04970be1fd5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea86f7b3-8e89-4da3-980d-05b66c4353c2", "sighting_of_ref": "indicator--bd302ef7-944a-4cb4-8122-3832b6d0f06e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6b15088-161a-4c3d-aca4-bb7dd776886a", "sighting_of_ref": "indicator--b6ace096-8a9a-441d-af8b-04897f312cb1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--676d7de1-9d45-4862-8a9a-4dad539cff73", "sighting_of_ref": "indicator--4ba2b019-0778-44cc-a623-7710ce6d2f14", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cdd0f025-eba0-4a90-bfc6-066de64a30fc", "sighting_of_ref": "indicator--2a04f0b4-c24e-4990-9ddd-0390995a68e0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a800a10-6884-43a5-9761-8a7dda92d645", "sighting_of_ref": "indicator--73daa612-db96-49c4-a2ac-a56c0fd2e199", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2f7b007-fcd9-42f4-8d20-6891d6eb0c42", "sighting_of_ref": "indicator--2c1de354-d6ec-491f-85e1-d1e221e6365f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d528b1d4-0b40-404d-9dbe-555ca9feec0c", "sighting_of_ref": "indicator--b883b018-68af-4ff7-a71c-d79c9a64503c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac985ef3-8d25-4444-a980-4ee3ad5783da", "sighting_of_ref": "indicator--4cdc8636-31eb-4c54-afff-73e947e771bc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47bcf8f5-32ed-4a74-a971-3694191c6ed2", "sighting_of_ref": "indicator--ba0a639e-1a18-4f86-8e4b-328727454fd8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--909d0a13-9360-4092-bb5e-11be445c1b3f", "sighting_of_ref": "indicator--2a1d1fac-b839-4c0c-9523-cff2899d67fd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--492fb616-f2a7-4172-9e89-f8dcf02f3d1d", "sighting_of_ref": "indicator--31a2fdec-7c34-49bf-b10c-8bd346e06864", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15e00b7e-dabf-41a5-98a2-1103fe232a38", "sighting_of_ref": "indicator--fce58990-436a-4231-b71c-59c8d3a6ce98", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6bb6d6d7-82ec-4050-9d0d-8804e61fd15b", "sighting_of_ref": "indicator--b4a36d72-5e7e-42e0-be5b-08f0f3851922", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--922cc026-0746-4da5-be93-2652e289698a", "sighting_of_ref": "indicator--fb8a9321-0d97-49ca-ae89-f5dce6160aed", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfe47ded-c584-4565-949c-f49c5c794683", "sighting_of_ref": "indicator--157a842b-48b0-463c-b60e-04f02a83fa26", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db529861-8660-4f4e-ae1c-2dc280686045", "sighting_of_ref": "indicator--64d421ba-e1a1-4b9a-b277-8720d3b1052f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--941a646a-08c2-4995-9377-5520ad81a34a", "sighting_of_ref": "indicator--3f20e7ff-7229-49d1-83f1-bcc1e2d7fea4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb471d83-69c5-40a9-a477-ed2361c40cdf", "sighting_of_ref": "indicator--695b079f-599e-4a63-85e9-de05c3d3ffa9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1526e0f-6107-46f0-9602-688a5a7625f1", "sighting_of_ref": "indicator--97c8e6f2-c712-47a4-b8c6-0811a43ffce8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25f48799-7cf5-4515-9d82-72863a584fbf", "sighting_of_ref": "indicator--d9974f81-2994-4891-b575-cf28feb22966", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e35f697-6a47-4e48-b26e-ff322c68a77b", "sighting_of_ref": "indicator--d91633fd-ffb5-4c2a-9f76-fbb5f470b642", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02f3aa32-76a8-4ba5-9365-5a91d754803a", "sighting_of_ref": "indicator--4c4e6cbb-c3bc-46cf-b2f6-5207b4b828e3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c984f37-cf2a-49b9-b434-6140ba9480ac", "sighting_of_ref": "indicator--82852612-f803-4bc9-8f87-3d11683589df", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23bd4a59-8b8a-4ae6-a95c-cb73e8836958", "sighting_of_ref": "indicator--8537a2d5-2b52-4a8c-ab1e-5eee313ddcce", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd3746eb-7155-4a4b-81f2-497d21aae555", "sighting_of_ref": "indicator--cf28376e-784d-48d5-a261-ddf53468dce0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e30bbc9-3468-446b-917d-f55391e416a6", "sighting_of_ref": "indicator--fad95a86-b57c-4f58-87ff-f062c41e0177", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46f16f40-fa67-48c1-82f5-0c3345698400", "sighting_of_ref": "indicator--572d7fb3-0616-4882-a419-d1a02d7e8b43", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6ff83f7-2a4b-4580-a36f-c44efaf370c6", "sighting_of_ref": "indicator--65eae95e-70e3-4c84-88d4-bc1c008e2091", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--996b3287-d6f7-4274-9020-506d0d8528d1", "sighting_of_ref": "indicator--40bfffef-e375-469b-8c9c-bd244de2da85", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bd80425-006a-4e1f-b611-e0678c2ef613", "sighting_of_ref": "indicator--c3a8cc2e-6a2e-4c54-84ca-106eeef8a783", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f535bdb5-df97-4ab6-837f-bd3f424361c7", "sighting_of_ref": "indicator--e3523a21-8afe-4509-ab1b-590806a60b27", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27f06bbf-602f-4c29-b96f-55f7c4184109", "sighting_of_ref": "indicator--8fbdf289-07ad-46e3-8c03-1236ce93c1de", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f1f35d3-105e-4665-a47b-bd8fe38172d5", "sighting_of_ref": "indicator--49a299d8-8b2a-48ff-be8d-4ca75785838b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7561efe4-b23c-438d-b561-f393343ee2ae", "sighting_of_ref": "indicator--81db1e1b-e70b-4023-8c0d-89f590cd5442", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab1717e6-47f7-4710-8cfb-329cb4a795a4", "sighting_of_ref": "indicator--de1dcfce-882a-4cc8-a7e0-add762bb51b0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38a1b06b-a6b9-4dba-93ce-6b4f03b508a3", "sighting_of_ref": "indicator--a37ceffc-c105-4e04-8c16-6484bab76b80", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbab3010-497b-48a0-934b-48c9216068cd", "sighting_of_ref": "indicator--2c6e5ccf-d62c-46e3-91c3-e4fa9c019673", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5893671-1084-4302-b4bd-da55cc6491cf", "sighting_of_ref": "indicator--0e185886-f1c4-4c5d-bff5-e52fd1d1eabf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a9de51e-0e57-4f21-ac91-9e0f527e1d7a", "sighting_of_ref": "indicator--fca8c9ac-a6e1-4626-88dc-ffbafc8b8588", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baa51cd6-2cb6-4cdf-8219-fb1785eab9b3", "sighting_of_ref": "indicator--f8a0db7e-e4dd-4a96-9b68-be8fe647594b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc0c3683-ee72-4971-948d-409a26654fe3", "sighting_of_ref": "indicator--dd96f0a7-b6d4-459d-a1ed-fa0c40f24b84", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c29839d-8b1e-4322-ad8e-0640f0f31fac", "sighting_of_ref": "indicator--ce8f4fe7-0f14-4e8a-ba65-89473c1e9bb5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11e09e82-cbb1-4227-8a93-83c83185e8cc", "sighting_of_ref": "indicator--2e2a54d3-8f00-4f33-97cc-50ae1acdd7c8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c461be6-c44e-4eaa-b0b1-38259e5a0842", "sighting_of_ref": "indicator--88ce597d-b4a4-4997-ab71-78f87646ffe0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01928681-046f-4dcf-a90e-09f5322d1168", "sighting_of_ref": "indicator--c1db5666-8048-49b7-98e8-d219db80407c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5546329-0367-40d1-8089-67af78d1f99b", "sighting_of_ref": "indicator--4e02f218-6312-4fec-87ae-a41b5d8fa8f7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f6b2cef-657a-452b-960e-c9fdfe222abd", "sighting_of_ref": "indicator--6eb1f39a-68b0-44bb-b577-ea58beaea670", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--353f5032-63c2-4ff5-b932-044fc1fa11b5", "sighting_of_ref": "indicator--b0746200-ae37-443e-bfd0-bf54ebfe2810", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4468b55-c95e-4bcb-8a8f-8b20975b95a1", "sighting_of_ref": "indicator--e7df40c0-6552-4fbd-a408-8ee7e9b98ea0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc98e09a-cbb8-4a3f-a359-447c46680319", "sighting_of_ref": "indicator--64f3cc35-efaa-4646-82ff-58e5d35b330b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeb6eeda-320d-4263-ab03-326aef52d058", "sighting_of_ref": "indicator--6ddcb7b1-fb09-4996-9fd5-88da0cf5af4d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff0b24cc-da69-48d6-bef8-d4c33231f010", "sighting_of_ref": "indicator--e3062662-3296-49b4-ac4c-ec4f70eb18da", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1953cb5-8b91-4334-8700-24c9292690bd", "sighting_of_ref": "indicator--225e7de9-d96b-4c9d-a065-3d7c6d112b54", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fd80628-5d2d-4e27-8421-d2ae031b8ec0", "sighting_of_ref": "indicator--3e4eebf4-f63a-47a0-8193-6add07da500d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81fafb51-e24f-48d4-a434-aa52278c9ab2", "sighting_of_ref": "indicator--61641d40-51d4-4446-9c4c-65c1f3740b8c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b398b82f-1d69-4b57-be77-a5d098bd18b0", "sighting_of_ref": "indicator--b79083ac-41b7-47d5-b5b3-b43ca52b18f5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77b5e5be-5989-418e-a51b-d8d185b586c3", "sighting_of_ref": "indicator--aa4c5224-868b-42ea-94c3-a1d5ebfcca8d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5782d8c-3bb5-4765-8a30-e6922cf98f25", "sighting_of_ref": "indicator--d916e79f-c645-4cce-9b8f-7d74223f3e8e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--178862d4-114c-4f8a-935f-a8f97a39c63d", "sighting_of_ref": "indicator--8a1fbfb7-0346-4822-8502-386378955fb7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34f9952c-f2cb-467f-84d3-60b199723e64", "sighting_of_ref": "indicator--e15abcc0-d218-4f4c-8f6b-40d9e2be4d6d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2b738b6-718d-4386-b33b-578c3f1282ad", "sighting_of_ref": "indicator--632933d6-b543-401b-b520-75684170370b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3445951f-99a6-4b7e-9be9-06750b3d9677", "sighting_of_ref": "indicator--418a37a2-cdd5-429d-894d-53b80cce2e7b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f25a607-93d3-4fd5-89a2-dcddb3ace908", "sighting_of_ref": "indicator--3f5cfdf8-4ffe-445b-b624-41a21f6a4fc0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6906cb80-4f77-4dcd-a1de-22da77ebc467", "sighting_of_ref": "indicator--b204af5a-7ce8-464d-9e1e-7e651d9141cd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed32deec-ee89-4804-b39b-f492013ad06b", "sighting_of_ref": "indicator--36c4c287-88fe-48e7-a6c3-fe2becbbabbe", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf372c37-84b3-4071-b6a0-5ed6d21a731b", "sighting_of_ref": "indicator--2a9fa7f5-b244-43cb-8c39-4933b08808d3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f0071c1-3f1e-4688-9c1b-29b26db64718", "sighting_of_ref": "indicator--9ca241f3-dbeb-44e2-a67e-89cc1becf9ae", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db09046a-f3f1-44f3-9c71-a8eaa79f8827", "sighting_of_ref": "indicator--79b8cb0f-8a48-45a5-bb6e-9dcaaed3511c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37a5f7aa-0699-43ce-97f8-70c1ae6fbcc8", "sighting_of_ref": "indicator--4595058a-e25e-4dfc-ad8a-e467a69a1839", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d2fe57a-eee4-4bde-b918-c02ebc3b3b6b", "sighting_of_ref": "indicator--a1a3bcdc-99bd-47ba-98bf-8e9ce99721dc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e5bd815-e249-44c3-8de9-9d64a1c69f75", "sighting_of_ref": "indicator--086a058f-34cf-41a3-8140-491854a5139b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d8e2a68-2e86-4b45-b60b-cf0e96aab240", "sighting_of_ref": "indicator--514358d7-2555-433b-a3ac-21a49980305a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8c6fa93-7a83-48bc-b6f9-e2a69c92ad5d", "sighting_of_ref": "indicator--ddbefe18-f8a4-47f8-87a6-fc32a9a529e1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0f187d9-e1a1-421b-900d-9ae0df3090c1", "sighting_of_ref": "indicator--f09a1bdb-2b96-4d7c-a4f4-abc4c25294a4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db149b3c-7464-4742-bb92-234a603339cf", "sighting_of_ref": "indicator--dd8101d0-e3e3-4c27-825d-924caeb7d6f5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c40ae2e4-1f6e-489a-b721-5115dbd310fe", "sighting_of_ref": "indicator--bb7d8d21-3156-484a-bcc5-83ca22c294d0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--066f6631-344e-4ee0-a039-95c42f8edbe0", "sighting_of_ref": "indicator--760a6ce8-f11f-4c47-b97c-09b4aa0b5d74", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da88b39a-4643-419a-bb54-474d2e498f5d", "sighting_of_ref": "indicator--049e4d24-3a09-4468-87c3-fbb0fe103b3a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--480f575e-c31a-4d39-81d9-a56bba6b079a", "sighting_of_ref": "indicator--f3d6157c-1698-4ef2-aee1-56107e90ed5a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--827a04aa-4845-47df-b1c4-7195d406fe4d", "sighting_of_ref": "indicator--d341ea38-5052-4ec2-8a43-22b62e988264", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--087e9a49-2361-4cef-9de2-2c81562f6284", "sighting_of_ref": "indicator--abb3f932-e06d-45f7-8981-a7b1caaa270f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92d9873d-b708-4159-b2b0-ef7065da4b77", "sighting_of_ref": "indicator--400f7a30-9079-43ed-a4af-4453c5cf1975", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--369db450-e07e-4d8a-a9a4-3e5f90ea3570", "sighting_of_ref": "indicator--e6064211-fb0c-4e75-b74b-2d0c7ae62378", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b5ecb83-baf5-4d2a-b52a-d74a5993197f", "sighting_of_ref": "indicator--653eafc2-bb50-4e64-aed6-cdb748d89749", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45301a5e-bc27-4e0b-9eff-7a859c2828f3", "sighting_of_ref": "indicator--2973692b-1353-4b5b-be20-b827e961fb6a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0844601f-a87b-4943-b913-9d7cb4aedee5", "sighting_of_ref": "indicator--910f33ed-c72c-42f2-bec6-1c7c8cad8f24", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38916b7f-382f-414d-a722-0201ac81339f", "sighting_of_ref": "indicator--b6737ee5-af61-4036-a666-3e2276c40b4a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9314036f-bbd6-4c09-9f08-20cb6e0a51c4", "sighting_of_ref": "indicator--fb59a686-00cb-4ec7-855d-09ddb8879f59", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d66b766-cbb2-4fc2-9b4f-cbdd5d0634ba", "sighting_of_ref": "indicator--0546c7e7-c6e6-430e-987e-551f46de45fe", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e51ea5d-4de9-4d6c-a4b8-7d9e4e06270a", "sighting_of_ref": "indicator--19674bd8-3161-4a16-b10f-36aeea35f457", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac0b305d-b1e2-409c-8afd-8f220a1dbb7a", "sighting_of_ref": "indicator--986c4823-141d-45c0-888d-ed610b6fc728", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c26b012d-1174-4b06-9421-e8ac2bd975a4", "sighting_of_ref": "indicator--bb572c05-f8e9-4c43-9b54-b78875870d20", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9606570-5b78-4457-bff7-d119c665b4ab", "sighting_of_ref": "indicator--f1b4842b-aad7-44fb-9c9d-fb15f5640c15", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b33ad8a1-a03b-48ac-ba8c-8ffb9c0efdf8", "sighting_of_ref": "indicator--e271b3f9-a18c-4e86-812b-66ed6b8ddb42", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--262c213f-0874-4e36-ae23-d93c0191182c", "sighting_of_ref": "indicator--b3f070a4-7af3-4b0b-a5fc-cc9589bc22ee", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5d5ee82-fc73-4a16-885a-e2034b9561a6", "sighting_of_ref": "indicator--a7f9ed75-e943-46b6-93e4-ef5b228b2524", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ce51f87-6375-4a40-8135-5f334cc49b83", "sighting_of_ref": "indicator--4c542edf-9fe0-4e62-a4ff-39333fa52367", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d555e147-ff80-495d-a81f-925b71568c20", "sighting_of_ref": "indicator--fee0e526-a1c1-43bf-8a28-5e82f5f25b17", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfacdc0f-84c5-46d0-bb63-7ab91d1be2a6", "sighting_of_ref": "indicator--973a09be-094d-4a05-9b45-a0b047413485", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ef20f92-3b43-4b60-891e-628578abf08f", "sighting_of_ref": "indicator--8e95fb22-8b71-43f0-aa7e-4261ecea6c2d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b4857e0-703f-4b17-8460-a8974c6c698a", "sighting_of_ref": "indicator--65782281-7353-4f9c-b064-9c9513d24479", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83f67fe4-41bf-41e5-8030-bd35a24b4a19", "sighting_of_ref": "indicator--e94cd0f3-67d1-43f2-94a9-6aa02e8e5218", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1da46064-f74a-4976-8b5c-d1a654a15cbe", "sighting_of_ref": "indicator--5a1a2ac9-e0d5-497d-ac4b-9a9d045b7735", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdde6bc2-cb19-478a-b559-61dea70d40b5", "sighting_of_ref": "indicator--10f92199-bf67-4211-a7e0-d98f96211afd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51de551d-b43f-4e32-a81c-3dd3aa69339a", "sighting_of_ref": "indicator--97c5b7eb-9a20-4330-b5ee-2465281b88c4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bcdd714-6d89-4773-9af3-e741cfe4dde8", "sighting_of_ref": "indicator--b566a0bd-dba7-478e-826c-76452ed03ce5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d95c3516-9682-45c2-8aa4-0f5c3b48602c", "sighting_of_ref": "indicator--d1c8aaea-b2f0-4852-837d-d416d91eb1e1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3aacca3-8814-4476-b544-d416957dea78", "sighting_of_ref": "indicator--372f518d-d11f-4c1c-9d02-fe972779df00", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ade2bc9-fa04-4a9a-8b59-b56afa7bd12b", "sighting_of_ref": "indicator--ef3166f3-0447-453d-b34e-1885fc86002f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c835fd84-f4da-48b1-a64f-ee9ec7215358", "sighting_of_ref": "indicator--15311491-048f-45ed-b1c7-561fa4a1e428", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37161eb3-9c4c-4f69-bd79-e00f20c9270f", "sighting_of_ref": "indicator--859a51a9-6dab-4265-81d1-8e68cfc149f5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67a9796f-09d8-4e66-958e-d10f33486d7f", "sighting_of_ref": "indicator--a924920f-33c0-4b96-90df-581d86fc1449", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0133bf71-90f8-44a6-9596-926082c21ccd", "sighting_of_ref": "indicator--375228d4-14f4-4472-b084-eae89db74e69", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bee969b-5697-4400-8e32-00da629de5d2", "sighting_of_ref": "indicator--b7b267a8-40b0-4274-9aad-122e171fa672", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a16baaf0-03c2-43f6-bb96-9b62e6a01623", "sighting_of_ref": "indicator--eb8bba52-c3f9-4bb2-8789-d9714b0f933e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a493a87-560e-4e18-86ee-d20b8be957d1", "sighting_of_ref": "indicator--1d4c4765-fc13-4a90-99bc-48504f650cfd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8c23125-0f54-4ee0-9ec1-ef56d58fa135", "sighting_of_ref": "indicator--a8da4436-c07d-4152-a786-4c1ee5f39f1d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--608c2903-5e80-4cee-8a47-c610a2924305", "sighting_of_ref": "indicator--dc1ec2c1-8a49-4d45-aa08-bf18d639b76c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b2c5608-6db3-4904-8adf-ae2054207ce4", "sighting_of_ref": "indicator--e384eca5-5996-4a6d-8996-9cb8c58a73c1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54fc3f5c-3e8a-4a94-9a36-3f7ad4669300", "sighting_of_ref": "indicator--c644ebd7-a97f-449d-8015-d1fe7de6a752", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e98b3d10-ac4e-4a75-9d9e-f3db2228430d", "sighting_of_ref": "indicator--c32e3802-2b83-4a52-993e-0c99510af916", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--077fb807-a934-480b-833d-8cbcfb60a926", "sighting_of_ref": "indicator--2e7acb13-d31c-41f5-a991-285801b3e188", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc794426-8a50-4499-b319-c086e7c3d4e7", "sighting_of_ref": "indicator--a2bc72f1-d508-473f-b5d0-960880cc85ae", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3ddabfd-e947-41e0-9830-288b80846970", "sighting_of_ref": "indicator--1bd5b3e5-68d2-4081-aad6-c435c5d07d09", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74ec0ec5-df53-4b8d-a0cc-c1259bd49992", "sighting_of_ref": "indicator--9a17515e-d93d-49c6-ac87-823cceabc7eb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7225ab18-2f42-4f38-8c09-3ed68ab54aa6", "sighting_of_ref": "indicator--ed7abd11-1f3f-489a-aee7-d5265ed9109e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a79b3094-1dc9-46fa-9d57-0415e153e821", "sighting_of_ref": "indicator--7a6a25e1-0200-485d-bd76-d73ce046636f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--642268e1-d081-47f6-9d11-1f9f4647725d", "sighting_of_ref": "indicator--ac0d5314-f3bc-43dd-80c3-f5f61d4c096b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f90b438-80de-4f22-bdad-11d30fb9a17a", "sighting_of_ref": "indicator--8eeace92-4172-480e-9df6-eefbe16f28be", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5826ae7e-1d7c-43fb-a8df-1f6c930f54be", "sighting_of_ref": "indicator--8c187e09-5892-4c43-a8bc-2da450b06412", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cef023bc-b1e7-4dfd-99ff-227019a433f7", "sighting_of_ref": "indicator--f1ea3909-01d6-4e05-a4b5-e0e71b76b1f3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c338c33-4d6a-4c8c-8d0b-3dec32197e53", "sighting_of_ref": "indicator--5797087b-bb01-4ca4-9f9c-b64dfda5ffb4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b92a41bd-8c1a-481e-ae99-ade45e24d468", "sighting_of_ref": "indicator--e28d0957-a91e-479f-b9ef-1b7a1e01afb2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b29f9c6-63a9-4923-b724-cf51ac2ee945", "sighting_of_ref": "indicator--81e77c0b-4995-4901-a411-23f76687be4f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1e2f70e-4d88-46b8-baa8-7bf778cd8f5e", "sighting_of_ref": "indicator--d928b715-9d90-4a2d-8da8-4f9568af3947", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1d0b560-c1cf-408a-ba7d-7e15497c1983", "sighting_of_ref": "indicator--6ee5e610-71ac-4e04-8098-88a065a8f565", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8e648ca-8211-4abd-ab0f-b21640e6e6be", "sighting_of_ref": "indicator--02dc551f-78d3-48c3-a172-23068a322b3c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1853d58-1f46-4912-8cfc-456291f8ee3a", "sighting_of_ref": "indicator--e2abff94-281c-412f-a390-b04c27f6e11b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf01f8b3-8a15-4793-b169-3e3388b61e51", "sighting_of_ref": "indicator--109b8599-c0c0-4d32-8006-9e42147f16dc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bae9b86-2f0e-4e4b-9e7d-2f182176474f", "sighting_of_ref": "indicator--8a2722f6-e9f8-414a-828e-a291d6b8d41e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdfcc047-3973-460d-b57a-3bbc62a40216", "sighting_of_ref": "indicator--54f2031c-65fb-4cd4-ba2a-42de32d28aaf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--681907ee-e221-4f40-9374-8a85c70f3ffc", "sighting_of_ref": "indicator--1219a2bc-2a4f-4a42-9d74-96d2fbc91500", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--412f1e61-01d0-484e-a2c9-386ac1f9a432", "sighting_of_ref": "indicator--2c93c989-a00a-4f9c-b950-2de345ec3dda", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb5dde47-eac0-47db-bfe9-f6059bbb2ce6", "sighting_of_ref": "indicator--283132cc-3874-4a71-92a3-dcc5176977d2", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6db1b45e-70b4-4a60-acd5-be9751d6f59d", "sighting_of_ref": "indicator--a32af1e7-718a-4b69-ae06-d03ae3bfc6cd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b4be8f3-f23e-42be-828c-6000943ed510", "sighting_of_ref": "indicator--5d61df49-c54f-4c6f-a6f6-23ad053c76cf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38ad36e0-07d5-436a-8f2a-92e68f92c9a6", "sighting_of_ref": "indicator--2743c130-db82-47ad-9de3-6dcb9dcb4b7f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92ce5e41-02d7-487a-ac14-1d4f19141eed", "sighting_of_ref": "indicator--7a4d7cfc-0f0f-4fd7-898f-c8b86a7ab4fd", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56c4a289-c422-4f10-84a1-0768e195170e", "sighting_of_ref": "indicator--7a4d7cfc-0f0f-4fd7-898f-c8b86a7ab4fd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07427d4e-9c9e-4d16-b868-a81c905152e7", "sighting_of_ref": "indicator--e98811fb-1752-4f6a-8a37-869aefeb3f81", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1d5f30e-9797-4fae-b471-10cc62b6f878", "sighting_of_ref": "indicator--3daaafc1-33ee-4520-b151-c547da524951", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b53047df-09c0-4a07-b56a-90e0c3b2e011", "sighting_of_ref": "indicator--bc6e63d3-2c7a-426c-b9e5-82e2630438ec", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14e5e1f8-3ad9-4120-9e03-55846f65867a", "sighting_of_ref": "indicator--bdb24bc7-e3a2-4b46-ab26-834886d2700e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c530f0d9-9c4c-425e-ab4f-dd3733ef594d", "sighting_of_ref": "indicator--d359db74-d5f2-4a03-a4fe-0be46761a470", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bb2355a-797a-4395-8d63-a2ec561ecbd1", "sighting_of_ref": "indicator--61694416-21a0-4451-b3d3-4995e583a0bd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a267808-1a08-423c-a219-62892564d55d", "sighting_of_ref": "indicator--79594aed-19ec-495b-a026-32b9d9b636d3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--723f5717-5008-48ed-902d-2015cbc372c1", "sighting_of_ref": "indicator--bfa2a0c5-98f1-4bea-b898-539a9626f0dc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d91f6f7f-a14a-4535-a137-48b6133f1d67", "sighting_of_ref": "indicator--ed03f517-7eeb-4042-97cf-d3e850d3631b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6855f40-ae54-483e-822f-7fac0abb751e", "sighting_of_ref": "indicator--f01444f3-7d8b-4548-bf1c-c1e58a530af5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab9cb879-1bb4-4e01-8933-c066f80c2816", "sighting_of_ref": "indicator--d4519a91-75a1-41e0-a931-c2011edcbc45", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36377e98-18b7-45f2-95f0-e5cda5c3d836", "sighting_of_ref": "indicator--392c91fd-c549-467c-b034-2f39c9a76afb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffe76ec8-7ac9-4159-b478-3070aa96ce9c", "sighting_of_ref": "indicator--3d56b63c-7cf7-443e-94f1-cbb38d415d4a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5bb759cf-7626-458e-9fbe-049c160d353c", "sighting_of_ref": "indicator--5285b9cd-7f62-4d6d-af4c-cd737e821e7e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d8dfb5a-ac7b-404e-ba92-b3abea23f6bd", "sighting_of_ref": "indicator--e8075a17-0e68-4b80-8b2e-d3741797fb1b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c66282d-52e6-4e02-97df-9f39542f56af", "sighting_of_ref": "indicator--9515f548-5eb3-46b1-b9c2-9bd75e64339c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49538525-34eb-4875-aba0-e479a6fe5f91", "sighting_of_ref": "indicator--1b1e4b2c-e3e5-4f53-8f2a-d450c2618755", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f1f9ca0-d8fc-4bc7-814d-4cf6156a151c", "sighting_of_ref": "indicator--1bcf9a89-0f68-4877-8a22-ac709ee8b992", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--964de919-eed1-488c-8ad9-2bb539569a36", "sighting_of_ref": "indicator--f7fd90b9-95de-4831-9a81-d41f3e1caaab", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c808817-d113-45e8-9b85-2a406054029a", "sighting_of_ref": "indicator--d8a18ebb-f5d5-4fa9-99e7-146dbbc68ae8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8990221-7155-40a9-a8e5-61a338e6e40b", "sighting_of_ref": "indicator--bc5df065-fecd-45f0-9dae-f5f9081c81c0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20ec0991-ac2c-4d32-9685-52b0925da2a8", "sighting_of_ref": "indicator--8c52ae3a-361c-4ab0-90d6-9f9c52e354e8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--835850a0-6cbe-4950-8057-2ecba052dc0e", "sighting_of_ref": "indicator--fcd16712-eb24-4298-8699-2d05a7431e75", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85c5b9a1-b939-4f8a-a205-d04b428183cd", "sighting_of_ref": "indicator--b4177e97-5b73-414e-a993-bc9909a7de68", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--378d6caa-ddc2-42cb-8ad6-db969de444ca", "sighting_of_ref": "indicator--30857613-1aed-4f27-b3bd-4f89b45dd698", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6a2e294-c131-4bbc-abe1-0f79e891d993", "sighting_of_ref": "indicator--084cc3b2-09ed-4378-8ff8-c01ab83a7380", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e31c177d-2022-4472-9039-3b3aaac32614", "sighting_of_ref": "indicator--050a99ac-469f-456a-a8f7-a235f8979579", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9ec9430-8dd6-4acf-b843-e328643ff4ec", "sighting_of_ref": "indicator--23318b37-6144-486b-b2bd-569398d1c02a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4398437-2c17-4646-a99e-db350564841b", "sighting_of_ref": "indicator--035624b6-d388-456a-9562-1426b133f2c4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd08571b-e073-4d00-b39c-c58b94c6c09f", "sighting_of_ref": "indicator--886181a3-cd1f-438c-b682-7b972b3cd1a3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01ba0cf3-a0ee-4e04-854f-0c2166fc788f", "sighting_of_ref": "indicator--f9f37aa1-799a-4e13-9ceb-b323806c2a72", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--962acda3-2699-4a76-b2d6-3decda9fcb4a", "sighting_of_ref": "indicator--556dc15d-9e84-4348-bbd7-3fab120e2680", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--237394b5-2d0b-4a13-b125-ca4f1ff530e8", "sighting_of_ref": "indicator--f3f5577c-3d5f-409e-ad22-148e31e62470", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18928835-516a-433a-97c9-866354a5edd3", "sighting_of_ref": "indicator--1cde9a30-98ba-420f-86b6-262ff690f5e8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e9b1b75-8787-4945-a3ff-9c5628771221", "sighting_of_ref": "indicator--a96dfa6d-2e1f-4e1b-b878-b67a7d541c6d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e14007ef-b1f6-4c49-88d6-872a0225c742", "sighting_of_ref": "indicator--af4a7505-96ff-41ff-b328-3f71aeab5a0e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5dfba13-45f4-42b3-bfef-8a381c5608e8", "sighting_of_ref": "indicator--1d07b347-9516-4e02-ba5c-5bb04f325678", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3f59f52-8d41-4138-a2be-5a81e023c0fe", "sighting_of_ref": "indicator--95036f14-b738-42e1-92ef-819edf014c50", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b46042e3-0f2b-43eb-a030-a048275fae77", "sighting_of_ref": "indicator--9c374509-db48-4eb1-8cf6-4cc96c420b6a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--652c80cf-a9f2-4a1b-9b16-b50b87c077b2", "sighting_of_ref": "indicator--5a7ed7ac-4fb4-4ea4-89be-1537b521d324", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--564d60f4-f836-4390-9bb1-75c7521de920", "sighting_of_ref": "indicator--dfb32f00-edfe-4f03-bfb6-c75cecdae466", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7d12aa1-cc27-4caa-90e3-ffa66a6cb6fa", "sighting_of_ref": "indicator--9d726a39-6e9b-4b06-8696-d00bda306536", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--832bdf32-6568-413c-a9c1-0f21a643be2b", "sighting_of_ref": "indicator--6d6833fb-8b6a-448a-a1b0-cfc0ebbf2a95", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afaa9a95-942e-4093-8e55-f9e202ceda69", "sighting_of_ref": "indicator--2b9166be-caf9-48c7-8e4e-c9854e7f3043", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cfbd20c-3b7b-40b4-b252-b2b331694de5", "sighting_of_ref": "indicator--fbb7e5fe-f895-4496-b65b-898369c7a6df", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7ff58de-26d2-4bcb-95d6-8b5657fa9384", "sighting_of_ref": "indicator--cf042b44-0205-4bec-a4e0-9b34ec5d7023", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c6be0da-7f6c-4022-8499-63d3dee06322", "sighting_of_ref": "indicator--c9e49743-aba1-491b-b348-ba382948b3e2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9dbf171-03ce-4c75-a927-bd992047be0d", "sighting_of_ref": "indicator--958250b2-a551-4971-9549-5d3dff54af6b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c78513e-77ed-4cb9-a64c-06bd3c6e3215", "sighting_of_ref": "indicator--9f71a98e-dbc9-48a8-8d3e-3306ba7bf269", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51174021-c121-4826-af57-f084d8c1f99d", "sighting_of_ref": "indicator--2117738b-86c0-435c-9593-1e16eb9bf369", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c431f6e7-9e76-4175-a7e8-b20b730e1950", "sighting_of_ref": "indicator--686b860f-fff5-466f-9909-28ba6e5fc24a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e26d40af-be0c-4f91-ad91-2c8dcfa84fe4", "sighting_of_ref": "indicator--95c49210-8365-412b-b3c7-deb5498d92bb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dc52056-fe8d-49bd-aada-1a5023195a6e", "sighting_of_ref": "indicator--11340075-fe3b-4099-b0a9-eb843b52256c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f317b57f-01ef-4e7b-a399-96cdb20b15a4", "sighting_of_ref": "indicator--2c283c9b-2e5b-41ec-b8b7-944e726a97b3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3ce24b5-5b8e-4231-b2a0-1f642c1dd125", "sighting_of_ref": "indicator--0cc5ceea-7c1b-4370-8efe-168f27b05196", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31fd4877-f167-42ad-8954-8ec56e99f9d6", "sighting_of_ref": "indicator--3f63d7cf-32ed-4549-b3cb-a1d003782af2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7cf7d73-142f-41c3-9a69-ce2072f91b3d", "sighting_of_ref": "indicator--60058e39-5d4d-4876-b5b7-22638c6d68dc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00ce8459-36fe-4617-b9e5-d70fab75ef15", "sighting_of_ref": "indicator--698a1db5-1113-4480-8150-43ff8dc441fc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcd09b7e-2552-4101-86b1-4d7f3dc1c15e", "sighting_of_ref": "indicator--a3cf3172-9eda-43b4-b3ca-6db426786218", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7526eb43-387b-440e-a23d-84fdc5982a5c", "sighting_of_ref": "indicator--520dd47d-ca0c-4d89-9874-a257ea046d9c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--330b41eb-9dc6-41bd-9595-96b741e50a67", "sighting_of_ref": "indicator--6c4615ac-424b-4dfb-8ca5-50d4d08c7b02", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adb2ac65-064a-46f4-a185-a8ed4255c2c7", "sighting_of_ref": "indicator--cb447eba-7628-48ff-bb79-69a2b520a951", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc30f07d-f2ca-4b4a-8737-93bf3bd08093", "sighting_of_ref": "indicator--9cf56e6e-89a5-4330-af00-f423e97c32ec", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ce68ae3-8a05-4c59-a4f7-5f960580daa9", "sighting_of_ref": "indicator--54c4259c-ce18-4773-8d9b-bc0cc78ebe24", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecf173ae-e296-40a3-bc7d-c88749554afb", "sighting_of_ref": "indicator--912868de-d9ec-4961-b883-965b2643634d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff68225a-dcb1-45da-85ad-800484d58ef1", "sighting_of_ref": "indicator--dae22322-275f-4064-a18e-f3989170df39", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--716938f3-51c9-4d78-900f-11ef1a2843b0", "sighting_of_ref": "indicator--e3e4b3e3-e17d-4fbb-a4ec-6b55188a3163", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d88ad338-d8ae-4878-82f3-7a1294fdfcee", "sighting_of_ref": "indicator--d705bb7e-d824-4374-aa16-b9d343999499", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5a1e975-5c9f-4ea4-ae30-43b1e0fae11d", "sighting_of_ref": "indicator--fae9bb21-9f2e-4ac1-a777-1799240e1245", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56169c69-dfad-4d97-b4be-03b235e65bff", "sighting_of_ref": "indicator--51d951d0-57e3-45cf-a579-54ebccde1777", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5156f4ef-c405-4681-89f8-85b51e773432", "sighting_of_ref": "indicator--b0f91461-147d-4262-9d5c-4094d6d42bf4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--983aa32d-226d-416d-a810-c452820b6d58", "sighting_of_ref": "indicator--11227ece-df03-4891-851b-86b85366731b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c4db18c-bf8c-4327-a1a1-516357386103", "sighting_of_ref": "indicator--0b4505cc-820e-40b1-b1d3-5855074d7ebe", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efc93a6f-4cb9-4cb0-837a-b042e659c4d9", "sighting_of_ref": "indicator--7f8a029a-abdd-409f-ba6e-4ecd1f7579b7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4830f43b-2384-4fe0-9ed7-fa8bec75b3fb", "sighting_of_ref": "indicator--2ba5be3e-ba02-48e9-9f10-813fa6cbbff7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22d1d6e1-0e28-4485-949b-a3fd8e639bff", "sighting_of_ref": "indicator--7d46a64b-42d6-49d9-9682-2ea2fda086c9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd37f85e-4734-4e03-8be8-cbbfd146b0af", "sighting_of_ref": "indicator--a8b0f475-70de-46f9-937e-3f8cc3a924b5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaf963ef-9887-49e6-988a-2a9479b5b4b4", "sighting_of_ref": "indicator--3d7b0e66-e250-4ba4-a7d6-f304b10b5b32", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--725e7f00-43cf-4d51-8546-45ab1e954aa8", "sighting_of_ref": "indicator--e8a51239-e50b-4395-ae88-6aeccde2a90e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a64ad16-8b20-4484-a80f-529ce49bea03", "sighting_of_ref": "indicator--c0b2ec4d-b05e-4023-9c70-9dca1c699b2b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f2350d6-c2cd-47ed-a205-12c2b0cb9236", "sighting_of_ref": "indicator--589afdc2-e540-4d66-bff7-6722283f6bd8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2564151d-c639-45a5-becf-b067db155426", "sighting_of_ref": "indicator--c9535dd0-520c-4f03-9cd3-a3174db9fcba", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71d2b8bd-9361-457d-9d0d-21b6d4e39d84", "sighting_of_ref": "indicator--77cd94ef-4435-4693-a971-5025f629309b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a11c799b-76e0-43c0-89e1-57c352c78df9", "sighting_of_ref": "indicator--009e1269-00c8-4512-967f-c801331321e9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2f5be35-2a4c-4f98-b8ea-5bfa917070e7", "sighting_of_ref": "indicator--159e1fc0-b751-4b2e-ac18-02a17801d705", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cc59fdb-d916-4a48-926b-38c637f98bbe", "sighting_of_ref": "indicator--0c63bbcc-0f88-481f-ba40-023167ea83e1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--086c9b9d-f7e0-4575-a681-c2965ee1b036", "sighting_of_ref": "indicator--ce350594-2b97-48a4-a37a-4f75ca761663", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e3abe0c-7858-488e-82c5-4546d9774eca", "sighting_of_ref": "indicator--6279b87a-10a6-4a8d-9ed9-92159313bc85", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66119585-30dd-4df3-a243-1ee61659bcb6", "sighting_of_ref": "indicator--b7a58b4b-e3d4-4575-81e3-748fc81cbbfc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dee46f9-5abe-4a32-8352-2dc3e8dde95e", "sighting_of_ref": "indicator--0cd6f5a8-a4c7-4218-85de-a547eb9f9892", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c166c3a-5615-473c-ac22-ea5d81b53fd6", "sighting_of_ref": "indicator--6167c303-318b-4d10-b8cc-bdfa290b4ce8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56ed231e-5b6c-4dac-b537-46327d2ff08b", "sighting_of_ref": "indicator--fe385cbd-e832-4efc-9928-b91c62996c2f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4768e12b-1a95-4a58-95a6-7a085396bcbe", "sighting_of_ref": "indicator--78ceb88f-afbc-46e2-93f7-736e084e5006", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ea520c3-9dc8-44ba-82b9-fcfe260668d6", "sighting_of_ref": "indicator--c9611cdd-9e82-4f9c-9443-44cc7d3e6fa3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5224fbdb-e9df-4c7b-aa8c-aaf7f7eb12d1", "sighting_of_ref": "indicator--a76f80b4-0a5c-4481-ac9b-f18df9f39740", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6550fc8f-5213-4bb2-bd5b-af3a69d5a411", "sighting_of_ref": "indicator--a3ae9987-fe20-4ffc-b220-26d7265f14ce", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db4691e1-5bcf-4f66-8919-211017a23da6", "sighting_of_ref": "indicator--0eac9232-2f4a-4b2e-9034-0adff2656639", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79d97259-2e81-4cca-833a-932e81d19e95", "sighting_of_ref": "indicator--03b51cf3-e65a-4178-95ec-98114acd4485", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef3651c6-471d-4c01-8b1e-f19297792f7f", "sighting_of_ref": "indicator--096a8e38-fd11-43c8-a069-b545f4a67087", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdb0a0b4-8668-4bbd-b75e-d4b7dcb2e36a", "sighting_of_ref": "indicator--9aa28f18-985f-4e35-b618-d09f8ba16bf6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6200678-a41a-4306-a346-fc5674b80206", "sighting_of_ref": "indicator--9881407e-01b1-4126-9d69-9bdc1292b9e3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--246e6b4c-5ba4-40ab-ac0f-d0976d6e3af4", "sighting_of_ref": "indicator--f927fed4-726d-4e1b-9363-d65e73f0cc3b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07948ee0-fa68-4423-bfc6-0ec895020ea8", "sighting_of_ref": "indicator--3be2cb24-92a1-4c89-97be-45fcc6963043", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9105e9f3-45ee-4e7d-9881-b7ae2fda5094", "sighting_of_ref": "indicator--cadf3639-9635-4053-b27b-2cae7b3e64e8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65a90ef7-0396-4bba-81d6-e552bebc32ce", "sighting_of_ref": "indicator--e8aac949-5b80-4204-aac8-a6f9351cf88b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6682a631-8504-435d-aa26-be9ad824819d", "sighting_of_ref": "indicator--b5efccde-c5e6-4598-8c75-c5e05922a6e9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--696cfefb-99f9-45d7-8456-4b9ffe4a1766", "sighting_of_ref": "indicator--c3bb4753-b002-4a2a-9c18-4bcf030341c6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adabb01c-4cbc-4b75-be38-b7146407a445", "sighting_of_ref": "indicator--3d31b177-8d48-4538-ad9f-eb8db78a5f3a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40f7c4bc-169a-4eb1-986d-4577559938a5", "sighting_of_ref": "indicator--b3ffbe9d-da0b-4d37-b60f-feeac01bdce1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebe7f2fc-a435-4bfe-a647-c54a7777de6e", "sighting_of_ref": "indicator--1264d78e-4d9a-492f-8c10-c4cb151018e1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dcce102-4928-43c4-a2ab-c8c71c030d2a", "sighting_of_ref": "indicator--0c67f0be-f618-4114-bae0-939a37677d07", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dac3025-92ea-4cec-bce8-82d0b42c7cc9", "sighting_of_ref": "indicator--76e18635-9a71-4ced-b026-0f200870059e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b223deb4-a1c1-4229-a992-b1a8dcaaf1a6", "sighting_of_ref": "indicator--1ef5d831-4047-4ecb-9cf7-283296234f68", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--856bd9b1-62fa-469a-b507-1e900ab07591", "sighting_of_ref": "indicator--9fa40fee-5fe5-491a-8b3e-6315b53c8c46", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b36a16bb-b2cf-4f04-bad0-afc4baa603d4", "sighting_of_ref": "indicator--2ff64e16-67cd-4512-85b2-a926cfda2a7f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b9413f6-55aa-453a-a06d-97bfc0403c2b", "sighting_of_ref": "indicator--adaba242-0f45-4e7f-a00a-79a217daea41", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--310c6e0e-30e7-4c2c-b0d7-1c86f4a19686", "sighting_of_ref": "indicator--89727053-05e3-48d0-a4b0-d0b7e0ce33de", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81a86460-aadd-47fe-84b7-76850325b6ff", "sighting_of_ref": "indicator--a9cf6267-4286-417a-ae6d-3fa8f3560109", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a50f5570-a7f7-49a9-a242-f1627067103e", "sighting_of_ref": "indicator--5bca3e02-817b-46ff-be2e-1083ddf9aea3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38d12851-622e-436e-8d74-affbad0314ae", "sighting_of_ref": "indicator--de709138-00c0-4d1b-875f-b960d125951b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70bdfbf0-d797-406d-87f5-9751f50197bc", "sighting_of_ref": "indicator--933b9e06-721a-42f3-a207-e0f19b2c67f0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20d36708-c2f4-40f0-a892-4210e4c5cada", "sighting_of_ref": "indicator--3ff1878c-0d27-4290-bd3b-ec5e0b82c067", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b81384d9-8255-4748-9758-2ca6214a93bc", "sighting_of_ref": "indicator--5cc0a5c1-04b6-4284-92ab-3077e8d5bf3e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d20dfe94-c955-4d76-bd20-dba2555db027", "sighting_of_ref": "indicator--8d398747-79f1-4011-bd7c-aba3396ca51f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21cac3e1-f3fb-43f0-95ab-63e30aa46c76", "sighting_of_ref": "indicator--ee4ef276-81c6-42a8-b8ed-ea6728bda7c6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a4a17da-e1e6-4825-978f-2c1b1abc1325", "sighting_of_ref": "indicator--93610677-d53f-4a59-88c0-cdb67b233880", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76728ba4-3612-4923-9389-6db784771f75", "sighting_of_ref": "indicator--3b26ae51-dded-4dc8-954d-33e96a0109e8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--224b4c3c-7513-49fa-97fe-0343bf092152", "sighting_of_ref": "indicator--d9b83471-47df-4887-b8a8-11537ca2a634", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3862875e-c62a-489f-aad9-5db55f4d85b3", "sighting_of_ref": "indicator--73a43cce-916f-4cd5-a187-2900d357a752", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80839d3b-05d6-4861-adec-66cd3a7f54fc", "sighting_of_ref": "indicator--b5644cc9-cce7-4540-94c2-d60e211a28ce", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51ab95cb-38bc-437b-a758-e2ed0a601859", "sighting_of_ref": "indicator--84d28528-7ab6-43d1-b2ef-01a0d7ea70aa", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca3b9c68-963a-429a-a8e9-77e002c91741", "sighting_of_ref": "indicator--316416b6-2cfd-47be-8d05-bab5623c3fb0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--058b31c1-8507-4bce-87f6-57e6b4011ec1", "sighting_of_ref": "indicator--c9826c05-39be-4621-8c1a-92ba1223e0f5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4024e53c-4496-4e38-9802-18108f4aad3b", "sighting_of_ref": "indicator--5d163683-a020-40c8-a4d5-cbfa5148e008", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--993c2210-f5ee-4815-ab39-644d4742d1cd", "sighting_of_ref": "indicator--9fe698ac-af3a-4220-8e32-b7c06512d15f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--666df609-94f8-4d27-8acf-719fca6fae5f", "sighting_of_ref": "indicator--882ff57a-4d98-47c4-86ae-1770ba9a386f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6fc2994-671a-459c-9494-6626d9120afc", "sighting_of_ref": "indicator--b194d26e-d4d7-44b4-b826-166d4f9d5577", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18a4538a-5879-4cf4-932e-c5f65b7cbd9f", "sighting_of_ref": "indicator--42bbc4d6-6b11-4145-b664-0811fba83876", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dc10876-7ba9-426d-b4e7-49ee283815d5", "sighting_of_ref": "indicator--591bf154-443b-471a-a740-37b8bf7d44e4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3cec5d40-f995-48e7-afea-80c963f03926", "sighting_of_ref": "indicator--4b98eeb2-748a-4de2-89a0-d501add484c3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6971bc68-6f75-447c-87aa-236bf3919700", "sighting_of_ref": "indicator--1775e7b3-4e88-435a-bbd8-322da6e2945e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af192212-18f2-47b6-8e10-f51681ada495", "sighting_of_ref": "indicator--ee9c61fd-cb11-4a6c-b16f-626729875b24", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--debdc2c8-bcbc-4a3c-88da-9748da2a0524", "sighting_of_ref": "indicator--e2c17361-ab5b-4915-b3c6-cc186955f037", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--657256ae-e6a8-48ec-a820-b841ed085171", "sighting_of_ref": "indicator--0905671e-2134-4394-953a-511c8b8b95dd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51d1be60-15ed-438a-8ec3-e348c6e84fb9", "sighting_of_ref": "indicator--c5fcc77d-d58b-4572-a526-4418908efbae", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77dcae09-a200-4536-a6c1-b4942b57194f", "sighting_of_ref": "indicator--0cb753a0-3adb-4083-b044-95e4b88f6d0c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45b9d2b0-4b7d-48b9-8866-3e70b3be9e7a", "sighting_of_ref": "indicator--a53ebaa0-80ea-4cbe-8f6c-2519ff8c907e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00b5a076-c3e4-420f-b2bd-90945c5c4446", "sighting_of_ref": "indicator--62b13958-1e73-4034-8eae-0d6d79a07aac", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1991ce3b-b407-4af3-bc12-9633824b2604", "sighting_of_ref": "indicator--d915d9ba-2444-4765-9914-01487a640598", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--157cebbb-33db-4455-9188-58b7ad541756", "sighting_of_ref": "indicator--f799008d-15c4-4972-8a80-937fe708ffb3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e9745d5-a30b-417b-b741-13d7a36f9428", "sighting_of_ref": "indicator--523e823b-70dc-4d39-960d-289357d39753", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--248bbcc2-f764-4f4a-86a1-1be28bb7ff79", "sighting_of_ref": "indicator--960fe824-12de-4dbd-91c8-5a0e0e753976", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59300046-ee29-40b2-9d77-e82bb18f4b0a", "sighting_of_ref": "indicator--3451b324-83f8-4869-bcb7-4280123187e0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e24e6ed2-78b5-41c0-bd52-3d38f7ea7323", "sighting_of_ref": "indicator--f0abfbb7-48bf-4147-ac9f-a64ca3218e54", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6af76e66-f0a3-4451-8e9a-c1c17cb14953", "sighting_of_ref": "indicator--9190e598-ff27-48b1-b6a7-9bb3a5a47f6b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79864f7b-d5ce-4657-9caf-564cf3fdaecd", "sighting_of_ref": "indicator--9ed1b97f-a173-428b-9367-a99605d422cf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4e2bbea-d813-4c15-b351-357ee26b4fd0", "sighting_of_ref": "indicator--909857d2-1c6f-4aae-b389-6792458789cd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb1290e4-aa6f-4da0-813d-31223152fbdd", "sighting_of_ref": "indicator--725a8c5a-854f-49d4-8e53-2ed8deb1c513", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aeb5ca2-ff78-44bc-a15a-cb8184073f4e", "sighting_of_ref": "indicator--513d540a-a106-4405-8ae8-30a087fbba0c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31502cf5-6c98-4aac-8e51-554e15e051a7", "sighting_of_ref": "indicator--886ee570-ce8a-43c5-a493-fe0c9617b663", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--012796e1-1bb5-40f9-8ed9-9224a3d1e546", "sighting_of_ref": "indicator--f6838c1e-fc52-47eb-b788-d927d69b4f06", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f91fff5-e70a-4538-8e45-c0130219e175", "sighting_of_ref": "indicator--2d259247-3c0d-4e8e-ae6b-e976ccbde8bd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4593582-9203-40de-a976-b85b09ecdbc8", "sighting_of_ref": "indicator--36a4e96d-296f-4fa3-8fcc-b038ef960e2b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c13a9a03-4ee7-437f-a0a9-b83eac127916", "sighting_of_ref": "indicator--9d111d2e-8e04-4d7e-8ddc-d02a41d12366", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd097a3e-68b0-4dd8-9da2-eed731b31939", "sighting_of_ref": "indicator--81beec57-23b7-442f-90c5-d15809b9e19b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35ad3f04-931f-4269-ab27-fc7a4b2f1beb", "sighting_of_ref": "indicator--52d35420-417a-483b-b30a-477304dbd24e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6c7af14-108a-4fdd-9fdf-a3a2faa2e911", "sighting_of_ref": "indicator--8e3175db-8762-4b56-b766-03b0264f7c73", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaa4e805-1088-4bb8-9a9a-42d7ce834775", "sighting_of_ref": "indicator--bdb0586f-c8cd-4884-8031-9d9d30ee61c1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2efe1d93-e0f2-4249-98a9-8a6dce8b4430", "sighting_of_ref": "indicator--5bef9cd4-0196-4665-9d23-5c0d5b5263ea", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f6bca54-c932-463b-95b0-588c53cb1870", "sighting_of_ref": "indicator--e0fe573c-33c8-4a85-98de-004580e66ab6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da451612-2d1a-437a-8c04-a8bf40eb15e0", "sighting_of_ref": "indicator--221eeb96-bdab-408f-8218-638dd06de3fb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4382226e-b21e-4818-95da-b2ee7dc01107", "sighting_of_ref": "indicator--d4267c8a-a5bb-4a51-8dce-463bc8ac2ebd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d0ead09-1f30-4f34-b720-f6a1f4cf2c67", "sighting_of_ref": "indicator--924afb4f-bb3a-4b14-a4bf-19ab40bd0d7d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d297d0f-8047-4096-85c0-373620bc644f", "sighting_of_ref": "indicator--a0d34271-e2b1-4b09-8da7-061da3c5a28f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72d39c59-e5d7-4d31-bf00-f67679e5bccd", "sighting_of_ref": "indicator--41641702-7c43-44f4-863c-943455e7fbdf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa606660-a790-417e-820c-e6c9864e184d", "sighting_of_ref": "indicator--5c8b50ff-8403-4037-a914-838ccef778e1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ac522d4-d060-405c-8eda-bf8af08fe4e2", "sighting_of_ref": "indicator--adb8fa3b-95ed-45e0-ab30-24ec9ef649ff", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a23e9b25-df79-47ba-a2aa-dca59ffd7cb0", "sighting_of_ref": "indicator--ed36918c-90b4-4609-b617-bc5b339e6ce4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6858bd8-94c0-4b2f-9ec6-df63d2c23693", "sighting_of_ref": "indicator--d217eb7b-0815-4699-9c54-03d648888653", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64352c63-bc1d-4b34-904f-2acc44e10ade", "sighting_of_ref": "indicator--190b691e-cafa-477d-9cb4-5fdd93697646", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe0bf777-a157-450c-b278-7d92eb38dff0", "sighting_of_ref": "indicator--3ecfac39-6ddf-4582-b90e-0d499dec09a8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a681eee-8014-4c3a-8e68-480eb4c8e08b", "sighting_of_ref": "indicator--0e73014f-ffc0-426b-87ec-620b69cbfa2b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6edcde10-c913-4298-909f-eee60d711670", "sighting_of_ref": "indicator--ecdf614b-9ae9-47d2-8e04-73cbb1f91a73", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12f2a8ac-ce1b-456f-81b1-8176916c4afa", "sighting_of_ref": "indicator--ca8f098f-91f7-4d41-a3ef-40abf3e68e28", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--348fd136-8cf8-4f76-9756-140b1213724f", "sighting_of_ref": "indicator--d195a010-1c6c-476a-99ff-b1c7b9b42c05", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81285e2d-e7a4-42a8-80a0-e33bc0d96c1f", "sighting_of_ref": "indicator--dd56d3ef-a2f1-4bbe-812e-e0fa9933d863", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--896dd45f-7194-4058-9cf9-5cc29cbcdc20", "sighting_of_ref": "indicator--38255da3-8ddf-4b19-8a69-ee0e6360857f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2e3b11c-905a-45e0-9da7-627aab44bbd4", "sighting_of_ref": "indicator--78451190-70f6-42f3-8cca-a02095e52c96", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6aefc29-2592-41b5-b9a7-758d2a5c54e3", "sighting_of_ref": "indicator--2a0fc950-e86f-49b3-bada-ccd01aafc943", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d71d8e2-1a4b-442d-8c7e-9bc2ee79a303", "sighting_of_ref": "indicator--0825b1ab-1f87-4999-a797-d4724e5996a5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b5435cd-f36e-4aa0-aae9-e98b3619f15e", "sighting_of_ref": "indicator--6cb43fa4-b4ab-4fb5-8455-fcae7bf84b7a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1359087e-61e8-4c7f-9bcf-96d5caa211b7", "sighting_of_ref": "indicator--e21d5444-397a-4af7-a09f-e25d186e6222", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b2768ca-0a9e-428a-a385-819ec00db8ab", "sighting_of_ref": "indicator--652deea3-a6b4-4309-af58-7519a78de91f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92fedb37-07aa-4334-8737-478f1fa8c2c1", "sighting_of_ref": "indicator--766a76e2-18e4-491b-9a25-98ac14184092", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeeac668-42f2-41a5-82a4-b5534bbef999", "sighting_of_ref": "indicator--cad1f5c1-141b-49c9-a3b7-4d3498e695bc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68750554-4c28-4822-b04b-c445468b4310", "sighting_of_ref": "indicator--67a970c1-5d1e-4412-ae23-6c1e5e6c826f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a83c4432-70b2-4d90-acd8-432da2ee360d", "sighting_of_ref": "indicator--5589b501-0d8c-491a-b5a2-069c85f490b2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3da70d1-dcb6-4dc8-9854-77b806a1652a", "sighting_of_ref": "indicator--ee90e96f-b0ad-42e8-ade5-232c60baf105", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a28064b2-f7e8-48b1-8238-48344485c918", "sighting_of_ref": "indicator--374d62a3-6f31-4255-8945-9bd99a651bac", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ce7bf4b-5f02-4f92-8c56-44c2ca437f39", "sighting_of_ref": "indicator--a97e57c0-aab1-45a4-81c8-dac2f388f4fc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a39c0ae6-59e0-407e-b37f-b1da40872d29", "sighting_of_ref": "indicator--e7e4dd2a-8321-494e-b655-418d7b460234", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88863558-5cfc-4c97-8e45-15ee721546e8", "sighting_of_ref": "indicator--b8bf3b24-7468-4acb-9911-f8cc3c83f0ac", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d370f590-8b3b-431c-be89-fb2bc2146aa9", "sighting_of_ref": "indicator--17e58354-3a46-4168-91f0-89a1ca4d05a1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c46edb7f-bc25-4544-a612-fcfd91361890", "sighting_of_ref": "indicator--16225ac5-a309-4ad6-87fe-f258a3b6a950", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a658fad-69fd-42fc-8af2-c3f3dd8261c9", "sighting_of_ref": "indicator--91cf8248-63f8-4ff9-afdd-e678bc0d6cef", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d792be80-2948-44ff-9821-b0cca7c4c6db", "sighting_of_ref": "indicator--68caa48d-d89c-4db0-9004-936ab8b8e590", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1099187d-5533-4d82-9ac7-7a2dfea9cd3c", "sighting_of_ref": "indicator--042e5369-97d1-4f96-8040-90ef84544b0e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3a69a43-f68c-457f-9603-598d6c40bec3", "sighting_of_ref": "indicator--6a595d6d-d306-482c-a282-4080ffd35e60", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcc89184-2b0e-4775-88ba-abf6b18580b7", "sighting_of_ref": "indicator--5d7de5fe-7dd3-4fb7-b855-b8a7fe760881", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88b201d6-c8b2-4429-a88a-998a1c96d71b", "sighting_of_ref": "indicator--f30690e8-f58e-4b9a-8e0f-e6cc8666e799", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a395696d-a5a1-4a61-bfe1-f5a37a5d1c7a", "sighting_of_ref": "indicator--9f03fb5c-be34-4c5f-9238-64ec735006e8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--260afd2f-d11f-4979-a8e9-40716ceb1da9", "sighting_of_ref": "indicator--f1a7d913-a383-490b-861b-93a77138c3d1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e76e016-24df-4985-a60a-fde8d7db9a3a", "sighting_of_ref": "indicator--bf81a40e-3f81-4581-acd8-29ba51920da1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3737086c-22aa-4de4-9984-308904417e98", "sighting_of_ref": "indicator--852df384-f143-4d48-9dbf-2b9139418b97", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--042b46d9-83eb-495f-a44a-96b328adab47", "sighting_of_ref": "indicator--ab54c169-d214-41c7-a0d8-2f830506ac02", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--551ef3bc-59a8-4bcb-b3fd-d3959b3879d6", "sighting_of_ref": "indicator--3572134e-3ca9-4ed9-a71b-fdac0de7e90a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b743f0ff-8c0d-44aa-a95f-5e7baea69129", "sighting_of_ref": "indicator--38353ac7-5dd1-40ee-9305-9422be4be477", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70d7565e-6b91-4b48-bb0b-e55a106d84f3", "sighting_of_ref": "indicator--2660333c-065a-4f82-9052-c1ce3932083c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a98bb34a-7048-453b-83d6-b7ee31514cd4", "sighting_of_ref": "indicator--695542f6-192a-4a19-a8d0-e0a5eb24706d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea2147cd-7f54-45d2-817d-78ee19819401", "sighting_of_ref": "indicator--d2d2ecf8-a99f-4005-8ac8-a5cdd2adee60", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41040ee0-c72a-41e6-843b-47fe1a055c67", "sighting_of_ref": "indicator--294242ad-64a3-4b63-8384-446543882e61", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42befb74-207d-415d-92de-739f5e0b0d36", "sighting_of_ref": "indicator--12ceb315-a5d3-45d4-9421-d79778d77762", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccf7a5c2-72c3-483c-b9ff-d1354ffd8ca2", "sighting_of_ref": "indicator--3552073a-1344-42f6-a18a-e4f76106c459", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bee9cfc-58ca-4aaf-928f-26eadbdb654c", "sighting_of_ref": "indicator--9ef786e6-bcf0-46ad-a43a-37fce8504207", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bec5ccc5-c849-4606-8aae-2b046a965e33", "sighting_of_ref": "indicator--331b2115-1d55-46c9-9f22-7c45022da910", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afbac92c-2c1b-43ef-b2d9-403d4c4695e3", "sighting_of_ref": "indicator--4709f62d-f0a0-4e41-9bfb-6a9e9adf9e56", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a441931f-46ee-4fbf-8114-4f351775e76f", "sighting_of_ref": "indicator--d90d658d-179d-4995-b43a-ad11ae1bd252", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30660e31-fbf6-44cc-8cf1-cd8b4a0f1ad9", "sighting_of_ref": "indicator--ba7183ad-8442-4b70-bce7-90a44a8280d9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed46bd51-4ffc-4c84-a51c-2856a8a6dbd4", "sighting_of_ref": "indicator--6029a880-f7cc-4a74-8775-2d14a9032f39", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c892c36-43d1-46e4-82cb-c70510bb21ae", "sighting_of_ref": "indicator--91d9b9e8-017e-495d-acd0-ea289fcb9635", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f236f703-abb0-456f-9924-9e1fb3c8aa57", "sighting_of_ref": "indicator--e8d8a39e-67b8-47dc-affc-028243680e32", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8459ca04-1099-497d-8ec2-d1c27920caab", "sighting_of_ref": "indicator--ac824a9b-0004-4879-b368-f6ae850a5a92", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c243bfc-7f8c-4ab0-bb5d-71c437f9e3dd", "sighting_of_ref": "indicator--89721c11-82f4-4b4e-b3ff-b8554de48636", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd81ee73-42f6-4d27-8a5e-63f8523374cd", "sighting_of_ref": "indicator--02f2ebde-3d59-417f-96db-434b4a73fe15", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a4b8ae5-23c6-41b2-9ef3-29bf3e11df68", "sighting_of_ref": "indicator--d0b621e7-e68d-4c73-b161-5fae49b77a42", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43ceceac-d158-4637-8e95-3c330a894c3b", "sighting_of_ref": "indicator--66622255-c300-4777-819f-fb09a32602d1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faa79090-defa-430d-a815-ba2c1fcb0a12", "sighting_of_ref": "indicator--4e65de7d-cd36-488f-92f9-d6e0e4480ee3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2da7160b-b480-4ff8-bf13-58f90914f287", "sighting_of_ref": "indicator--4485044e-e500-48e0-894a-a04ae73174cb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--517543b7-af99-4996-952a-bee71d245cbf", "sighting_of_ref": "indicator--1e76955a-b8ae-4f52-874e-cb193843fb45", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e0ef274-be6d-4067-8fcd-d424c6848a93", "sighting_of_ref": "indicator--5b3c6f33-c544-4921-963a-b0987c823d21", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d384b78b-a25d-4aa6-980c-eaf4a033efe5", "sighting_of_ref": "indicator--29fa14db-9fe8-4a68-a7d2-60c9430dc42d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b73705ce-2891-4975-84c1-4d0496c0ab6f", "sighting_of_ref": "indicator--c7c09f07-c26a-4bfa-9218-fac496d3e303", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad54e86a-6636-4f36-96cd-f761b0dd1693", "sighting_of_ref": "indicator--eb7fdc7e-4156-42c5-8e35-ad4231eb88be", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ca94d78-3e1b-4c4a-9c93-4492d2c28fc3", "sighting_of_ref": "indicator--307424c9-41d5-48d1-bd37-28aeba22c4d6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c58b2cc-62d8-441f-a344-0a4e3d482475", "sighting_of_ref": "indicator--73a0d4b1-3a59-4a85-b961-8403dd514dd3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3bf15f69-30ba-42e2-a6c9-945f7a3f6228", "sighting_of_ref": "indicator--458b1152-5154-49d0-9e65-4f1cfe6a5e4f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfa691f4-cb21-4f27-bc56-aaf105797223", "sighting_of_ref": "indicator--f9a5bc97-1d69-43e6-a9e2-e2b2043d91f5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ac5a0f8-b96f-406c-bb0d-dd7468429576", "sighting_of_ref": "indicator--19c35b12-9037-4aac-a613-a227b967462a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--127bb08b-64c4-486e-ad49-815e5a8bafa6", "sighting_of_ref": "indicator--2254ef8a-ee72-4b58-9ca6-77464531a0e1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ef9ff1e-c7bf-4fad-bf69-9cb66e010184", "sighting_of_ref": "indicator--e1438ecb-6175-491f-aa21-3c2ce665a3b9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d04b2eb-514a-4b76-b636-7f9adb5f5938", "sighting_of_ref": "indicator--ea1b1ba6-23ee-4058-ac9f-f0dc816b31f8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25258b33-01fd-4350-82e6-421f6a4792cc", "sighting_of_ref": "indicator--51181cd1-12e1-4180-86b0-6c4aca64107e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f310a4d-c3d1-4375-a319-274ab01b4cc8", "sighting_of_ref": "indicator--c006b073-be39-43b3-8167-9b478512711b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--800a6cd0-c928-40b4-9870-22c0f51c7180", "sighting_of_ref": "indicator--0dfc4087-b888-4f73-95b1-06c0b0d4e4b6", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d84ed534-9457-45f0-902f-53bdd2110d23", "sighting_of_ref": "indicator--0dfc4087-b888-4f73-95b1-06c0b0d4e4b6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0b47454-2857-4acd-a2aa-e25116ae440b", "sighting_of_ref": "indicator--13c871dc-f99b-41a4-9bea-e37446690dd1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9d5aeb4-552c-47fd-aa6d-d4eb5202da21", "sighting_of_ref": "indicator--9503a515-a761-4eab-8b25-244abdeda539", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--403252bf-8ad6-4f33-91be-fd18a4ce93ec", "sighting_of_ref": "indicator--2b5883d7-e013-4376-97d7-c8a17a30f274", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--843fed9a-9422-437c-a2ed-9b0b48e1015c", "sighting_of_ref": "indicator--7fe1b807-9fcb-448d-bedd-67af0ac39feb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c800f946-48ec-47b2-abee-8240149da5a8", "sighting_of_ref": "indicator--85505829-fb92-4642-88b5-181f31ad0605", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--297d14b3-89fd-4d9b-ab67-e0259260c9bb", "sighting_of_ref": "indicator--0128fbdd-cf92-49f8-b21c-34290c56b279", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19c88271-29ac-4cdc-adc0-bf5445dce99c", "sighting_of_ref": "indicator--a68e9b3f-bd86-4ff3-b6cb-1c2ac858700a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5ecfa02-5211-477c-8deb-b51845529cba", "sighting_of_ref": "indicator--95cb7254-6a52-41bd-b376-ab40ed7aa6a6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d779ff8a-b950-4221-bee5-9eb0d7447424", "sighting_of_ref": "indicator--35eab078-2304-427a-a5d2-3c9e282c59bd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24ef0e7c-18af-4c92-9073-6884caf1bbcb", "sighting_of_ref": "indicator--08006fca-4396-401b-b040-26a0653324d7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2510f480-5801-4d73-9a72-3f45931dba06", "sighting_of_ref": "indicator--6d12af0f-2047-48d8-9bdc-23132f8fbcd6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12ce1927-9313-41db-9495-2b11467a23bb", "sighting_of_ref": "indicator--43d035af-6c35-4510-accb-d76f66e93568", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ec08f59-e8e7-4f6d-a7ad-8420d93e7356", "sighting_of_ref": "indicator--1fb12c2a-317e-4a79-b26b-eb7f50361e7c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3899ab3d-ebf7-40e7-80a7-7ab7b8b6c618", "sighting_of_ref": "indicator--5728eb55-2a8e-40ad-83cd-d139413a015a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dad81b77-2e85-4224-aec4-cf39ef4ad8c8", "sighting_of_ref": "indicator--03f64b76-bfe9-4d9b-8bd1-f9b9a3d06e54", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4b6a2a6-8dd5-41c8-aa54-3d0dd7801e78", "sighting_of_ref": "indicator--ebe7dd9f-8ded-4892-9b0f-f194f40a0a4c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41e6ddac-3d5c-4622-b3e4-95d6ae425a3e", "sighting_of_ref": "indicator--75a9cf7c-0d4e-4002-b14e-23f6b1b2f693", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a53f9066-c1bb-43b9-b97d-959015780785", "sighting_of_ref": "indicator--7bbca840-4ee4-48e8-9211-04bcec7b34a6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af800898-0f5d-43e2-9dd3-889be1fb77fb", "sighting_of_ref": "indicator--063f6e07-fd1f-46c3-afcd-b7a2b99ec0f3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d698209a-6dd8-44e9-a4f7-abcde55c3ca5", "sighting_of_ref": "indicator--9fe2f0fa-751b-4f64-b4e9-7cf4787cf119", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56da0800-72c3-49c9-af86-32db99a7211e", "sighting_of_ref": "indicator--5a2994a0-063c-4a24-a7a3-f866bff2b074", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9f516ba-6279-4a51-9061-875005d3498d", "sighting_of_ref": "indicator--0d7ac342-750b-4f5b-8aeb-2abf597f2946", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00829bb9-41b3-4d80-93f4-98c4295d60b8", "sighting_of_ref": "indicator--ade45333-cc5f-43d7-b99d-464e2ffdbe3f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7abb86d1-6aab-462d-bd72-d43ce95ea2d6", "sighting_of_ref": "indicator--ecc9ff4f-13bd-4254-8e69-ce8f7f4ce82d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93b51de5-49e3-4fb7-82df-2845fed53b3e", "sighting_of_ref": "indicator--7bbb3fe9-b3b0-4b90-8702-06e26ba58092", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72c5bf61-b058-42df-a539-47dfe534062f", "sighting_of_ref": "indicator--7a9b8610-8909-4796-8598-f391344f1a1d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a86f3f7-dbb2-45ae-8998-d7e2d6904bd2", "sighting_of_ref": "indicator--59ed33af-ab67-41bf-a548-19cf6cc12c4d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e63d2b02-ffd4-4e07-a72d-29e7939a84b6", "sighting_of_ref": "indicator--6d5ff251-b479-4a36-84b3-b9e9eac4d665", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7019f6e7-6036-4d54-8aff-385ff5ee312a", "sighting_of_ref": "indicator--3c3f2944-0540-4a04-afab-a7849303ab0e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4805f10-8a33-426f-b375-a9378df4e4d3", "sighting_of_ref": "indicator--3daf3743-162d-466b-a866-54af6fa45337", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--391ade95-e306-4c0d-97c2-ba5c91fa0b08", "sighting_of_ref": "indicator--bfbb5346-0e8e-4175-9f16-507c32a23f63", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f322ca9-d692-42c0-b667-94b737054051", "sighting_of_ref": "indicator--4dd1c2a9-dae6-4f56-81ba-e2a8bc422f90", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5c5cdb3-40a4-4fc3-88fb-3e6787ce16e7", "sighting_of_ref": "indicator--8b25b7d5-aa5a-4520-842c-851933bc8195", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ec20660-92ae-4dc0-b83b-6d241a76ffd4", "sighting_of_ref": "indicator--bc3fcff2-acbe-42e3-90e1-24e142cf9ff9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfed75fe-517c-4960-bb4d-79d70d043c17", "sighting_of_ref": "indicator--95d31829-ff26-434e-8144-3b42d43d86b8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--999698cc-8651-46b2-9612-16a31e0ef9fa", "sighting_of_ref": "indicator--38533b6f-7ac6-4028-b806-ff6e94961bc8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93d1fb66-d4ba-492b-ad84-88e8d2fd1d2c", "sighting_of_ref": "indicator--ac0d237d-8ca6-44f9-b25c-baacb7393eb7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0a4706d-3775-4ed4-ad6c-56f69ac3af70", "sighting_of_ref": "indicator--29087e27-8f01-43f8-b5fe-96f09eac57a9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3984230-6278-45ee-8ce4-4ed15c00590b", "sighting_of_ref": "indicator--d931283f-1ca7-4dee-b769-cd872e56601f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e3f6346-e82f-4364-86aa-7d96da7f911d", "sighting_of_ref": "indicator--8d5b64a6-c2e8-4e8d-83e9-a64fec68e7ad", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0ca1ee6-4d07-4147-93c3-3410f409b1b1", "sighting_of_ref": "indicator--df47e364-c0f0-45fe-8cab-66510416fc8f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--869d4b97-3460-4ba8-be10-569fa6d45c30", "sighting_of_ref": "indicator--29b9bca9-e3a1-4a7c-b7a5-4d8426eeca1c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1caa9dff-ffa0-4eb2-97f2-14decf8ce13c", "sighting_of_ref": "indicator--8ef8826b-0660-459e-8a86-1188cd3ee4ab", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--881c9c38-d1ff-4ee4-8fdb-a2b1c2e27f10", "sighting_of_ref": "indicator--c514c454-07bf-45ee-8279-e6673ad85e52", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dbc855d-549d-4a8b-94c7-06611ed5d58a", "sighting_of_ref": "indicator--e61e4de0-6145-481f-8f2c-2a255be9e859", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c70a3196-8136-41ea-8e4d-51d770ad002c", "sighting_of_ref": "indicator--0b5cfee9-5405-401f-a532-e9556b489870", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2deea3f7-6e92-4b21-bfd9-bb0314460725", "sighting_of_ref": "indicator--bc58fd9f-f1f7-472a-a63f-261fec2698ab", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--945f5c20-e80a-4f99-9a6a-928004491ff6", "sighting_of_ref": "indicator--140ca0b6-a9d5-4e47-9ee6-e3cb03545b11", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--481c54a0-7680-470e-ae86-67ba5524e042", "sighting_of_ref": "indicator--d80804c8-4a0b-4ca6-8198-e847c98c169c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16d7572d-bb09-4fe9-9ea6-6fcc27e9f50d", "sighting_of_ref": "indicator--e1af2137-3166-4519-bdf5-382c0a67231f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dee58258-822e-43ee-899d-d879365a37fe", "sighting_of_ref": "indicator--1e0a10f2-21bf-43d9-ad6d-da52c4d2392c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3afa492-431a-460a-b34b-be4eafba4a89", "sighting_of_ref": "indicator--e853a93a-7112-4e6d-aa91-e995e97f75ac", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f802c041-9adc-4f63-92bf-a89dabc8f568", "sighting_of_ref": "indicator--a004f31d-2188-4d4c-9a07-4c2d6f90f970", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d66ef46-fdba-41c2-94c8-d993ade7318d", "sighting_of_ref": "indicator--2ff7695a-1ade-47b2-a9da-86ce02851747", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fed3d87a-f561-404e-8f09-0c1ce32ddfa4", "sighting_of_ref": "indicator--2aa8bdba-162c-43c1-8c65-3f5f2ac5b7ec", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcd4b6e8-3d21-47cc-9856-8133b8e1467b", "sighting_of_ref": "indicator--1f344aa6-77c2-4753-8bcf-b4db10bb59b6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd702f45-db4d-437a-8235-446d8dee8bd8", "sighting_of_ref": "indicator--3d8a5130-ef33-4466-9f44-616758d992ee", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9e6f470-9b3e-4a7a-8d4e-78255c89143a", "sighting_of_ref": "indicator--b872737a-888d-4174-a479-09bb57743f2c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfda8b66-7bba-477d-b13f-5aee5a70bdf0", "sighting_of_ref": "indicator--90bcabbe-86a8-462a-ac31-b2c382756de1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed5745cf-3912-4306-9ed5-62437556468f", "sighting_of_ref": "indicator--2756b506-ea25-46c2-9c08-8bbd060151eb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6bfb4f4-6855-47d3-a3f3-01a4e7c268c1", "sighting_of_ref": "indicator--78eacc58-72b3-404f-95cf-e7f3cf745a2a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4a8b231-faf3-4d35-87d0-f80ef3175680", "sighting_of_ref": "indicator--e59f3a7f-ef2d-4202-a8cb-be67b81f5eeb", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e96810bb-5a3c-42cb-be67-afda5b764131", "sighting_of_ref": "indicator--443adb44-4a96-4e09-a299-5297fff53de9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce928058-9c21-425e-8b6e-78dca05a1e50", "sighting_of_ref": "indicator--851c8872-460e-44a8-92b1-dda94f394344", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e897e63-2c07-4e76-ad6d-be7feae3eaf3", "sighting_of_ref": "indicator--640715c6-4b7d-4491-8bcd-77272eb8ceed", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--160b4a03-c7f6-45d1-b115-68dfb2c95a34", "sighting_of_ref": "indicator--c576fe2b-1c55-41f3-8479-d53c03d95ee2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7665aac6-a5e1-4b0e-8b7c-4da5e542634f", "sighting_of_ref": "indicator--1736f095-73a8-4194-872a-c47e98d4c1e4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c7be051-b40c-458d-beb0-37606f4295a1", "sighting_of_ref": "indicator--c477f672-fa03-4e97-b386-029f3bd802dc", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00ef9f52-420a-42c6-9f4d-d67825a71a48", "sighting_of_ref": "indicator--8c9d116d-22e6-49ae-97e7-e06c7f070070", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f77447e-46e7-4210-96e0-fe399a68881c", "sighting_of_ref": "indicator--56247829-69de-4242-b6be-f40cf8ba0277", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9424dde-bbc4-494c-9d37-ed74320c9049", "sighting_of_ref": "indicator--a637c5a1-a011-49f2-ba5d-f2a031646d10", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--465e56c4-4dd0-49e4-baf5-ddd366021203", "sighting_of_ref": "indicator--03a03a9a-7f7f-4539-8c7d-3f8e436d9833", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--450bec04-aaf4-4dd0-b9b5-317f99193cbd", "sighting_of_ref": "indicator--c6adebde-c829-4989-9823-020a7d81a454", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ddd6b42-6f55-40b8-b225-a9c81982b295", "sighting_of_ref": "indicator--7767c77b-86a2-467e-baba-b28d089e2730", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2962c5ea-46b8-4f19-a2da-8786c4e11c98", "sighting_of_ref": "indicator--b31f93ff-eb5d-453f-8022-4f808484566e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31d2c990-9a52-49ca-8922-1a3bf40d2338", "sighting_of_ref": "indicator--5ca029e4-c27e-4444-8452-e57ad315a968", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c08c81e-ea8e-464f-b017-e5123f312125", "sighting_of_ref": "indicator--d4212b88-054e-41e9-8d66-38b2e016b1f7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2835022f-b05d-48cf-8494-4c92c1d27f19", "sighting_of_ref": "indicator--3b749835-6d4e-4f16-a250-a93aae2676db", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c44be48-7408-4f2b-8041-c1982f0d224b", "sighting_of_ref": "indicator--ba17382c-d689-4c3c-a2ae-323a297efcc1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74cc5629-a455-4f42-b0de-eb3478d57eb8", "sighting_of_ref": "indicator--e968746c-3f38-41a8-a758-e00fc4279fc3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddb91975-41f2-4889-8ea9-e66ac17e16f7", "sighting_of_ref": "indicator--815cd59e-fd8b-4bcf-a2c0-617670b1bc3d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecdd5761-6615-49d7-bccd-76e1606fc381", "sighting_of_ref": "indicator--059716d9-e150-4007-9bb6-8470ef2873d8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--042519b4-0e1f-4ecb-9132-246543430f47", "sighting_of_ref": "indicator--256d147f-c607-42fb-8013-06e5d7ddbc7a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4858e2f6-84b1-487d-bbb9-08e7c702c4ec", "sighting_of_ref": "indicator--86d7e7c7-1f99-49d2-a64e-2e7984957713", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89ce4cf6-ebf2-477e-9385-21b9cc3fd5ce", "sighting_of_ref": "indicator--3b055427-7a70-4381-a464-dfdb37fd0760", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa2522f5-6150-4961-9844-4dbdb0e95d52", "sighting_of_ref": "indicator--b7bb1d2f-3580-4b63-9b54-99263ec6bf6e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cae96c0f-3a34-4eb2-b2f4-367e41349609", "sighting_of_ref": "indicator--50863752-1d5a-4e23-a8c3-fd1743a109e5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60bef08b-7a36-4547-bc23-f504fd0f22f2", "sighting_of_ref": "indicator--f0e17b27-d2a7-4561-a638-583bf302a42a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b9f4c25-07b8-4cc6-b69e-5c4408b8fbae", "sighting_of_ref": "indicator--90051ad7-569d-4667-936e-787e18b12e8a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6ce464f-53e8-4847-ad79-2353fe2c8f93", "sighting_of_ref": "indicator--1fbf0299-bece-4eec-b8a3-454db3f280fe", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d49d2007-860f-4392-b832-9d40718f5863", "sighting_of_ref": "indicator--3466a8e0-4dab-4965-b6cf-1a8d46ded6f5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca9c81f9-2b2f-41ab-b459-2d3da16ce829", "sighting_of_ref": "indicator--038066cb-56ee-4db5-bad8-e6863a6890a6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10c4c6b5-5ef0-4830-ac78-457a1aa83f2e", "sighting_of_ref": "indicator--df50c2a0-a884-4eca-9e92-0d34dea6a33d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21118272-9abb-4999-83f5-4e9da2302910", "sighting_of_ref": "indicator--4e9cd39b-ee65-4211-9b1c-93e33555579a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a42e1d1-ba10-4c78-860c-3a81c8e12449", "sighting_of_ref": "indicator--e21b8901-05c2-45fe-8a59-245585893cdb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e294d2d5-4f46-42d8-b3b1-92e782faa91a", "sighting_of_ref": "indicator--8dc5a97a-1b06-4cf3-9922-39208a1b72d1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1622c86-9a98-4f3f-a73c-c24ba8d34c57", "sighting_of_ref": "indicator--5bb44a90-8893-473e-ba2c-5632fcf68e5a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b053703-1836-431f-b27f-562f9e7b4c3b", "sighting_of_ref": "indicator--9e93efaa-a43b-4c49-9291-02f765b1e332", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc1651b2-7e96-4907-88f8-464b3f0ce7b0", "sighting_of_ref": "indicator--7c8c67bc-5e47-4fb0-8e70-062a39cb3cb7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ab144dc-4918-4ac9-88c7-18ca8a1c525f", "sighting_of_ref": "indicator--0c902b39-8249-4b09-9e84-0495d1106f98", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebe5e9e4-95fe-4170-b693-c4a6770cca56", "sighting_of_ref": "indicator--89e9bd2b-0ce7-4d04-bb43-0f22ddef7580", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0fdb6e0-d7f4-429a-9622-97d6bcf66757", "sighting_of_ref": "indicator--fa48a49a-bd4a-4d0d-8d9f-65e152bc9937", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--733cf19e-6dac-4f72-b746-1510d7df839a", "sighting_of_ref": "indicator--2544fcce-4178-4b22-b7cf-89894c75b4b0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b4c9e20-a52b-4b41-be2a-28b52d69d8c0", "sighting_of_ref": "indicator--f17b25e1-1be3-4b26-b373-bf365895085d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cd843e2-da56-4735-ab25-7525bc47736d", "sighting_of_ref": "indicator--4cab13f5-c112-4cf3-a013-0a9eaf66451b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24ddd6b1-45ef-43ed-976a-ce4e98f99623", "sighting_of_ref": "indicator--63b25d77-23bd-43da-879e-2c3a429605b6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97e1e3aa-eea8-4892-8b2e-05d084bd82e6", "sighting_of_ref": "indicator--b3138fcc-a3f5-45ec-8aff-84ea5dcd9605", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76065c2e-8cab-4575-8ae8-c6364960d1d3", "sighting_of_ref": "indicator--55a5446e-17ad-4bff-ba9a-642d029ad02b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebb1d511-e441-4287-bc0f-18275e4dd41d", "sighting_of_ref": "indicator--a89e3f6e-83e0-4823-a1e7-a39ca8cf9463", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c86f1f53-ed40-40d6-82b8-2e412e7adc22", "sighting_of_ref": "indicator--cfe65a35-3248-4499-a19c-bf506d6aff17", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42bd6199-1244-422c-8e08-873669813f62", "sighting_of_ref": "indicator--d626dd9a-6ff3-4dc7-b96b-01164939a35e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34281baf-1546-4adc-85ba-eeca2568530d", "sighting_of_ref": "indicator--7316b373-0d79-4810-82a1-4b6d2ae082d2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15d42ca5-a800-4156-886d-2e0cd765053e", "sighting_of_ref": "indicator--95610f9c-b001-40ac-9975-a98b532cdbe5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c559561-c290-4c15-b735-501fd5edd0da", "sighting_of_ref": "indicator--30eecefb-52df-4352-a8ea-bd0cbbaa7cbc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe96ddce-261a-4783-8bb3-e80c50aed435", "sighting_of_ref": "indicator--ab836128-dd61-400c-a4d3-bde30d64e82b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02d952d7-f83a-422d-bed6-5362e907ead6", "sighting_of_ref": "indicator--eb7b0919-271e-4683-81e6-16e09d3a5450", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c19663a3-dedc-411c-9773-a2271a2df4d7", "sighting_of_ref": "indicator--33609177-80b3-49bb-aa9b-14105db99f5a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73ee32bc-73c9-4855-9dcc-cc8fc46d27b7", "sighting_of_ref": "indicator--4e8641eb-4123-472c-8e07-232f51078c60", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7589cd1-ee28-48b2-920a-fcf3f8d080df", "sighting_of_ref": "indicator--e1ff2be0-783f-416f-9c2e-dba941ae46a5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66175ca1-380a-437a-b947-a479d0f73d7a", "sighting_of_ref": "indicator--a9b01bb2-c288-4bd3-a481-27c7adb90838", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e98ca53-55b2-4583-a5ed-25e1dc4a453c", "sighting_of_ref": "indicator--debbffe1-9418-41c6-8991-9bf2f14bb51a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3567666a-7ec0-4391-8da7-1e4670e51ed1", "sighting_of_ref": "indicator--a2dbbcdc-a22f-49d8-bc44-5829816415df", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eecc2ef-2240-466d-a14a-0603792300fb", "sighting_of_ref": "indicator--a7c09aba-7327-4996-98db-5cd40cc467c4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78a00b3f-f7c1-4e6c-a0e9-afae3c561c69", "sighting_of_ref": "indicator--59a31190-80fb-4a7b-a4c1-4ac51d184ee2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8efa22be-7302-4612-996a-400e49c5c06a", "sighting_of_ref": "indicator--f25548b8-f141-4521-b6a4-4b1a831e5bc3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25fdd625-f584-49c2-a44b-36c0acd6ad89", "sighting_of_ref": "indicator--964dd139-f395-443f-881b-fb832c3e0a96", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21576441-dca9-427e-8b52-c038f2335880", "sighting_of_ref": "indicator--d002231d-09e2-4d06-93ef-f2f5c3b6e30c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1de40290-6453-4a3e-a049-eb4c940e1937", "sighting_of_ref": "indicator--ad0da7a8-7c79-4e5a-b07c-e8e783132d49", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--935133dd-78b9-4a25-b797-9f6a8516f988", "sighting_of_ref": "indicator--736d9a48-9e3e-4db4-91db-439441938378", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccb8dd92-31f5-4f33-b5db-19553533ab29", "sighting_of_ref": "indicator--fd26839f-0ff8-476d-905e-d945fd604e90", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d14726d2-461c-4afd-8f42-39808854e365", "sighting_of_ref": "indicator--c0d99278-e421-4fd7-b158-f18597bae620", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--809e1611-beec-4693-8211-4aefba3dd7f7", "sighting_of_ref": "indicator--d9c31867-d9a0-4e24-85b8-fc3944c7be47", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--137e2850-4859-4711-8586-ceca7a93f63f", "sighting_of_ref": "indicator--5b1805d5-45d4-4abd-ace0-c48198956750", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33851f1c-9ff1-450d-9f1e-3fdccb833a30", "sighting_of_ref": "indicator--77e9d0aa-7ed6-4303-9498-96afafdaa947", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d41d34f2-6bca-4e6a-8610-3f4c574cfc8e", "sighting_of_ref": "indicator--3f35ab2e-a6ea-4104-9509-081d935c1c83", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--565117b1-685d-4dcb-99d1-8a10b9ddd71b", "sighting_of_ref": "indicator--2c5b3ac2-ab68-4ad4-bd7c-28128d439cca", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c9a62cc-bfb9-4567-aa7b-a9be6ef59fcb", "sighting_of_ref": "indicator--5a206d01-670b-44c9-b60e-2820017ba396", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7039bcca-9292-4c0c-a486-43eb63a09a55", "sighting_of_ref": "indicator--7eae3819-a532-4c15-8fbf-69b0682756f7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca3188b8-5cd5-48ce-9928-19687007c796", "sighting_of_ref": "indicator--f23781a9-bc4d-4143-8d7c-a4d9cdbcb782", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--445994fd-3727-44e9-b4f7-afed399d47d5", "sighting_of_ref": "indicator--1dcaa5d1-6f4b-4024-aaae-5169e04ab4d9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a014280-5384-40da-8fb7-59340438996d", "sighting_of_ref": "indicator--e3d59f6c-47e0-407e-bcc5-6f543363f616", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42c5ba8a-3089-4f54-862e-41cc73bf559b", "sighting_of_ref": "indicator--3156fa4b-da8f-4ec8-ae41-5b36d1ba5c1d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b91e88c4-6916-4627-8ab8-a090a9362c77", "sighting_of_ref": "indicator--d391dd12-7661-402b-afde-8ec9764a5534", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2af4456d-e095-4d97-ae78-7d8a660254e6", "sighting_of_ref": "indicator--30030956-38c0-44ae-b98a-e783945174de", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d072c65c-a862-474a-8de2-c264fb3d4cb1", "sighting_of_ref": "indicator--3d8f73de-0b68-422f-9060-05815cc2453c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aae01fcc-ce93-41a9-947d-f37c97fc8860", "sighting_of_ref": "indicator--1b4d72b3-4be2-4c30-8df9-d610e7a1ce63", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ea3a2b7-a519-4340-8da9-8f1035b0209a", "sighting_of_ref": "indicator--6d85cf19-8156-48aa-a7f1-fde6ef74aaaf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1baa602-e4af-4c12-b460-7231e75034e9", "sighting_of_ref": "indicator--47c83cdc-81fd-46bc-bfce-b0d38bf01c2d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c7326a0-fdff-43f7-9b41-d0ed1ed05ded", "sighting_of_ref": "indicator--ef6b58a4-5d36-4560-bb78-d59688b7625b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4aa376a-ff23-4d4f-bcf2-8d7c0b09ba3a", "sighting_of_ref": "indicator--78d654fe-6c74-4057-9ab1-0bca511d5602", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--416d7bce-cc5a-490d-9465-a955be02a599", "sighting_of_ref": "indicator--8a8c26a0-e744-4303-978b-7846d38b465e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a62587f-ff70-4790-afb4-ef80fc62cda9", "sighting_of_ref": "indicator--872b3414-1fbd-4309-ab7f-f9a46c4cbbbc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--020d9665-96ee-457b-abcd-9d006047ca80", "sighting_of_ref": "indicator--e9cfaa3f-52b9-4eed-92fe-d6290a9c0f52", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f62babca-eef4-4565-b6e2-685ee5c5fe78", "sighting_of_ref": "indicator--b974bf5d-f109-4462-8e50-36fadba7143f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--081c81fd-9b2c-400c-84d4-3153d90284c0", "sighting_of_ref": "indicator--ef53eb4b-ccbd-41bb-8f12-0258fa549e70", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90e920e7-4636-4d66-82e2-04012afed66f", "sighting_of_ref": "indicator--42ab35a6-4541-4d95-9995-0f00eedf20c1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f010a72c-8af1-44a3-8f2f-681790b85d9b", "sighting_of_ref": "indicator--04bd1d25-0614-4733-ae4f-0b441a5534a1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12e0d782-0dcb-4c72-ad9d-d4138e8c160a", "sighting_of_ref": "indicator--0970599a-7be5-419f-a80f-03706513b96b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5ac0b01-fc84-4502-988c-cdd7efbdcb0b", "sighting_of_ref": "indicator--f3af4e6a-b31b-4a26-9d38-c75c5e20b703", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fb91b0e-6f97-401a-ace0-fa85b5b73110", "sighting_of_ref": "indicator--b7319262-580d-4f9e-93c7-924b8706ecda", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b116d8f6-87fa-4031-9eab-eedacf78df8a", "sighting_of_ref": "indicator--8598a9ff-cd20-4920-9eb8-6bfcc4b37147", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56f8aa01-0e1c-4fe7-93e3-f750172e9725", "sighting_of_ref": "indicator--ea11d978-bcad-4c49-ba1f-abbfe6a65c27", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b08174c-a95b-4128-8f8b-06814e94841e", "sighting_of_ref": "indicator--c5eb5a9f-09de-47d2-b337-886e788b8ebf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1720f0ba-694c-47f3-acd3-b953e34537bd", "sighting_of_ref": "indicator--5feba939-0043-4070-a1cb-d1d02ee812a1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89b1c394-1180-4fcc-9ced-94d0c4aecbda", "sighting_of_ref": "indicator--32dba316-845b-4d47-ae7f-802495fe28fc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f2133a9-2771-40b2-8b3a-075031b57631", "sighting_of_ref": "indicator--048eff08-fb3f-4910-aa51-922ad580e28e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70620f1a-9a74-49ee-b78b-723708fd6bb0", "sighting_of_ref": "indicator--0dc1975f-64a3-4ae3-bc1c-2e23c284c80e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb11eb64-5dbd-4e15-be65-8faa110e0821", "sighting_of_ref": "indicator--9a81c226-d8ea-4a02-ae68-3035ed050aad", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fee248b-373c-4d20-8e00-52f564d4eace", "sighting_of_ref": "indicator--88860b11-35d4-47cb-b21e-46176d1d7e7e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85281022-b113-410d-a1b9-8cb8039ed247", "sighting_of_ref": "indicator--6f6f136f-789a-47bb-ada5-92c8a7ac49a9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--152d7551-bb23-4d96-b19c-f0777f6c21cf", "sighting_of_ref": "indicator--67d85f0e-5329-487f-b502-f416da3c110d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f921008-d49e-4629-a651-d60adfbfd8b4", "sighting_of_ref": "indicator--01059411-f5b6-41ab-acbb-52176c0f3305", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da1d97b1-dcdb-4248-9188-8c57993adab0", "sighting_of_ref": "indicator--61644467-9bc0-44a2-92ee-52dfb40d73d2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cb81641-b2fd-42a1-afe4-43f60f4e0765", "sighting_of_ref": "indicator--2b57ddfc-6b39-4943-a23e-8b003ec6ffc2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf6095c7-f6ef-4fc7-8649-9fbf31cce801", "sighting_of_ref": "indicator--555e40a0-3484-453c-b083-9b21fdf21f95", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--188d47f7-5839-455f-8284-f946886d495e", "sighting_of_ref": "indicator--d8e48620-3ecc-4e0c-8e0d-1f2dea878bcf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1786f0ad-ba15-4996-940f-870a9bb7313d", "sighting_of_ref": "indicator--423a3e6b-ad8d-40f3-be58-45f29afc4684", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ee3c1f8-2069-42a6-8aa2-620ea3080e76", "sighting_of_ref": "indicator--b6863132-fac6-445b-8e43-f63dc2941bb1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c1fea10-b013-4b4c-8772-c7a4941d06ce", "sighting_of_ref": "indicator--1bd8b0ad-db39-4d12-8ff7-a9da991145e6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19876bba-7763-4d7e-8849-5bb955520f8e", "sighting_of_ref": "indicator--38d18712-fafb-4249-b5db-83f938ffe9f4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--171f36ec-1c0e-4576-8755-469053aa63bc", "sighting_of_ref": "indicator--ee2b2d8a-94fc-411d-95ef-20cdf75285f1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09bf3a72-4b20-46f8-81f8-a2331c4fdbc8", "sighting_of_ref": "indicator--f61f5cce-2c17-4a68-bbd9-661a5ef5c7ef", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4eb7009-00d7-4796-a83f-15fc68289df1", "sighting_of_ref": "indicator--fc2688e8-81f5-4acb-9272-6f95f6b48951", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f63e407-6809-40a8-ab0d-ceb29d9946b7", "sighting_of_ref": "indicator--d3005587-7bdd-4353-980a-c48b05959b5f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92b757b6-e8e1-4659-9099-b947d5f04849", "sighting_of_ref": "indicator--2882505e-dc03-44f6-9bc5-5aa163b245e8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d5fda0d-93b4-4a24-911e-27fe57ff57e2", "sighting_of_ref": "indicator--f9d7fd1b-de21-4963-ab14-2e050fd58d20", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--684652ee-9e63-4a07-9fda-2e813afeb7fa", "sighting_of_ref": "indicator--42825304-3737-41df-8c6b-34a15e6a091c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--819e6432-b190-4217-8e3a-74e50937a952", "sighting_of_ref": "indicator--adacf4ad-0a71-4ecd-afdf-e16dcc0335ca", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1574088-995a-452e-917a-ee3032063ac4", "sighting_of_ref": "indicator--99e3047e-3b4a-44b8-8bf9-363a3eeb176d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5195c96f-9277-4d4f-b4fe-4f3b92a44417", "sighting_of_ref": "indicator--89c02f4d-2c95-4f8c-8883-0faffa5046ad", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3effdd4-e2ee-4eaf-b5aa-6f2560251108", "sighting_of_ref": "indicator--4d6a1e58-46c2-4b2d-8b27-080a9006a2b3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff7ae14b-e4e2-4fd5-a612-c6bbe7856391", "sighting_of_ref": "indicator--dc7f0898-8258-421c-a422-5b393ffcb9c0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--947df6aa-49b2-400b-afb8-c9504ba7b9f2", "sighting_of_ref": "indicator--c398b208-5119-4c4d-afa6-51b4cf4b60a7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8372aac-7f9c-498c-8fcf-57af54aebef5", "sighting_of_ref": "indicator--3a5f8c64-f2bf-49cd-82a8-5a5a02ab6c35", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d56e0a0-5c69-4b7e-9015-43286c8db16a", "sighting_of_ref": "indicator--f757e00b-b48f-4486-a04e-92b856d1cc85", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4b16b35-d7e2-4262-9642-3324cc49fc27", "sighting_of_ref": "indicator--5700f1ef-5250-4fe6-8469-6c237b87daa9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7050b7af-a7cb-4a2b-bf07-23f9e724beee", "sighting_of_ref": "indicator--e4cf6928-18a1-4c2a-97b7-e9fb6875043e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc771b8c-0f6b-47ab-bbaa-e3438091cdd0", "sighting_of_ref": "indicator--e4c577ff-2ad4-4dd7-8229-b976f618d82b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a34d150-731e-4257-97f5-845d34ed0dc7", "sighting_of_ref": "indicator--f567be78-5de5-4441-aefb-48b089baf82c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82e0874d-fadf-4be0-872b-e24407c77788", "sighting_of_ref": "indicator--b54618b2-150b-47eb-b4ea-6f4dbd5d50b0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c0d7252-92dc-4ff9-be73-6015dcf4b3f7", "sighting_of_ref": "indicator--b2e429c8-d108-4e22-b65a-16d451b563d6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2552922b-bd12-4aa2-a8b8-3a46584b3d8d", "sighting_of_ref": "indicator--2f21e270-8041-4081-84d1-372b56a87cd6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b41d1a02-5d5c-4b5e-a4e1-e4d5bb88ea1c", "sighting_of_ref": "indicator--032360a5-83d7-4827-9583-a07bb61b9a9d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b52f417-d881-4428-ac32-d36002855539", "sighting_of_ref": "indicator--299b535a-406f-49dc-bfd8-f1e60f75c5e5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ece99658-4a3a-43f5-8398-6373282d3242", "sighting_of_ref": "indicator--216946f1-039e-4bf2-8004-2e96bb1a4f2f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a483a34b-1ae4-465c-9b47-3c9895064773", "sighting_of_ref": "indicator--e2b7a153-e7ab-4765-a52c-e4b4e3af46ff", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a4d4ae5-5a63-4030-92ab-bcd4b368f47c", "sighting_of_ref": "indicator--63a2d35c-2c6a-4ace-a943-2c949b4e7d59", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3850ac7-c02b-493c-b072-ae96e53897ef", "sighting_of_ref": "indicator--0e564fdc-9798-45db-92e4-a645f25e505b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3b38f95-aae6-4c46-9e5a-5526f0aa854c", "sighting_of_ref": "indicator--ecf0590a-2d04-44fd-a19c-4fb998f2bc33", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e77a4e37-5042-4be2-8ad7-2f0f5707f13d", "sighting_of_ref": "indicator--d516e841-1f5c-4018-996c-530496a3a388", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23659b07-1e20-4d65-b87d-276a98d65e84", "sighting_of_ref": "indicator--ea3f064b-0258-4894-b8b9-cdcd7b06fd3b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b3876ab-5168-45b9-801a-48acdfd5381a", "sighting_of_ref": "indicator--0b4ef0ac-c63d-4255-bad8-1812c7860053", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ace009d4-e023-4402-ab61-096c0ee14c86", "sighting_of_ref": "indicator--cdd71318-9cbd-4c96-9d9b-109349c3a350", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d771738-74ab-4720-9616-e7b1ce9f8922", "sighting_of_ref": "indicator--9f1846ac-fd00-4e98-a1f4-096f53b0f445", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89a0f68d-a60a-4418-8b3a-8083c82ac8b4", "sighting_of_ref": "indicator--a7134d95-9eef-4b77-a90b-c7b5fda0d082", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91482211-ed00-405b-9901-f04287b0ce8a", "sighting_of_ref": "indicator--78348829-2324-4a97-bc99-dd576de96b44", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20786250-28ef-4743-89a5-a52c268b8d5a", "sighting_of_ref": "indicator--e2bc1daa-5e39-4518-8ce0-0ef0b8be16c7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb97375e-6e90-473b-b1af-a62c9f84f3c2", "sighting_of_ref": "indicator--7ac87e90-2732-4e8d-8671-2c4d19a63b67", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--895562d7-6918-4ab7-9086-003031bf7926", "sighting_of_ref": "indicator--8d5e9c88-642c-4a77-9d6f-4460871790a1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bdaddce-9ea3-4958-8cc4-a6893c9ae7e5", "sighting_of_ref": "indicator--3207a852-3ac6-421d-8ee1-aa3e814d6a1b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02b44712-304d-48b8-8618-7e0a92a862f4", "sighting_of_ref": "indicator--90bd61a9-78b3-42c9-a510-f88ee685d2c9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f88763d-f1fb-48ba-a05d-4ab189935d71", "sighting_of_ref": "indicator--13dae6e3-426c-4b10-a72b-768b187024e5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0712d23-3a95-48ac-aaf4-42174ca5c53b", "sighting_of_ref": "indicator--74d3083f-ca9c-434f-b1a4-e10c800ea6cb", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77d5bf54-d6fd-4cc4-a737-adf4d1053134", "sighting_of_ref": "indicator--d8183d41-eb9b-415f-bcb6-21ceebd919bf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e195dbe9-8aca-41ae-b976-901f83b0b6f3", "sighting_of_ref": "indicator--a865f346-7402-49c4-b725-c5374075a68c", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34ae5c47-3748-41ef-acba-b2c134bd341f", "sighting_of_ref": "indicator--2c34e77c-98c2-4009-905f-dea7a1f6db42", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff10494b-b61e-4ffd-9125-7d8f4804e127", "sighting_of_ref": "indicator--0cfa75e4-b17e-4c44-815b-cc750f763a59", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--436defc6-564e-46bf-8a9a-22a1c5996b13", "sighting_of_ref": "indicator--71881fdb-f949-47c4-b752-d3a512880e22", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b4e00ba-2422-4d83-a1bd-65fbd0c513a2", "sighting_of_ref": "indicator--21272280-9791-48be-98fb-0d9ff9180c0c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cca92208-7f5d-4b56-922b-98c53828da34", "sighting_of_ref": "indicator--08ac4dda-5cc0-452c-bff5-66f321f45559", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42913444-f95a-485d-a473-84aaff1a443c", "sighting_of_ref": "indicator--08ac4dda-5cc0-452c-bff5-66f321f45559", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12eb1b54-6198-47c5-bb31-1747b1d76be7", "sighting_of_ref": "indicator--8d9be96d-f795-45da-a385-0e1f7e5e16d1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c42ee963-9ec7-41b4-a715-057ae3f2ec10", "sighting_of_ref": "indicator--669d15ff-f7c7-403f-9430-34a65a3ca286", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7eb9270-6d8b-4750-9d82-5c40bbae6eaa", "sighting_of_ref": "indicator--f3cd4ac3-5678-46f6-8e37-97ca91bd5e96", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c4affcf-d329-4d67-9a2d-29c579a5d2dc", "sighting_of_ref": "indicator--3074d8d6-7713-474a-bc85-02e0e4d05799", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20d5d6b4-439c-4e2f-8679-a0f5c841a561", "sighting_of_ref": "indicator--810337ea-8dd4-43a8-aeb1-85115912c861", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--857a0284-5ea8-4173-b24d-0a6658943e52", "sighting_of_ref": "indicator--f16414e6-6ef8-4196-9918-4ae02c210a9c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88f37a44-7f60-4066-9a3b-83e866024115", "sighting_of_ref": "indicator--b0305eea-e644-4445-9872-17794c74b8c1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e83a9e40-0add-478a-a72c-f8b004644593", "sighting_of_ref": "indicator--cb516c9a-ab55-4d36-b1fe-8a945a422942", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ad74850-b218-43c0-9831-67b04bc88eec", "sighting_of_ref": "indicator--dfec71c8-ff49-4000-a026-26b92c23aca5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61b43102-3c20-476a-944a-efd8447745a0", "sighting_of_ref": "indicator--8ac70d71-6c1d-4ae2-8b63-bc4e5c88bb7e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--156ee7d7-84b8-47a0-86be-82151cf0249a", "sighting_of_ref": "indicator--68acd10e-b3c9-4613-b73c-01dad5632d57", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79c47c07-bd51-4baf-8706-da8c18730338", "sighting_of_ref": "indicator--10822254-88d9-48a1-bc6f-d297e612fe05", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb039a5b-be38-479d-bb96-a50343c3015a", "sighting_of_ref": "indicator--2795c4dd-ee0b-4803-80aa-14af0ca736ea", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aed86e3e-cbb6-42e7-a737-32aff9d03c34", "sighting_of_ref": "indicator--2c89fcb0-0e09-4769-ae7c-a8ad663a0ae4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61ddb8dd-5865-4b83-91fe-ed4e4a2e7202", "sighting_of_ref": "indicator--1f280244-50e9-4045-9838-b23e8d75ea53", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15a50b70-52be-471f-a637-402d887768e6", "sighting_of_ref": "indicator--1a8ca0a3-528b-4f35-8497-36d64dd400ce", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ab4fd87-52d7-42e2-bb54-893201a10dd6", "sighting_of_ref": "indicator--fc6f7d26-ad88-45f5-80dc-3fc3ea20b80b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4d64358-3317-4152-834a-dbf82bfb30ce", "sighting_of_ref": "indicator--79916ade-825c-435c-bfa6-10b49519d5e4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f7bd4b0-5876-41da-aa09-1439a5ea8726", "sighting_of_ref": "indicator--22859ce2-d7dd-4778-bb20-9391d38b0f5d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4b03c76-0221-4682-bc83-463d3d01398a", "sighting_of_ref": "indicator--62b7f2d2-a408-418f-a7eb-c7e61405ec98", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8443e79-d174-47b5-b46d-b47eee65b954", "sighting_of_ref": "indicator--fe386ad0-877e-428f-82b0-2eaea545c3f3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d82f763-61a7-424c-8eeb-3cd06f9f8c54", "sighting_of_ref": "indicator--87c06551-cc7b-4ebe-9b1d-7d8ce453dbbb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54588b8f-f133-4fc5-8f11-4ae64d6d986d", "sighting_of_ref": "indicator--f5f82702-2ebf-4d0c-b026-7874d2776b59", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b598f61-b60a-4ea9-a221-922f33792b0f", "sighting_of_ref": "indicator--7784ec60-adad-40a2-9738-cfb2c90005e2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54daceba-796d-4ed1-ae87-171e2c1cefd1", "sighting_of_ref": "indicator--14266acd-4669-4c27-a991-527bc6a73983", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93cee8d6-3364-465a-9d2c-e31641f58610", "sighting_of_ref": "indicator--9f440524-36f6-4854-a89f-5f6a228a2efd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1576b8b-a9cb-4e98-8bf3-8f1e78859875", "sighting_of_ref": "indicator--cc590634-8ba4-4232-95e1-143cd48c4150", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db3748d6-b60e-4f0a-ba4c-4640bf1205f3", "sighting_of_ref": "indicator--b3e2942a-ddb7-48c2-8341-679f4efae53a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--924e8175-af37-4b2c-9795-8cd3b8a2788e", "sighting_of_ref": "indicator--745e2ca6-3d33-43d8-87ce-94bcc03afea4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4de880f-7c7c-49b0-9975-8986e7fffaeb", "sighting_of_ref": "indicator--25e7397d-c20b-4ed0-b0ea-9e596543461a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--677da964-2ddb-4e8b-b504-34d04474d578", "sighting_of_ref": "indicator--faf56783-cc32-46d4-acf6-7c3120d312c7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80a54566-da10-4be1-bf03-0da974c216f4", "sighting_of_ref": "indicator--521a003b-3283-447f-9a5a-27921ba4dc66", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1920d46e-1554-4127-9886-407a9a075f4a", "sighting_of_ref": "indicator--4d82c527-3fa9-4abe-bbc7-c2cd9cf55beb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5734894b-485b-4fad-b8d7-2568351a4dbc", "sighting_of_ref": "indicator--61f8e5eb-dbfe-4998-a64f-c8a61bb3fc29", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e121893-99b4-4c63-92be-7778c8829591", "sighting_of_ref": "indicator--bd921493-abbe-4ae0-98cd-ba1e9b897da2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5758adf-4c24-4ef7-9d61-ba378522a9d5", "sighting_of_ref": "indicator--d7e25702-5de8-45e2-b75d-0abdf62f0cd1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1eb3cce-0db0-422c-9b8f-7ebad2ab21ae", "sighting_of_ref": "indicator--afbc392c-f3e2-490d-b4d3-ebb4d8f48f10", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54530317-e5e0-4712-ae28-8c92c4c8632b", "sighting_of_ref": "indicator--21295f7c-d057-46c3-88a4-b01af6d0369a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--516eb8f9-dc5a-4ae2-b398-fc2b6a960890", "sighting_of_ref": "indicator--fc7f9457-f5eb-4783-9ce2-62459e3be75e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73b297f1-2e13-4d87-8e2c-95df2b593dc7", "sighting_of_ref": "indicator--56ebd7b0-b704-4bd7-bd2b-d27ab4b58b1e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--871cfdfb-6904-41fb-b761-3e563f7a260b", "sighting_of_ref": "indicator--bd72226a-e962-4f31-8d9e-8567a81b5c9b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1b4baa7-92c8-490a-ae9e-c4a9e6a7b791", "sighting_of_ref": "indicator--8ff64af2-19f5-4204-9069-5164287227ed", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98e46a01-afc3-4361-ae11-163c8d279dd8", "sighting_of_ref": "indicator--dc3dc687-dff3-4d61-82ff-332137fdd4b8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--569b943d-4285-4c66-8867-e95e351daa79", "sighting_of_ref": "indicator--b9766796-3233-4578-91cd-6e03c152724d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64ebf8e2-3b00-4171-8970-572dd2126d3c", "sighting_of_ref": "indicator--343ed985-c3f6-4490-bd95-cf8312461cd6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83186faa-37fb-4228-8e13-3f2c6b6447a9", "sighting_of_ref": "indicator--70734888-e67f-46bb-95e9-2698d8119cb6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9744dab7-bbfa-4613-a737-df3194de8c98", "sighting_of_ref": "indicator--65def553-59ce-44ca-8b68-a946a9c22342", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3241f42-8b3d-4956-ab29-8e3264df777a", "sighting_of_ref": "indicator--adfbe4a9-21b2-4bed-95ba-32cc57e356e5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54cf54ba-0cf8-45fb-993c-fc1c2798be6f", "sighting_of_ref": "indicator--d7dee73b-1d42-4b0d-9831-c9eafded6a09", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fac27d0-f0b4-4f4c-bb08-e46a2e254a11", "sighting_of_ref": "indicator--d937b064-deb8-4b6c-ad4f-93b734968abe", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--badcffe1-cff1-4e5f-a3d3-f7189875e3e1", "sighting_of_ref": "indicator--b2688d11-4c03-4d0b-84dc-5d43a3ba28da", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaacb7e9-64b8-4391-bbcd-a59e25c16290", "sighting_of_ref": "indicator--6a902782-dedb-4e0b-8544-f5f0ded4d756", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60c570cb-e6ed-4d0d-951b-fbf2a3ec99dc", "sighting_of_ref": "indicator--86fe55b3-4afe-4322-a21f-12cd1d7d6b97", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e62095f-bfc8-44ee-9076-a328ae37172c", "sighting_of_ref": "indicator--3a065d82-3cc7-4321-9a02-902826b6ade3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aa6ad15-7bf1-4115-a6d4-5075d0bd716e", "sighting_of_ref": "indicator--7ad006da-68e8-4021-9f59-3215d52067fa", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b722eab3-7a12-4a14-b61f-850e11e32c20", "sighting_of_ref": "indicator--52326ce6-66c2-4695-9b83-fb14f3c47091", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef8316f7-0223-46f3-9ed1-684640e3a358", "sighting_of_ref": "indicator--90186067-8ce0-4558-8e8b-01a4ab2bfde9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7935766e-0b6c-4e4b-8512-493e0e7bc228", "sighting_of_ref": "indicator--7dd69c50-1685-4665-9f3a-6090e745f38f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95bdbcd1-8d07-4565-853a-ecc6540ff328", "sighting_of_ref": "indicator--9fe105a2-158f-4591-ac2c-a256b2276ea7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c2d5866-8b94-493e-bfaa-b14cac773070", "sighting_of_ref": "indicator--f330587a-8501-49f4-8d14-405a4bd6ebea", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--067f2cab-1e8c-42ea-8992-75db73b17c40", "sighting_of_ref": "indicator--bd16f840-5d07-44c1-90a0-02a042255bf4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2185abed-0f14-485b-a4a8-51d9bee890e4", "sighting_of_ref": "indicator--3090417b-43ef-445d-8f7f-82e43ea8f4cf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab24e2e3-6413-45bf-9d59-b9ec53cb4110", "sighting_of_ref": "indicator--efe14235-d897-4d32-b5e2-2f040ec83ab3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e74c82af-388b-4050-b27d-95c7923ad8fd", "sighting_of_ref": "indicator--8aa1f3eb-afc6-4bed-8b33-97322caf5cdf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92c3de2f-76e6-4a67-8a8d-94a46ec52eaa", "sighting_of_ref": "indicator--3c5b2fcb-8600-4dd4-add6-a70e3139150c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e6738b8-b41e-498e-b9c5-f89fdfa523b6", "sighting_of_ref": "indicator--cdaf8d30-1a3e-469b-8587-993d2d1beeb1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22821c31-e724-4e97-b222-5410f4bcac7b", "sighting_of_ref": "indicator--f6c0aa2f-2559-4829-84f8-f4b14bf37684", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd944534-f058-4a39-b976-64017ab2c191", "sighting_of_ref": "indicator--326b7a04-1688-4098-84f1-4660f73a7946", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c95bfdc-f271-4f28-9866-c76bdeab4775", "sighting_of_ref": "indicator--b76def4a-1811-4b1d-935a-6f81764946a4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c77f89c-732e-4e97-b3e3-3ddeea2ba581", "sighting_of_ref": "indicator--27fa4f46-aed1-4813-9e4f-8ade4921a8be", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ba59f6a-0a4a-4fe3-b40a-17082cc7719c", "sighting_of_ref": "indicator--4ff307b9-d9ca-40c3-a24e-11f56be8b601", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9ee48fd-3d31-4917-8d1d-50347958ff30", "sighting_of_ref": "indicator--4793646b-7cb0-46c7-9273-59b65eb8c71b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09e720c2-a789-40b5-a8ea-188a9b19ae1f", "sighting_of_ref": "indicator--c5566b75-1b41-4e14-a017-ce4cfd601e5e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3093d2f4-5e36-4db1-9fd7-44578964e7d4", "sighting_of_ref": "indicator--f3ab93c0-31e3-46e9-92f7-6d7f6662df01", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e382562-cec3-46ae-b46e-93faa6a32d1f", "sighting_of_ref": "indicator--62a58897-ff2f-4ed4-a698-5e5ed8d39da9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37d8e4b4-e90e-4aca-b1eb-e6e5e7c8bd32", "sighting_of_ref": "indicator--ca260b62-f12e-4a8c-97ed-873f06e8f331", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f3f7c10-3cfe-4b48-bd3c-52d2d37c7191", "sighting_of_ref": "indicator--6a540a84-ce14-4da6-ad6d-f9c2f2a4afda", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5952b711-364d-4ac0-b853-e8d9de0e03bf", "sighting_of_ref": "indicator--3c6992e8-7be3-4c61-9d47-aaded04a93e9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--666c1e2f-36b7-49ed-9fb5-c6d266b1f969", "sighting_of_ref": "indicator--34769043-2004-4fe3-9ff5-c96ff9a066c4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--266da12b-cdda-4a4c-966d-0ee33303c279", "sighting_of_ref": "indicator--ae9aad2c-66a6-4ef2-8d7d-1faf634c742d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e180a38-f281-4155-8bc2-c589b78bb35a", "sighting_of_ref": "indicator--abb2636e-0e2c-4783-810b-16e24621e121", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa12a890-51e1-4c17-9ab3-61d101c529d2", "sighting_of_ref": "indicator--4cc88dca-303a-4429-b6ce-755066949e07", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49c7ac11-1880-40fa-a497-73b6a41fed8d", "sighting_of_ref": "indicator--735e8e8d-e6f2-4dd7-a6e3-8e35ef78d2e1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da7695d7-7cf8-4cad-b06c-b0a172dd9004", "sighting_of_ref": "indicator--91d98f6f-f2e9-4806-8753-94419d924dc4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd743d04-8dd0-4a96-91c7-ea379b49b57b", "sighting_of_ref": "indicator--abb61999-0653-4dfe-952f-6918cabd8767", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1804f4ce-23fd-4632-a779-cd26bcdebe9d", "sighting_of_ref": "indicator--adbde2c0-7825-48c0-9881-7c71efad2724", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49588d65-2d56-4230-b2a1-166b50c87b00", "sighting_of_ref": "indicator--5571c943-39b4-4976-a899-769a071f1c7f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3ca4377-f68d-4bb8-b676-cb149cb56bd6", "sighting_of_ref": "indicator--0a5fd714-4f39-4b65-933a-d2ba5f490154", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6ecffd0-5843-48c8-8eed-bf95fefdd518", "sighting_of_ref": "indicator--1bf04854-83b7-4264-b76c-4f78a3a552c6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e67f1c6-61b3-422f-aec5-d7ab7dbc397d", "sighting_of_ref": "indicator--778a0721-3ace-498e-8698-00344f7314ec", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1f77643-13a5-463c-894b-395080dbdcab", "sighting_of_ref": "indicator--81d356ad-d266-43b0-b9c1-62020f5c890b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3dde382-86a1-46f3-b1ab-4c6daa0106c5", "sighting_of_ref": "indicator--64fd7a13-994b-4086-afa3-61159973f0de", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--884a03ad-8b77-4ed5-880f-84d8a6be94b6", "sighting_of_ref": "indicator--27fab337-509f-4063-9155-722ddf496d8b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97de3410-58e3-4869-95c9-a8b7bed3003b", "sighting_of_ref": "indicator--f89964ff-1c6c-4d8e-9bdd-b95c048c93de", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9ed028d-13c2-4ce0-bc32-346fbe92624d", "sighting_of_ref": "indicator--cf5496ae-1bf3-40a3-8e3f-c56e04572046", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71817a3b-ad81-4ad9-884f-4990a3ceff1e", "sighting_of_ref": "indicator--1b3f8413-3563-4f3a-a001-98a70cabcea3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d16d01e-1c29-4515-8e69-30ff84d97f8f", "sighting_of_ref": "indicator--d562a52c-b0a5-455b-96e4-d63417754667", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6af1dd7a-9429-4f8d-96a2-c6dcd8fcaae0", "sighting_of_ref": "indicator--0bd4e616-f472-46df-814c-0d0e0d54805f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3e6176f-7a11-4391-a2cf-2f300a2f62c4", "sighting_of_ref": "indicator--7b51fe22-182e-4f5f-a6cf-b97da0d3d823", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ae31538-6513-46c1-83cd-a6db47e69b93", "sighting_of_ref": "indicator--138eb1b0-5b74-4ddf-83b9-b4943b09e49f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3b150c6-de01-45ba-a8ff-19825c3d8f45", "sighting_of_ref": "indicator--dff4f2c8-b36c-4c58-a449-d2f20872b680", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e6ba746-7ff9-4b48-a965-6053ec134b8a", "sighting_of_ref": "indicator--85e31546-71f7-402c-b5e9-7746af054e81", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2766777-32c1-492f-9e2b-0a570c0e03a3", "sighting_of_ref": "indicator--e9a8984e-a626-41b9-b268-475c84274128", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c396b80-b301-47ca-bf7a-b93650afaf76", "sighting_of_ref": "indicator--b70b0713-bf0c-4b0c-a27a-d3c5af759c2c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98fc2c1a-0054-4926-b255-d02b2daebcca", "sighting_of_ref": "indicator--d955ce5a-1294-46ae-b4da-834e597d4490", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb599cff-d162-4dce-bfef-e8d476b03c66", "sighting_of_ref": "indicator--b6e4e829-4538-4598-8912-8b7a54e28dd4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d14fe36a-c1d6-470b-aabd-34b1d7031b32", "sighting_of_ref": "indicator--ff19aa36-a164-4b20-b0b4-924b884ab065", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8752e8f1-7326-4278-b35e-acd4f7b4ac86", "sighting_of_ref": "indicator--ad6c313d-9f98-45e2-9db5-daddc82c7f92", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b00b3b52-b744-4740-927b-053134bda3b1", "sighting_of_ref": "indicator--e5fdb000-1ec5-4f91-aaef-79d2de0232bd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10183ffc-a71a-4db1-be82-0fee3a35aee8", "sighting_of_ref": "indicator--419962a8-92bf-4f72-a0a0-476df5c2c4bf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daf210fe-17b5-4352-9c06-be5ee6932751", "sighting_of_ref": "indicator--30202737-17c1-42ce-8955-f97501449187", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f322506-e6c8-4e0e-9b2b-304d13338eaa", "sighting_of_ref": "indicator--71db6d4d-e277-44fb-90b4-c1837ec2747e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93c1387d-27fd-4288-9c8e-6ad1743988d8", "sighting_of_ref": "indicator--8bc5e1c9-9ed1-4303-b2d6-189f0531aa00", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5a9a3c4-a0dc-4558-be59-90351acda020", "sighting_of_ref": "indicator--8635bb68-0493-449c-9813-46dbc8007d36", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cd9ea9c-c1d6-4705-a3bb-34deada500cb", "sighting_of_ref": "indicator--1e684a4c-f87d-4ba3-b621-9719fcdca28f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecc5e58e-a741-4d84-bd0d-7a2f66b05962", "sighting_of_ref": "indicator--d5478c09-32c8-40ad-8fb2-5bbd3937b1b6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d026209-b459-4513-8641-34918f972735", "sighting_of_ref": "indicator--a931f691-ed6d-4039-98be-54913c6ca176", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--190dc9d1-92dd-4a53-9f40-81f2872c3427", "sighting_of_ref": "indicator--432d4471-6c9c-40c6-96c8-0fd430ee0e3e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--145c9789-81cb-49f3-b06d-6574d74e7191", "sighting_of_ref": "indicator--43a7f26c-87e3-4c8b-b5dd-f0fefddf9400", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--082799b3-190e-4166-9237-7d67a69e376e", "sighting_of_ref": "indicator--a759a79d-269e-4900-801a-1ea26802e4df", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16962f9c-3052-4695-8d10-a944eca5ec88", "sighting_of_ref": "indicator--0ddfa846-4785-4247-b4c4-493bc070504b", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f41a9b5f-a78b-4738-a278-e746dfe4eb34", "sighting_of_ref": "indicator--1e493f54-c8aa-4020-a068-651a851b8cf2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78545980-ca96-4a62-8124-ab74116d71e9", "sighting_of_ref": "indicator--f2bb205c-917b-4f08-a26c-98e1d77a2007", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bee1989-23e8-4931-b2da-88999b7adef6", "sighting_of_ref": "indicator--932a027e-5d40-44ac-8412-afc5e1382c75", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccd0519d-7838-4be5-85a4-e5a3a2b1efab", "sighting_of_ref": "indicator--68722043-0ba3-4101-9f55-66feb23d36e0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41c97f3c-228e-4b8a-826c-327af4039bd1", "sighting_of_ref": "indicator--2691756f-468c-445e-8f7e-34a799d5e50a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f9c735f-534b-45c1-a021-9bce2b74e4ff", "sighting_of_ref": "indicator--d4e4357b-abab-4abd-a1c2-83de5a6af790", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--768b8268-f44a-4c53-ba30-ebfb61ca2a51", "sighting_of_ref": "indicator--a5865b6e-5cbf-4dae-8413-86bddd0b6cc0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--891331f2-fa2b-44c1-bedd-0cce95c7017a", "sighting_of_ref": "indicator--2cf6e3f1-6c00-4b52-8f3b-3fb907dbc1fd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4aca69d-cad9-4278-8cb2-935cf09bb0ac", "sighting_of_ref": "indicator--6b47148a-cc35-49fd-aedb-a323a2dfb552", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c6d43fc-bf3b-4c27-8af2-29cf01a654dc", "sighting_of_ref": "indicator--a7819199-6c19-4437-b07a-a22aaf858961", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfdb7dcb-7901-4c3e-be37-30a01c12d9fc", "sighting_of_ref": "indicator--cafbad49-f561-4fed-9add-3f5237bc4237", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7509678c-e2cd-421a-a11d-c38dcc9ae966", "sighting_of_ref": "indicator--6807045f-bb61-4546-9d32-e659f73f49e7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f171b87-d7d7-425e-9cc9-4e30d6e90b23", "sighting_of_ref": "indicator--80f610a4-3114-4560-b1e9-6f2e6f0d01bb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--326ee4a9-f9a7-443a-a984-a389befe9262", "sighting_of_ref": "indicator--e60acc6e-9357-4dfa-9f32-9476ecf830e2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eedafc99-89a9-4cc9-b1ad-d7f6bebcb363", "sighting_of_ref": "indicator--1d54aa53-0acd-421d-a79e-0b7dc5a2d463", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f06a2d1-cfdb-418d-a91c-7aabf0867738", "sighting_of_ref": "indicator--4d479bbf-5961-40bf-84b3-92e2074c10bb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab7e3e19-e6fa-4b4b-af84-a0d0654ff257", "sighting_of_ref": "indicator--6c8bf1cf-cfe2-48c2-a66f-bc5703cb9116", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67c93902-3142-44bc-bcbd-37e42cd87a07", "sighting_of_ref": "indicator--a4692678-3da8-424a-ab71-caad04683beb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aea20207-341d-40bd-a30b-8e3399b0172c", "sighting_of_ref": "indicator--da50cd72-cdb0-4bf0-87c4-9e26c0729e4a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e295f4a3-7d14-4249-b27d-64f82b563ddc", "sighting_of_ref": "indicator--a4c87bc9-d06d-49f2-b9ac-29d88edaba65", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aa8d0d2-7659-4c63-b839-97af6e876cd9", "sighting_of_ref": "indicator--83bbbee0-d1fc-434b-9f08-1ab693ad26cf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--631fb9ed-f303-4815-8e7a-c1bd415ea45d", "sighting_of_ref": "indicator--bbcd6a15-03fe-4c1d-8842-4060e962907a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a67ee46-b127-4920-9565-e3f3bdad3f78", "sighting_of_ref": "indicator--6b82d698-a0cf-4e46-9183-f76dfe82d957", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a82ea26c-194f-4580-a2d6-8629fba96d08", "sighting_of_ref": "indicator--5cc5b0ce-1f7c-4a0a-85e7-0f1bfd7244de", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbc82e97-eb70-4d3b-8556-2192ac075227", "sighting_of_ref": "indicator--60c41726-c0c5-4d3d-9795-696445444f4f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58b809d5-6ee0-493f-9533-83726d9d3c1e", "sighting_of_ref": "indicator--81eb4d2e-ca5b-4cba-aa73-4ee7528beac4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--115d4fdc-3d27-4871-82dd-2d2b486da8f7", "sighting_of_ref": "indicator--4ecc3f50-8a86-41a7-b617-37234159dddc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83763121-b3f5-40db-a3fd-fcbfac4054c2", "sighting_of_ref": "indicator--c43d1eaf-a972-4d1a-b510-2bf0639be40d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45efb54b-1e62-46c0-9389-b28ef8f855ef", "sighting_of_ref": "indicator--01617ab4-2998-4dee-b27d-0fde605b5f4d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04e413e8-876d-4a15-929e-069ccbb74d16", "sighting_of_ref": "indicator--779da1ee-f951-4bc9-8a1f-e385cdf3b5dd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16b18401-98f4-4681-aa0c-086708c07b4e", "sighting_of_ref": "indicator--bdd5a630-d80d-4bfd-8ced-52cdb85eca64", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca018f3d-4080-4190-b1fb-dc0dd4768fff", "sighting_of_ref": "indicator--8bc8b6ac-2aa4-4c4e-8e3c-244e0eedfe4e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4071e672-adff-4010-9eff-195fa2bbc11a", "sighting_of_ref": "indicator--a9ca7c12-06d2-493c-b243-72ef77876820", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82ab5036-ee4f-4c14-bbe3-99c4cb120bc4", "sighting_of_ref": "indicator--7ecba8e5-1eff-4434-a822-0722ffbf4f4d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77caa87b-44c1-4db4-a537-3f3a1c65d680", "sighting_of_ref": "indicator--b28f5f98-8c59-4acb-858c-2f0584305ead", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da1c0ea4-c3b3-4f1b-a9be-b3c34e73a77f", "sighting_of_ref": "indicator--8d774168-7a03-450a-a78e-4e659feacf45", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc386eef-2ca2-4a8a-899f-371cc6b6dd40", "sighting_of_ref": "indicator--e6efa4e1-7a57-49b1-83f8-78f528c7b524", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a081f78-2c98-4278-a3b3-808e3f94e181", "sighting_of_ref": "indicator--509c6da4-e802-49c4-8d6f-74e8031b114f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e62cd56b-2777-49e0-b8d9-37c5dbce6931", "sighting_of_ref": "indicator--c33c18aa-0558-48b8-8799-436398f9c1c7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03e01648-6db4-4c51-a028-62c41f64bcd0", "sighting_of_ref": "indicator--862ea553-6a1e-4aab-9282-4dcda26e80d1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4a9f892-71cb-467e-a1d6-c1358db321aa", "sighting_of_ref": "indicator--0a0f7413-9d0a-433f-8e2e-dfe446abc0cc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43c0f1d4-3c05-4a53-8375-c6378ccf60bc", "sighting_of_ref": "indicator--7d04f31f-f903-4196-8cfc-914da788693d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b186be06-c711-4729-b1f9-0112deb749ef", "sighting_of_ref": "indicator--77c0a618-1648-4d4a-9599-3047d590ca05", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--816943d2-28fd-4416-85b5-2bbc9a0088bb", "sighting_of_ref": "indicator--d27dfe24-467b-42f1-9101-f002d9c02de7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b4eb284-d0b2-4f3e-b694-d1cc286e4a62", "sighting_of_ref": "indicator--e55056ec-fee2-407f-b5ae-cb90b15e3112", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d690824f-d743-4f5f-87a2-9ab8b935ed0d", "sighting_of_ref": "indicator--11e581e3-cf47-4307-9809-6c840ed53e7e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0489d108-4a74-4878-93ac-680a8e9ba362", "sighting_of_ref": "indicator--23e47015-3e12-468e-9a1f-42a1875843a0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0113400f-e98b-4898-b897-e0f09363578e", "sighting_of_ref": "indicator--62ca933e-ea6f-4fe3-b528-97ba0898a9b1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f65eaf6-b0b8-4b28-bca4-6a411a7295e1", "sighting_of_ref": "indicator--121d73aa-572d-4c97-aa1a-1dfd402dc4bf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6999de5-bf7f-4172-aa49-706552e29f43", "sighting_of_ref": "indicator--c842f28d-b7ae-401c-9f4e-b604cce2b453", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca30d654-7cf3-4da4-a249-30a1f797a46e", "sighting_of_ref": "indicator--80a9b98e-0fb3-4749-929e-1112639fe484", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93ffdc72-6a57-4cdd-968a-75fa66841013", "sighting_of_ref": "indicator--026d8c87-edc4-4626-91c0-1644ab9e56ce", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c2e9f69-757a-4d6d-8e17-e80c567bd99c", "sighting_of_ref": "indicator--111c8a36-8823-4d53-984d-e4264b758a92", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77d3b101-5088-4e9b-a3ee-980f08346775", "sighting_of_ref": "indicator--2eca53d8-787a-4731-ad0c-07e12e174fe1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d742766-4595-4355-b702-ccc12d9218d7", "sighting_of_ref": "indicator--2b205b37-7065-4e28-bced-9dfdc0b4863d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ad3f71b-f40c-425c-9749-7c778d4aa5a1", "sighting_of_ref": "indicator--5cfba1e6-a2cc-49b7-985c-7c750596429d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--019adbb0-b2d0-49ca-8883-d4fb3e08f798", "sighting_of_ref": "indicator--6388a14a-d22f-4976-9bf6-5d0d668c7310", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac116158-308c-44e1-bfbd-a65678e26d97", "sighting_of_ref": "indicator--e07a4413-9d4c-4f01-b4e0-ef6edc86e377", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df7fda5e-b10e-485a-ac90-f9fd585abc80", "sighting_of_ref": "indicator--dee635f3-27f3-4bf6-bb3f-78a641a3bd74", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73a8a756-5176-4d5a-8931-55cf8b4ba3e8", "sighting_of_ref": "indicator--8dce783b-1272-4230-bad6-0a5af94bb5ce", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d07fab19-a0c8-47c7-81ce-934470767f67", "sighting_of_ref": "indicator--7b5bc735-eee8-4510-b1fa-f896eab12879", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1d1a2e1-8931-469e-a2f1-d63fc48ff484", "sighting_of_ref": "indicator--ac72cc20-875a-43b2-8fd8-c3be45ac558e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54fe1c0f-1440-4e33-8cd8-0c07aab2baa4", "sighting_of_ref": "indicator--7e5bc96a-c655-4eaf-a08c-69e52e138afc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c606a15-0502-4fa9-9a39-a2632c967163", "sighting_of_ref": "indicator--15d58e69-0e4a-410c-8e47-41889a8db867", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34dc006e-f620-4b06-8347-7e4d8b400223", "sighting_of_ref": "indicator--3185eea0-ffd1-4e35-a57e-f18e6713f263", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77fdd434-0421-4380-a96f-fb2746897db0", "sighting_of_ref": "indicator--11f0c797-e91e-4ea2-8934-cf87818ef52b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a5e2967-6382-4fa4-a52e-877247be2378", "sighting_of_ref": "indicator--fd24f4f2-4b13-4930-bb5f-3257e70c896a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bf57782-001c-4edc-9ba0-31c7dbae49f5", "sighting_of_ref": "indicator--19395c7c-6a74-4730-ad14-1913454589d9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c38b3dae-d2ec-4d12-ba86-9103e3e9bdd8", "sighting_of_ref": "indicator--5c204ce8-d71f-4e4b-8181-37fd1e8fe7f2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60d6ca02-ea12-4eda-94ca-2a84144d7f49", "sighting_of_ref": "indicator--fdc88cd0-58af-4d66-af00-544068f65a00", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1acd75ea-2c93-40ca-bbf7-a3419689fe22", "sighting_of_ref": "indicator--817ef3fa-9a01-4668-a332-82ff32300cb9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cf1951d-bb10-4eb5-ad30-532e870ac53f", "sighting_of_ref": "indicator--a4e82afc-1165-45fc-85bc-746ae99bb4cd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01ddea46-44c4-4b58-b3b1-f1ce9d6c756a", "sighting_of_ref": "indicator--ac49f5bd-dd0e-4e47-a6bc-2d22d4dfe825", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa858378-2c0b-4218-a268-ba52522a2332", "sighting_of_ref": "indicator--0348aaae-0d89-42fe-be80-d3033df4a12e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff08a6d6-8c79-4025-b038-8eff3d500449", "sighting_of_ref": "indicator--53aacf32-2c5c-4032-9928-853c0fa7533c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1b24fde-a9fa-40f9-9951-9e8ecab1215b", "sighting_of_ref": "indicator--308b4fba-947e-4972-9e82-515224cd83ce", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--465ba17f-ca8b-4021-9811-f23fa5cd3212", "sighting_of_ref": "indicator--ab25427a-338b-40e4-9aa4-eda9823bed0b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39c05f92-2ba1-472d-a4df-29f0f4e857fd", "sighting_of_ref": "indicator--a38928c5-9f2b-4575-923a-ea99ec42d474", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2c57041-91f8-4ec2-a499-5081fd5c687f", "sighting_of_ref": "indicator--601342f7-fd5b-4d35-9c54-50b5e443ae78", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7de41c2-0ef0-4e99-9002-b96f07f2f9d9", "sighting_of_ref": "indicator--6aa01625-97f6-4013-b946-00637ed7afba", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db1e1971-83ae-4f20-acf7-3f730dfa70fd", "sighting_of_ref": "indicator--e7970849-fa81-482c-aa8b-2999eea2abee", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--359d8592-5b5a-4777-827e-b86d159bc554", "sighting_of_ref": "indicator--bb8edc74-434f-4a03-b9b8-89d842fd6550", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46e1a32c-8873-4358-94bf-dbf01b602c58", "sighting_of_ref": "indicator--d5a02717-44b6-40c7-94f8-679cb81a5c2d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9073864-6b0f-4273-9813-1e17ded924e7", "sighting_of_ref": "indicator--c97096b2-91c5-4640-82c1-dbdd5c67d832", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1f72ff1-5cc3-4475-ac4c-7312062eb7f4", "sighting_of_ref": "indicator--46d5f1c4-9ed5-46b5-92cd-74336b481b78", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c985bc4c-824d-4869-9a78-b5419405a281", "sighting_of_ref": "indicator--55e9f317-64d3-4028-a51b-58bed57beacf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c30ecb58-e250-49f5-a953-50d7b542d3ab", "sighting_of_ref": "indicator--00433bef-c6b1-4270-93b7-624fb9e01beb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dfe7439-c809-4d36-9641-de9ca3cdb831", "sighting_of_ref": "indicator--aa136ddf-27d3-46c4-a6a0-c9a7046069b9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e2dd060-1bf5-41a4-9767-f29a7afdd7d1", "sighting_of_ref": "indicator--1b573065-7862-4786-b2a0-8ea8eb94acc1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e59ed08f-b289-4cea-a265-0556cbe03381", "sighting_of_ref": "indicator--c933e157-6fd2-44d8-95d6-1ec5167b63ad", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3052844c-317c-44da-9e2f-6d5ca03a2b7d", "sighting_of_ref": "indicator--d4d5df42-5ac5-4609-9a83-8889c43df054", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1f5b0b0-17d1-44ce-9fb1-7cc033e54a4e", "sighting_of_ref": "indicator--31832b28-8235-43ee-af2d-fc64ce8c27ad", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f53e0baa-f553-4a28-83ee-cc8e8a37b4d8", "sighting_of_ref": "indicator--84327172-ac68-4918-be32-acfe449dc453", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--472a2480-831a-4db6-af49-72cf6d905383", "sighting_of_ref": "indicator--30b6dc95-77cd-4fed-ae45-ca106d835531", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff7c03d1-13a4-4915-a05f-d84aff0e3b75", "sighting_of_ref": "indicator--c0f8b59c-1cb2-4af5-a709-85abddff01a5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84c3c7c5-cfb9-419b-ab83-15f46b58be2b", "sighting_of_ref": "indicator--6e7ae507-1f77-49e7-b209-4bded1421036", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cb3cf28-2ed8-4966-afa2-82615b3225da", "sighting_of_ref": "indicator--b0fe5206-768a-405b-a0e3-1745cddb18b6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7beba898-9381-4363-acda-d3bd5912f0e1", "sighting_of_ref": "indicator--c7efb7ab-7679-43af-a05b-79a6c040d229", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d03d1133-e5bb-4db4-849c-ac03e8869ba5", "sighting_of_ref": "indicator--e6b78057-3fb5-4169-905c-b456f9dc06d8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38e2399e-326a-4fef-a158-7b231a5e1222", "sighting_of_ref": "indicator--164f31f7-9b14-45e4-99a0-e4a6b1119594", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--984c5b57-ee89-47e0-b8f5-7d1380c7b14f", "sighting_of_ref": "indicator--99ec048d-5193-4fb7-b1cb-ad5c44eb6b11", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c89f0076-591f-44ea-81ab-6daa14350fea", "sighting_of_ref": "indicator--47d546fd-d283-46cf-ab1f-50ca75324f33", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62ab10a7-5a04-4bef-b4bc-31110292d2bf", "sighting_of_ref": "indicator--c264351a-a85f-442a-b0c0-9f1dbb0f8401", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f90c90b-6471-4956-b93a-2b541f1e442c", "sighting_of_ref": "indicator--c53cd633-f99f-450b-b9aa-e161ef1feeeb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3bed0eb-bf7a-4bf1-9f63-35bb6ca1b30b", "sighting_of_ref": "indicator--cc3ba4ca-fdc0-4fe1-89fc-817dde61ad3d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca249ccc-a30a-4933-8fc8-951fdd8c2be9", "sighting_of_ref": "indicator--526557e4-dc81-431d-98e6-c2d2e0644ee5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffa901ed-ae41-49c2-a160-d8b923fea5ca", "sighting_of_ref": "indicator--f63d1541-374f-4341-ab83-57ba1297dbec", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d338314c-8f3e-4302-91ca-a94ac685163d", "sighting_of_ref": "indicator--8902dee7-9bb9-4b48-a09f-b4a3e67cbcec", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--437ea289-93dc-427b-9b09-d9eaf6b11c8a", "sighting_of_ref": "indicator--df1af038-145f-4b57-afa6-5e3ba1a04bd8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d639796-1298-4e4f-afaa-3dec957f15d6", "sighting_of_ref": "indicator--5706d326-b032-412a-95f4-49b01b2f5c3e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aabb8f40-dcca-45e1-ba83-9e063fdda978", "sighting_of_ref": "indicator--de596938-c459-40e1-93a1-b3d054a24265", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a514ffe5-24fc-4fa2-ae8e-2651333fc46a", "sighting_of_ref": "indicator--2964418a-f947-4ac4-a920-77d79c4454e7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1185db4f-9706-45aa-ad20-46596892f614", "sighting_of_ref": "indicator--32b7a82d-b486-4fe9-af59-dcd6d4293f8a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce528124-9b3c-41ce-9e92-a59cb6a2e5b3", "sighting_of_ref": "indicator--119141f1-ebbe-4498-8d1d-a4a61d515a1f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2f17e07-8cca-40af-a370-37f8c0a98bf1", "sighting_of_ref": "indicator--feed9064-b39d-4db2-bafd-c046c1a6ad9f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d32a337d-5b4a-4084-bdb6-9fd7f99944c5", "sighting_of_ref": "indicator--b5a9831c-d300-47f4-9e4f-7d5920398e15", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a40b1611-9567-4ecc-94a9-b13e72a7edcb", "sighting_of_ref": "indicator--d0ed1f39-a1d9-4e12-853c-8955cdb8322a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33e254aa-c897-4393-b7fa-62311338e345", "sighting_of_ref": "indicator--e80e2a92-e8c4-4cf2-8808-bb433cea6baf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b66c8c2-9f37-4fc5-827e-eff3521f786f", "sighting_of_ref": "indicator--1e2c7291-474a-4ea9-b7dd-a9a695123ee9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8d3ee19-5e8b-4398-8141-7a69c87e3df8", "sighting_of_ref": "indicator--87a1b26c-8335-4891-b658-c2c1b6304714", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4023dbf7-9d82-4eef-857f-5963c8033590", "sighting_of_ref": "indicator--5d96a097-c07e-4bf8-b29b-8b0961895fc5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7ad73bd-28e5-4c71-b833-3fdbfadab50b", "sighting_of_ref": "indicator--385c632d-9a3a-402a-bd8e-da400e07000b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9881bffe-0d19-4445-a1b9-183238371857", "sighting_of_ref": "indicator--5ddca0ef-6f45-46ca-9cb4-dec11a6ba560", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65c26f68-33e9-469b-8722-78ce4beff39e", "sighting_of_ref": "indicator--8f526837-2cfe-4468-a5f4-5a599fa174f6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1744f72e-f085-42af-852b-83cd8e20b74c", "sighting_of_ref": "indicator--1f2f5836-df9d-4691-9e23-0338ffd0fd54", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9fdd5722-0bed-43f9-9f9a-8a6e0ab08a23", "sighting_of_ref": "indicator--7e26f1a9-6035-45eb-b8a9-75959a14468e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2d62aa3-32c5-4898-8213-64d88a6b0ae2", "sighting_of_ref": "indicator--1eb010d0-582c-4f51-92ba-67c11528587a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c27ca25a-444e-45dc-b4ef-70341a544ca9", "sighting_of_ref": "indicator--d18a64d0-d26e-4296-a9a9-88b7bae0f1dc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--622c2b3f-3210-4590-930a-f7d6fbbc8342", "sighting_of_ref": "indicator--2c2184e0-1e66-4d5f-b0b5-d4b051af4f3e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2676acf-56c8-47e0-88f9-b1c89b6fae4f", "sighting_of_ref": "indicator--2ac56cde-696b-45b4-8592-f419b8ec8e05", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74a9f550-9341-4202-9ac0-8cc005efb88d", "sighting_of_ref": "indicator--5cbbb7b5-54bf-483f-a7ec-64ae7f21a72d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4ebc022-e5b8-405c-9bea-00ed95ae3890", "sighting_of_ref": "indicator--d5ce703e-0869-4d99-9ea6-daa696679c66", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--641a4d6a-d661-4f06-9cf2-8ca107d68da2", "sighting_of_ref": "indicator--835e301b-2a6d-491f-b4bb-28d80960abc8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daf8cb8a-bfd2-4af5-9fbb-ae593ce8d236", "sighting_of_ref": "indicator--e9a0a063-e1ec-4fda-b494-c4650491e1f7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3dabd6a-2499-43bc-bc97-7f7b78f190a7", "sighting_of_ref": "indicator--ece56437-5d2b-4606-aa4a-af612b9894ab", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--164d618a-e8c2-4b1f-b544-1184ea3e999e", "sighting_of_ref": "indicator--e3aba7e2-de79-40e7-9a37-78ddf3db4d5e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4ddbee6-d0f1-4b4e-9f26-dead00b55210", "sighting_of_ref": "indicator--a14fd326-be01-4e74-9cfb-1aaeff8c7c3a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53084d93-9c49-4c9c-894b-a39d7f3850db", "sighting_of_ref": "indicator--80d3dbb2-0fbb-44b8-b23f-44ed485a2087", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77c34ed8-348e-4823-8f0e-1a8fad9ba291", "sighting_of_ref": "indicator--f5a1b63e-e091-4116-901d-640c2013abcb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47f4d37d-1bd6-4c82-bc70-6436fc53d8eb", "sighting_of_ref": "indicator--66b2279a-27c2-46ce-851b-28cbd2bcb603", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d44ea9f-c00c-489e-8ca2-08a12474a434", "sighting_of_ref": "indicator--0460bb8f-1876-41ff-a13b-d9bb87d5c1f6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f1b3bcf-6dad-4e07-9a02-c628fb29ed58", "sighting_of_ref": "indicator--b8159d78-f9b7-413e-a67c-e4f95e542daf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e73e15cb-a2f2-49d1-9bf8-4a9fe1f566dd", "sighting_of_ref": "indicator--2fc828f1-ff88-4ee1-834e-2bda5671c689", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0855cef7-0ba4-4232-9834-6e765e93dd58", "sighting_of_ref": "indicator--7f90aee3-78fb-4b51-bd7b-e8313b1b625d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b66a1f1-19b0-4660-bf4c-314e6195f9d2", "sighting_of_ref": "indicator--3120318b-11b3-4b34-ab2a-dfeb59c8919c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f2084b2-2b1c-4ec5-b54a-d26f32c1ce59", "sighting_of_ref": "indicator--5ac6878f-9276-4182-afb1-8445db0452bb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2acba52-4a38-46af-afa9-8823d86ec89b", "sighting_of_ref": "indicator--cf928022-fe5f-4d45-aa7e-424d18d50a76", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9ed9844-4532-4bf1-87bc-8637a05fda4d", "sighting_of_ref": "indicator--cf928022-fe5f-4d45-aa7e-424d18d50a76", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d13e834f-bbd8-402e-bd89-15132fde4209", "sighting_of_ref": "indicator--ff951b2e-b528-4879-a025-7dd17b695bb0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--436c8d28-1353-4463-94b9-5db4219e0e27", "sighting_of_ref": "indicator--228bf312-11b3-4e4a-a53b-c527628c90f7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19cbd606-a82b-4a11-8e51-d4a52fe3bdf3", "sighting_of_ref": "indicator--ee319e75-266e-4cf8-8e8b-dda69f449b83", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60341d83-cf81-46db-90c5-79aa6415211e", "sighting_of_ref": "indicator--eab67ad5-a879-4f4f-863d-c6c238dc4179", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--792dce81-5ab7-4d36-b9fc-0113d1c8c4b8", "sighting_of_ref": "indicator--9636334d-30e3-48b4-b9d4-0b176cbc3db3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--074f6f5c-7748-4d73-b78c-ab2864a49bb3", "sighting_of_ref": "indicator--c21ac4ef-4dcd-4c28-ace7-2a53868a6134", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--399a9a1b-458b-41be-a839-3d2f07b14d90", "sighting_of_ref": "indicator--e6570afc-27e6-4ee4-baea-54df3a7419f6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03da20b1-be9b-4430-9247-c75418cf54c4", "sighting_of_ref": "indicator--ec77ed31-379c-4498-95bb-5b083ce7325a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d07a70a-3d5d-4bac-aa1c-d04feb1cbae1", "sighting_of_ref": "indicator--5b178021-7ab4-4782-9a78-1b2d38f55ba2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8901dd6-a70a-4711-aaf6-4da1d8a92ea5", "sighting_of_ref": "indicator--bd6ddb27-0756-4c06-bf11-f2bb01e4f016", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--338d8643-cd36-481e-b3c2-8fd894db7d4e", "sighting_of_ref": "indicator--fc90ede8-091e-4859-afe1-8ee5bb6b0758", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--612fe2bb-fb21-456b-80dd-e9db734d3503", "sighting_of_ref": "indicator--bce81676-8d9f-4351-97aa-f2e20562f0f6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcf66871-2d60-4297-8bf0-7f0de3e668e8", "sighting_of_ref": "indicator--b8acdddd-b333-4493-8ea8-d45431098b02", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9874222a-640d-48c6-91e9-44ee599860be", "sighting_of_ref": "indicator--ad5f09f0-d5ad-4c98-a811-ec9f6edbd39c", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b9a904af-c131-4383-bfdd-59de152a541a", "sighting_of_ref": "indicator--ad5f09f0-d5ad-4c98-a811-ec9f6edbd39c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bc44478-9352-4249-84b3-c2d3b5641389", "sighting_of_ref": "indicator--c446a8bc-eca8-4818-840f-16dc40db665a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06a97ddf-f9c9-4018-b45d-e07f811ded18", "sighting_of_ref": "indicator--07d956c4-99ad-435c-9cac-889cde4cb877", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a6df2a8-3dc2-4e84-b1ca-0cff56833fa3", "sighting_of_ref": "indicator--ed6175f5-0a74-4286-a974-d5f79bbc93aa", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05ccdc05-d460-4df6-9b2a-fe7a134d12dc", "sighting_of_ref": "indicator--1cd82bcd-5636-4a09-a867-3ad62b2ea945", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00c2ec73-68f4-4535-bff4-29f6a09a77c1", "sighting_of_ref": "indicator--87b76be3-20b3-4ace-9138-ad59c34d76f6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--646b8feb-b854-4c32-be09-53c922b069da", "sighting_of_ref": "indicator--3c56110c-c1b4-4b9c-8a50-69b9b72f4d3e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49f64364-d6dd-453a-ba92-5affc5683297", "sighting_of_ref": "indicator--1765a8e9-82b5-4f7b-9ed6-3207d2a86fec", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dfea868-ada1-421d-a963-21db3259c5c2", "sighting_of_ref": "indicator--d9e9772b-6801-4ebe-87fb-ae8de2b49819", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--792562b8-1b1e-4c91-9bce-2a7934188f7e", "sighting_of_ref": "indicator--49e7d120-cbee-42ba-ab42-d1f280a4ce1a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3d8732e-fb52-496d-8c1d-6cb8a03d6918", "sighting_of_ref": "indicator--7e7add3e-5771-4c5c-b255-b1ef89996016", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--20349e4b-a167-40a9-aaac-b629e1642b4c", "sighting_of_ref": "indicator--07ebb116-26fb-4fda-ae4e-06c413d524f8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0441edbf-0fec-4f0a-b528-69aa17f171ab", "sighting_of_ref": "indicator--28933d92-bf0c-4617-86b6-4e0a3ffd3f3c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--924ecb72-8cc3-4ecb-845c-d6f7d8acb645", "sighting_of_ref": "indicator--3969925f-9229-474a-8479-8f35e296cc2e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8a9510f-2a50-45b1-83c3-cf5e44525b5f", "sighting_of_ref": "indicator--e48f34d9-9bf7-4aa7-98e9-20fa13d6ca16", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--478f1fdb-73ce-4783-bc36-ba173d29566f", "sighting_of_ref": "indicator--3cf7e507-906a-4644-826d-0b1f03b7ec98", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10a8a623-a281-463c-89e0-56c7a956f73f", "sighting_of_ref": "indicator--22d76af1-f53b-48ae-b43b-98734d56044f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14923f3f-12f8-4e97-a465-5a432399cb45", "sighting_of_ref": "indicator--61a1ca86-bd2b-4980-af1c-6c7e3b317c9e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12a5556d-1877-45b7-b539-c4fa9181d424", "sighting_of_ref": "indicator--21eb0557-fb26-4513-bde2-eacbb98c1046", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a18a2359-562f-45b5-9a3d-d75e8b0e3635", "sighting_of_ref": "indicator--03c7b598-c295-4e26-8cf9-4f038997ddfe", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d86f4b4-a8cd-48ba-b1b7-817b6b7aa178", "sighting_of_ref": "indicator--325bfc33-8259-447e-b0f5-be1dd8356756", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed3ca96f-3e07-4777-b387-354201ae916a", "sighting_of_ref": "indicator--ca470e98-dd24-436c-b119-11e7fa61e612", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed978400-8025-4be5-b4e8-f723b9f3d4eb", "sighting_of_ref": "indicator--30f1dbc0-4551-4723-9eeb-c4ba1277496a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--424e1858-1a19-43c3-b026-43637ef7fa85", "sighting_of_ref": "indicator--8f618160-6bfb-4ee1-b5e6-29848ff4ba82", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea6e1485-b08e-4915-aba7-c4239b1da179", "sighting_of_ref": "indicator--cab32ffc-d4ff-4b02-8f13-1b37d6287e08", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b263d07-33ce-4123-ae63-41487341c5ae", "sighting_of_ref": "indicator--b86e9d08-ac4e-4d25-aa85-94e98725fc5e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d31fca73-0c95-4cdc-8158-72d92a98cdc1", "sighting_of_ref": "indicator--497298b9-b100-4f39-987f-8c23803aac5d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e5dd545-7cb6-4adf-9cfa-3bb399093a4b", "sighting_of_ref": "indicator--c8db3f1f-ced7-409c-ac02-c21cf8e7ca3b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8010c60-211a-4556-b47b-3df71f273fc4", "sighting_of_ref": "indicator--d2fa02a9-1eb0-4cac-984f-334046b6edcf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae2d89e0-7c71-4d4a-bba3-f559b6f528ef", "sighting_of_ref": "indicator--f0d4a22f-d2a2-4c62-9d4c-fd6f60f893e9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7afd6501-d4a8-4a61-baf9-4d92ad513b44", "sighting_of_ref": "indicator--c943cf90-d23d-43d6-be89-12dea7680473", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74e76deb-d97e-4258-bfae-cd4bf705df0a", "sighting_of_ref": "indicator--c943cf90-d23d-43d6-be89-12dea7680473", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3232a95b-1681-4cf9-9533-e76d858ac262", "sighting_of_ref": "indicator--d4d8600b-4308-49f9-9eef-be9a4b567e4d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c14247d-f6b8-4196-803b-f56ce212a032", "sighting_of_ref": "indicator--d59ffe3d-d766-4530-a716-28826e2323d1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--740ebdf0-f276-4d61-aaa1-cd5eaa78e257", "sighting_of_ref": "indicator--2cb86982-6cef-47a1-9a26-1ed539b78d60", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51eeb23e-ad44-471e-88fd-41ea26489c8e", "sighting_of_ref": "indicator--462e579b-9686-47d4-8680-4a29bb30ad5a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d747dbae-3a84-423a-bf7c-ef4b040b50f5", "sighting_of_ref": "indicator--ed78ecf8-6dd6-4f1a-a774-cd23d0a41223", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b16cf072-1954-4c0a-b51c-a2cf16b8c7fc", "sighting_of_ref": "indicator--7928a2c8-9612-4f49-a109-6431d70ee2a0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29371420-1205-456f-9a16-2ae3636cab17", "sighting_of_ref": "indicator--eb38bd8e-dbf8-4561-8c7f-c848d0e318f2", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c902dab5-75b4-4b7c-99b3-e1c516455134", "sighting_of_ref": "indicator--d6869326-0204-4fbc-b327-ff0d4f5fe297", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3656c726-e229-4917-a10c-c5395001caeb", "sighting_of_ref": "indicator--50a391aa-3dcf-4747-a66d-b8972c255e35", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8e44f49-8aec-4e29-b28a-07d740aaac4f", "sighting_of_ref": "indicator--25f23f3f-a11c-473f-8ebd-1b1804db5208", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce1e943f-2243-4e57-88c3-a65292070fd8", "sighting_of_ref": "indicator--81a49e35-96f7-44a3-b7e8-eeec87d9b2f4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb83397a-35dd-469c-9929-cd447b9d6b71", "sighting_of_ref": "indicator--fcc6601f-f337-4de7-b5de-8bc920885796", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef64c2fc-2097-4ff9-8c30-068e372be118", "sighting_of_ref": "indicator--094c7600-837c-4afa-b03c-dd9130f6a8d2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d98a7bb6-deb2-4bb5-9adb-cfdf0916dce3", "sighting_of_ref": "indicator--7261bd7a-096d-4845-8aaf-843c52c6972b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--364bbcbe-0a53-411b-a2ec-f918b62e8920", "sighting_of_ref": "indicator--9156f455-7857-4d04-8e8a-350076699d4d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1c29b9e-8ba2-4ccc-bac8-26db0621f55a", "sighting_of_ref": "indicator--af5e6cc1-83a0-4568-a02e-1d22ceab1b96", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbdae865-940a-464c-bc5e-e0e2e7ca7e3f", "sighting_of_ref": "indicator--6c51c33c-b7d8-4e10-a9a2-53a700ba7013", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2df4980d-c449-4aa6-9c63-b48484e1416d", "sighting_of_ref": "indicator--ee309bb8-b2d0-4654-ab20-e1e192f5e291", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b46b0269-17fc-4d3b-8163-e219b8c21410", "sighting_of_ref": "indicator--a63a4c86-01c0-46b3-adee-f0b543b9d509", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b45c22fd-b493-41ca-9b21-e932335b83f4", "sighting_of_ref": "indicator--a05dea09-8150-4656-82a9-70379c44193d", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f3a1f06-36fb-48db-941a-cd2169dfdd91", "sighting_of_ref": "indicator--a05dea09-8150-4656-82a9-70379c44193d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bab7d847-6cae-400c-b012-48b906091dd3", "sighting_of_ref": "indicator--a7498ab1-2ec2-43ca-ae7e-79cad347bb1e", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2951d91-f65b-4e9d-bdbc-b62717e4243e", "sighting_of_ref": "indicator--3ab4106e-51ed-4a14-8e4b-74770813562d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b15f762-a9f7-449f-94c3-3b3385c23e45", "sighting_of_ref": "indicator--9169ca0b-dac4-4a76-87fc-fecf2785ac43", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--226d1340-172a-4daa-baaf-aecc1533f606", "sighting_of_ref": "indicator--676a006f-73e9-475b-b351-8f46fbcfa498", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2180ee4-5b4c-4685-838b-0c33f5eaa9a3", "sighting_of_ref": "indicator--58404133-c73c-400f-a581-7b828a269130", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc9671fa-6e65-419b-83d2-52de59fc32b4", "sighting_of_ref": "indicator--57481be3-5805-4289-bc4f-63bfc719321f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99ce407b-b537-48dd-9770-3c4a87c70aac", "sighting_of_ref": "indicator--444ddb50-ee6d-4159-a6f9-2d4297f2b4c2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7c2006b-a805-4290-8c72-d31426e9778f", "sighting_of_ref": "indicator--8f4c6352-e4bc-4c9b-b658-9e7a76deb4fc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ce36bee-90a5-431c-a382-6ba95dd5039f", "sighting_of_ref": "indicator--a9b85c74-d468-4e1e-8489-1874e79713bc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10f0d1c9-24e6-47f0-ae84-c388ab4ac087", "sighting_of_ref": "indicator--2ee5a6e3-eb84-4583-b475-5c2284a82e79", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56803377-ac00-410d-8746-a34d0bc3f488", "sighting_of_ref": "indicator--0ff38d71-3379-4a2a-9bb4-f1b33a6eb951", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0145d199-6720-45c4-ade7-45539a0943fe", "sighting_of_ref": "indicator--bdd77c19-5e4b-4c13-8eb7-1d2f73706c73", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43d81adf-c70b-4bdf-8e23-8071a3692795", "sighting_of_ref": "indicator--fd58f579-810f-4bfb-8992-80566b2cb429", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8632fbc1-dad5-4a69-9512-089c1ea92117", "sighting_of_ref": "indicator--a19226a0-814d-44b7-b7e4-660840017e4e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2a37b84-063a-44ca-ab81-dfe3a35b65ce", "sighting_of_ref": "indicator--ad949995-923f-4e00-86c6-9f2b4a3a0bec", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e21c1f1-bafb-455d-8b63-2a738c8c5d73", "sighting_of_ref": "indicator--a58e1e02-503e-473e-b410-f075136efd60", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a91b1f7-129f-4f4c-9e0d-e328138db4fd", "sighting_of_ref": "indicator--ec861bea-4c76-49bd-90be-fa62e82121ea", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d7c67d5-be07-4b3e-a165-6fc24d6a4a4c", "sighting_of_ref": "indicator--79cb5784-8b96-45fd-825e-b3a39d100d15", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e0a4d7a-6f06-4c16-8714-f5ccbb2f3526", "sighting_of_ref": "indicator--8dcbcd57-9ea8-4eb3-82c6-2cbf6540e338", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--727b7148-4c12-4daf-916f-d112b4563256", "sighting_of_ref": "indicator--fbb7e78b-1ef2-4973-aff1-1c6fbb81d164", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca067880-cf74-437c-bf26-7727c3af20d1", "sighting_of_ref": "indicator--836b6a79-5673-40e5-8af4-e042978bc9b2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91034ff8-53a5-4de2-b484-01a0b5496c26", "sighting_of_ref": "indicator--962d6b3e-b01f-43b4-8c3b-f7b337f653f3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--550337dd-2475-4342-8927-812d1954ba88", "sighting_of_ref": "indicator--7f4c754d-f743-4ef1-91e2-e3ed7635277c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f074af7-ae36-4045-a37e-7ade80276de3", "sighting_of_ref": "indicator--506c0a9b-702f-409f-8024-7a0822bf10b4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--537714b9-ec71-4025-b5a9-566939abe29c", "sighting_of_ref": "indicator--bbcafeba-2df6-429b-9460-481ad551551a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac3c27fc-67e8-4de4-a40d-7b4eec428294", "sighting_of_ref": "indicator--66dc4a04-4275-466f-a271-5601f32b8dc1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcf7e8e8-4e07-4c8c-a117-200cf5fb323a", "sighting_of_ref": "indicator--020552b1-9e9c-4d7c-b27d-b12ef4c9ccd5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4272df5-71fc-4e96-8049-0a4867f3dc5e", "sighting_of_ref": "indicator--ab2b1f01-1757-47a8-ba15-e2bae08b1106", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24860f30-87c0-4340-928e-054290002ec2", "sighting_of_ref": "indicator--dc78b077-e387-4dc7-84b4-3986d87b7c54", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b94c25da-2ba2-48a2-bee2-fa4168be0b4b", "sighting_of_ref": "indicator--d41e973b-4c28-4c7c-9a00-a812e742d0de", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb6e4dbc-fd82-45f6-afdc-5f292be27302", "sighting_of_ref": "indicator--50f7ac6c-adfe-42c3-9cea-93533b6761a3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3688bf5-f76e-494e-8caf-b74dd19f705d", "sighting_of_ref": "indicator--d5adfd13-e499-4ab9-9d78-13fdf7bd4bb9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58b57d9e-75da-48dd-8371-ebf0e7c6519e", "sighting_of_ref": "indicator--edc4c571-2b6d-431d-b90f-d18073bc0e54", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed93cea2-8e93-4308-b965-90811923fb60", "sighting_of_ref": "indicator--bd6af59a-e107-486c-a4ce-d078f08f27d7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fed5c5d7-d2c5-45b1-a494-affd4d6ff9c0", "sighting_of_ref": "indicator--4924bc4b-1287-4e74-a59b-51586f70a385", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a795c35c-3004-4ef1-88ac-e24462110486", "sighting_of_ref": "indicator--84a35fd1-a930-48ab-a255-cd7b2a741d51", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9b62d96-76d2-4abb-a03c-000bd342417a", "sighting_of_ref": "indicator--0beea302-8316-4177-aa47-c1a9b8bd9bf9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f86520ce-5fbe-45b4-8f20-282f4b724efd", "sighting_of_ref": "indicator--473e9203-ae1b-4a92-b690-871c881f3235", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--291775cf-9dd5-4ce5-bab7-b22e8135eaac", "sighting_of_ref": "indicator--9a4837c6-0fe9-4fe4-897d-642b0614e748", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c536e311-a4f6-4bb2-9977-7ad62fc4c08b", "sighting_of_ref": "indicator--63e3c068-76de-45c0-ab82-63d25810efaa", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--235bd26f-67aa-4e34-8ea9-ad176fe7f18d", "sighting_of_ref": "indicator--67a9a036-6a82-44a1-a42a-fc59f7645c40", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--188314d7-0c49-4959-9ed2-1a78a0c22dc4", "sighting_of_ref": "indicator--354f3ac0-edcb-4262-a296-fbfd832ffec6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f97ecc45-4589-457f-b451-394b67333ecd", "sighting_of_ref": "indicator--610cf520-7e48-492c-9524-8a2e40ff20ca", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a899ee9f-99a4-4b3a-8f18-714eee2106c7", "sighting_of_ref": "indicator--4e45bbf5-7410-4e27-965a-f157ef6a09e7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38cb61b5-21cc-4768-bc97-51206aecbc82", "sighting_of_ref": "indicator--82d50eb0-9001-4250-85ad-61ed984cc573", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1912ac41-433a-45e0-bba1-d0f6ca9213e9", "sighting_of_ref": "indicator--671e51ec-c172-4c22-9a61-79db0de9c57b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73b9f34e-88e9-4ed1-b7dd-354ada1a09f8", "sighting_of_ref": "indicator--320cf347-8004-4eb0-9cbe-ac9253a52793", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9266006f-b147-478a-9fea-d3dceb91381b", "sighting_of_ref": "indicator--f3d74855-d96d-4515-8d55-e3c7b7e9a989", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2d5dc59-a20f-4ba3-939f-0948d9c4372f", "sighting_of_ref": "indicator--b39da00d-3ed5-43e2-8621-1a4769cc0a80", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9ebecad-65ae-448a-ae2b-5a0391d2d77a", "sighting_of_ref": "indicator--abf8958d-73f7-4e11-b135-3d528379644d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--157b2b88-1535-4d3e-a271-cf7f2fc1bccd", "sighting_of_ref": "indicator--20f8d5db-caa0-4dfe-a609-c18820722482", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3853aaa-a5f5-4832-93d8-6434ea7a916e", "sighting_of_ref": "indicator--1b3ba9af-390c-49a0-911e-06b8e09ad1f1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--846b52f7-c974-48c6-afcd-28e758f3fdb9", "sighting_of_ref": "indicator--1213662f-543d-49a5-8ad5-8a3d2a4fab2f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8c47aa1-f83d-46ed-9bb7-51d7f69c72ff", "sighting_of_ref": "indicator--a6966349-8151-46f0-8218-dfbb62797a15", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d8498a1-324e-4df0-8c47-f8414daedbbd", "sighting_of_ref": "indicator--1b231c27-2621-4ccc-a9d2-7b6497805f6b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b54bb47f-54da-43ac-a73c-201494fcc1d7", "sighting_of_ref": "indicator--c9a46198-11a3-47e3-8902-7de41d3111f6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0f3429b-228c-4166-a9a9-094275d62889", "sighting_of_ref": "indicator--3f9b2574-6a45-48e8-844d-b924330f093b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6fa9acc3-2c6b-49f9-90bb-8452839c176b", "sighting_of_ref": "indicator--2a8c1b74-21ed-43a6-a37f-ec662291c808", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38372496-7e32-4341-ad36-c66a51b19aba", "sighting_of_ref": "indicator--4be562a0-62d1-4ee3-b604-aa8ae7b28b65", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c62d9767-da10-48e1-8d45-17de9816766a", "sighting_of_ref": "indicator--874f9f39-268d-40e0-86a7-c309b012e305", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--429d81eb-6d25-4a3c-81aa-1f488b003b66", "sighting_of_ref": "indicator--4c9bcefa-97c7-46cb-ad74-8bcaf5233a78", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52bc04aa-4a11-4274-9a1e-317ecb4f1001", "sighting_of_ref": "indicator--bdb6ec95-0db2-4ce0-9e7f-66ef7c9fbe03", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d8febd3-2ad3-4d2b-b5a4-c76d0e368e0a", "sighting_of_ref": "indicator--8f7ab7a2-9452-4f0d-8a4b-bce8d3cdc419", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1ac4eb7-d28b-45db-9811-2f6319d7a41f", "sighting_of_ref": "indicator--80a28ee5-82da-475f-b63e-11d5923af7fc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2066b11b-638c-4af3-9eae-868f1d0052d5", "sighting_of_ref": "indicator--953c2667-4bf2-4935-b08d-38bf8ac4714f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--313b00ef-774b-4b10-8b04-81720f288185", "sighting_of_ref": "indicator--128383e7-3b85-488d-b91b-66b755eea8d9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e486e80d-18fc-481e-b22f-36ad3c20a561", "sighting_of_ref": "indicator--c6f2fc7b-ed82-41d8-8a21-b5a44ccef173", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08202764-278d-451d-a060-702f8b13e61b", "sighting_of_ref": "indicator--628ac4ce-1e63-4809-a1f7-cb758997807e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0e7c749-7805-4d13-97b5-9a7f21c6b9ee", "sighting_of_ref": "indicator--60989f6e-6e1f-4230-b541-8884d580ca3f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e2f9659-45f4-4f56-9f84-6adbf8f26998", "sighting_of_ref": "indicator--f168e5d6-a14e-48e4-bb44-727114240d23", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c7b56f88-99cd-42db-ba2a-db658a6f62bd", "sighting_of_ref": "indicator--6c9cf16a-74d3-4827-a4ad-e731a2f4abce", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--634500c9-604c-4171-8304-aebe2fdec287", "sighting_of_ref": "indicator--5817531d-82b3-4dc3-a208-fb06ce437456", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--702037a0-6fe3-4d17-a2f9-86fdac533787", "sighting_of_ref": "indicator--080ab8ea-379c-4f34-b751-f758b69fa1be", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--128d5216-76ae-4298-980a-375c6f10276e", "sighting_of_ref": "indicator--4b23d3e1-3c52-433f-8ee7-8ee2fecc9b5b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e30c0888-6b30-497f-956e-f10449a52343", "sighting_of_ref": "indicator--45ec0c46-89a4-4645-b3cb-cb4357a0f4fc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31ab39ef-551f-450a-94c7-bc7a460ddac1", "sighting_of_ref": "indicator--df33458c-d448-4f94-ab1b-002bc6dade30", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48322b18-a330-4dda-b81c-1e9320dab895", "sighting_of_ref": "indicator--c9f499cf-91bd-4578-8de3-f6e5119dc693", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d58aaf48-d20a-43f6-bec6-c19c0e504241", "sighting_of_ref": "indicator--64dd0226-51ec-43ec-aa40-04743e84e57f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--340f664c-4f69-4375-8ec7-8f0f74993974", "sighting_of_ref": "indicator--a3089f91-6bdd-43b0-be71-4c791d514f2a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f307779d-f41e-4f88-ae72-04d2dcc0cef2", "sighting_of_ref": "indicator--24ef2e88-a8df-4ecd-931a-74218234608f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb55dcbb-3915-4a04-8038-0a625898ecc5", "sighting_of_ref": "indicator--647dd7fc-2ab8-451d-a420-00598c85b5f8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9b368a9-32b5-4f58-8193-737f01e70fad", "sighting_of_ref": "indicator--e3553f6d-1cac-4ce6-893e-c580952e3f6d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10508e4e-0a01-49fe-942e-353c807bbcbc", "sighting_of_ref": "indicator--0f3bd6cd-1d08-4191-b18c-970bcdeb9dfa", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b85bbf2-946b-421f-82f7-8f751f73b4db", "sighting_of_ref": "indicator--5d67ec5a-12a2-4885-950e-68f355841fbe", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd1583a4-1ec6-44df-8f54-6dee40ce2cad", "sighting_of_ref": "indicator--72da9f1d-6276-4e27-b724-4e20b23a795d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--358ceebf-c077-4510-b9a7-7f3bf47b4ab4", "sighting_of_ref": "indicator--3adb24b3-f350-400b-b208-fc87e60ad74f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--683757d4-214a-4062-93a7-189a71535671", "sighting_of_ref": "indicator--53b6e693-431c-41f3-8521-401ce85c68de", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d04eae9b-a876-43f0-82e2-9a8c7497cfc4", "sighting_of_ref": "indicator--2d5171ce-b3b5-4ff6-bb6b-f65462c9a090", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc4ce865-86c4-4640-975a-1dcf51d172df", "sighting_of_ref": "indicator--0d3d21ed-4352-400a-bbaf-82dbc3175ea5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28fe072a-f6f7-4feb-872b-ea7662a66555", "sighting_of_ref": "indicator--18f97899-78eb-4e2c-b3b3-ab6c678c303e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c1582bc-6f14-4888-b21c-7f3c2a79f483", "sighting_of_ref": "indicator--0afd7303-3a31-4aaf-9409-7dfb83441e18", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54a9f54f-97b8-4a5a-9f65-1897336fdc96", "sighting_of_ref": "indicator--24d58531-9a43-441e-9fb9-debdb4911a5f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--682eb429-e434-440b-970b-3f173e217f6f", "sighting_of_ref": "indicator--8ec9bb88-d042-4f25-b440-0a3e8994b75a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b4f10a1-1aed-4bb5-856b-71bfc75dd86f", "sighting_of_ref": "indicator--028349a2-eacc-43ae-afca-c63b6360ebbe", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96484b25-8293-4307-adf0-09dc8c6817d0", "sighting_of_ref": "indicator--539b9eff-51c5-4570-a643-5c08c453c84c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d27b8be-12e9-4856-97f9-5a83b07a9bc5", "sighting_of_ref": "indicator--8bc9e7ee-b639-4a88-b3ef-a0bbcab2c49f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ecf5df1-79ec-4037-8f3f-6bf49b5c2049", "sighting_of_ref": "indicator--6478d4f7-255a-49b2-9e8a-0f784ff49e2a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a91a6d26-7a49-4d41-b906-7b744947087e", "sighting_of_ref": "indicator--732d1380-38df-4b49-b53d-fbacd0415a72", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d01d920c-20f1-4bf2-8bc2-b3f8ddab939a", "sighting_of_ref": "indicator--48d93e8f-d06f-4b71-9996-7d70e044d2df", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dee25248-f3ed-4619-9dfa-51440b2728fd", "sighting_of_ref": "indicator--5d07335b-943f-484d-9878-009ea2c37c35", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dcd93f2-8d2a-4bc2-b049-f309f688c6d2", "sighting_of_ref": "indicator--69f014f4-33cd-4c75-9562-e1fbd7ec8866", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f957ff7-0767-4158-be7e-1114372f5c47", "sighting_of_ref": "indicator--c575c0af-3be0-4d04-9312-528783374c9e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d41f9ced-3814-4a02-b0ef-47847757870f", "sighting_of_ref": "indicator--603455a9-b25b-43b5-85a2-e294ec407aa5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f147ca8-a71c-4795-b9f5-7b7c5031bc2d", "sighting_of_ref": "indicator--dd2c7cf2-312d-4548-b66b-1e620c1f3b3f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9135371c-cd36-435b-a121-c3de22403be0", "sighting_of_ref": "indicator--34970164-5db2-4b25-84a9-bb3cd078c55b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57fda23c-40d3-47ff-a879-8e2a844f9e01", "sighting_of_ref": "indicator--66d8228f-c487-46c1-a1e5-e3dbec219db7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3e20782-be2b-48fd-a92a-4b3604ebcf70", "sighting_of_ref": "indicator--de90a547-4599-46c1-835d-aeff852606b6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5911cb1-7ace-48e2-83da-92077f611362", "sighting_of_ref": "indicator--1b594515-70cb-4b2c-845f-caa6539d2b5b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9a74fc7-1632-445e-9de0-84c8921f3e13", "sighting_of_ref": "indicator--ed811382-4204-42f2-a6ef-8eb38f87a2ce", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed5d14b7-0f54-4d94-9467-7cb109e6698d", "sighting_of_ref": "indicator--5a42cf3c-e356-4840-8cfa-08b313a1cb42", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70d4584b-83a4-4f79-a6bc-ec257d1e8888", "sighting_of_ref": "indicator--339ba53e-886b-413c-ae57-28eea24e522b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccea722b-0c4f-4d3a-8039-ba7a9fb3681d", "sighting_of_ref": "indicator--a7f2485a-7206-426d-a998-ce0300927068", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73963ea5-b8ce-4160-b877-6514b0f0f793", "sighting_of_ref": "indicator--8f6b7d6f-b158-45da-b68d-bb347251ac73", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d194afa-fc9f-4142-baab-54c1e0b9bdfe", "sighting_of_ref": "indicator--6b55171e-3648-44ec-b788-593eb7944c43", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29a3f48e-093c-4cb9-ad23-635299febb03", "sighting_of_ref": "indicator--606bd957-5b73-44eb-8e02-352d0b985e8a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02a8bcae-6e2c-4ec8-9e25-712b31d3ebf3", "sighting_of_ref": "indicator--fdefd8c0-42f4-4a33-9897-33d54e995729", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26516ab3-9fee-462f-94e8-a05aae430f73", "sighting_of_ref": "indicator--07eeb703-d1c9-4bcf-8e33-f68b7c23dc29", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15e0989c-d5a9-46ba-8716-83c4c530eec2", "sighting_of_ref": "indicator--4f919714-c5ab-4c0e-aec3-9275d631a0ca", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad3ba318-7f92-431b-9bda-f832bc73e959", "sighting_of_ref": "indicator--089f3e24-9643-422a-b26a-60643d72c9fc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dc32da5-609c-4572-996e-b4107f9dee07", "sighting_of_ref": "indicator--ee4f85e6-5faa-451a-9874-a85f486c816a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c0b657e-410a-4a72-9e95-a904e720d974", "sighting_of_ref": "indicator--f63c76eb-1a31-4222-a591-5b8673c06616", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--264d3814-e068-43ac-9544-8c824b53f374", "sighting_of_ref": "indicator--4c64d14a-e973-4960-9dd4-fdc1ea314c56", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1468e383-26be-467d-abc0-6002b682658b", "sighting_of_ref": "indicator--1be236bf-1130-4bb4-9c86-fd0c350d1016", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6312e30b-9c66-494a-9402-c45faf009c2e", "sighting_of_ref": "indicator--a28f578e-a74e-41c0-bceb-63aa8d1bdf13", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd936cdc-9f95-4eb3-a448-8b524a945b58", "sighting_of_ref": "indicator--7e087d17-502d-448f-992c-15e385a85417", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fca27487-9f2a-4eb9-92d7-11b08834ecf4", "sighting_of_ref": "indicator--8ff6c0ce-4d44-4b8a-b04e-0cee9a14470b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80ac4f03-5832-416e-94b2-e2825bdb82de", "sighting_of_ref": "indicator--7e79d7da-1d3a-4694-a2fa-38cb4e714554", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f84f66a-ec5b-450a-82d9-d24201eb1867", "sighting_of_ref": "indicator--1fd767ed-4cc9-4efe-b91b-6290660ed939", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b8ec083-373e-4d4c-9c25-e1d4fc9b15d9", "sighting_of_ref": "indicator--6fbc431a-58ee-450a-8e86-2e5fbad8b30e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6d4d2d8-0189-4681-86b1-1ef9bc2eb378", "sighting_of_ref": "indicator--4587faae-c1b9-49eb-9466-eca97847f844", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--379ef704-a6cc-4f13-a5d5-43590ba6cf4d", "sighting_of_ref": "indicator--3647486d-be2d-4d9f-a4f4-87fa5ec9a222", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d298cc5c-9cf8-4e99-8bcf-337eee5d834c", "sighting_of_ref": "indicator--fe3db272-855e-4cc8-a834-ff96129c7a0e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e0b4b05-8b7a-4d9a-bb89-5497f67e8554", "sighting_of_ref": "indicator--aaaac7fa-80f7-4d97-96c5-989657ac187b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0bb0f1d2-4964-4189-a8f4-2e372aca6266", "sighting_of_ref": "indicator--3084e8fc-7de4-4d67-868c-4019bf69fc56", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d88f6e3-b393-4d8b-a755-5b88b7fcd8ea", "sighting_of_ref": "indicator--1c924a0a-8eeb-4b53-bf61-a36b0912b54c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d387ad2-59ec-4961-add8-e93f2f207fd0", "sighting_of_ref": "indicator--4315bd2c-a5a1-4dcf-91d2-6d22bb7c06b0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--873fe20c-8858-4aab-9e96-29e2bd9003f5", "sighting_of_ref": "indicator--4d8f391c-3a07-44fb-8b37-e5b4ca196b98", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6590f9a-f487-441a-9fbe-601c40a0462a", "sighting_of_ref": "indicator--06bdf62e-2ece-48e0-96ca-1af6b44e0142", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e128eae-b9c4-428b-a89e-e0831a4afb92", "sighting_of_ref": "indicator--43b120d8-2497-4412-9af9-3ccd1f1f13a5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87248490-1721-42cf-aac7-a526bf76b829", "sighting_of_ref": "indicator--a3994292-7644-4006-9cdf-3bdbb9a28c09", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90797a34-3a99-4af6-a9f0-39506e5552bd", "sighting_of_ref": "indicator--540dba92-01c9-4c2c-b50b-f55ceb778721", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d83b306a-d9de-4ed2-9f17-c68e0ca984d4", "sighting_of_ref": "indicator--5e614e1e-bd55-435d-af5c-582db06fe0bd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73f252ba-c0e3-46c5-8f10-1a602753c689", "sighting_of_ref": "indicator--d0bff47b-80e0-416f-8d35-48bcc5e99b52", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c8203ff-f39c-4149-9bdc-4c4d24a695f1", "sighting_of_ref": "indicator--220e1cbe-802e-4e73-9259-42a602ddbe93", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e6ec7ef-45ab-4c30-acf8-da151d7b9d0c", "sighting_of_ref": "indicator--c2efb94c-5594-416a-b7f9-ac40641f02bc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--311e2343-6c3b-41e6-bd3b-8075dce66aa5", "sighting_of_ref": "indicator--70bdab22-7c6a-498e-87ba-e18797287870", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6574ca3e-dbe2-42c8-b44b-f821185d02bb", "sighting_of_ref": "indicator--6f50223c-f1e5-4f2f-adb2-0202fba10a13", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24d27bb8-71b3-45bf-b5da-e477b71340e5", "sighting_of_ref": "indicator--ea672e65-8e18-4577-b41f-eea283beb943", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--055018a6-4b0c-4f98-80f3-0a3a1a3d9805", "sighting_of_ref": "indicator--4972e067-baed-456e-9b29-461d825fa0bb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60a4d4db-1344-4c51-85d1-6820758f82a4", "sighting_of_ref": "indicator--44c70176-1b51-48da-b170-34750abecca4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33c03295-e24d-40a1-b1a9-d9c9193e5b23", "sighting_of_ref": "indicator--c9782ae7-d3d4-4e58-a1c9-e4588a7a8525", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6f755b6-c95e-444f-8c07-1cefedf86581", "sighting_of_ref": "indicator--d04943bd-b97c-46a9-b6df-3f642473e73a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2d7eea2-595f-4194-b928-5c299a23454c", "sighting_of_ref": "indicator--549711b0-1aba-496a-ae36-8e2d717d56bd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77e7dcee-bc5b-43a3-bb82-da84bcea4f4a", "sighting_of_ref": "indicator--0509537f-327f-42da-a7f0-8faf2bd9c361", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f79406b7-0d63-453e-bbc4-b082e953cc59", "sighting_of_ref": "indicator--008a6442-3b57-492e-a60c-52019c6de9ee", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fce99114-5be9-432c-8a32-c02dd81fe861", "sighting_of_ref": "indicator--e4c29ffe-d35b-4406-ab51-dc1286912e1b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98878a6b-6228-4331-a7ec-453ed515b71e", "sighting_of_ref": "indicator--3c7db25f-bf6d-40ed-a8a2-36908c03aa86", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16966627-0c0c-4795-95e5-e52a8fa6acf3", "sighting_of_ref": "indicator--4f021824-215f-4c8e-b88c-4d71852762e2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf96f699-36ee-43c6-930b-4fee3a1c10a2", "sighting_of_ref": "indicator--ff6589ee-0615-48be-ab30-707911eeb5e0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51e35ad4-392d-41af-a579-dd49017504c4", "sighting_of_ref": "indicator--1c912ff5-7ea9-41c9-9473-ee5c4f23bd66", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44dbcabd-7d1c-45a1-8730-42b9968e1299", "sighting_of_ref": "indicator--bdcb4614-5aab-4ccc-9a2c-8f255dd503d5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e453859d-935d-4995-88c2-a22dae169dfd", "sighting_of_ref": "indicator--9e2c8caf-e9da-43cd-aef5-3a3feedad5e8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12530e1c-7687-4b11-809c-a67bfcb3698b", "sighting_of_ref": "indicator--9e3a2bd6-a7a8-4dc9-8369-1503bfcf888c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebfb8397-e2ed-40cf-8c09-e8ed7ee3be22", "sighting_of_ref": "indicator--e2584455-6dfe-411a-b28a-650b616c1e1a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e758ed38-db5b-44f8-9d3d-a1ffd4c5fc99", "sighting_of_ref": "indicator--2f060b3f-07e7-46de-aa0b-e6c50ebe1a07", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39f131e5-1ae8-4f8b-a4ee-a050c47aed95", "sighting_of_ref": "indicator--cf17f07d-1883-46a6-8d69-df1a24aab6eb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6461fb0-aa29-47e9-b9b3-d35f95f1ff51", "sighting_of_ref": "indicator--078cb17e-8ad3-4c84-8c8f-90ec25df6c1b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2e1df8ee-a747-4841-89fa-70f55c3985a7", "sighting_of_ref": "indicator--dcff506c-3d55-4f20-ad42-8f95e91f7948", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5929e659-2a62-4968-98e9-25b3844d1f6a", "sighting_of_ref": "indicator--fb872335-33ee-4365-953f-8f27adbf5741", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57e5733c-2d58-4775-94ba-1c74024451e4", "sighting_of_ref": "indicator--b386204f-ae15-4c98-9b9a-1e15466255de", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f68ca19-761d-42d8-82cb-564dd99651cd", "sighting_of_ref": "indicator--32bd6043-21db-4cb3-8edb-09d1a1e5f480", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ce95d1d-b634-4baf-85fb-e4fc1dd8d9c8", "sighting_of_ref": "indicator--ab66dc59-16f3-4936-a70b-d494a519e066", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc30242b-64df-41b3-a04f-bc1bb7f9a938", "sighting_of_ref": "indicator--64ead483-59db-4a46-a47b-b310790bebc1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ad212dc-157c-4c19-981b-c67cd200ded2", "sighting_of_ref": "indicator--464ccf11-22d9-49a2-a227-edb1685e9128", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9d19f58-60a5-4c45-8081-868b0ed7e5cc", "sighting_of_ref": "indicator--b44aab7a-5471-4ced-a0a8-74ca10d4f13b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1af6eace-3e1f-4db2-86a9-7232f4b91ecc", "sighting_of_ref": "indicator--d5df0e45-c813-4316-99c0-f2ffd469833c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3c18c1e-64d1-4675-830b-076b90929831", "sighting_of_ref": "indicator--55f19c58-2be7-48af-ac53-24fa02e3b324", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c728805-d442-430d-8b8f-ab5c58f50e38", "sighting_of_ref": "indicator--8f665223-cf42-4ed4-a130-4c02a6f851f9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a291f58-50c0-4d92-afe9-4f6e18de2f17", "sighting_of_ref": "indicator--7c06ae3f-c8d9-4cc2-a3ad-288c5da7e44c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14f5a517-d4b1-4160-8ceb-50922a29441c", "sighting_of_ref": "indicator--94ffe177-8d18-4762-a01c-c08ae05ef96b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cab9e5cf-ca2a-4d9c-9013-1ae262932937", "sighting_of_ref": "indicator--93240da6-74bf-46de-8c36-b043a1213ea0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf61a5a5-f5d7-450b-8fd5-564d67483066", "sighting_of_ref": "indicator--2102f091-0b55-4a1c-a09b-8d517d9d5fe3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9124b58b-aba8-4af4-bb72-5a39a3ac5e01", "sighting_of_ref": "indicator--0a70b658-376c-451f-a247-dafd44dcad2f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3fab0cac-00de-42f8-aaa9-7664738b4bec", "sighting_of_ref": "indicator--b3190aac-0de2-419a-8368-8c95a1f8657e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--369b0eaf-649a-4690-a3fd-2fa8c3f58e77", "sighting_of_ref": "indicator--a3101781-e485-4552-ba93-86c569bd987c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4c3ed8d-94d0-470e-b066-8acef36df8c9", "sighting_of_ref": "indicator--76c79786-51cb-4e87-af9d-43ff5ef9d220", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ba30e5d-1a8b-467e-9475-fa43a60e1fcc", "sighting_of_ref": "indicator--ea0654c7-f75d-4b2a-8d51-0cef3d5972ef", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d454b2a2-fe05-4a65-9519-1d428dbcfa72", "sighting_of_ref": "indicator--52405ea8-41ab-405f-9099-8a7ee7721ff1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd3f19e0-d237-422b-b0bd-e31119275515", "sighting_of_ref": "indicator--3200b2da-9333-4fe9-8a14-8d7edca94b53", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccb9e878-8613-4b0f-8ef7-56ac925f1cff", "sighting_of_ref": "indicator--72511796-307c-44de-b3fa-7d72925f3bd1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b074efec-112a-4a85-9493-e3397aad9b1b", "sighting_of_ref": "indicator--052b34bd-404b-4b74-93bb-835540b603de", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2fb0443-9db4-4d53-a89c-2e94e164503d", "sighting_of_ref": "indicator--a0192fdd-db02-4e44-b741-90cb230658ec", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34f8b795-2a41-495f-b14e-b14d735f4f58", "sighting_of_ref": "indicator--b5b34b73-7bc5-4072-8560-ace3ef97ef97", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3ef1e9d-012a-4547-9900-689dbaa168f0", "sighting_of_ref": "indicator--6b3de36e-144c-401b-8e78-937a3cef59f8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fc810db-5d15-462a-b613-8603ddd1b57c", "sighting_of_ref": "indicator--8cd0f76f-ba04-4df2-8057-124b8a92266c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcbf7f5c-956f-46f5-844a-3b7481d62fe0", "sighting_of_ref": "indicator--90aab629-72d7-4884-a600-ee447602003c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c832f03b-ee2c-417f-9a03-36c6fd921cd8", "sighting_of_ref": "indicator--a624b10b-c4ec-4868-ae8e-ea60249bd6f6", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c8b5924-6371-4211-ac9a-adbde3a57d4d", "sighting_of_ref": "indicator--e516ae44-25ee-49be-9f97-314f5aff46ae", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d955743e-14d9-4cba-b98a-125fe2ce07af", "sighting_of_ref": "indicator--f5c8ce18-c3d8-4539-8284-32a7eb79810d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c43793a6-3be3-4d87-9a2a-43b9c4683adb", "sighting_of_ref": "indicator--fb1b0dd5-82c3-4d6e-bdb3-1cc0b4228aa8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca55c33a-cd63-419a-99ed-88f8c396eabd", "sighting_of_ref": "indicator--b107ca3a-8d2b-49eb-a2ed-150ed50c1867", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--000d69b5-ec30-40a3-8ec8-02e143cbe6ef", "sighting_of_ref": "indicator--0d3088f6-781d-415f-91d8-e89511a23e2f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4f07343-055f-4b79-8423-41e9e463fb9e", "sighting_of_ref": "indicator--19be938e-e360-459c-83ec-acbc1124aa14", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6721b8b5-c059-4eb1-a9f0-3c193c30208f", "sighting_of_ref": "indicator--098913dd-a24d-4c26-86f5-f4ea3ff20625", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42827111-0b08-4c4d-9a2c-4bdb8635b79f", "sighting_of_ref": "indicator--4b2524b1-2557-4f3f-899a-7c34ba9cca33", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--325a2e13-9df8-4511-ad5f-4aa28a51defa", "sighting_of_ref": "indicator--a3616bf2-5361-4a57-96b4-10bd711c14bc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3ad81a9-632b-4e72-92a9-189777dbed81", "sighting_of_ref": "indicator--b00b5a77-d2c6-487b-8fe6-873fd298d217", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94117f8f-0034-4a4f-80a2-d8abc04cc99e", "sighting_of_ref": "indicator--9fb96ca6-27b6-4275-890d-a5510b66622c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89fa554c-45c3-47c3-a762-c73cf28701fe", "sighting_of_ref": "indicator--3f2d3790-1634-47bb-a3ba-2ed08492dc54", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f35822f-5508-4b58-a998-3d95910537c8", "sighting_of_ref": "indicator--0c1b3ee4-872b-4d1b-9fcd-c953c9a876d6", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c2e89de-476d-490d-bcc0-210e98c396ba", "sighting_of_ref": "indicator--6b282fb2-bce0-4a02-ae28-35e951bbde23", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72fd48be-abaa-4870-bb72-f01e19fdf342", "sighting_of_ref": "indicator--6fd98b5a-defc-4982-a147-664e4e976e4d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--641e29c2-1769-4716-ac1a-2f1bae641850", "sighting_of_ref": "indicator--f30c2b52-865d-4aa9-a08e-16aee406588e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--abba4fd1-c042-43ed-b8e8-188d51def97d", "sighting_of_ref": "indicator--00ea48b4-c710-4a7d-b894-448a8e03f661", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a65d8bc3-436d-4f04-9eb7-89763ec562ee", "sighting_of_ref": "indicator--9bf6c1ef-682c-471e-8503-840bf5fb9791", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ea16dc0-087e-4463-8ea0-ff6835f75a49", "sighting_of_ref": "indicator--94c5e5df-96c3-41a5-ad6b-019eb3abbc71", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1983aee8-cd6c-4d47-88e1-f440596e8521", "sighting_of_ref": "indicator--38de9474-b97e-4f8d-a332-243e96a69e78", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3611a364-48a9-45b8-b1a4-2b8f77581f5d", "sighting_of_ref": "indicator--5fdb97c7-e282-44f6-ac19-91a95c22f3b9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fd7cf36-adf9-444d-88b5-b4e07c08f512", "sighting_of_ref": "indicator--8e29cfd1-99df-40db-bfc3-97633cc83430", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--662a7302-b841-4fbb-9ec1-d4c984e1177f", "sighting_of_ref": "indicator--d263f45b-af1f-4589-94f8-e67d8f1839a0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0142f7ec-8159-429f-b24f-24d83ee0a887", "sighting_of_ref": "indicator--18f2811b-4c58-46e0-a9e0-859496f7eb78", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d1a8274-65dc-49a5-9d4f-8ca765bfac44", "sighting_of_ref": "indicator--545c7bce-c49e-4553-bd9b-606a150bffd7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af307ad6-c9aa-48e5-9b10-0d53c1ecb5bd", "sighting_of_ref": "indicator--363a80eb-a64e-429d-8d05-96852eb74ce0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de02a6aa-e733-408c-9f3e-1012f58aa32d", "sighting_of_ref": "indicator--372399d2-bc70-4170-9207-fb5003b903c2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59053e6c-b000-4c72-bacb-524a9e4f5580", "sighting_of_ref": "indicator--065d13d1-291d-42a4-92a6-352f3a560592", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66a57630-a3f9-4594-936d-aec3710de2f4", "sighting_of_ref": "indicator--790c8082-2e9e-43c2-a826-d4eda0082bc6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1197e10d-7126-45ca-a6bb-4664f6dbb10d", "sighting_of_ref": "indicator--ecbf2aae-e0d6-4a08-9d63-cc64ec610c5c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b131830c-5e76-4c60-9783-0482a45698aa", "sighting_of_ref": "indicator--c4f1bf0d-c5ef-428e-82b9-dda3e984ecca", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68a773bd-d3e3-425f-82ae-1829e3e5dfcd", "sighting_of_ref": "indicator--86efecdb-0e06-4eef-9fdb-7fc0488d0dc4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d383d741-65ef-414a-8dc3-ed06fbc9443f", "sighting_of_ref": "indicator--6df13762-da20-4fbe-a668-4429af5eb2ad", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea1b0ce5-dc54-4749-bea9-c991f52f5977", "sighting_of_ref": "indicator--f6fd0540-c96f-481e-9d33-82ad13690984", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ae1fd3c-4adf-43bf-9c55-0b97dade7766", "sighting_of_ref": "indicator--6556675c-bedc-47c0-886d-0c4bcf9f427e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0142ef72-3859-4183-8637-a9619dee5454", "sighting_of_ref": "indicator--a3f7ef1d-9829-4419-b1f2-2acdae0dabaf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6b52a98-be20-4373-8cea-0a2f7beefd8c", "sighting_of_ref": "indicator--f0335ce8-a719-452c-bc12-916ac89b3cc0", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78ce4991-f572-4c02-920a-03087a2efc98", "sighting_of_ref": "indicator--796d17d1-f78b-4fc8-a114-c12df268c750", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--553b9f8d-6ce9-4ea0-b9a6-34d1e739c843", "sighting_of_ref": "indicator--1146a684-cc4c-41a5-9dcc-4f88d4f36b02", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f86470f-df57-43c6-9f47-0b65d51fc5c1", "sighting_of_ref": "indicator--eb189741-d76b-4737-b487-e8913d7bc855", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--569fd13b-ec8e-4135-8194-6c7448f7c303", "sighting_of_ref": "indicator--144d1ea8-4508-478a-8877-94c05ab09a81", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f49961e7-c283-4621-afaf-fae5c38205b6", "sighting_of_ref": "indicator--85355c74-3c95-43f7-925f-556e0bd7a3eb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08503e5b-d7ae-437a-b763-2295189de79a", "sighting_of_ref": "indicator--9a25e655-995a-4003-8c96-a22217ad0718", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a1b59b9c-5cf5-4125-8b94-c8cdaac9d2c0", "sighting_of_ref": "indicator--89c0d3b6-359f-40b9-b304-57120fd2809c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--400939fd-ce4e-4021-80dd-ab47f7ed4e87", "sighting_of_ref": "indicator--dd6c33ca-288b-463b-8fa9-487ef83421a3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d13a686c-003c-44b7-b3b8-e5f26607f938", "sighting_of_ref": "indicator--5ceb59f4-0442-4da9-a0a1-e5d7a3937a33", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd94cdf0-9530-473b-89ce-7c53ca4b75a1", "sighting_of_ref": "indicator--cb5e1fce-e5b0-4e78-98e0-c122dd446423", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0028f4c9-6570-49c8-a10c-fb07e4d247e3", "sighting_of_ref": "indicator--2a438d1b-bff7-44d8-abaa-cab5105ceb51", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6fabe82-d0de-4059-8246-e06c0e03ec08", "sighting_of_ref": "indicator--77b13a4c-b0e3-4d07-84b5-71bff4741b87", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae97210f-80f5-48f2-a0be-a021dc11fb4b", "sighting_of_ref": "indicator--61980a22-4ef6-4926-a8c4-7a16d12f528f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b03e9be3-3ab3-4940-abea-b225ac3734ca", "sighting_of_ref": "indicator--798dccbe-0efd-42af-a347-8c34a5b39865", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8ae9bac-d6ef-4a2d-97b0-20cfd86d3ac0", "sighting_of_ref": "indicator--8e964ae8-f207-49ed-aa26-4cb5bfbb3e90", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c7711d9-4513-433f-bd37-c81da641433b", "sighting_of_ref": "indicator--eb8d75f0-54e3-4951-adc9-745f1ec0dc61", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec3eb233-0771-429c-9f34-99a5ac88d253", "sighting_of_ref": "indicator--5a8b563e-8589-48fc-bcc4-64809fbbb5f5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54ceebe1-12b8-47d4-b508-d06d62627793", "sighting_of_ref": "indicator--3e732945-e695-4a44-b9fe-e039d0f7d59d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--688dae7a-8913-4432-8ca3-8f83a0f733ce", "sighting_of_ref": "indicator--fd2eca8a-997f-41b3-ab10-1837edc5a020", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ae7826a-66a4-4f77-9a9c-cfb093f87379", "sighting_of_ref": "indicator--02203de9-2026-440e-83b3-661faec89cb1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--025d7df4-0b6d-414c-befc-9c6ee064c37b", "sighting_of_ref": "indicator--b03ef49d-24b1-44ca-b20e-c43d94a06456", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58d88ed3-e5a9-4754-89f5-03cf5930f72c", "sighting_of_ref": "indicator--683def78-0e1c-497c-affd-ce848fcd53d4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4e49524-5d88-4987-af6b-765baf7840e7", "sighting_of_ref": "indicator--702bec35-0e87-40a7-86c0-b0de69f11f43", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79d72ab8-9241-40a5-9bb2-ebddf5984afa", "sighting_of_ref": "indicator--2ac3dba9-ff43-47f1-8fe2-0453103e826f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fd6ead5-da99-4349-8f64-cc7a0c1e8cb4", "sighting_of_ref": "indicator--024d0ba5-a7a6-4e6d-8282-36f6a0bc6903", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4f971ae-cf61-40da-9716-91d523a3ec88", "sighting_of_ref": "indicator--0ba1039a-199c-4758-ab8e-d90b061452c5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22acdb81-040c-4246-b43f-da24018be1ad", "sighting_of_ref": "indicator--d2969d30-0115-4995-8a2c-e0af7cb0e5e6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa22ead4-1c5c-4fa2-84c7-42cc40bc27e7", "sighting_of_ref": "indicator--cfcddc18-6f1e-44bc-b633-00a970f0bd1d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99fdfa1c-e5c0-41c1-9d7b-6e447655fae5", "sighting_of_ref": "indicator--61548313-c1ef-4132-aa8f-f1061dab1987", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9bf032f-e328-4c1e-a460-92c3cb96678a", "sighting_of_ref": "indicator--8dfd5f5a-198e-4906-a31c-dc0104b9e3b8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8de2516d-25a0-4d1b-9b67-74233d751196", "sighting_of_ref": "indicator--56ec96e8-54db-4994-acc7-da09add0884b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fea56513-6f51-4075-878e-21bfb386be20", "sighting_of_ref": "indicator--247578aa-da10-43d8-8324-724e8ab2b5e4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc01f242-c1d1-4704-b6ee-7ffb3248775d", "sighting_of_ref": "indicator--292e6933-207f-40c0-b441-e8fca1f6fd6e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b575fe26-9093-4568-b073-d73cd4845ec4", "sighting_of_ref": "indicator--c2ea2086-4ebc-4b55-a164-ff722840fe5a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--863f86b9-0c27-4de9-8943-02e0779b8951", "sighting_of_ref": "indicator--8074fb6a-f4c4-4bde-aae3-9b02e7ad83bb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f9fef4d-b55d-4054-8a97-c912ed2aaa5e", "sighting_of_ref": "indicator--946ee691-4c9f-4b11-acdd-afb4da2e429c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2655c37c-18a1-4cff-b9f5-c53f714dbcbc", "sighting_of_ref": "indicator--9156a8da-0620-436c-9f6a-f9081aa280e8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d92828c-346f-42c0-ae50-011cf3204b8e", "sighting_of_ref": "indicator--5a4eefcc-6aa9-4864-b191-5cc75d141845", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e860b5a9-56b5-4a62-9ef1-dee49387a2ff", "sighting_of_ref": "indicator--e2ba5008-c459-4b9b-b19c-4f5ed0c696c9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7389fa23-a660-4cc2-9166-3153416095c7", "sighting_of_ref": "indicator--7eae20a2-7fd7-4fb1-a9b3-672ba8da0c32", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9e5f7e8-6baa-4c78-abd9-7448fc142e4f", "sighting_of_ref": "indicator--54a24b1d-9aac-4b4c-aa0f-d04fc0a24edf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39e3d18c-c69d-476c-a9c2-d935b7fcdf0f", "sighting_of_ref": "indicator--da896eb9-bda0-40e8-8962-bdda0a898b37", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a34cc688-86d7-4bbc-b1aa-ab84b8e3e663", "sighting_of_ref": "indicator--b39b908d-ea91-4d9e-a652-ff9874caf8ca", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7471732-c244-48da-903f-f5f64adea36f", "sighting_of_ref": "indicator--a2f4afbd-843f-4f87-ab75-1053aeb615d4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b9c9a72-9534-4995-bf25-1f4fc692a202", "sighting_of_ref": "indicator--f54bc8c4-74ec-4423-b482-51af1c299f68", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--033202db-9f00-4bc5-a23f-6d5d4e8800c5", "sighting_of_ref": "indicator--98ec8171-d1b5-4f84-88b5-4f70884bace4", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ca15547-b652-4535-8e2e-e4d0c7a354e0", "sighting_of_ref": "indicator--97968b04-8519-428f-a760-471ef05e445b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fa932dc-6235-4ad7-989a-81ec4a8b586e", "sighting_of_ref": "indicator--505001d1-6e67-491d-9f4d-d1cc0aac7273", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--613aaa11-79d0-4eab-8032-bc343eb12902", "sighting_of_ref": "indicator--a29b4cf4-8fd2-4c4e-a77a-e466cd2b980d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9806b77e-b849-4778-93b6-acaaf6a54016", "sighting_of_ref": "indicator--288f4983-cbd9-4957-852b-3b702c762fbf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c474dc57-2fc1-450c-a917-8c0043abcfae", "sighting_of_ref": "indicator--466ced00-d50c-438e-96f3-e7595745f618", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8daf3cd4-fb9f-4692-b6b8-ca1948d1b173", "sighting_of_ref": "indicator--f64910d1-e159-4ee8-9f17-7b6596690d35", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7654e741-b7de-4986-8a50-0deb228ce960", "sighting_of_ref": "indicator--c89ed0b9-a16b-484b-a4c6-5a2bc5c47fb9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04e5699d-a814-49f7-89f3-2ab4324cc469", "sighting_of_ref": "indicator--3f37cec5-a01c-4158-a733-45b1c6c18245", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--093872fb-2b1b-45b6-9942-f5947a2076d3", "sighting_of_ref": "indicator--b50fb3fb-c1f0-44c6-bc3c-018f0157c190", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--428c47f6-65b3-4aab-ae1b-21fc36c7f47c", "sighting_of_ref": "indicator--6cce8a5c-ff8b-496a-b0fd-85efe42946a5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d4f2f7e-b2f2-4c6b-bb18-7edf0a8377f7", "sighting_of_ref": "indicator--a96fd93d-4a13-4002-93b2-fe11b6fab1fe", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19bcdd47-a9eb-446a-804c-8fd2e4415525", "sighting_of_ref": "indicator--0e2e7409-3914-463f-8617-99f8b24a41f1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12b7beb6-d6e1-47ff-87f5-e0fb6b2ed80d", "sighting_of_ref": "indicator--184b9046-c2a3-4258-bbac-8898ce6f5d1b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08bdc6b2-d426-41ef-abbc-c60b84faa0ba", "sighting_of_ref": "indicator--cab401ef-cf9e-4de1-9668-c8372cb66154", "where_sighted_refs": ["location--c8625a69-b7e6-4cad-99d8-76632a875c20"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0bfb3ee-ed7a-46e9-85b3-1f5b36ddc4af", "sighting_of_ref": "indicator--a497ee9a-0844-46de-a44e-57bab29ce3c4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52c022c1-d885-4bad-a93f-5a8b9a823e87", "sighting_of_ref": "indicator--ffee34e1-4f5a-4307-a9d3-800d6fa605ba", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e22324d-db44-4d17-b0f8-f6145c26aef2", "sighting_of_ref": "indicator--49eab7bb-3993-40c1-af93-166230ce5bac", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69c7cc44-20d5-434c-807b-09c225c57c71", "sighting_of_ref": "indicator--2dee7c31-aef8-4578-84ed-3865cac67218", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--938ae0ef-186c-4fa7-b12f-6006df99eb1d", "sighting_of_ref": "indicator--736ac921-75b8-4399-92e1-dc48bf000fad", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae3d98a7-af33-4db2-914c-781da6580ff6", "sighting_of_ref": "indicator--fe356f60-f143-4a65-a044-4d3f5b731c22", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a113c3a-4e8b-4731-982e-c0d490bcc5e1", "sighting_of_ref": "indicator--1059d6ae-8476-4909-948e-3d1cfc2d607f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0ce82db-1e27-4a57-89ec-ea263ba1f755", "sighting_of_ref": "indicator--35c3b8b2-b1aa-42f1-a701-195a0f737fd8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f213678-3b1d-4ac5-93e9-07328393b9de", "sighting_of_ref": "indicator--66e4673d-847e-4eb2-b94e-8a3d99613a22", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a65b125f-d1be-4734-a5f0-2716b030b258", "sighting_of_ref": "indicator--1c0a9670-db66-4daf-9cef-950c672d00a8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e476b8a-545d-498a-b8da-51b6858d3e97", "sighting_of_ref": "indicator--d373fe93-78f7-4dd6-b9c7-98466d929124", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a58daf56-d2a5-4f47-a584-a93c641f6415", "sighting_of_ref": "indicator--1b400cc6-ea07-4b8f-a646-877f949da5f1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3a6e9df-4e33-4842-9010-26cf4e5243fd", "sighting_of_ref": "indicator--68ba1f80-5a80-4d29-b397-1c0febe078f5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e80068b1-6c20-49e0-a159-30a1272697af", "sighting_of_ref": "indicator--1e47ada6-d285-4ed1-8536-fd7daf15fa18", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10c8c060-90c9-4e87-a92c-da01311ab259", "sighting_of_ref": "indicator--d5124468-1103-443c-86b4-839ba28fa07e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35199fe3-003b-41e0-bc4e-f120661afe14", "sighting_of_ref": "indicator--5cb93650-4379-4fdf-b64c-0d61f37d1026", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a06a1589-1d4b-45c5-a915-f01730362799", "sighting_of_ref": "indicator--8f4bb2d2-ac50-4255-adc2-384fe84d2798", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92bfe127-c888-4768-a69e-351ded48c269", "sighting_of_ref": "indicator--fea960ba-ce95-4335-8279-04bf33d505a7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aebc152d-4482-46d6-a82b-ff22af23a599", "sighting_of_ref": "indicator--3999a84d-e204-4f92-a33a-7c5e5fdcc9cf", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fff67a1d-1589-4228-bfb8-aeaa3856be3b", "sighting_of_ref": "indicator--e37dda72-1303-4a65-bab7-bad22be50ee7", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94b7334f-1740-406b-8830-fc97f73c227f", "sighting_of_ref": "indicator--d02eadcb-5308-4e4d-8f88-dca21e0416d5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e06104dd-3df8-4594-bdb9-c57d27c9d303", "sighting_of_ref": "indicator--101509fd-0d4c-4d9e-8ee1-b5ec764e48ff", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cea559d-46d8-4dda-b778-8b2ffab98802", "sighting_of_ref": "indicator--174eb86c-915f-4aa7-a475-c32334987bc8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1187f62d-1e13-4ce7-9938-89e480860354", "sighting_of_ref": "indicator--67b1d187-8687-4dbe-9369-f0738f73a5d5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--612fe439-b06f-49d0-a685-9a555ce14c98", "sighting_of_ref": "indicator--0761955c-4c06-44c2-9050-8e21427f0d16", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ffd9cec-81b8-47d1-ae9b-ed1dfe0eb340", "sighting_of_ref": "indicator--a1830132-949e-4147-aef4-6210ae1e64ac", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e819c8d5-504f-431b-b290-dcd23ea7885a", "sighting_of_ref": "indicator--bd270510-81b7-45e9-b43a-45d259e739e4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6b309c1-df06-45f8-bf40-62f6e5160932", "sighting_of_ref": "indicator--59acff3f-2605-449c-8445-e1485e4c525b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61cba965-b90b-4eb5-ba89-c8a7eac547cf", "sighting_of_ref": "indicator--8d8133b9-ca28-4346-bb79-258abca8ca43", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a5d9552-c0f9-4f41-aa5a-b542c24c0476", "sighting_of_ref": "indicator--229bec62-9f16-4caf-ad2d-80d72d7e11d8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23a4fc40-f2de-4200-a22c-745d2d0eecb8", "sighting_of_ref": "indicator--ad62089d-46ae-4b19-a489-b7f681282f03", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0026ba51-1e67-4d01-8886-56b3fdf20354", "sighting_of_ref": "indicator--8d84d942-6a66-460e-a99c-d98c818b29a4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec8e002e-bc4f-4bc8-acd7-68cf5f4914e3", "sighting_of_ref": "indicator--c51c9d25-441d-4493-b890-11e14445c624", "where_sighted_refs": ["location--c8625a69-b7e6-4cad-99d8-76632a875c20"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c686b1ce-7f02-4b07-b02c-a53258874c70", "sighting_of_ref": "indicator--159e704e-02b2-4b44-93ca-4491ce57fa53", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--983340c0-e678-4a0c-a83c-d46d1165d932", "sighting_of_ref": "indicator--1a2a43f9-3dc1-4a17-981c-9c4f49ff6651", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--328c0020-567b-4948-b407-4f938ef777ab", "sighting_of_ref": "indicator--4e526529-c66b-468a-9677-87e69839ca53", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29cd6deb-301c-40e0-b7ea-d0be35191e23", "sighting_of_ref": "indicator--6cda3bd5-1cd8-4d93-8be5-823eeb3e5d21", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71eeff39-42d6-4eca-b205-ef254bcdfb9e", "sighting_of_ref": "indicator--9c40b65f-ea3a-4b0d-96a8-c09caa2e2b46", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--016cfe7d-7ed0-4f8a-b106-e697a0be60ee", "sighting_of_ref": "indicator--5cbed4ac-1004-4dbc-b2f9-f2c129cbaf75", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4366f833-3e34-41ee-8d62-531b7c82ecb7", "sighting_of_ref": "indicator--4bbb0447-870c-4a2b-bf16-d73ccd0f30f9", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4379371c-5e45-4c0e-b994-4351c95e9e58", "sighting_of_ref": "indicator--90998d43-539b-49ae-aa0c-d6b1969539cd", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b349895-e581-4833-806e-8ae1e40c0146", "sighting_of_ref": "indicator--e5bcd253-6878-4497-bee4-e74c55f13a46", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86611685-6e10-4af4-831d-78bb1d3fbe1d", "sighting_of_ref": "indicator--30840f26-a677-4e52-aaac-40ba05a06b7a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cee01fc-53d1-4681-b017-558ba8d736cd", "sighting_of_ref": "indicator--b578414d-8479-4224-bb3e-89f8f6528ee4", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c940b213-9217-4224-9f4d-0ef2e6bfc171", "sighting_of_ref": "indicator--54799897-6897-41fc-a95a-d06a1ea1296c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d432841b-29ad-490e-a91e-3382ce149653", "sighting_of_ref": "indicator--31fba481-85a2-4290-9881-e7f4efa32b18", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cabcb637-f004-410f-8426-46276feb0186", "sighting_of_ref": "indicator--88e99c2e-7719-4e39-b561-5b0fe708bc4f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14f46128-c63b-4cb6-90fc-34c6d41168a9", "sighting_of_ref": "indicator--df465e51-d521-4635-8c82-aedf37f3cf92", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b916b7e-a5ac-4b46-b731-b410478d9e8b", "sighting_of_ref": "indicator--62f90dc6-2e3f-407a-8620-18429b72d8c3", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01529cb1-7834-4be6-8960-e1e9e7862398", "sighting_of_ref": "indicator--42b72e0d-c39b-42e6-a32a-3e5b9c5f6126", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--114c3c9b-59f1-42db-a9ea-ae1654da7a8f", "sighting_of_ref": "indicator--6ba8b115-0e96-4c6f-9e3b-19f36c651b5a", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ccd042c7-d617-405c-863e-92b1fc6b7ccf", "sighting_of_ref": "indicator--79db6a55-7b27-4420-97bb-f5f5b955888c", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bda2e4f9-82b1-4627-9c03-598d5d7c45c1", "sighting_of_ref": "indicator--fbafb3aa-238c-47f0-b169-ef43bb129f13", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--efca9e7f-3015-49fc-85d5-a54977d3e48e", "sighting_of_ref": "indicator--787fe203-09ae-420f-914c-775de27e26f2", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32c42bda-a74b-4285-bfa7-ea863bf60796", "sighting_of_ref": "indicator--b634e64f-2b3c-42cc-966a-0e339274d425", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ecbaabf-b349-419c-bf6a-98f64a3ea9e4", "sighting_of_ref": "indicator--0b59fed4-1a2d-420b-bc87-f6fd478064f8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f56678a-2bf0-4e80-8ffb-18c7dfb6dfc5", "sighting_of_ref": "indicator--122375a0-9c8a-45eb-a59b-85c5dfee3468", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67ef3056-3b24-4f9a-8dfa-c463688b0a36", "sighting_of_ref": "indicator--1d867cb8-580b-4237-b17a-a33e6f6c4450", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--907c2f84-f1f5-4ced-b93e-2f199e163aad", "sighting_of_ref": "indicator--95ee75ed-ad16-468f-a20f-b6c2d727345a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eb67ba6-a9a6-4f25-b369-6e36f941810a", "sighting_of_ref": "indicator--dc88ec32-aa81-4243-875f-588c652fad05", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d79f6a50-2274-45e9-93fb-eaf26e26ea61", "sighting_of_ref": "indicator--b5a81853-a580-488c-84c8-629acdc550b8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46775f2f-f35c-4ec5-b38b-4573101443f2", "sighting_of_ref": "indicator--a8a5eb90-3cc3-4fe0-a819-bbc257e0e3c5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--151671df-187c-4887-897a-54f2f75e2c57", "sighting_of_ref": "indicator--a07b63a1-4b69-47b1-8405-bc559cdc0cac", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c6c760f-4b22-4e6c-b370-a2e29eb328f6", "sighting_of_ref": "indicator--ac1a1f3b-b49f-4264-9026-5207a58fe11a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2adf03ea-603e-4605-9d80-c3dbbe9c671e", "sighting_of_ref": "indicator--a1776327-bfce-4d13-aeb4-b695bc1a8c09", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--191707c7-671f-4c76-9c11-16efff5d0b00", "sighting_of_ref": "indicator--1bf7da60-2018-457b-b89e-93143f66e0f4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--551f0931-d9e4-4cdf-b08b-b5316282ab57", "sighting_of_ref": "indicator--1c3c567a-ee50-418c-967e-d1eb6703021e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8f7edcc-a64c-4320-9cb0-b3fff91714de", "sighting_of_ref": "indicator--c0936761-ad91-4a42-8cf4-c25334ee4398", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ca33f20-5458-4a09-aadc-a04c0b842bfd", "sighting_of_ref": "indicator--35863d4d-1ea7-4742-a825-a592457adf53", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--876769e7-c1dd-42ae-8c03-13c3e944dbf2", "sighting_of_ref": "indicator--2519605e-06e1-4b10-ac4c-6596cf2b8280", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7cba9ae-601c-4d3a-9c26-7f14869b24e5", "sighting_of_ref": "indicator--bca6038f-327b-4d71-a259-d9a3bf3a9c72", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8bd9d757-ad76-4394-b34a-71dd6abfe5e7", "sighting_of_ref": "indicator--1ed898af-eaee-4b18-87b6-34790922edcb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec4cddf2-a726-41ac-8824-b4bb48f9ca2e", "sighting_of_ref": "indicator--a45172c4-f16e-4f97-9f90-9d81c1123879", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8ffaf6e-3a96-4287-8061-163186d849a2", "sighting_of_ref": "indicator--ce7a57f5-a593-437f-ae5b-02711ed5a85f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--775be200-5377-414a-80c4-ec31b5f664e2", "sighting_of_ref": "indicator--bbfd7134-4d65-45c0-8cf1-6bcb0f066af5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c98dcb14-9227-4abe-95b2-39a53faf7a8a", "sighting_of_ref": "indicator--f0d68041-ea9e-41ea-97b2-059fd6cf1e9c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16e7b623-0bcc-46ac-acd9-95fbb9e50763", "sighting_of_ref": "indicator--36d1b142-f4e7-4690-ad28-b3a15bde5ef7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baec2876-053a-4cc7-b55c-1780b026327f", "sighting_of_ref": "indicator--ce011036-1e63-480b-8b52-90e6355c9900", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fb8a96f-0600-4a6c-b41c-ed639b8fe887", "sighting_of_ref": "indicator--bf9e0106-b10f-44dd-86f6-c9b39d71c3bc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--269758e6-e412-4d52-a945-7403a2bd8ab2", "sighting_of_ref": "indicator--5399d423-4cd3-4ffc-9343-242faf9fbfc9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c86fb18-ba07-4014-8357-300e199c73af", "sighting_of_ref": "indicator--efa709f2-1f77-48e5-ac8f-662f324e1e99", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2479970f-9868-422b-88f5-f31db760e50f", "sighting_of_ref": "indicator--d080b3d2-bd82-4810-85a8-891300f4d271", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1847efcd-aade-4d0a-91b6-55800505f9ae", "sighting_of_ref": "indicator--14d92078-4d0e-4401-9699-f1c7244d8a78", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--878c80e5-0f1f-4126-b5a0-32ec21c48417", "sighting_of_ref": "indicator--f923a29a-2d0e-4dad-b2a2-2e74cc80fffb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52d3b33b-9a7a-47e1-bd4c-883ab48c40e3", "sighting_of_ref": "indicator--ad9280a9-712a-461e-8b26-d434dccb5374", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87e1135d-5a2b-46f0-b220-11d00a8ee397", "sighting_of_ref": "indicator--e16791ed-682f-4e0a-bc0c-54db8cd356a8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46a785f2-737b-4f97-aa70-e2834b642682", "sighting_of_ref": "indicator--dccc9a7a-cbd3-48b7-a776-8fa676c7204b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bdeb413-f69f-4e65-9904-1561f414ede6", "sighting_of_ref": "indicator--fd1e438f-b689-4504-ba36-fe71d246ba7b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d40c73f-f890-4eda-9757-524359d272bf", "sighting_of_ref": "indicator--d7df35b9-3ea6-410e-8911-8682d39ad136", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4df26854-5d10-4bed-84ab-1767711c0d7b", "sighting_of_ref": "indicator--43b77249-3f8c-4a91-bc73-ebf134ba5064", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2545d959-f038-4254-bdc6-92c81fdbf378", "sighting_of_ref": "indicator--189b50e1-a584-4e37-8b14-fe30d693be73", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc4d155e-630b-4fc3-8c65-de0724c73981", "sighting_of_ref": "indicator--e70c35df-b69b-419a-add9-c20cef1d999a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a69fd0cd-6caa-41d9-a93a-3f82ea3cd4dc", "sighting_of_ref": "indicator--6c103143-4de7-4ed3-8fce-3224891769fa", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57c62a7a-cdfb-4121-9f98-67be772c9b07", "sighting_of_ref": "indicator--43dfa6ae-b84e-450c-836c-8767eed47a27", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c55126e8-40c0-4872-85c5-d2ce98ae17cf", "sighting_of_ref": "indicator--ae6cbdde-d682-49ab-9033-60fba3fee186", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27c6a409-d631-488c-a1d2-8e1565b56141", "sighting_of_ref": "indicator--2f63bbfb-2d08-4356-a15b-e40f6d20c93e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab5bbae4-6a1e-460f-ba65-afe3caaa8b58", "sighting_of_ref": "indicator--d00fbf92-b8ed-43f0-9c09-25e6fde67b8d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44b7724d-57db-40ce-8e30-3b10a93c759d", "sighting_of_ref": "indicator--b25fffe4-99a6-4b71-be8e-c8863a52f133", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92450110-fc74-4900-84a4-71a4246d3e86", "sighting_of_ref": "indicator--7eba6819-dd37-4be3-b73c-1605460fa1b4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83ab6c28-bb8c-447e-8d57-c9017112f1b0", "sighting_of_ref": "indicator--1c591483-2cc4-49cf-b815-38fc3fc9abfc", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9413e28e-766a-4192-8fb1-71bcf1eede1f", "sighting_of_ref": "indicator--805659a1-20c9-4c0b-881c-dd9b4c4e23e9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4e4d406-8d38-414f-a8c7-752c3434c1ce", "sighting_of_ref": "indicator--993fb017-e1a5-4a49-9fb4-021169a888dd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0318c17-f420-4282-affd-9cb1f0c2ee64", "sighting_of_ref": "indicator--b6df66b5-6693-4eff-8007-493e10807cec", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15c4c9b2-0403-429d-8fec-561ee4b0ef93", "sighting_of_ref": "indicator--78dff342-9bc2-4a18-8414-019492423eca", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b87ebf7a-3fc4-4e63-a3a9-e33129a695e0", "sighting_of_ref": "indicator--4b4d12d9-e314-4ec7-8edf-1b1570379e81", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c367a334-818e-445f-a810-3a675fa59a39", "sighting_of_ref": "indicator--e4a4c95c-67ea-404a-b9cb-357840cd14c4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13b73af2-614c-4cae-94b5-540dc3f76f34", "sighting_of_ref": "indicator--4e1af1de-3cc7-4111-96a0-6415e3a6f3d5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f28fc10a-6dfe-4bd4-a957-c4561faead18", "sighting_of_ref": "indicator--e834d6e6-1613-4598-8826-9f51375fe046", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--275b533a-61ba-4a42-8c6c-b06240ba6bd3", "sighting_of_ref": "indicator--b53ca4f6-05c2-4b55-a424-19c5897c206e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3df3d0af-105c-47f9-b2a6-ef0c4b9ad2b2", "sighting_of_ref": "indicator--ce0a373b-472d-4430-adf5-a5e5357ac64e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c83cafe0-cf0c-473a-8824-0cc6fa61683e", "sighting_of_ref": "indicator--47cfc0d0-a563-49bf-9f56-8c7a9b6601a6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58b28c85-4929-4e16-af4f-8e043326ba83", "sighting_of_ref": "indicator--2e594e0b-8c78-4acf-a21d-c06f26e3a501", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--577a6257-5242-4255-885b-9bed135c35c5", "sighting_of_ref": "indicator--746ecc24-e648-4966-a8e0-21a871d375d9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57e78ba0-22e2-48f7-ad4d-88a8052b76e1", "sighting_of_ref": "indicator--e3b375db-4928-4040-8d3d-9f3fe655f8a4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad0844cb-65e1-402f-83da-8080153d10c2", "sighting_of_ref": "indicator--6206cffa-363a-4025-899a-f1c655ba4c9e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faa4e7aa-c977-4a48-a154-ca111ff6ee7c", "sighting_of_ref": "indicator--8d7451b1-c99b-4ac6-bdee-e5b509cd2674", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f603678b-c6aa-4ea4-898a-cb657dcfe6ef", "sighting_of_ref": "indicator--5ba8dc53-203a-4ddb-aa2a-d4000513ff8f", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa6bcd9f-e702-4f2c-aa59-661f624fc79c", "sighting_of_ref": "indicator--7f24d751-b648-41ac-849b-21ce6bddb4cf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56a86ce6-8bb3-40e8-acda-0294778eb06e", "sighting_of_ref": "indicator--6bdefcfe-f933-4887-b83f-5dddb38d13e5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deb7cbb5-bde8-4413-a129-d51f10f4aae1", "sighting_of_ref": "indicator--a8092fca-9773-4a9a-8881-ef6ae9ff0917", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9f799aa-7385-4303-b1f0-2672243cc6a6", "sighting_of_ref": "indicator--a1fbdec2-7212-420a-8808-115f1bd74f66", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--223b3543-e518-4dbc-8914-2a8f8a70a246", "sighting_of_ref": "indicator--3f14518d-8f23-48a4-9bb2-3417f2dc213a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb198088-0f13-4dc9-afc4-7fe8fc6bf949", "sighting_of_ref": "indicator--237c6a21-8d05-41ba-8912-8f2c7ec2db65", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ece6abc4-175c-4ead-b017-d5cb8f176553", "sighting_of_ref": "indicator--2d102c55-214a-49fb-bcfa-6244fc97b39e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de0ed043-21e3-4755-813a-50a0bb4b66a0", "sighting_of_ref": "indicator--2b660ee5-c012-457e-9ae0-1afa5609a044", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--044522c4-2b1b-4372-9576-db8dd33c7b4f", "sighting_of_ref": "indicator--527f8c31-0859-4d45-9112-85db4847f752", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2269b90-83f3-4225-b8a8-46f9eef8100f", "sighting_of_ref": "indicator--ba6f3e87-d416-4d98-8f66-0ebaf444508e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9405a8b-9406-4ef7-915a-bf7bd3d9f6fc", "sighting_of_ref": "indicator--6c8e7567-e709-4dbf-a829-a791e05b341b", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56add27e-fcbb-4f6e-b9f8-3488f5aaf630", "sighting_of_ref": "indicator--852a4d57-a44a-4f45-bec2-cea770fd43d8", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54ae2f79-f763-42f2-9564-6b75ed4d4be9", "sighting_of_ref": "indicator--b1904993-1685-481f-9b5f-5a6ae5b3a641", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--683d1d26-f390-4154-94fd-e240f1126c01", "sighting_of_ref": "indicator--893dbb63-c4a7-4835-a850-8d28b8fbed98", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77d50979-124a-4c5b-aa25-cf4374e03712", "sighting_of_ref": "indicator--8e6dfe53-52c6-4d79-99b1-c30f31cea8f8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cefecbd-5aa8-438a-a43b-220cf673f977", "sighting_of_ref": "indicator--e1cb2f89-0376-4a13-9550-3da5d7dfc766", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--775cb43f-e21d-4e3a-9883-7d8cfd9db4cf", "sighting_of_ref": "indicator--d209d7cc-b850-4768-a2cc-47581d9cb9ba", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24e96632-70e0-45d8-9a79-407764d26abb", "sighting_of_ref": "indicator--a2a0ef58-2603-4d99-9a4e-ef739f277056", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51a0edef-bd72-4650-9d9b-496490041323", "sighting_of_ref": "indicator--165b3a87-3816-45f4-ba54-76ca41e54c22", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7aa261fe-77ee-4cf4-802f-2241fceb5255", "sighting_of_ref": "indicator--527cc4f1-624d-475f-87ab-5797b2e5a432", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cae3e7ca-20b7-4986-8a77-a60e93fcd8db", "sighting_of_ref": "indicator--6a7d2f45-84f3-4c31-90e6-f290fd7711a6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0ccb93e-ac4a-44c8-9096-cbf3ddf71f8b", "sighting_of_ref": "indicator--bd77bd8e-111a-40d8-904e-cd96bc459350", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ee3357b-b730-4e4e-8179-4e91065e32fe", "sighting_of_ref": "indicator--acb5b1d9-409d-491e-b726-231f30b02ae3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--775891a8-9c18-40e1-b599-e9dafe4c93fa", "sighting_of_ref": "indicator--90d73aeb-11e0-4243-ad60-02e2fcc2ce7c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--598ebdb5-060d-4a1c-aa60-423dcf1fcf93", "sighting_of_ref": "indicator--be9727ed-4fbb-4ee3-9896-d85b415004fb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5f6744e-166a-4056-8272-b7eca8f3f9b2", "sighting_of_ref": "indicator--4d861bec-67bc-4c01-8806-57ec3a09c8ba", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af5c17c9-aa96-4b4f-9785-f3f1dc201fa3", "sighting_of_ref": "indicator--67de4a40-4fea-483b-813d-9bacb075c183", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50e7cdb4-5cf8-4322-8b68-095c789227e8", "sighting_of_ref": "indicator--1c768afe-ecaa-424e-8636-de17cd80e5ed", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c510b7eb-9e8a-4f15-b142-fe59b748107c", "sighting_of_ref": "indicator--2e625d23-eb1d-4a8c-83c3-076323c76049", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca9945f8-fc7c-4fd6-9ad0-d4db5f6f7f71", "sighting_of_ref": "indicator--48b23d8b-8e2e-483a-8d54-25d8c67a9821", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a931601-121c-451b-a424-70b383444d67", "sighting_of_ref": "indicator--04ff7809-6f90-461e-a9fa-3e954418339c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eaaaec6f-6eef-4432-8dac-6fe0e9507e6a", "sighting_of_ref": "indicator--a832ec78-8825-467c-90ea-9fe8bbc12e9a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef878abb-d65a-4540-a19b-f6351e735ce6", "sighting_of_ref": "indicator--e6fe2d4f-09c7-401f-953e-ad26eee5e852", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4660c04b-471f-4842-b254-713917f6dd42", "sighting_of_ref": "indicator--43c77580-fc55-4f90-9714-4ad3de520e8d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--879047a5-440b-4be2-90ca-f0414916941f", "sighting_of_ref": "indicator--decae894-9880-41e8-ba91-ac98020c0250", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93fbc76b-a561-4582-8bcc-51c906763f60", "sighting_of_ref": "indicator--0dbdbe0d-92dc-4828-93f7-a6c8daa53832", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb824676-9913-4b09-bb62-3b8d05fc9db3", "sighting_of_ref": "indicator--30756508-777a-4a21-bcd2-358d72ac78eb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--633b3439-33f5-496f-94c0-47fe2032435f", "sighting_of_ref": "indicator--60021045-12fa-49b3-a73b-8d17cd33efa3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec56ec30-5773-462b-b945-f0d97a10b4ba", "sighting_of_ref": "indicator--3f565ab6-1c99-40e1-a6b4-57126b87d904", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2dcf06f-9769-4257-9cc8-7d2fe013f8aa", "sighting_of_ref": "indicator--31838525-e018-4286-af6c-57f07466ec5b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--881b7f94-1db7-4765-8bdb-dcddf275ca61", "sighting_of_ref": "indicator--9d38de0d-6762-4865-9dbb-6c332d96f3e0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50a8baf1-b989-4504-86bf-08b3baaaff1a", "sighting_of_ref": "indicator--53291afb-1449-4b16-a6b5-680b6426dfaa", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bec009c-f581-4fc3-81e0-a6de278287c2", "sighting_of_ref": "indicator--0680e803-3696-4c5b-9ed3-c6c463d3639f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--102a27e3-f201-41fe-b801-abfdab584825", "sighting_of_ref": "indicator--40829529-522e-4ad9-a032-700fb392452d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d979349-45c1-4f8c-900b-468527eac8aa", "sighting_of_ref": "indicator--d959ad84-56e1-4fb4-9aec-8759867a3778", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c221095a-a09c-4971-a48f-b148b9d5b796", "sighting_of_ref": "indicator--212ec99b-f9f9-4fa6-a8ef-5231a625c2c9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be1434a0-d765-4935-bd22-ee1c7f045a5a", "sighting_of_ref": "indicator--04ea17ad-21a1-4517-8697-3bab146ef661", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71268927-255e-4028-8b8b-00becb8071da", "sighting_of_ref": "indicator--5fcbe86c-4f2f-4dea-8dd9-6e32dffe1e78", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fd75000-36c3-4001-8cdf-ec82b63eeb83", "sighting_of_ref": "indicator--8cacf188-4e77-4720-bfe3-150966fc03b7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83f8d79d-474c-4abd-870d-547e600e8b3e", "sighting_of_ref": "indicator--ea1d415b-2d7a-4ce8-84b5-d1f0b9bca794", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f88a4809-e244-4487-a638-c8c31688da34", "sighting_of_ref": "indicator--58e57ef6-6bf8-462e-b17d-00046d459cb8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a2e8351f-95f5-42c8-8265-b09234e0bff6", "sighting_of_ref": "indicator--ab06ed54-906b-4411-ad02-d0d8b87f9ddd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10932fbe-00b3-4b8a-94be-9f1ee146c277", "sighting_of_ref": "indicator--b3865cff-85f9-4521-9987-7ec53881ed9f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--829faa95-42e4-404d-bf2b-facb2248ee7c", "sighting_of_ref": "indicator--5b748d50-9f97-4b1a-89d5-e758c8618978", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c598977-9811-4efd-94e8-b21367384b6c", "sighting_of_ref": "indicator--0bccbd79-8576-4a15-b797-534e04182bfa", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6818afe7-7b3e-4dad-8766-34d8d30b67cd", "sighting_of_ref": "indicator--0ad8bfbe-7915-462a-b180-7e9bdd941589", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39d99bfe-b6ea-44c6-a7a4-d881a14f2a1c", "sighting_of_ref": "indicator--fe17eb45-de53-42c3-98e1-9f9db5ce9e0a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--452f2bae-7d7b-4d88-86a9-dfb9f903ebac", "sighting_of_ref": "indicator--e150d6b5-45f8-44aa-89a5-ac9bf4b84a17", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dcb8855-f62e-4bb6-9603-098a1b1c29c6", "sighting_of_ref": "indicator--016031b6-8860-403b-94aa-9901798afdc3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81b7d44f-8f8e-46aa-b087-56aeee5e7b34", "sighting_of_ref": "indicator--e23d91dc-9957-42da-b5e8-3872fd9a540f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66245d5b-c803-4ec8-bd37-f5b6281dfd76", "sighting_of_ref": "indicator--0d0b5240-6125-4d39-b582-bb16c9cc2fa6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--789baf1c-2f57-4101-8e40-a967898ea1d9", "sighting_of_ref": "indicator--30b4ee4b-0103-4e4c-a1a2-44de82d31659", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75d89b64-a0bb-49ec-b7dc-d8e3dfae46d9", "sighting_of_ref": "indicator--ef27f003-1a00-4ce5-a150-c8d86b5f2955", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--615c604a-2e6d-48bc-99e2-b2dae6e4927d", "sighting_of_ref": "indicator--e7f35591-be46-433c-bbf5-b1791fe1f0dd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28255b89-6c2e-4de6-8ec5-cf7268038b6d", "sighting_of_ref": "indicator--767bb5cd-a18c-4768-8f77-e19d4cc7ee67", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1a72d52-d394-4fba-8b27-9ba3832fa805", "sighting_of_ref": "indicator--5921d002-3956-4306-8939-79301aa5539d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba5d3544-a318-4b1a-83ed-0d42ef8d95cb", "sighting_of_ref": "indicator--da3cc644-f2a0-4fcd-a195-fd1f615cc54b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ba63b69-3231-4c1a-a2f0-25297e473156", "sighting_of_ref": "indicator--43a2f803-faa9-4c4f-841c-ee9b0c4712c3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--850c23a6-4e83-4557-8afa-43bb6cb5ec24", "sighting_of_ref": "indicator--6baf7f37-d0ec-4878-8245-ae6f03b16008", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a72bb0a-e9e5-43df-b8da-e6250b093901", "sighting_of_ref": "indicator--e9d24266-8190-47f9-87ac-b3d60ca4e750", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--640cda2d-14c1-475f-abeb-718f90d295b2", "sighting_of_ref": "indicator--683bd312-6168-44f8-afe9-157a2785db1c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d717b9e-a1e4-4702-a1b8-81e244860bbf", "sighting_of_ref": "indicator--944cd21a-637d-48c5-aa07-c7a3a52006a5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d70f70c5-1378-408f-a0bc-c4db3f2e2112", "sighting_of_ref": "indicator--fe368cc6-966d-4f1a-8ea9-f17e3f5ce81f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c66b2be-58b3-4b06-9d0e-6d18043fa615", "sighting_of_ref": "indicator--2c19d705-7387-4cd0-a151-be102d689e23", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72110f72-ef22-44dd-800a-dd38e64b8e28", "sighting_of_ref": "indicator--893b1355-ffde-4268-89f8-889de24ca8dd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c4ea8e0-1266-45d3-b860-2126517ee09b", "sighting_of_ref": "indicator--70dc18fe-9fb3-46db-9fba-63f916314a8a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6128bc9d-90a3-49bd-93d3-8b2384d61c98", "sighting_of_ref": "indicator--79469458-e66b-4c14-8923-fc758ffd974b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cfed53e-6f22-4caa-bbdf-6c3f3a80a9d7", "sighting_of_ref": "indicator--7a149168-9a33-46d1-915e-b32a9072f8a9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca0d16ae-7d30-412a-ba15-e8d9532a6a96", "sighting_of_ref": "indicator--2d7376a1-5d79-422d-83e8-e1f63e7ea4f8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44fb3d7c-3142-4326-bfad-d19c60d9d0a2", "sighting_of_ref": "indicator--eb945c9a-5c34-458e-8c9f-f9fb7f66a408", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87b0dcc3-a46e-4444-81e9-5655c78de2fa", "sighting_of_ref": "indicator--b6c52d42-2494-4257-85fe-8685054f0d15", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5f8fddc-889f-4e18-bc86-02fe9452d9a1", "sighting_of_ref": "indicator--ddf3de3d-f66a-4cf5-a672-777e8844e1d8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71f04ace-9a59-45df-9b4c-96747bf70980", "sighting_of_ref": "indicator--a43a1d76-1a5c-45bd-ba39-777e08b27968", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7eb332c-e1ed-4e26-b241-e0fe6e9d0ee5", "sighting_of_ref": "indicator--ad9fae85-f74f-4716-a7d7-856fd739fb99", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0329608a-b3e8-4e9e-a0a8-6c2b1eb17ef9", "sighting_of_ref": "indicator--41185548-62a3-421e-8792-70001328a871", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e330d1c2-0886-4611-89f5-559069be93c8", "sighting_of_ref": "indicator--19a353c5-1fd0-4183-b3f1-a8daa0842bc3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ef0d805-ce23-43c6-9177-f3d7b448a0d9", "sighting_of_ref": "indicator--922a9a7a-3524-4549-9eae-d63b4557dab5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96c93cb8-cb98-450f-adc0-2904aef1e026", "sighting_of_ref": "indicator--36b05fd4-2f88-4247-a8ef-6224691e3f21", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c60e199-45a3-43cb-a9e5-0caef76204e2", "sighting_of_ref": "indicator--f30fece6-73fe-49b8-a010-bcd112c8b66a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7c8107e-06d3-455c-980b-3a483ac53ce5", "sighting_of_ref": "indicator--2d570088-7fd2-47a2-b4c1-0d3c508d2223", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c77d3618-d910-4e1d-88ed-13a3aed29989", "sighting_of_ref": "indicator--37e7b30f-091d-494d-a8ca-b6c9ebbe9c90", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94bca319-bb4c-4d00-bb22-8f006c46bf87", "sighting_of_ref": "indicator--a1ee35af-89c9-4c24-a9a4-032fe49dd907", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18b27f7f-31d6-4eee-a5fb-95d33bf48c5b", "sighting_of_ref": "indicator--68762c74-8e92-4a7d-bed4-588f10ec1b8d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53b6cc9b-b756-42b5-a52e-a886ec9b0c58", "sighting_of_ref": "indicator--53696cd3-2005-4b1f-8b30-e0b732833245", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b8c7e70-6be9-42c2-a7ed-737615b57ed8", "sighting_of_ref": "indicator--216462be-9ffe-4c36-9259-a8f140abafa5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31fba092-6a12-4bc3-9266-a1acabed6276", "sighting_of_ref": "indicator--42f712f8-6ce2-4452-b537-a1d850ab5afe", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfefe38b-7a10-4a79-a034-c6ecab7744b2", "sighting_of_ref": "indicator--1cdf4e98-391b-4afb-85ad-24994003c2a0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4633fc19-37f6-4ed7-b651-529183f8973c", "sighting_of_ref": "indicator--2af78ae3-8ab0-43c3-b1a6-475c84215f7e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6150ca7a-f0f7-4050-a544-c694b3407f48", "sighting_of_ref": "indicator--fab48be2-2a90-4123-938d-2e0c85845981", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--803b762d-07b4-47da-ad99-ddf8635840b6", "sighting_of_ref": "indicator--2e915f59-6e52-4b91-a54f-2e439f98036d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dc011de-2b29-4490-ac13-51d39f050449", "sighting_of_ref": "indicator--f8a5dc42-fe4d-4cae-b510-8328b6ca3edf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c92af15c-5e30-4d54-97c3-33b44c6a7a96", "sighting_of_ref": "indicator--1fef1ac9-65f0-4169-8544-a41b9fbc7278", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5d9e945-3a50-4364-aabe-28cdbd0fb105", "sighting_of_ref": "indicator--7c69c22a-07f4-4513-850b-4b2843f21ef4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f6ef4c9-0971-45c3-9c3e-e2ca61a0d1c6", "sighting_of_ref": "indicator--3e171d68-3542-46f0-a87f-a5680f2a0ce6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d31aa129-6ceb-4d7b-b345-02b53840e413", "sighting_of_ref": "indicator--236faca0-3a14-4322-8eb9-0deec2b63a7a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--598f3a4a-6b41-4eac-8a8a-d1326d3559e9", "sighting_of_ref": "indicator--e22d7d2c-a83f-4dc0-9af7-e76b94a194b4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8146349d-d9ab-49ad-885c-1489a926ebc5", "sighting_of_ref": "indicator--ca6cc811-cd06-44d4-9f98-cb0206276693", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66441fe6-b6e5-4a3d-986b-a9ce1334043d", "sighting_of_ref": "indicator--dd3db15e-bd38-4765-bd23-cd650237e3fd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--005ff6bb-40e5-4e98-8585-7e1cf8d26d18", "sighting_of_ref": "indicator--9eff7aaa-e1e6-4034-a399-70dcb4356f99", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a41a3fec-8d02-47f9-a86e-d19837d3b240", "sighting_of_ref": "indicator--c2ef330e-b2fa-452a-8df7-051eee34f8d3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0fe7b5ec-f27c-46d0-85ce-209a0612d5e3", "sighting_of_ref": "indicator--a13fbfa3-e4ca-48f1-adc9-696f57bf17b7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62d7aa3f-76fc-4326-828f-25686ac5e835", "sighting_of_ref": "indicator--0288b2cd-43f4-49e3-8ec4-e799f8651832", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0795c61-3f82-4b15-959b-a95ee5e38f3c", "sighting_of_ref": "indicator--6dd8906e-4e1c-4e08-9a22-50d95c607e94", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56f91896-ee5f-4570-b94c-23a615e440e3", "sighting_of_ref": "indicator--e48b5745-5dbc-4a70-a9eb-57d6c1ed2aa0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac82466b-c58a-4312-ac14-df04f50374e9", "sighting_of_ref": "indicator--347baff0-41be-433e-a088-99d73631d69f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2ed359b-5b3c-440d-a3b3-023030f99a4a", "sighting_of_ref": "indicator--64ff782d-50f5-46a6-95bd-507f448b938a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cac296a-76f1-42c4-bea2-6d4f63c9b9dd", "sighting_of_ref": "indicator--c4a99522-4ca1-4601-bf75-7c4a6c76d0ac", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af410992-ba40-46a3-b588-422ac32c0ce7", "sighting_of_ref": "indicator--b18c8db6-e967-4ae7-a44a-f76109266036", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8b32919-46a7-4913-8947-629a11a4cd00", "sighting_of_ref": "indicator--f392b9f5-0b28-4b82-9234-d7234c6f216e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--189bf143-385c-4a69-b34d-397f6a51efcd", "sighting_of_ref": "indicator--2316fbd7-e497-44aa-80e3-c64d9ac138a2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be4b3580-7c97-43a4-b66a-4a43ddc35cfb", "sighting_of_ref": "indicator--51ac57cd-bc7d-4244-bb5e-7508cf0d9f3d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6abb2d4-f04d-41f0-8120-baa54c0882bc", "sighting_of_ref": "indicator--30ec022f-b341-4bdb-88e7-e746dee6ab7a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76953f16-e9a3-4322-8547-b649a2bd0153", "sighting_of_ref": "indicator--b5db8d6e-c323-4275-b0dd-03272bfcabf1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c45596b-b826-44bb-91e4-52b27c5252b3", "sighting_of_ref": "indicator--dfbc1dd6-b1fe-46a2-b1fb-01f368a5ad7e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91db7ae5-ab95-4b6b-adda-b52b2ab5cf7d", "sighting_of_ref": "indicator--0943e09c-98cf-44b7-a941-fe952bad139c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ef9802d-19f1-48cb-bc1d-e6b7f0bade6f", "sighting_of_ref": "indicator--8fb9ba85-aa5b-4e1e-a091-8ac28e1c5018", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9557cfe7-96bd-4d98-8627-a4f878c15254", "sighting_of_ref": "indicator--5eb6baa5-3a22-444d-9e6b-589d1e784025", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4dca098f-bc81-49f5-9528-1d4051114f6f", "sighting_of_ref": "indicator--5acb0c64-349a-492e-94b3-17fe63bc833f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c9d95f9-7ce9-49cc-8c53-390a263d2747", "sighting_of_ref": "indicator--9f8edcbe-6c1a-4e41-a05b-b90d0dfdcd27", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b94590d-6f8b-40dc-8a43-9b861373267f", "sighting_of_ref": "indicator--3d1ed251-72a9-4626-9e8d-d10a80fffa60", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2825c7a-7f33-4480-82af-4f5b413e57c5", "sighting_of_ref": "indicator--94211bf0-7d25-48f7-a257-cd15603a3242", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0178339f-e3ff-42b9-ac72-fea9f7073fc1", "sighting_of_ref": "indicator--a4d87034-8abd-438d-8e74-4599bfe783b5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5e16479-8ef3-42da-8dc2-dd3eabb4bb1b", "sighting_of_ref": "indicator--26c7c9f2-cfab-4c30-8773-ecd8050b22e5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5e25211-9bec-45ee-879a-011f26775969", "sighting_of_ref": "indicator--830e92da-f846-48f4-854c-4622626b3233", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--edd38257-4368-43c7-94dd-8be2f1c5060d", "sighting_of_ref": "indicator--d9d4af10-9155-4123-938e-6832afad0883", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea4fefe0-4b0b-45da-82b1-949b7a3d1e35", "sighting_of_ref": "indicator--47113179-a76f-4373-9ab1-f1c6261f8f4a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39fe2d27-b7f2-4e5b-82b5-93f8460a04b7", "sighting_of_ref": "indicator--a6bd1cb1-fc4a-4abe-92b3-ce1b2e7f0797", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4862b2e8-2c3d-47b4-b7a8-096239f7be12", "sighting_of_ref": "indicator--47b95330-cfb9-43d3-b9eb-7c8c5f2ea0be", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a203640a-66d3-48ed-8ab8-04b9a065738d", "sighting_of_ref": "indicator--c379c16a-b164-4ae4-aa34-3c1aff956d79", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aad35726-8bc8-4cb8-a8e9-5f0a02abfe21", "sighting_of_ref": "indicator--f3e54f97-07b2-480b-bb98-f2ea72ea2d94", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7189ae2-05cb-450e-ab42-fa3ca82a9fa8", "sighting_of_ref": "indicator--5825dd1f-6485-4621-bed5-75d2ef5d8efd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--756c96d4-b88f-44e5-9a4d-4d54731c9d28", "sighting_of_ref": "indicator--9cb298ff-a3b4-4b3b-a599-428d84670b01", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86a6b7b3-628b-4b0c-a30b-c7daf7538442", "sighting_of_ref": "indicator--a46fe231-da34-4d7b-b136-0489135a6eca", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38f29788-af74-4521-a418-64baadf0978c", "sighting_of_ref": "indicator--0bbc219e-4879-4527-a406-96b94f8f4bd5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95f4dac0-6dfd-4a7f-8c5c-c105f02bc3ae", "sighting_of_ref": "indicator--c69281aa-01f1-461e-bd92-9757627ddd5e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d32cbcde-a8e8-43b8-a0fd-fb7f43d9ab9d", "sighting_of_ref": "indicator--473fcf85-aa21-42a2-9f55-ea271c29c7bf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82eac422-1a90-4a6f-81e3-77ee645c7032", "sighting_of_ref": "indicator--bf934b36-2915-49f4-8c4a-91ada7f07149", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33cd06bc-ef19-4e3b-aee2-0662358195b2", "sighting_of_ref": "indicator--b3cb9903-7808-4844-b125-fe3c27a5e56b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4ab3f5ad-73df-4a2f-968c-a2fac2e0fd64", "sighting_of_ref": "indicator--01decd18-d436-4227-a617-8c9b16b0324f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe7eca56-6cf2-4400-9df6-1cda6b070c9f", "sighting_of_ref": "indicator--a471b41e-cd26-4de2-b233-c655c7575e1f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b676afa-3fbe-41f4-bca9-da637cbc2231", "sighting_of_ref": "indicator--baf1c320-b996-46ca-8ec6-3fb023811e18", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e9b363c-f404-40da-8030-4a560b115ce0", "sighting_of_ref": "indicator--ee6d6f82-630a-4567-ac1c-92e540a6830e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76371bb3-4964-4e35-b02f-c02ca3d015da", "sighting_of_ref": "indicator--7449eaa2-7ca5-4850-b47d-79f2ca78b322", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa5136ce-c937-4ff9-ae94-09d2f13c1ffd", "sighting_of_ref": "indicator--b3f478b2-26e5-4fea-94cc-7fd0372af77d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a946ef42-fef4-4773-bd13-cafd5c8a7dc9", "sighting_of_ref": "indicator--1492f00a-18e1-4969-bb3f-5f4f4a328715", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90f6904a-0084-4e55-a349-fd133445a700", "sighting_of_ref": "indicator--e6fa158a-5a96-4a45-b928-eeedb940b1a4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e30d34e-ac69-4b2c-9015-9f1fcc306474", "sighting_of_ref": "indicator--ffd5b01b-2046-4075-a9b5-25a5489bd3d9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00d3332e-f257-4719-a4a8-778614ac08d6", "sighting_of_ref": "indicator--c532df78-7871-438e-b616-ef895b6fdccc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e372a24-0627-4e7c-a8cc-dd73ff5247da", "sighting_of_ref": "indicator--d52f23cd-b395-4dc0-8e10-74a54fc572b5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f33dec2-f533-4512-b672-82871c332214", "sighting_of_ref": "indicator--cfc36db5-5a95-47ec-9c5c-c029c02c32ca", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--328bdcfe-de35-4416-b9e3-b7fd1c48e843", "sighting_of_ref": "indicator--0e4cde24-b88e-41e1-a58f-5433634e55b7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acbff6e5-3651-4361-998b-5fac033e6f19", "sighting_of_ref": "indicator--25c4fec1-6aa7-4950-bffb-2ed2428537e9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--462753bf-203d-4568-8580-bc9c25688fb9", "sighting_of_ref": "indicator--7829c9f9-958f-4f41-adc8-1c87b5852688", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9be48acc-e2f8-4bec-a3ec-f0f1881b5c43", "sighting_of_ref": "indicator--46be25d3-63e3-434b-baa4-0a8771ead7b2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e3456b9-e785-4f47-9664-3bff0310eb1c", "sighting_of_ref": "indicator--7f1fcc34-c5b3-4ce1-b447-47dab64a8d8f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b69b5b6-fa92-4e58-8af9-e0eeac09fdb0", "sighting_of_ref": "indicator--485f0c4a-12e9-4bb7-81e6-b9deb6b398c1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de3aa7bd-6d76-433b-9a8b-6ab97ef73256", "sighting_of_ref": "indicator--157e8496-e945-4f5b-b2a2-9138b9f7f425", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44bbb794-8295-43d6-8cb8-72d9ca588cde", "sighting_of_ref": "indicator--2d06be94-2455-474a-9755-0d1ae2c84da9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6465c25f-3863-4f26-ab65-81eef14ab4f0", "sighting_of_ref": "indicator--06529dc0-2060-45f4-a8df-b5cf98052df4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89a207a0-5a3e-4fe6-b7c5-d8ac21335d93", "sighting_of_ref": "indicator--897d2225-bb86-4568-964b-8eed809920da", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e55ba92-3647-490c-a9c9-5e58db0b2ac9", "sighting_of_ref": "indicator--a33879e9-3a1c-49dc-8450-5dd1011293f1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0069ba6a-51fb-4c5b-9a10-f95b5ec985f0", "sighting_of_ref": "indicator--9c71edf5-6fb4-43a9-b877-26e524139ccf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50694d05-d39d-4a7a-a86c-d19b53e4f798", "sighting_of_ref": "indicator--bd20d5f0-0e10-4261-988d-0a60f2832dec", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e8704ee-411f-4ce8-82e6-455c23663c26", "sighting_of_ref": "indicator--56d14838-f962-4228-8c1b-cd27cb0bda9d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e0742f4-66dc-4b2d-8452-7a11d053adca", "sighting_of_ref": "indicator--34328036-9bb0-4ccc-8306-12583c6ea0b5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68264d8e-6c49-4e25-bb9d-1e6cb1a177f8", "sighting_of_ref": "indicator--3b2d94fb-88b1-43a1-ade9-bf4ff830418f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e20810c-2ea2-473c-8904-e0778f27652d", "sighting_of_ref": "indicator--cf7821ac-a510-4fdf-95a3-64737f67826e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e37e79cc-294b-4cc6-934c-c2c2a6a85398", "sighting_of_ref": "indicator--204c3e84-0737-4142-8ee2-84584d4b41a7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32f33797-ad5a-4a3b-952c-38a294b69a2d", "sighting_of_ref": "indicator--cb725f60-f296-4d1e-82f5-cbf0d50d1e50", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb07c45b-1490-4109-8127-2d7a14f2e4ce", "sighting_of_ref": "indicator--9a231531-ed2f-4aa0-807b-a7e728fc9367", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d801a7f-74d5-478d-9d61-8701e623d3e0", "sighting_of_ref": "indicator--cb4c30e6-cd44-44cb-b936-1167a013844a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d9c4a08-98a0-4866-b459-c1f5e65f507c", "sighting_of_ref": "indicator--3c314bf3-f6ce-4e7a-a743-c23ef70ee27f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d080368-450c-4f05-b0d4-bdfce807fcfc", "sighting_of_ref": "indicator--59acd0fb-eae8-4d4d-b52c-24328341d4c9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebb45aca-4092-4d24-859f-f78827bce9c6", "sighting_of_ref": "indicator--02e81737-2aa1-42e2-ae86-e252369910d0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--260a2c1b-7e30-4350-bf88-ab83672b1e49", "sighting_of_ref": "indicator--58a69f59-f538-43fc-b3a3-3f5896087585", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d614a788-ee74-412d-aa6e-1b5df7da56a0", "sighting_of_ref": "indicator--41059715-371e-4025-a4b3-a38c89d992f5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ee881bb-99bf-4558-a86f-da5ce7356408", "sighting_of_ref": "indicator--9d65da95-303e-4527-b43b-830632868ed8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dce56ea6-b71a-45b6-9355-caa3ed923f68", "sighting_of_ref": "indicator--8525ee81-f7ff-4a1c-9205-1296f37998c3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7094fb3-97ce-4c00-aa47-a7b2980db24f", "sighting_of_ref": "indicator--137633c8-7c16-47d0-82f9-ddf36566d668", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2362a00f-1252-48ab-b974-1e2a0bbcab76", "sighting_of_ref": "indicator--ef8108b9-ec34-4cdd-922f-4f63274589d1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b8994eb-ae3f-46d9-bcb9-4d753ad101c7", "sighting_of_ref": "indicator--f817c2a4-430b-4c6f-98e6-c12230b42202", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1823390e-3b75-4366-a702-c119d01ff784", "sighting_of_ref": "indicator--5a4f7721-7670-4d4e-84be-7162670778da", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19ec0a59-c56d-498a-b818-70ab911bcc04", "sighting_of_ref": "indicator--3568aaef-85af-49ec-82b0-298af475ce6e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--591506c9-e180-4f3e-b500-2cb8c1e94700", "sighting_of_ref": "indicator--7465a61f-8541-433b-963e-6cc9d08f54e0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7206b361-7a33-4786-bd3a-7cdcf40db9e4", "sighting_of_ref": "indicator--74a0eb1d-00ee-4817-a92c-38b782beb782", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1f8eb72-af75-4111-a940-1b9fac2ee0d3", "sighting_of_ref": "indicator--b4c9d0f7-af6d-4f82-8c82-498d123ce96a", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c459bb7a-7b78-4afc-8b42-e1795bc2d8c0", "sighting_of_ref": "indicator--7cd3d536-0bc3-447c-8163-8ff5a5eab8e0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f62e628c-f43f-4497-805a-9588ac2c5d7a", "sighting_of_ref": "indicator--65e9ab1a-24ee-477b-aded-cebcd619a2e0", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee1e3a6e-b3af-49b2-bbcd-34bcc2206fdb", "sighting_of_ref": "indicator--65e9ab1a-24ee-477b-aded-cebcd619a2e0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d8b218c-5231-47c7-9318-caf56ba360fa", "sighting_of_ref": "indicator--dd9da1bc-b0ca-4fb2-abc4-2d852b1ad11b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6576dabf-11d9-4542-8f8f-7d782dae09a9", "sighting_of_ref": "indicator--2466967a-f863-4e85-8464-2b2b634ab87b", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14599c8b-4eca-4e8e-818a-ddffd284c658", "sighting_of_ref": "indicator--2466967a-f863-4e85-8464-2b2b634ab87b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00777f7b-5697-4181-8a76-6351bc536002", "sighting_of_ref": "indicator--bf9fba2a-523e-4d7a-a11e-b4831a92b396", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c48371d0-eeed-41f6-a04e-ff3a712c73a2", "sighting_of_ref": "indicator--3ab71176-8261-42f7-b0a2-2c02f5dbd8d7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9a737f7-cd07-4835-a8a2-22f00aa6d75a", "sighting_of_ref": "indicator--cf8fc9b8-1ef0-4015-9d84-1536bf3bc9af", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5f1200d-df6a-4131-9ed9-128f389614aa", "sighting_of_ref": "indicator--1869e9b0-d0af-466c-a85b-93952c90d3d5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--548879a9-049e-4ddd-ae54-aa780f2a6d02", "sighting_of_ref": "indicator--41b907bb-5bce-4845-af7d-50d7f2debb24", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55002c72-6be4-450c-af71-2a020bf3d7da", "sighting_of_ref": "indicator--22f58aee-e14a-4a0d-946a-3b99899e6ffb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--524c808e-ae4c-47b1-9574-ae600b9b8c3e", "sighting_of_ref": "indicator--84abaa48-92fe-40de-9604-fec53f78e470", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c586604-b8ec-4ffb-aa11-5ddbf77e93ca", "sighting_of_ref": "indicator--02c31167-a0c8-4b9e-95cb-60578d1660b9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eddaf227-b35b-4998-a910-88b3db3a11d2", "sighting_of_ref": "indicator--3839b3e5-e129-4146-af0b-c0b27785ad59", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebe75d25-9987-4ff6-be42-9951351d6eb1", "sighting_of_ref": "indicator--2fc5a1c9-695b-4722-a855-5525d28676b4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54a4aba9-d837-4ca2-a453-070631e5ce20", "sighting_of_ref": "indicator--3f4d7d09-bdac-41c8-a778-81b2d1bb3465", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6cb9716-5bea-4d68-99a0-20190785bc15", "sighting_of_ref": "indicator--1fd47dd1-a463-45dc-bc59-5a815e7cf914", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e99e06c2-28e2-40bf-b6bc-b8f10b1ea559", "sighting_of_ref": "indicator--798f44cf-846d-4e6c-b2f4-6bbe6e7e530b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43bf9ea2-83c3-48c2-b163-4645f801edb8", "sighting_of_ref": "indicator--7dd86c88-c5d9-421d-9a79-2c01778b0245", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--008e0667-a923-484c-a5ee-2f8f62aa4b81", "sighting_of_ref": "indicator--f619bf51-f741-4ada-8b22-6c3244e2dcbe", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32f3c39a-c37e-4512-b4c2-ddc276463f9b", "sighting_of_ref": "indicator--2fa2ea90-64b4-4edf-a097-05791562a58b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f07d36ac-757e-4a95-8075-b7588ce3d258", "sighting_of_ref": "indicator--d7ec82d2-90f3-4205-b439-3b17aa2b335e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1906033f-2e25-470f-a1d8-3a2e2e6dc083", "sighting_of_ref": "indicator--fc0bce11-2745-4bf6-bfeb-b6ac38d9fb6f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b94f51a1-c3bd-456f-a1fc-2dd34a5aac03", "sighting_of_ref": "indicator--9cbee27c-aab9-4bc5-9b7e-f53705c921b6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48475876-fdec-47d3-92d2-d7e5b8e89f82", "sighting_of_ref": "indicator--5e30a0bf-0e52-4727-ab95-8fa07b2db584", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f78c2509-49f6-4570-8be9-c4cb4743bd4f", "sighting_of_ref": "indicator--59520bc6-4f56-49d8-bfb5-73763c2c5b91", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7811b3e3-b897-4143-b868-80dc17341d70", "sighting_of_ref": "indicator--6125a7ef-bd2c-4911-95f2-4dfcbe96fba7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4f34655-21cd-4e97-8b8c-68e47f44a11f", "sighting_of_ref": "indicator--3ce018e3-e36e-4c99-8aac-188d57925dee", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac1c797d-cd1e-4d44-a9a0-d2545a143f33", "sighting_of_ref": "indicator--231a7f31-1144-4a2a-858d-154bccce3ac6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--400bc89c-1428-464e-8b32-e0ea7666526e", "sighting_of_ref": "indicator--09b078b4-04b8-4022-a04f-41ed4d3f4bfc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--baa88b2e-d8eb-40a5-95dd-b0715971d89f", "sighting_of_ref": "indicator--76de0492-8f0b-4061-bdb0-15f5a997691e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a215947-a8a6-45b3-9408-f2227e438f6c", "sighting_of_ref": "indicator--e4a66e9d-31ae-4e00-854c-5fb26dd57935", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddb46718-31b7-4f91-ad12-823484da467b", "sighting_of_ref": "indicator--f4c15326-f2d9-441f-8af6-e0e458c40809", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ce171dd-f266-4848-adfb-3502097f600c", "sighting_of_ref": "indicator--ac32054d-c349-4ae8-9f39-189d054092bd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c99af8f-0b55-47e4-9e18-6ab6074e9a78", "sighting_of_ref": "indicator--9df5d7bb-63d7-4e2f-ac85-61a19bd86785", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3ce31ed-039e-4cbf-ba17-6bf7eab908f4", "sighting_of_ref": "indicator--b2a3fbd8-bccd-4e5f-8c02-abe30e20aa7b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3504212-575f-483d-b52b-b9e31a44be1f", "sighting_of_ref": "indicator--847a8aa5-91d0-4022-a789-8a089ca96306", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19793152-4dc7-4fb2-89b5-817b22dadc83", "sighting_of_ref": "indicator--7eec6734-0ddc-469b-9ff1-6183af4d305f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0a1cd02-cc30-4b7a-bafd-31f42bf011ad", "sighting_of_ref": "indicator--eadd9125-44bf-4035-af8b-2a5642dba869", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a46ad92-15be-4ca0-aeb6-52fb0a34d1c5", "sighting_of_ref": "indicator--e6e4a1cb-e3be-4bb7-9bfa-3208cfc6101c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d64bda46-0dcc-46b6-82d4-a3c928a1ae59", "sighting_of_ref": "indicator--842bda5d-9851-49c4-845d-952333c0dd90", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c3c585f-76dc-42c1-a377-57c6e44a6df5", "sighting_of_ref": "indicator--696f490b-4d30-49d3-9a28-9d02167c1534", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94d06fba-cdc4-42b8-92a4-90f2f0e00a88", "sighting_of_ref": "indicator--4cdd7389-27f0-4516-92f1-c58ff60f57b2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d869c78a-5735-411b-83f2-2baf620c5bd2", "sighting_of_ref": "indicator--9f0b30f8-57aa-462e-b6d9-b385c07ce108", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b537d4c-fb43-478c-9ba8-859b9afcc526", "sighting_of_ref": "indicator--9d8c26aa-c6b7-468b-baa4-d70837f7ba5d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a7cb264-1f8a-4a0b-bd91-ec69e09e2cab", "sighting_of_ref": "indicator--8fb74b18-507d-4dfe-8dba-0f1790202ea1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd49c294-c138-49f8-a9c9-ef773c792600", "sighting_of_ref": "indicator--703292cb-8666-477b-8027-220e23247b60", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--849035e7-8751-4553-b526-6c51dcd615e6", "sighting_of_ref": "indicator--c13fb576-5415-4251-8299-0d25a23d3098", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb439e5a-6e3a-4e0e-9b38-870781e468b9", "sighting_of_ref": "indicator--4c64f9c4-5cda-4fd3-913c-f4f1af292a58", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--299aae1a-d91e-4062-8df1-5945a7b18e62", "sighting_of_ref": "indicator--9feed688-e1ac-4a13-8c7d-ff3ac3069c09", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11aa3b9b-dad5-403c-b693-dc067d1c6013", "sighting_of_ref": "indicator--8739a979-c439-489e-9fa2-6abda43b8379", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d27c272f-f7f2-43f1-a859-c783c6131bc5", "sighting_of_ref": "indicator--ca394a24-9d8b-403d-93ea-bd778b37d1e5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--141f3244-232d-489b-aa68-0f87802b3a17", "sighting_of_ref": "indicator--fa4345a4-cfed-4f2f-9506-8c5a0bc6e9af", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d0e9a52-7d5d-4fe4-a233-f0bd10d00e65", "sighting_of_ref": "indicator--ae736225-7868-421e-a064-a98e29a20fea", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--837b5192-5b35-4165-bc93-47eb5ea7ee52", "sighting_of_ref": "indicator--63ca302e-35fc-462d-a64a-05f3d578f1ee", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36eb5b7b-b3e8-418b-a6e3-97835a85a497", "sighting_of_ref": "indicator--e3199f65-1838-4211-9afe-3396070e1dbe", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52b930e1-742c-4b25-ae10-ed62650739f2", "sighting_of_ref": "indicator--ce28089b-8d8e-4482-abc8-bc1543ef8286", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cb4e6fc-d640-4331-a86c-bd18dbf29591", "sighting_of_ref": "indicator--39314b97-616a-45fb-8e0e-29398fde52bf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b924a3b8-0ec1-4d29-8092-31af53632021", "sighting_of_ref": "indicator--86c9fd0e-0e96-4dae-a78d-8f747f0c08d9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4e1891e-3b3a-4e52-858b-480cee6962fb", "sighting_of_ref": "indicator--58e7b37d-4860-44aa-ad89-47e5c71fb6ca", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--909ce5b9-14c2-4dcb-bbe2-3c83c72927f4", "sighting_of_ref": "indicator--77cd0348-b473-4f92-a912-2ff390f15097", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cb99672-b261-4c0c-8d9e-81f58a5d687b", "sighting_of_ref": "indicator--f3802643-6322-4211-9733-32ed2ff57162", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--134a4787-f527-4bba-a4f2-64909300ece7", "sighting_of_ref": "indicator--9e75ee97-1d28-4445-b651-f4cb991bd095", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed438fb0-ebcc-4338-b8b0-1509fc6cd991", "sighting_of_ref": "indicator--6261bbea-07fc-46f9-8d3b-ac7e65364c46", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--987531a5-16ce-488e-af85-110b0869dc8c", "sighting_of_ref": "indicator--436b70b7-e00b-4367-badd-2c2cf70a8223", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c129077-5d69-482e-a423-67f1fa1e8cc7", "sighting_of_ref": "indicator--2b0543c6-6a2c-4192-8fe3-64a39e6d17e3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78fa9019-eb00-413e-b1de-2774fffe1dd4", "sighting_of_ref": "indicator--a0351473-7780-466a-956f-d91a3cf7a09c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fd99cf5-8642-4e9b-a13a-d5e0eef7744a", "sighting_of_ref": "indicator--b00d85ee-9a8d-4f0a-901c-14abdc3b7258", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0581cfe6-b4a2-4dde-84d6-e0e4479b2b3b", "sighting_of_ref": "indicator--3d2ccab5-935c-4b42-b66e-b0b88a89e927", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06c32b34-b73e-4f79-bd6c-67e7a8e42153", "sighting_of_ref": "indicator--51be4aa5-ddde-4fd7-92a6-cec5e4f52178", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34b69d91-6a60-4022-abd7-75742d64e3fa", "sighting_of_ref": "indicator--22700396-1348-4d4b-93cb-7d108288c11a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7af119e-95cf-4d7e-aad2-a6ccf8ceedee", "sighting_of_ref": "indicator--25aebbe2-a391-492d-8053-8738eda02164", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2851b4b9-3f23-4bfd-9d10-146aee06104d", "sighting_of_ref": "indicator--21effb18-857b-4883-ae26-ecbd122b2100", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64515b59-4d90-4c3f-9914-291387f7215f", "sighting_of_ref": "indicator--0fd81cc1-bb17-4e6d-a9a2-adccb09a7367", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11660917-a425-4f72-891e-b2508a5a65e2", "sighting_of_ref": "indicator--2e615589-28d1-4560-836d-17691dce69b9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dec0de2-1609-4ef4-853b-2d9c4908e436", "sighting_of_ref": "indicator--2d314b0c-6c1a-498c-9eab-7cb45fd5ab0b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d047c511-8dfe-42bd-8afe-4053d5db7eec", "sighting_of_ref": "indicator--3b305f96-0997-4eea-9c30-067efc2c91cf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4cbae5b-73ca-4e9e-98de-8b5a926dfaf3", "sighting_of_ref": "indicator--c3f752e7-6b39-40a6-8554-212deebfc72a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3be0a11e-060a-4174-b292-c8bbb7ea30aa", "sighting_of_ref": "indicator--dc454d8a-ca3c-41a0-920f-44bd97145972", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a4d09ec-1a18-498d-85b8-4aa5ca0b6cfb", "sighting_of_ref": "indicator--2d8ca110-4ac3-4d77-baac-6150b7baa205", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7b0d68c-1dfc-4113-8f62-b121210606e3", "sighting_of_ref": "indicator--a3e3631b-1457-423e-8452-e65fbe0118be", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b922fc8c-02f0-49a7-8d50-d1e532b678b0", "sighting_of_ref": "indicator--020b7448-db16-4a13-8efe-45311ae74aec", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8460396c-e0c3-4aea-84b9-fff690128ab0", "sighting_of_ref": "indicator--1ec897c1-e812-444b-a337-b94f783c175a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46d144ab-ef26-44f5-8dd4-c089682d2d31", "sighting_of_ref": "indicator--d84e2ab6-f3e7-4551-b6a9-11f31a06acc7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3c04f0c-4408-4b9a-87d6-078ba799984d", "sighting_of_ref": "indicator--3815eaa4-9e7b-4119-aa84-5f2f9ec5e55c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfdfb999-68fe-4afc-8f4f-196db5329d53", "sighting_of_ref": "indicator--4c89383c-3d3c-4a45-8b24-ea6daf5e2d9e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--840e549d-d119-4d08-bb8e-68abba640f95", "sighting_of_ref": "indicator--8a5c3fe6-9b69-40f5-b2cb-5fa9854dadc0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7abe9d6c-777f-4f06-a2b9-0dbf7914ef6a", "sighting_of_ref": "indicator--092030f4-f128-4952-af0b-327d8d56afa7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13d11f0b-8b06-400e-9c84-1d8963bbcb3e", "sighting_of_ref": "indicator--3a672212-5799-4765-87f6-a1b4634e2483", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52c995d3-c2f4-4260-9fa0-e05c7698eddb", "sighting_of_ref": "indicator--f995ef4d-62e5-41ba-8917-f9148db12eed", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36b45745-ac94-409f-93da-a2d01add9365", "sighting_of_ref": "indicator--cdca1d96-cab4-4bd6-b6b6-1d2110e5f0af", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08bf6698-2953-40ce-bb32-b2b125fb310d", "sighting_of_ref": "indicator--7479f1ee-8419-457d-80be-3d8140588a97", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b2c65c7-dbaa-497f-92ad-dbc62712e886", "sighting_of_ref": "indicator--95110f92-050d-4a66-9482-199b350219db", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b1a0a9b-c2fe-4478-8413-40c91ea0ceb9", "sighting_of_ref": "indicator--3aa71e7d-2ade-4e70-8b74-3a6c767f6a3e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2589cf77-d549-4234-bde6-27f4bd2c2d1a", "sighting_of_ref": "indicator--5b6fd459-93cb-4c92-88f2-7925bed0233b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f4a8992-3886-473b-a319-b3114b005328", "sighting_of_ref": "indicator--b7167c72-4469-4e64-b44d-7415049f0ce7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9310870-d9f9-4754-bc70-1f68c188326a", "sighting_of_ref": "indicator--7c4b4dab-0b9c-4a94-ba73-368cc1ddee8f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d7485cd-8086-4c09-b2d2-3b936f94e52d", "sighting_of_ref": "indicator--256fbc4b-011b-401d-9494-ecda570f95f8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--811c52bd-999c-4b6d-8666-8a8bed0419ba", "sighting_of_ref": "indicator--d265e8f3-f94d-4ecc-8325-5d8012b016fc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74629488-fef6-4f18-8704-7cccb31c4ece", "sighting_of_ref": "indicator--231fa397-f7b2-4703-a134-53421214504b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a455b305-c13d-4c64-b44c-7211726c413f", "sighting_of_ref": "indicator--fb6374cc-2f8b-4891-b9ba-da7d354d035c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8d85fb2-5025-44db-9b99-b65466f9dcd7", "sighting_of_ref": "indicator--9eb042f6-8bfb-4c65-9d25-5c8c67451903", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72cf879d-31a4-4c3d-976d-0b8b955216f7", "sighting_of_ref": "indicator--94c5f5bc-0c62-423d-90e5-171c5091bc08", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88e50d0a-5b25-4b25-8e45-db16d3db5680", "sighting_of_ref": "indicator--45bdab4b-c873-4a04-b8ab-9a590d955612", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdc7b286-245d-4189-8f5d-25f73df7a099", "sighting_of_ref": "indicator--2e873ae0-c016-42d1-b5ad-7542f4fb31c0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d56414eb-7c85-4e4a-b4ab-1246d291f96a", "sighting_of_ref": "indicator--0ddfe6f0-ed79-45b1-8d1d-ada7ace9c04a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31e2ab37-d5a8-4b22-8a21-257fbd7ad411", "sighting_of_ref": "indicator--23a97496-655a-4fdc-8220-97dfc2ad8bdf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--655026e2-aa00-423b-8aed-bc19097d614a", "sighting_of_ref": "indicator--360e5cf3-ff01-4c0f-a7ff-117e94d4f5b8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b0c03b0-642f-4b1a-9efe-0ff8047f4778", "sighting_of_ref": "indicator--a8edac6b-52fc-4220-b3de-57ae9be86f42", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acd69ed1-941a-4236-8004-ecb630f016c4", "sighting_of_ref": "indicator--425e8c24-0e6c-4913-8491-3e5a23f64572", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17686c82-b5c8-4736-b8e9-7b5acd5c780a", "sighting_of_ref": "indicator--63aa93b9-9ba2-4e26-b8c8-0624ed07c436", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ba76499-dda7-465c-8c99-90eabac4a6f5", "sighting_of_ref": "indicator--283ac535-b916-4960-9ade-bff257ebd09f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6c9d976-3ec4-448a-b4b4-693d96737c10", "sighting_of_ref": "indicator--689ef6ec-f2bd-4ec6-8b7c-9cf6abf81d44", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a18956c9-fbdf-4afe-9000-a33df4e44b6c", "sighting_of_ref": "indicator--ce58d2ea-d6bd-4506-b677-bd32f37b5cca", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d147cb27-a806-4c1d-9dee-900631cc4cd5", "sighting_of_ref": "indicator--5e081a3c-a947-4b87-8949-29477ed74c4a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93057554-3072-4ef2-95b1-363d956a3fa7", "sighting_of_ref": "indicator--a049b6e4-e99e-426d-a5bc-14eb61f2aee0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b560c40-69d3-43ec-acc1-147237e6a185", "sighting_of_ref": "indicator--10c3e961-84c6-4f85-bf8f-fad1dac79215", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67f1de23-eaab-426c-93f3-1d03e6a4f16a", "sighting_of_ref": "indicator--e609c359-54d3-4884-aef1-3aa608c3583f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45f0b1a2-8a07-4e83-9dbf-324dd6080922", "sighting_of_ref": "indicator--caac00c9-54fd-4a3e-a77d-e1a188c47533", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89a4eeb5-b0cb-4537-b7ce-9ce6d540dc50", "sighting_of_ref": "indicator--38c9a21b-cc81-42cb-a2d0-80c79cf01aa6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1bcf7a6-9614-4ddd-81e6-3ccecff60f8d", "sighting_of_ref": "indicator--5514ac3d-c7fc-4713-a98e-74d89f12ffa5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f9fd206-b76d-422d-9839-239126de5d32", "sighting_of_ref": "indicator--65f450c1-7023-4697-81d7-772e501791bb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6b629c7-725e-4334-9356-d5354baba032", "sighting_of_ref": "indicator--ae1b1996-7af7-439a-b01b-561b672e1c05", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d66bd52-c2c5-467a-bd77-a4259d7f98aa", "sighting_of_ref": "indicator--150fcc59-bacf-4db7-be27-725f3b56ee8a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dde80d1-15d2-48ac-b4bc-24c84dc5a09e", "sighting_of_ref": "indicator--7ee91154-2384-4796-a546-3d529acf20c0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55b9c6ce-17f2-4919-9c1f-c8c151f85ee4", "sighting_of_ref": "indicator--5d044bd3-1d1a-438c-bb78-188ee381d517", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c80ec061-cd6f-427f-9c47-e902a6e4a883", "sighting_of_ref": "indicator--d5344dbf-4f2a-45d7-b961-06e6fdf46ea6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--051c3435-7412-47ca-8dfb-2c797f853d5e", "sighting_of_ref": "indicator--68d77e5f-743b-4f55-bee6-0d720390cf43", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6461b01-0c24-4d0c-b8cc-7d6d6f424e45", "sighting_of_ref": "indicator--75a51c35-dec7-415f-94a2-ecedab62dc05", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8df5ce4a-1242-43d0-8003-8da5bb51c36f", "sighting_of_ref": "indicator--f99bddb7-d51b-4bb8-a9fd-3a7b37346d7d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25bfdfe5-3f12-4437-ac96-39b19b7d6ac2", "sighting_of_ref": "indicator--7676e25e-4d51-4cb2-9777-de61ab0fc7f1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--48670cb3-d809-4c4a-8c4a-694778fa74d7", "sighting_of_ref": "indicator--8c125083-dd1e-4199-bcb8-e2e59103de0c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87182790-07fb-497f-a6f1-4c739ca1c843", "sighting_of_ref": "indicator--017c1438-5ec7-4944-b82a-1d85696bdc30", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d682994-de1d-46db-9664-7e888198e915", "sighting_of_ref": "indicator--6aaf26fb-a12a-46f4-a0c0-b6d91c085340", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4330b129-8cef-4782-8243-08696fbaf938", "sighting_of_ref": "indicator--459e4bff-b909-4b67-9aa0-581d19700b54", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6097e224-5b52-4c96-985a-de4dc6e51748", "sighting_of_ref": "indicator--510456d0-3e69-4e5e-bedc-ce42ee545b80", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--530b6ee5-550c-48ba-b8d1-c6debb096b13", "sighting_of_ref": "indicator--52f69fe8-e5f5-4027-92b4-88aa6049aa8c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--446ead8e-83c1-4406-b97b-bd982b01bf1a", "sighting_of_ref": "indicator--7e604f89-b137-4ea4-9a70-b38745c7a8ae", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a8f2afb-5cb4-4938-8369-25ec6ec3bf88", "sighting_of_ref": "indicator--166a1598-0ac4-4081-b6fc-8d1065a3dea2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1af38626-0a9f-4c85-8231-bd815a381268", "sighting_of_ref": "indicator--fe5fa47c-f8d3-4f10-a74e-c0345d8166e9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--234c8a47-a2e2-40b6-97d8-e51532d94198", "sighting_of_ref": "indicator--f6e55b2e-385e-4e20-aedd-380788259bea", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf692ade-d3d5-4cc5-8864-d545c7e29e8b", "sighting_of_ref": "indicator--19ed04ed-1331-40c5-a991-ed3126889758", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0bb2984-4d0d-4e26-bbc5-3d29b496f19e", "sighting_of_ref": "indicator--c07f0af0-5c1d-404c-98f3-11093b8833ea", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--39898033-a471-4e84-9902-8aa36b709c82", "sighting_of_ref": "indicator--cbe1f9ee-b3a7-4183-bb7c-9136400e4b72", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35e5c52e-ebfb-4d88-a4b7-fe59ccb9b278", "sighting_of_ref": "indicator--88b562d7-0149-4971-b7dc-5bc23bbd5e4e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94cf568b-0ac8-4f24-b88c-22771bfaed32", "sighting_of_ref": "indicator--6ac20b80-52c3-4eef-96ff-aea92a9234aa", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--74f06d1a-a1b8-42b9-bd36-b7e00e2a403a", "sighting_of_ref": "indicator--7ac57924-9c65-403d-912d-a3028909b218", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--418c17f1-fb25-4bcb-947a-0f4d240b4f90", "sighting_of_ref": "indicator--eb328d37-c138-4866-891f-43c57afccaef", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe2e5ab1-2915-407d-abbb-bc6e39479f80", "sighting_of_ref": "indicator--04a87151-e3f3-4a49-8114-7279f5a8600c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36cc0d42-8bfa-4db8-95e8-90d1210d001c", "sighting_of_ref": "indicator--387bbcee-e97c-4bbc-95c4-c672805f1079", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebf444c6-32aa-425f-8628-f0d0cbbf9de8", "sighting_of_ref": "indicator--33bad04e-fe92-457a-ad87-8363bd9788c0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c41e7dc9-8cf6-4cf5-9889-a887ba6f06af", "sighting_of_ref": "indicator--2684e06f-d8af-472e-8ad1-3d3e8e40943a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd725062-a81d-4463-8714-82173c9983d2", "sighting_of_ref": "indicator--f33aa267-f455-439e-8b99-e0368217f744", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a4cceb0-5d00-464b-b62e-4ca9e14d6402", "sighting_of_ref": "indicator--cf9f5373-881f-4181-b721-bf83c1db57c6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a7c37aa-a6ff-4a05-8b24-bf75caa725fc", "sighting_of_ref": "indicator--c757b7fc-62cf-48a2-b6e0-3075ac9144e5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73c82f33-39cb-416b-aab7-7ff193c3b90d", "sighting_of_ref": "indicator--5dde745d-c9a4-411e-89ee-09f8f35cd43e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7068b700-2f44-4743-8a84-53722fcc2862", "sighting_of_ref": "indicator--48f17cf6-88b8-45a2-82b8-e168f0fdfc76", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa2bc915-4033-456a-a6e1-c3f955804cc9", "sighting_of_ref": "indicator--2b6ebcf9-2255-42dc-8333-b799ad5b7268", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e12b06ff-99f1-4e2b-9d84-474256aa294e", "sighting_of_ref": "indicator--563955a8-cb0b-42f3-bb81-2943c11fab64", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03bb4bf7-f458-467b-b68e-dd0f755df107", "sighting_of_ref": "indicator--d20395a8-a209-4926-9de0-1c75cb01c3d7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d65a8b2-0c15-4e44-87fe-4ff88a7ed35d", "sighting_of_ref": "indicator--1f59487e-ab86-47dc-b8bd-79a4de848b96", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0582aa8a-4d0d-40af-a062-cc96f16545c3", "sighting_of_ref": "indicator--04d12d4c-66c4-429f-940a-732e236924aa", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f58fc8d-9bc9-4a68-a642-5281433492a3", "sighting_of_ref": "indicator--e24c8799-d758-4bec-9d4b-1005f6d65425", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b4dbd41-6752-4107-8a03-03ef45481c01", "sighting_of_ref": "indicator--c77c1731-2014-416a-abec-22f2c8eacfd4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab7acd43-13e7-437f-9725-5dad00e87f63", "sighting_of_ref": "indicator--08f8e706-07a7-4e30-9dc8-987e1a6a1e58", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ecf672b2-7747-45ad-a5c6-ec81d1c4048e", "sighting_of_ref": "indicator--9108b3b3-132e-4651-a6fe-d6c3b7c1c954", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef60b906-de26-4f72-8551-37a5254bd2e7", "sighting_of_ref": "indicator--532921f9-ecd6-43bd-85ae-5c5f83250e7f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f864dcfe-a7d7-4e24-98c0-ec3f517154bc", "sighting_of_ref": "indicator--1268b56f-9eff-4f95-b485-4ce8efd5ba56", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1bb9c0ff-0020-4a2d-8921-713d8affa11a", "sighting_of_ref": "indicator--d839557d-0313-46cd-ad37-d3e7979c7aca", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24d8564e-c77b-4b95-9a38-f9b790ec2baf", "sighting_of_ref": "indicator--cb27e5d8-4991-40b3-aa4e-ecb7e05fc2ee", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c8dd2ee-d1ab-4181-8a34-1381a3cf1088", "sighting_of_ref": "indicator--9c21e1ef-7af4-49ff-a3a4-7a58f44a7b9f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d1dbf89-198d-4718-ae55-59caa7954a2e", "sighting_of_ref": "indicator--3b8ec888-1cc5-4efe-be6f-7faaad71dd03", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f6a3768-57f6-4445-af6a-a5c04fbc6043", "sighting_of_ref": "indicator--b63cc66f-95c0-4ff9-aef0-c719593c7f6b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d4fa0e6-55d4-4152-b3f1-d9ce0aa91c27", "sighting_of_ref": "indicator--71e166ae-add2-4fa8-b89a-bc8500eca30d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfbe3ca9-37e6-432e-80af-e80ac825285a", "sighting_of_ref": "indicator--251e6b58-287e-435d-a3b7-cc5305e050f0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a925841-3030-4f27-8308-a9d140000bbf", "sighting_of_ref": "indicator--41666e3e-ad62-4403-9e90-a7dc68997603", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5acbaf74-677f-40a8-98e4-e048c6269db9", "sighting_of_ref": "indicator--b5914786-3118-4cf3-9260-70e29d1b0596", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c53a4303-aa27-4655-855a-141ff6bb5947", "sighting_of_ref": "indicator--6b2f3c70-7672-4c36-83b9-4880fee503c6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68af918f-210d-45cb-ae3c-3fb629cdc75f", "sighting_of_ref": "indicator--463d772b-e456-4c86-bb30-fbfff066bd5a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e22eee4b-94a1-4d0b-ba25-da799097087a", "sighting_of_ref": "indicator--6b6b0911-d35a-4727-ba17-88aa7233e32a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--656d29c5-ad11-4544-9315-445dbd549f08", "sighting_of_ref": "indicator--f1688f79-3776-4a9e-8873-b9de226a2b5c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c269589-a9e7-49e9-8841-85ad5baa4351", "sighting_of_ref": "indicator--263210a1-bd85-4740-8016-70717a534151", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e077328a-d168-4643-be00-86f6350831ae", "sighting_of_ref": "indicator--1a47f994-c907-4a18-bad9-cc2f4e6d584b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cc328ab-e3cb-48ad-8a91-642b450bc9fe", "sighting_of_ref": "indicator--8119ce38-b91d-4e04-b975-61c8ef209861", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b00258dc-3a05-4a95-aeb4-99e4a494fdb0", "sighting_of_ref": "indicator--7d7658d9-68bf-49fa-b7f8-cfa190652ffb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aa7bc2f-233c-4b40-a256-fa82a88d2948", "sighting_of_ref": "indicator--a90693d2-05f6-4384-86d4-77a7bf3c132e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1de4ac3a-04b9-4251-8a55-06f6e732f7f2", "sighting_of_ref": "indicator--73781a95-fe8a-437f-8e5e-9f0594716198", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9dc2b00-ed64-4dc2-839a-2f9e46596e2d", "sighting_of_ref": "indicator--dc7a93e1-47b6-4f48-a907-e840c8d70d9b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2c932da-24d0-499b-9aad-4e666dc095ea", "sighting_of_ref": "indicator--069092f0-c879-4b33-9182-f69d1d52dcd2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e758bfc9-f9cb-4525-b920-ddee60b53ad3", "sighting_of_ref": "indicator--af96fd9f-243a-4b8b-83d7-eb76275aafa1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9770148-93d9-4ed3-b296-a7b91aeed7d3", "sighting_of_ref": "indicator--9304eb40-1222-472b-9540-b6a57f567d0d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8669e951-1c51-4812-af47-389302dec8a6", "sighting_of_ref": "indicator--ae2dde4f-8eef-4108-a958-7f6aa4b94478", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8283fc98-c835-4738-9b5c-4b699d0047a4", "sighting_of_ref": "indicator--1cbd67c3-dd45-4085-b612-492da64bd9bd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef50c0c7-4fcc-40a9-8b4b-8dc28ee03501", "sighting_of_ref": "indicator--bbeb6235-3125-4fa0-be67-0c2c76f53edc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54bbd711-24fb-4763-9192-167441ef3e5b", "sighting_of_ref": "indicator--2005c6de-0dcb-4cf6-85e1-78de297ce09c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--069e1663-6a75-42b0-b424-53f3bcdd368d", "sighting_of_ref": "indicator--11a19fe5-192b-47ac-9300-518a3c7ca6b0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8e807e9-7b57-4229-a680-360fe41ad28c", "sighting_of_ref": "indicator--b3cf7576-83cd-453a-86a7-a826e6e46562", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c5784af-7ebd-437d-ae5f-333b8e9cc639", "sighting_of_ref": "indicator--69103d2f-6859-4d8d-a401-e392871332bf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6dd643f-3cd7-4a24-abba-ad3c8721098f", "sighting_of_ref": "indicator--9e0322e3-f770-4379-9701-6b5456748ba4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a9e4446-3288-48e1-aef0-c80a95971776", "sighting_of_ref": "indicator--d840905f-dba0-470c-9f33-a5417c46615a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9004cb9f-c223-4afe-81b2-2e0566828479", "sighting_of_ref": "indicator--017cfb0a-46f7-416e-bd67-eebcf85a8ef3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8b9d874-1077-4725-a001-b4fe3541cd66", "sighting_of_ref": "indicator--ad413088-a6dc-4729-9beb-1703d96c86d6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41405953-9994-4e9a-a2c2-171ac4f2b497", "sighting_of_ref": "indicator--fd724853-5c41-4441-8abe-a03b90423bf1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce4e893f-d39d-4c79-84a4-a63e7d515fe6", "sighting_of_ref": "indicator--91fb52e7-a849-4002-9756-dc1b9d4038bb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df92b85b-ccf7-4e23-a227-d982b96f194c", "sighting_of_ref": "indicator--84ce8863-1124-4bbf-a553-8ef6f281fa0e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b87cd9e7-fb9d-433a-87ea-85abd9975c0c", "sighting_of_ref": "indicator--a8978c04-4dad-4027-904f-d74b3537f02f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aea1f1f7-faae-4638-b48e-145766f6530d", "sighting_of_ref": "indicator--c4d21113-2b36-4129-b525-b5c36a5ee045", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--620dd487-e4bb-48e8-8a32-fa70630bc579", "sighting_of_ref": "indicator--0791ad3f-70ed-473c-a564-9e60c443a21b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5eb494d-be3e-4ee8-90b9-aac7f5efd62e", "sighting_of_ref": "indicator--6e26db6f-4d3f-41eb-9dcd-3f3e5c1d5c97", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc31fa11-ce63-4e48-9ade-19c4622ac03c", "sighting_of_ref": "indicator--847586ee-2939-4e34-9e52-d688aa92847e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebf6736d-667e-4e70-abf4-29063840bbc2", "sighting_of_ref": "indicator--9646414f-039e-4000-9d4a-6f09f5362a55", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--557b0362-3d25-4f62-b5d2-1c2aa769c30b", "sighting_of_ref": "indicator--f5218f8d-0c25-471d-8af9-4b6ffafe5448", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46a7d4b4-f461-4002-8fd0-ee938a6d9e98", "sighting_of_ref": "indicator--1989e5e9-cbd7-4f48-a652-70b21473b76d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be4e9e2d-d17b-46be-a943-9ee01ede2325", "sighting_of_ref": "indicator--daad91f4-4911-4a5d-8f92-4bd87a6c37f2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a19e071-fafe-4509-a00f-1700dbd19f01", "sighting_of_ref": "indicator--6062d8c0-cba6-45cf-9b52-3b81a9af37a8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a3a6597-35a0-4914-98b2-40810f6559f6", "sighting_of_ref": "indicator--57a3b449-5703-4093-a513-f480e03248ae", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a073d46d-92ec-4db3-99c3-5921957854e9", "sighting_of_ref": "indicator--801a14d4-76e3-4ed0-8f91-4890dc50f5a7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c371a23-8466-465b-8dae-f08dcf364b3f", "sighting_of_ref": "indicator--2d3dc8d7-9701-435e-881c-0cae68305e70", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46588f56-a622-4a3e-920b-57bf743d1272", "sighting_of_ref": "indicator--20412b92-e0e8-41dd-a00f-415af7a8f40a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--319a4f43-f26c-4281-8948-e88e62551364", "sighting_of_ref": "indicator--c7f2f91e-8ed5-427f-a6ad-cbd752298ce8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad2d3541-0dbe-4cd4-bf12-429f98c137be", "sighting_of_ref": "indicator--c1ea4e18-8506-48f3-93a3-361c67f6d972", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61501cbb-d7a3-4f87-ab87-3d091a22ce79", "sighting_of_ref": "indicator--9a759107-0637-4d64-9141-dd68cc8d4001", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98fbe987-f7b3-4bbd-a3d6-c3daa7bf100a", "sighting_of_ref": "indicator--29b1be88-c30a-432c-89d7-c2ad44a6f32d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26ad83f8-9daa-4b87-a510-b8b6e24c24dc", "sighting_of_ref": "indicator--df1a9670-0cd3-402c-ac0f-ca07e43a8854", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5475b46a-83ff-4564-a27d-4fd9976a436e", "sighting_of_ref": "indicator--1856e356-919d-49f1-beda-9359a1575390", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6727679-0195-4ba6-9f0e-9ea99d2c2868", "sighting_of_ref": "indicator--1866d9d5-bbe8-4706-93b4-adb84229dc73", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c38b57dc-d226-4850-b444-5f177b49d74a", "sighting_of_ref": "indicator--181b5dc9-4c32-4d83-a9e5-008911b505b6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1326636a-eec9-4e9b-bb33-79323c29e7d8", "sighting_of_ref": "indicator--53f2f10a-3fd7-433e-b83a-c0e247e852cc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05180a86-217c-468f-bbf0-f307549f47c2", "sighting_of_ref": "indicator--bbbd8b84-ff32-4454-89ee-b5cc7ad9c459", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b88321e2-457f-4d86-a6c1-5b9736d924dc", "sighting_of_ref": "indicator--c24d66f1-6dc4-4ea7-bd69-b248929ca160", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e23ce4da-0b18-4e00-94a7-d726393c5498", "sighting_of_ref": "indicator--c231cb92-3597-4854-a015-4755e2b76560", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f27d084-9900-44a0-8422-3c2b36fb4462", "sighting_of_ref": "indicator--19696a96-4ede-40ec-b6e9-f139065db623", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cb4b52f-6456-4340-bf44-41a02e2ff8a1", "sighting_of_ref": "indicator--077a9e44-97f9-4fe6-b02d-10c768236638", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f005719a-2cc4-478e-91c3-e7b72b0cf51d", "sighting_of_ref": "indicator--08f00ef3-e453-4a4f-abed-48699b2e25c7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feca39c0-de5f-4793-a3ee-23f6f1bf6cb4", "sighting_of_ref": "indicator--4c1bc563-6af1-438c-a8a3-e949f0ff9b45", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--799b9683-5707-42be-8ee6-a9fb499f61b3", "sighting_of_ref": "indicator--8bc5317c-8899-4d77-9af8-de669fa14c11", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb1156c2-ef93-4c64-97e4-ce7158832b82", "sighting_of_ref": "indicator--b3a29964-a5fd-4fcc-8119-41ee1b0517d8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27f20d5e-9f5b-4b3b-9497-6601af0a5ae3", "sighting_of_ref": "indicator--a3996f81-785c-4345-befd-b36bc40c7288", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd08c2ef-088b-4a2c-a995-67939665fa21", "sighting_of_ref": "indicator--4043a803-49ff-4991-ac1d-7d3a825b7266", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5fd77989-f4f7-42e1-abb7-1eb7166a9365", "sighting_of_ref": "indicator--c682a5f5-f523-4c53-8a76-9ab9c8f8fe7e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c031ec21-9651-46ff-9e18-11ed7554b6c7", "sighting_of_ref": "indicator--28d19eb9-375d-42e4-86d1-b61787b6b520", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--147a0f19-1796-473d-8146-5c3f7d0716c4", "sighting_of_ref": "indicator--f3d081db-778d-4a14-8692-9994a06e0bda", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--843f6086-f599-47dd-929b-a1d0ec6913cd", "sighting_of_ref": "indicator--94dea1ac-d44e-4cd5-841b-5b8fdd89312e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8744760e-b1fd-4578-a33f-6a94c7c391ba", "sighting_of_ref": "indicator--c2fe5d13-9b96-439c-8ae7-648a56521fe8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca05a46a-1bc1-4a07-b9e5-53a7d7188818", "sighting_of_ref": "indicator--ac83e955-c45a-40b9-921f-b33107c3155e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec803cef-2982-470e-a916-ead1eb9bb6d5", "sighting_of_ref": "indicator--80eeab45-c57b-4c60-9ee8-5d388e2d95ec", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3dab195c-5283-4605-9ead-98fb9711f5c2", "sighting_of_ref": "indicator--37c4e28e-8e18-4855-8eb9-3f46d9c308b3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bb7324f-d168-405f-bc21-756093d0595b", "sighting_of_ref": "indicator--e688c044-4578-41b7-9d9c-b8fb1f68f06b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--141738cc-e1e0-49b4-a708-68e5370d5a92", "sighting_of_ref": "indicator--a5209c29-e2a9-45cd-975f-6664feb452f1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--756d6956-0e0b-42e0-a53b-6fec2718ff5d", "sighting_of_ref": "indicator--9b7ffbad-d610-43c3-85db-65c5fd516b4a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f077a9c3-607e-4c76-8c6c-552c0df67a90", "sighting_of_ref": "indicator--c794b38d-f11a-440a-b447-bc5401f988d8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e914c5d7-ecbb-41ea-a61e-0ed6167bcf9c", "sighting_of_ref": "indicator--8baf71a0-2afe-4b6e-a201-4294b61998dd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--15660ee9-4fa5-4732-9808-7f0d9cc4eb43", "sighting_of_ref": "indicator--0b8e10df-3fa9-4c2f-b392-29f2ef987960", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4cc1a58a-f221-42de-836f-e0aab7c5687a", "sighting_of_ref": "indicator--245f3e81-e677-430f-9c5f-08e7d1447883", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06e5597f-abaa-46f2-b160-b12229d36799", "sighting_of_ref": "indicator--9e93263c-4c90-4edd-84c8-7bbd404dbe1f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d936ff6-6f08-4d09-88fe-54edcb235877", "sighting_of_ref": "indicator--678e9f59-3217-461e-8c1f-2c685b78136d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc917355-5a62-4065-975a-c73b5cc95d15", "sighting_of_ref": "indicator--c2579b56-88a7-4889-987a-15db19f7bdc3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ed52560-7fc8-4a5f-b721-e908bcc1988a", "sighting_of_ref": "indicator--ee831a14-82b8-4a27-9f4c-58adec8670d5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1587dbcc-f916-44a5-9cd9-0b4458245016", "sighting_of_ref": "indicator--eeefefa1-d790-4b63-8b9d-0546bea9bd4e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a529aba6-0fe2-49e7-ac6b-79dcb03c0f16", "sighting_of_ref": "indicator--8b078285-9a78-4679-99cd-096b9ff3ff87", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0f7bbaf-ca40-41c4-9047-0620716ab6db", "sighting_of_ref": "indicator--2372b09e-2aec-48b4-aadf-a3a025b3fb76", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9de5aa55-6e37-4f69-a89d-4bba09d108d5", "sighting_of_ref": "indicator--e7e402a1-b4de-4447-a7fd-a7a4428ac9df", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b76134d-2270-4210-b599-93fa6292aec8", "sighting_of_ref": "indicator--c7ffd544-a905-473c-b39f-3f4b60018745", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adde934c-4170-4a95-b1c9-8166f59b2cc5", "sighting_of_ref": "indicator--bce840eb-e14f-4173-be6e-ce01c182b2a3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c4d980e-82b3-4fae-b868-bd05a555d3f0", "sighting_of_ref": "indicator--2bce7fd8-6650-4879-a29a-3dddfd77da8e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a545377-9f6b-49da-aac2-f77c8e29341f", "sighting_of_ref": "indicator--95490fb9-065b-4a61-9d96-6a744ccd368b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47c97d46-ec4f-4e1a-934a-ac0afb752e3a", "sighting_of_ref": "indicator--820b09eb-5eb1-45e4-93aa-9596b0e0588e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f72a8d1-dfdd-4194-a3d3-cc026fd87632", "sighting_of_ref": "indicator--35385068-f925-4d73-bc63-0e8eee4b1a93", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0f7781f-c0d8-461d-9ff2-0dd708dc387c", "sighting_of_ref": "indicator--426515ab-f8d5-4fd9-8352-10b868b13f41", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21af7b74-df51-4c86-9c97-414f90826ce0", "sighting_of_ref": "indicator--99e3a80a-cd02-4787-8d21-f07d57351a73", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f79ff831-10f8-45b6-b9ec-0604d1b861c5", "sighting_of_ref": "indicator--0f579d2b-f991-4ddc-9231-9222ab542d13", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61676343-a399-4664-b01f-21480c149d82", "sighting_of_ref": "indicator--f5713ab1-cb00-4a3f-a3c8-df648dfc8d86", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3f74927-2b9c-4e7e-a6d4-02d9666deb93", "sighting_of_ref": "indicator--bb7311ba-85b0-4d35-8580-79e790231587", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dae4cdd-647c-4949-918c-486e78a6fde8", "sighting_of_ref": "indicator--7f088006-ccf7-4b58-8d50-5e375cf49a88", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ac1db2ba-1a6a-44cb-aaab-3414ae27f952", "sighting_of_ref": "indicator--79b23a6c-a679-4531-931f-305936f6715b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6201850-d803-446a-b918-715b4a7f329b", "sighting_of_ref": "indicator--03941141-2e1c-4cbc-9e17-3c32af4f55e7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e7ded23-d1df-4c88-a101-2c961ede4b0f", "sighting_of_ref": "indicator--7d0145ad-854a-470a-9042-2dc54b80d7f0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--064db05b-2a54-4179-910b-0d64757bd4b5", "sighting_of_ref": "indicator--ea639b67-bab6-47ff-8e03-13b4dad62606", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ef2fce3-7128-475f-92d9-4b9176b069c0", "sighting_of_ref": "indicator--53021972-f6c9-4bf7-95c0-7e47b4239f78", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7bab2a0-c5bb-46b5-8b8e-83aeab2df7a5", "sighting_of_ref": "indicator--c7c9e2ac-c12f-4167-b6fc-a0b4e03730c0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f9a9c81-ed48-427c-ab32-ce8304283025", "sighting_of_ref": "indicator--d10689f8-cce1-4dc5-949e-d696b9e4d845", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--210b6ff9-f24f-47a6-bf55-3388cd0d6a09", "sighting_of_ref": "indicator--21625617-9dde-4070-890b-0fa4a8d07da9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8038939-6390-4894-ac00-0f49504f648a", "sighting_of_ref": "indicator--7174f23f-de92-43e9-8122-6bd67242b12d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a0e437d-d11c-4167-8e80-82bb31aa7ddd", "sighting_of_ref": "indicator--58298849-2c2a-4e8b-943d-0808da129c55", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44ff314b-dd56-4e74-9921-aabceb1d99a0", "sighting_of_ref": "indicator--2a007a69-14bc-4b7a-843b-bfc9df1540fa", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--722c1014-f48a-4800-870d-6566772f5027", "sighting_of_ref": "indicator--c278584d-aece-4e1f-bfc8-4f4bebe021c4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80d74061-fb72-4708-82ed-9bc6ea5e6a68", "sighting_of_ref": "indicator--e7d21b95-7cea-482c-926d-f5c0afc879e7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--523e758f-92dd-4c4c-9de4-d9343ea67bb7", "sighting_of_ref": "indicator--3ed9b20f-eff8-4582-a17c-98632fed5df5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86ed91ad-81c1-43c6-8233-8b8a604462a0", "sighting_of_ref": "indicator--e62323ef-a398-4a0d-94fd-59f0b1973718", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e879ac52-8609-47c5-a70a-072fa143025a", "sighting_of_ref": "indicator--eb9fa6c5-0e1c-401f-a508-999e733cc437", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--549e4384-a044-46c8-8799-c4ba42becaf2", "sighting_of_ref": "indicator--becfc914-454a-4a2d-a03a-055bf14bdde0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f4eef14-b873-4a4c-a24b-becee73f38ac", "sighting_of_ref": "indicator--22ed3881-6239-4d71-8994-26fa86cb6fc7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d959050-47c3-4f8d-8ac6-63c8bbc0cb7b", "sighting_of_ref": "indicator--9246d693-86d2-4f7b-8c33-746f7202303a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--060a7989-8708-4375-a679-c75feeb57c70", "sighting_of_ref": "indicator--30aa71ab-8036-4725-993f-884e53005727", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96d4150f-e196-4516-8fab-a35d85c0d759", "sighting_of_ref": "indicator--b659e287-739a-4027-ae42-062712b8f826", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b26ddfe-b258-423f-bae4-355ab32b6a35", "sighting_of_ref": "indicator--a6cdbabf-ee4d-499e-ada7-650fd9e6045e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0612393-0835-4100-9583-543a02c594da", "sighting_of_ref": "indicator--07f4d46f-8a58-41a1-90d7-8a8122da91a9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5788386d-8419-4737-8f1a-6a49445a0b92", "sighting_of_ref": "indicator--a29ba551-5bf5-4963-9dd8-15726dab089a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f5d5689-765f-4355-8517-bab59abf67cd", "sighting_of_ref": "indicator--08ce8c51-926c-40a0-9dbd-29fb95607f24", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1454f09-9b6c-4eb9-9b54-aa5044781384", "sighting_of_ref": "indicator--2b2619e3-2eb3-4201-9add-a1346d528761", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c25b688-cc02-4673-b24c-8626fc8d5fba", "sighting_of_ref": "indicator--9c2a1197-8f78-4872-8fe9-df729bbbb89e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8552d04-92a6-45fb-b820-7d1b778db4ff", "sighting_of_ref": "indicator--9f2ff31e-0f5b-4ea7-9bd9-8d909bd495bb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec59c1c0-8d7f-4439-a864-4db2a6e238e0", "sighting_of_ref": "indicator--3d0d798e-77c3-4135-9747-f04ee5e36acf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9dca4c95-fb92-423d-a70a-0ba53f1c2cb1", "sighting_of_ref": "indicator--ed190e74-b5ea-45ee-8605-ffc1691648dc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84269107-1ad6-49f3-a4f7-37bb5ce376fa", "sighting_of_ref": "indicator--62ef707a-cd22-41d3-bf85-ea7ae54cb224", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--909eab94-dd2d-4f54-86ef-9bc8d276e47c", "sighting_of_ref": "indicator--0040e70b-3d3a-497a-b707-8373c962d20c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3271fd3e-ce7d-4a0d-a8d7-61e06d52639a", "sighting_of_ref": "indicator--1bd9ecd0-5c08-453b-a306-0e8a5f417b8e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54f82346-f560-47c8-b4dd-3eedd89ba307", "sighting_of_ref": "indicator--15b9664d-eb87-4533-8dd4-3e118df22453", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d4d6645-bdae-4308-beeb-0f97fd4641e5", "sighting_of_ref": "indicator--73db61d3-acfb-4637-bd1f-5768d5da2fb6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0d3073b-60d8-406f-ae14-d964a17044aa", "sighting_of_ref": "indicator--b5ec81c9-b2d5-45b0-9168-e41b2dccdf66", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f06f559a-9a31-4396-8d01-a16a6f214588", "sighting_of_ref": "indicator--6bc2670d-2bc0-440e-963c-08feca3b8204", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--80243cef-c5b1-4ef1-87d5-e72585d304d7", "sighting_of_ref": "indicator--1afa8d77-9c55-4d02-844d-8351d94e10de", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a774aeb8-7f5e-4a36-9a20-3408946ace55", "sighting_of_ref": "indicator--e3925e8d-e59d-4354-8cdb-400e7f5227c2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b55a39c-a9e8-49fe-a6c8-691755fc6ee7", "sighting_of_ref": "indicator--a96e72eb-d85e-40b7-8947-41113f22e8e1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6982ee00-777c-409c-a6d8-4335889c9860", "sighting_of_ref": "indicator--5288740e-2b4b-4ee0-b00b-8c171f71be18", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5df00ab6-4c6d-4dbc-a0f6-aced5d9fa754", "sighting_of_ref": "indicator--8ef164ca-e3d7-4351-b4af-2326f0e40258", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec63081c-12d4-41c8-ab71-9a4296c68595", "sighting_of_ref": "indicator--14d09587-23dc-4b40-9b1c-91ec2e7f2913", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73ef0a84-777c-4b4a-b909-aa3f76ca814c", "sighting_of_ref": "indicator--d820f2e1-fb20-46e8-a083-f3497683a366", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f073808c-6f77-41cc-9588-b19dd4a4f78f", "sighting_of_ref": "indicator--b5776fb4-145d-45e2-9665-5a3c62baa063", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a4a771f-62eb-43e9-9b6b-0836a76bbe0b", "sighting_of_ref": "indicator--17ce490b-ed57-416a-98d8-823cbe58505d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--929e321d-880c-4d71-b931-42a488685550", "sighting_of_ref": "indicator--0d139533-261c-45e5-ae07-78d6608320d7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84306b66-bdef-4d6f-9dbe-80d1db844f29", "sighting_of_ref": "indicator--ca490aeb-6990-46dd-8eb4-653cff0db0e9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b92d449a-c2e8-4022-bf61-eb42955fbcc5", "sighting_of_ref": "indicator--1a6954ab-df4b-449c-a1c8-e17ed750537d", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--151708e0-1265-48e5-beda-09fb34dd9efd", "sighting_of_ref": "indicator--482bc7f9-301b-4f85-87dd-fc1aec698705", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f815db21-fbaf-4230-9643-a3a13dab223e", "sighting_of_ref": "indicator--b0800a0b-6cdd-482a-a082-58de5e3fe86e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebfeb383-17ec-4e99-87cd-e40e8c0a1845", "sighting_of_ref": "indicator--8b672710-577c-4c96-a0a3-1ea1cf7bb407", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07fe45f1-70c9-48be-b013-33c80e27046b", "sighting_of_ref": "indicator--7ce21921-28ff-4456-b3a9-08024b3d09db", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca69717a-1bd6-46d6-a8a5-279b53d21740", "sighting_of_ref": "indicator--c9a39afa-809c-483e-86da-8cd1d3900f56", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--027bb427-4f82-4d3f-b801-2fe4a0b52c19", "sighting_of_ref": "indicator--39ff44c0-0bc1-4407-94c0-c90265b32acd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a34afb8-d766-4635-8da9-87aab00d1dd6", "sighting_of_ref": "indicator--d655bd3f-a1a7-438c-8616-94387396d6ef", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28952586-f201-479c-b02a-1e6609716459", "sighting_of_ref": "indicator--2a044274-447f-4a2e-9e05-1ee188a10ded", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f206aea-cb02-4012-8e99-79697bb9baaf", "sighting_of_ref": "indicator--acc7af5e-08cf-4dce-b8a5-dbcadde3ebee", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62681e19-8af6-4a80-aa84-27625b144543", "sighting_of_ref": "indicator--552ebb1c-77c4-45a1-bbf9-258ccfbbc4b3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e358116c-03ab-44e8-ad53-bae72f74f242", "sighting_of_ref": "indicator--76949d20-495c-4c80-b961-88bcc11d8c8a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--039936b4-74d1-45c5-8c7d-4e5f530c168f", "sighting_of_ref": "indicator--0978a78a-1fb1-4110-9771-f64ddddddfa8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb0d6e13-0a5c-4fdf-8e0f-8e3e23779b5b", "sighting_of_ref": "indicator--86f6e82f-ca92-4c12-b1cc-80e6618e79eb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16bcec11-7d1f-4cea-af81-6c4763dc345c", "sighting_of_ref": "indicator--c4ad6615-2654-48cb-ab54-e26d64bf9ad7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12297092-b295-4150-a8d0-c9e158a93131", "sighting_of_ref": "indicator--3ce74ff1-f7dc-4316-99d4-bd9c899d12a9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--34e4211a-fdfb-40b7-9b31-fa0b8fe3d725", "sighting_of_ref": "indicator--415ac38f-14f3-4c77-8ff9-9ffaeed5ceef", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a011865-7109-4a58-b465-a660712ec455", "sighting_of_ref": "indicator--f05206b2-2a6b-4589-b966-dbc5d5242f3b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e38bbad3-ca65-4b33-81a8-f959ecfc2217", "sighting_of_ref": "indicator--0cc29819-ee40-4ba0-a5e6-d9f31a01c333", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4651b728-ddfc-4c59-9e13-298629b1941c", "sighting_of_ref": "indicator--bdfd6647-ee90-4684-8c15-1fa649fb4f7f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffe18645-bf90-46ea-9f62-d403386e79f7", "sighting_of_ref": "indicator--1e762a0a-84b9-4b3d-9642-5712c5f26e26", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--348e85dc-78ec-4212-a722-c7b7ec942998", "sighting_of_ref": "indicator--ad255c1f-0ab9-492a-9588-82113231f018", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a576f53-d8ef-4f39-9098-dd24746a8d13", "sighting_of_ref": "indicator--033b3101-813a-4c6a-8f8b-4cfe7f091e7a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77fd98b2-2268-44ca-9941-f3b2de800609", "sighting_of_ref": "indicator--48e8a9d1-8064-4900-9910-4c58bbf036fd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a3289aa-a169-4dfc-ab35-06bcadc60b8c", "sighting_of_ref": "indicator--bd3cda46-27ec-4ad1-94c9-f203dfebcd18", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1766624c-f1e3-4103-b017-541137cd5db4", "sighting_of_ref": "indicator--d4182a51-e0a2-42f9-abc7-719d14779009", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53e453c3-a361-4dcb-8d41-3a5a86aea515", "sighting_of_ref": "indicator--c367c87c-7e67-49c6-a7b5-f04d2df3adda", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14e2c865-73b3-44f0-b85a-450cd4d5866a", "sighting_of_ref": "indicator--5d95d5bd-5eee-4ac1-82e8-5b49c2685511", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c280d524-76f0-4ed4-a25e-ba8c1edcb9f8", "sighting_of_ref": "indicator--cd95a955-00f4-480a-88b9-dab541d3b35e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--468abf2d-f57b-469b-8217-c4e6fdd702c9", "sighting_of_ref": "indicator--13dcd3db-4aae-40bc-8729-64b3b59b3ad7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49e438db-cfec-4f81-8357-7a8deb625f90", "sighting_of_ref": "indicator--35003958-4446-4c64-afe0-4b8f23b30997", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9a30f2b-d5cb-449a-a052-3f061388bffd", "sighting_of_ref": "indicator--29a8c124-130e-4447-a40a-1334f798d82b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd5b84af-72d3-4240-bdb2-2df9a52a4118", "sighting_of_ref": "indicator--9c4af761-0909-4091-ade5-95d204b36d09", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf733eda-68a7-40aa-a0dd-86e7632e023b", "sighting_of_ref": "indicator--aa463221-c24c-42ad-89cc-e4e44e023263", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bffd2715-95bf-4b34-80b3-b107a0b61117", "sighting_of_ref": "indicator--a2a992d0-149f-4fde-9a5d-c9ddb39d5fa5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b7d68ef-3d50-4fe0-8d1f-c008c56ef5b4", "sighting_of_ref": "indicator--4643507d-c00d-4db5-b101-ef0698a7533b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2f167814-afc2-4ecf-a30f-258cf189fc5c", "sighting_of_ref": "indicator--1fd41bde-022e-4f81-9ba1-349ca15a990d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8449949-e292-440f-9e1b-96e579809cf8", "sighting_of_ref": "indicator--67fff19c-1ee5-4ea4-864f-cffa736f8439", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61d8d22b-3437-41b3-b164-3cfdf287d7b5", "sighting_of_ref": "indicator--fdf66d4e-71a2-4524-a4d9-e884a80e861c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1530e72-2031-42b2-8803-d758d6f866b3", "sighting_of_ref": "indicator--f9a99e03-589d-46a8-972d-1f9d4c0acc97", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--367e71ab-4dbb-4b7f-9d7b-3bcf9044f679", "sighting_of_ref": "indicator--0ac54d43-8c93-4d98-95f8-4d6342a0ca6f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a3eef13-f2f7-4210-ba10-504238184444", "sighting_of_ref": "indicator--4e27d9b1-6294-4cdf-8a31-73ced55ac9c4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f30f2ef-cea7-4159-9a30-e9ed4902eff1", "sighting_of_ref": "indicator--291dea09-d152-4bab-b2cf-da48fc0378c8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--592be58a-0ae4-4cfc-a7b1-e7abecfb695b", "sighting_of_ref": "indicator--c9625137-f020-4ee0-8368-0cbc542c3bf6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3516ffb-f26b-461a-95a2-d3937e0f85bc", "sighting_of_ref": "indicator--dbd117ef-49bf-4797-b572-62b277182717", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f7c0c56-be05-4a6f-b7f1-b4314a478ad9", "sighting_of_ref": "indicator--60a34498-6255-4c41-8f5d-0355859035f6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c79f5d2-60e3-4b55-a5f5-51d1272cd2dd", "sighting_of_ref": "indicator--44e3ba7c-e6d4-4818-a834-c1aee40838ce", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01f15310-d87c-4646-a463-483b50011fd2", "sighting_of_ref": "indicator--2e9b381a-28db-4667-8385-5c446e6d75d9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7240bab-a2e0-4c23-a5d8-9530a1b768d3", "sighting_of_ref": "indicator--9b1f6414-3a3a-46c3-84fe-ae8da6ab0b96", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--436a160f-1adc-4da7-a1a9-1705ff2e6517", "sighting_of_ref": "indicator--1fc34e33-9dbc-40da-a201-659d92eb2efd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93758915-c411-437b-bc82-d2480547095a", "sighting_of_ref": "indicator--5f7972c3-30ea-4f9d-b5a5-73b13eae390d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ce8cb5a-ed8c-428f-9d67-f12dc4b308ca", "sighting_of_ref": "indicator--fb2ed4a6-a198-4816-b6d1-e91a27b61575", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d50bd02f-f0c3-429b-b303-2654d59bf6b3", "sighting_of_ref": "indicator--f2c8dd56-025e-497b-85f3-6ac07ccefc4c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d88c2feb-b446-4099-8069-9140f2174c1d", "sighting_of_ref": "indicator--d1089e74-b475-4af2-ad54-37cd3cbf43d8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6d021ba-763f-4acc-920e-730db1c0eee9", "sighting_of_ref": "indicator--919de92e-1010-4e27-9e3f-ca85123e97e3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a386f2b0-396a-4c87-a59f-3d5a67010f51", "sighting_of_ref": "indicator--623723db-b8fa-4499-855d-93dfe39f192f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a7a3d21-3bb1-460e-ad88-66f51f0b6357", "sighting_of_ref": "indicator--1538619b-7d3e-4188-9848-f0ff7708277a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--609844e8-55c8-4f67-bc8a-018e4267c757", "sighting_of_ref": "indicator--4be9a385-a7fc-4da4-8add-c60fb96eb9c8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f1d77f0-6471-4bf3-98d3-0dd356e58050", "sighting_of_ref": "indicator--1da75052-e76c-428a-a1a5-5ea4c33ba7e8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ed16e7f-c276-4e57-a631-f037d2af51f9", "sighting_of_ref": "indicator--17e01401-98e5-4cd0-ae39-1f7f0041cba5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a23c445-42e2-49ed-874e-708e860e266c", "sighting_of_ref": "indicator--a84ba7cb-e87b-494e-ba99-e57a2aebf4cb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3c56da4-efda-4c3d-9fcd-ad5a093b7fc7", "sighting_of_ref": "indicator--a5482823-5c70-4a06-9950-57c44451d0ba", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb4825fd-1c46-41a7-96c7-e5127444f24f", "sighting_of_ref": "indicator--5182d7a6-7ff3-4ca6-b9bf-d8030dac206f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bdac689-2208-4749-bf99-83aa7fa0b102", "sighting_of_ref": "indicator--14b559dc-bf45-4266-8c76-a88d57a42bde", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3b6bff7-40c7-43ec-a177-d15e070160e3", "sighting_of_ref": "indicator--dc7ed61c-5e86-41b0-ba30-f6e0aee3d9c5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b47dfb2d-7225-45bc-b391-74a494dff69e", "sighting_of_ref": "indicator--049048e6-5818-4ea3-bb83-2d2953ab37e8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b14ee064-8374-42cf-89f1-3c1625422341", "sighting_of_ref": "indicator--e04f7660-cd66-421b-bbbd-86fadd078ff9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc3ac0c5-5207-46d7-9bd4-4cd55f6105da", "sighting_of_ref": "indicator--fe8073d4-e15d-4e26-81d1-b991d5691725", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c61a159d-8f6f-4978-a599-83ac35de4341", "sighting_of_ref": "indicator--d8361d7f-4562-4f6f-bdd5-191f601bdc0c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9daff1a4-730a-4a73-b6cc-1cd4d7bfbdf4", "sighting_of_ref": "indicator--1a4ded38-9f04-44c7-a445-df770156ebea", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d046522-ef66-4251-8c7e-c038226e5f6d", "sighting_of_ref": "indicator--6e5f6d35-f5eb-4b06-89bb-e6927ce21bca", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f14e3b3c-3596-471b-85c2-a05d7c266ba0", "sighting_of_ref": "indicator--f16ff94b-278b-41b2-97f8-091a8211478f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3ea47229-9576-4a63-bbd9-0d072457d6f7", "sighting_of_ref": "indicator--78ab36e4-9387-4350-84b3-35fa67624405", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd2456c6-a527-4780-9f3c-c6b6259be88e", "sighting_of_ref": "indicator--e4fe11cf-565c-4f24-805a-1c8f8fe92731", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d81d017-cb8b-48da-a33e-fcb816a6b6a3", "sighting_of_ref": "indicator--ada912e2-d8fe-4ff0-ac02-12fe12c1ef72", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbf426d6-1333-47bd-b330-5fb3fdda203e", "sighting_of_ref": "indicator--ec642081-57a3-41c0-aec3-339d4bbc0edc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28861fa2-aa91-407d-bb97-c1fb08f27c61", "sighting_of_ref": "indicator--a742d4f2-060f-44c1-a1c4-036820850876", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbf81d3c-f204-4e4a-9f10-26b71e3e7eaa", "sighting_of_ref": "indicator--60389108-6210-469b-9cbd-aa11d9f483c5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7f56ec6-32bb-47bd-9b01-2cb094935b3c", "sighting_of_ref": "indicator--85f95f42-29fb-44d9-8dd3-549eebbb8b36", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a4d8343-82f9-4746-829e-0af224e58d61", "sighting_of_ref": "indicator--8ff1b711-2670-497e-8301-e1db3d62cee2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--887d769c-4c87-4a04-bef2-1d2b75ffde0b", "sighting_of_ref": "indicator--ecb55a90-d43e-41f3-9a21-c2a43e2c1900", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2d5d0a0-89ef-464f-9f36-62be7a271b3a", "sighting_of_ref": "indicator--23078955-7ef8-4863-9596-75619d7cdd29", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--804ed6ba-a231-4855-8cd9-d947780e6ffb", "sighting_of_ref": "indicator--17c4011b-dda0-4442-b369-26c59978cb2b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--095ee612-82af-4841-8c05-d21465f9ec3a", "sighting_of_ref": "indicator--036bf50b-e09a-4cf5-93c8-36a17ba759e0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13b90d89-bff3-4528-ad41-0932967803d1", "sighting_of_ref": "indicator--21ee0b7b-f0d8-4fe7-a513-a1ed076c9fc9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52cd33d3-4269-4cd2-8324-bc1f99116052", "sighting_of_ref": "indicator--240bbfd7-dfd5-4f05-803e-23fc8930c6e0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6ac13d3-8708-409e-920b-e464bcaf74de", "sighting_of_ref": "indicator--c3edf048-2fa7-441c-9b50-eb43f294d5b9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b861da37-c5c5-42a1-9d47-d5aae4b4bd99", "sighting_of_ref": "indicator--e8f1ab10-96a0-41be-a84c-687047438cb1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9404e0b-9e74-4c52-9012-4cc35d3caee3", "sighting_of_ref": "indicator--1d260dec-9ed7-4eb2-9aca-bffa848a0ca9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64fa6111-12c1-4a27-b93a-0b8e830929fd", "sighting_of_ref": "indicator--42f42567-a39b-41b7-a100-4c1f38f389f3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c2dd7e5-1421-4244-a5b7-0811f5809eaa", "sighting_of_ref": "indicator--8fdec4a1-8658-4855-9854-91e2779283ad", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60467fe9-cf34-4cab-9cdf-69023980905b", "sighting_of_ref": "indicator--c5e2affc-04a3-423f-9dc4-05aaaf347be1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cd68e0c-d669-41a7-9d53-14ca2074a710", "sighting_of_ref": "indicator--af345985-4ed4-4c3b-a3f8-1d9aa31cd1cd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2dca5e14-b64b-4e7b-bb7d-3e84e4cab426", "sighting_of_ref": "indicator--001cd0b0-b3f2-45ee-abe1-e50ef76e82f4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0ee887ea-9e01-4fa2-9d66-70bc965c1adb", "sighting_of_ref": "indicator--7e1fff2a-1c9a-46ce-9bcd-93504db74b25", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d32d2e3-41c2-4ddd-b963-19050b26de16", "sighting_of_ref": "indicator--1fa11b55-f1f2-408b-8cd4-01ccc3875475", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cdd2b5e-0acd-47a9-bc58-bb644b47d1f6", "sighting_of_ref": "indicator--30a5d289-5009-4efa-b195-0dca40abd73a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a6c9019-3913-45e9-9040-7eead55ec33c", "sighting_of_ref": "indicator--aa827e2f-26d6-4622-8767-312e8e7485c4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5402ff99-087b-4adf-8093-9e6fb43eee33", "sighting_of_ref": "indicator--c303c498-19d9-409d-ac1c-18f950b5cd64", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a857ae72-af27-4702-9a85-48f43de7a293", "sighting_of_ref": "indicator--6e3e3064-bc2d-454c-ba02-15dd5602a5de", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e034a4d0-8ded-49c7-9ec8-ebbba1ecd9b9", "sighting_of_ref": "indicator--b1a1dfbd-fb07-4f03-a24c-dd7891b51048", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2240b95a-95b8-44b8-b8be-1d4f0b2d8566", "sighting_of_ref": "indicator--32282098-b9a2-45a6-bd6a-40a1e9925669", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acb7d505-7f3b-48c3-a198-92bfc34290cd", "sighting_of_ref": "indicator--bbcae3af-a9f0-4a04-8c83-2f39692afa25", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4a9625b-3b98-432b-8190-449eb36a48b6", "sighting_of_ref": "indicator--40b7439e-6136-42d0-ab84-544b6e8317e5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a37850bb-93b5-4cac-8522-dc3c3d817e51", "sighting_of_ref": "indicator--5e88a478-209e-4c69-8476-792bdbb4256e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16f89d4c-d6e7-489e-8215-5a22ebc274b3", "sighting_of_ref": "indicator--103e9dd9-3b1d-482e-b06c-756531b3a279", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d3aceaa-1f55-48c7-babd-b7c9c3cee60a", "sighting_of_ref": "indicator--7f023a50-5065-45d7-9e11-ee63d900d199", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31e35c96-e590-4859-b4c1-1f8b9f4f985e", "sighting_of_ref": "indicator--5bf425c5-489c-4b87-b797-8fde96ced699", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6be5d242-c2a0-41f0-849a-8587c02acb18", "sighting_of_ref": "indicator--96dc4781-27ce-4832-9adb-eddf9dd152ee", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b2ff157-2b0e-4ada-b9ce-4ba837ce0d09", "sighting_of_ref": "indicator--5e406134-249d-4156-912e-59b2fe0508a6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c6571a1-3f0b-41c2-b246-475946510ff2", "sighting_of_ref": "indicator--9c629551-9e4b-4c42-b1cb-c54e07e0df45", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a84f099-7d87-4106-912c-b120ed549eb2", "sighting_of_ref": "indicator--4eb62a6b-7bb2-4729-a920-e7ea8d7b21ba", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e41f3548-4e29-4332-9824-e279f4ce4634", "sighting_of_ref": "indicator--7aefe0f5-6265-48ee-9bf7-522c7503ccc2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0b79014a-ff1c-4eac-8a83-5600f8ff3441", "sighting_of_ref": "indicator--46ee5ec4-908e-4a6d-bd57-6b48e38ddee7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b22e8fd6-2796-4aa6-973f-0578b5641a59", "sighting_of_ref": "indicator--0d427a95-cb8f-4fb1-b8ed-a2780904364e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76abd087-417b-400f-84da-833774f9aabb", "sighting_of_ref": "indicator--1733d092-27c0-4db2-a149-93b524c81cb0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b83bb705-bb26-449a-80d7-987d33d792d3", "sighting_of_ref": "indicator--28df9c8f-503e-40ba-8554-4af86a5ac4fb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4304c19c-6d74-47fb-854b-785b1ad6025d", "sighting_of_ref": "indicator--bd686211-45d0-4ae5-91ed-c82885295306", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b0f032f-9dd9-4933-8cc2-9ff77c9ead20", "sighting_of_ref": "indicator--2bc67ba2-92b7-4218-8ed8-118a0df1ebe9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2033a97d-94a4-47c5-9472-02bb1e14c5f6", "sighting_of_ref": "indicator--74138382-9ea9-4583-a77d-94dccbec4ed1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7902bb33-a1bd-4481-8b23-9d49c7c1a05a", "sighting_of_ref": "indicator--ff2e71d7-0ea8-4f92-8c78-b99a0b0712c1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21b1a112-e5d4-4386-afe7-9d54b979bdaf", "sighting_of_ref": "indicator--1093df23-94ad-4a17-a15e-786aa4cc3087", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51239fe8-028f-4f9a-865e-98024be449a4", "sighting_of_ref": "indicator--86f8e90b-10fb-4047-afff-f59b47d4fde8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0788eb5-9b3d-4d83-94c8-6955560fc81a", "sighting_of_ref": "indicator--eb59094f-2897-4979-9738-deeab014df87", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cec160b4-00aa-4f96-8967-ac5c6dd1090b", "sighting_of_ref": "indicator--b4a9d5a2-0c88-42c3-b872-f5e920f0a7ed", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9280ba50-f2ba-480f-8ffa-6b9912432ccf", "sighting_of_ref": "indicator--a4a1c738-8d2e-408e-bc97-b49dbd46ca9a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d532f43b-1eaf-49b0-a942-fbc7a73da050", "sighting_of_ref": "indicator--49a5c216-afde-448f-a577-c2e32d287e4e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f308c2e6-e12f-4476-b3e7-e7395cd11b6b", "sighting_of_ref": "indicator--c7327196-cfa4-4367-995b-ed5c9dcb1188", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba9a3092-fde6-4dc6-b97b-5311322a7fae", "sighting_of_ref": "indicator--c84e7a18-7bcc-4732-b6e5-25c8b51eee4e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60e7bfbd-b4bd-4077-afc0-6dcf25fb63a4", "sighting_of_ref": "indicator--7b016a4c-08cf-406c-a49d-bfe501426932", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db159a93-3feb-4e82-8027-fd7f89775d16", "sighting_of_ref": "indicator--c60d0877-4ba1-45d1-aa9f-4cf143468b62", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4922bf89-c8c8-440e-b7e4-227ef80dcb86", "sighting_of_ref": "indicator--e34f98db-edaa-4ec9-b140-3b616d3f9fc6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a1f1a65-6b63-4712-b55c-57f120e9484c", "sighting_of_ref": "indicator--4ebec6d1-ddaf-46cd-8fdc-d27de6d6fc0e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c1604d0-3e50-4267-b99a-29b3e0fce3e7", "sighting_of_ref": "indicator--48f4aff1-3668-48ab-ba56-e6ba31ef0935", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4de886f-d27b-4bea-9918-d36bd2acca70", "sighting_of_ref": "indicator--9e0f1825-1dd9-4d65-8433-c5766829bb9c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7032760-6841-44c4-8ae5-6b5ad2a9d40b", "sighting_of_ref": "indicator--6e523619-4b90-4a52-b747-2c00aace89a4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--886492cd-e036-45a9-83a4-285d36e86acd", "sighting_of_ref": "indicator--805cc6c9-d36a-4bbe-ac95-798ffd5c8825", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f36ee358-cbb6-4224-a545-6c06d83c07d6", "sighting_of_ref": "indicator--5b577123-0ac9-4726-914a-3ca34e6e3d17", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3832eed-1c20-4f16-b1a6-2fb97eb1dc6a", "sighting_of_ref": "indicator--d3a33c53-fc26-4b21-83b7-a84ff678cb5d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e444a585-705a-4844-9735-f13cc31184c3", "sighting_of_ref": "indicator--024a2afd-8d3a-48af-b836-c6e44c37cedc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c24fcd33-b23a-45c3-a8be-596263a13dd9", "sighting_of_ref": "indicator--4f1f19e7-e894-4499-a92e-7d5f79a63fe5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c71d1b21-bfa1-4e9b-a585-8234f2a38e69", "sighting_of_ref": "indicator--837e4115-2abd-4ffe-bc97-070cb66db2c1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4a97acc2-c814-4a65-837d-b36be4f14ef1", "sighting_of_ref": "indicator--289cf369-ecc4-454c-9019-a29f83d2198f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1ee6337-7124-4fae-a3ef-978886723520", "sighting_of_ref": "indicator--5f5aa50d-2aad-4732-b1a8-8c0905e26f9b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61f6e549-d935-4dac-af18-b36f8427adeb", "sighting_of_ref": "indicator--4dab5071-4d91-42a2-a6b3-adebaf450c4e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d06cbc83-3591-4d95-b025-32ed04a0bca9", "sighting_of_ref": "indicator--2a6c6b7b-b1a6-49e7-850d-8d20ac7a37da", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dff914d7-16a7-4b8d-8296-94c8c22c2ebb", "sighting_of_ref": "indicator--13709c01-fd06-4930-89e3-2ca7807c2278", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0374a56f-973a-4f7f-8570-7a20c6c25988", "sighting_of_ref": "indicator--9ff9cded-047b-45d7-a07d-c69cb62bf746", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45a6d496-2ccc-4192-a337-722ef4970964", "sighting_of_ref": "indicator--61f55f60-df2b-4138-90b2-d50a3dcbd85e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6477cb88-52e3-48c3-80d5-8c6108b5677c", "sighting_of_ref": "indicator--bad45bce-db5c-433b-b5a9-4bc7c4822d72", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32adc959-e0d7-422c-8148-cb2fa5ef528a", "sighting_of_ref": "indicator--16fe0533-49b7-49da-b04c-19bd799f5878", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09683e3c-f427-4198-a459-131e1e9cf4c7", "sighting_of_ref": "indicator--1dde07c0-c052-49ca-8a71-79f89e350104", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5d13a42-3b46-4ef8-8bda-10b2244d5208", "sighting_of_ref": "indicator--06c39ee7-e75e-4614-b4e1-a542d2495fbe", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4f8edf7-5c62-499b-bbb3-b887e2096640", "sighting_of_ref": "indicator--467f1e76-2545-48a9-9614-8d2b65bc2109", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eb3a046-7a17-4091-8279-f518566a434f", "sighting_of_ref": "indicator--4dbded93-1474-4273-8e5a-eb253f205cfc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85641c57-b9d4-4a74-be4a-e47200740a72", "sighting_of_ref": "indicator--f8d92afd-3fd6-40e5-8de6-0f4a023f0f78", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33843d79-8775-4b12-9f7f-d7a4b14cc370", "sighting_of_ref": "indicator--5c552a47-ed9f-4f5d-82e3-57420cfdedbc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfc17277-2901-4efb-8f42-bcf36efbcf4f", "sighting_of_ref": "indicator--13201e3f-2c2e-4544-8da1-f0741c6198cf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--841de3f8-40d4-4c64-9494-a02deaa2849a", "sighting_of_ref": "indicator--b135dc78-d677-4c34-9816-5aa74421fdaa", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e120f67-4622-4f3a-9f0a-36a6532d85ed", "sighting_of_ref": "indicator--57340d2a-317d-43c2-92ec-2a68926a8e3c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b731162b-ff42-47c6-b703-8efe7fcd86c0", "sighting_of_ref": "indicator--f89ca658-2ca5-4c23-824a-3324caee1297", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03bcb7bd-7aa3-40dc-9ee7-2b957d7d7fcc", "sighting_of_ref": "indicator--d1b45240-3f34-4422-913d-18b3b3e8d31b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63c02432-4b45-4c56-a304-d490bd20bc66", "sighting_of_ref": "indicator--0b379c75-4e0f-4180-84e7-ab5f34a6c106", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c634d31-b4c5-4670-a790-d932ee18622e", "sighting_of_ref": "indicator--86fc9360-efa3-4ad0-a32d-29a68ec3f8ef", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f26fbb4d-01d0-4780-adc2-e999df85cce3", "sighting_of_ref": "indicator--0bf33e98-32b7-478f-b5e8-66998ef6daf9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8b6ee7b-9d8d-44c7-9348-21e3c1914293", "sighting_of_ref": "indicator--bb0ac33d-7ccc-40f2-bfb1-9d2a3084345a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3793abcc-6a7b-49fd-9938-5b594d337997", "sighting_of_ref": "indicator--2ac6d63b-b600-4be2-9165-31a5c301e8a0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ccd0d00-90f9-4361-b481-ac8370a217e5", "sighting_of_ref": "indicator--1630983e-eb8d-4b26-ae6a-9778eaae026e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19dc4a15-431d-4798-855b-1229979ae332", "sighting_of_ref": "indicator--1ffbe030-e7e4-48ac-99f4-bff872530eeb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe2019e6-7bbb-4791-9266-83d5a53a4294", "sighting_of_ref": "indicator--4016f244-52ee-4e64-9949-614527b7a8af", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d73c707a-99db-4c65-bf71-8570ead625a4", "sighting_of_ref": "indicator--9fbc674e-407e-4bd3-919f-1d7b2f2fc92d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e616eb9d-27eb-4242-98ba-1892888930f7", "sighting_of_ref": "indicator--46ace0bc-4273-46e3-8227-c5c43c39f1b1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2298dbb-a86a-4cd7-8da1-626bcc55a1f5", "sighting_of_ref": "indicator--a02dd292-f29f-4bae-a2c0-7af354c7ecbd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af1d5df7-e7c6-4222-b417-6383d1158138", "sighting_of_ref": "indicator--a6e51aaa-e795-4cf0-a408-20b6c67e0cdd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ce2f984-7b5b-4ab6-b8c3-9071e76db1a1", "sighting_of_ref": "indicator--e7dbc367-cde2-43e2-8504-107bb66fa1d8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eaef125-f5c4-4fb0-8e18-51ed1d328af7", "sighting_of_ref": "indicator--d60dfedb-669d-4088-8286-2ad45a3923a4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36ff855b-2bb8-42ff-a065-02938ea590dc", "sighting_of_ref": "indicator--71f4bee7-9e5a-46bf-b066-2b11a419fb9d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--051976d1-7f5e-448d-a8df-b9caeb231176", "sighting_of_ref": "indicator--98aa0c12-6c46-47f3-b73d-4a414eb070c0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09c68b25-cacd-4206-9dbd-d80735f9b3c6", "sighting_of_ref": "indicator--36aa6bbb-63ee-4bcb-ad2e-3c756f478608", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c9c4a89-4b7e-432a-ac9d-85cc9940b3a6", "sighting_of_ref": "indicator--8df25545-b572-4697-8840-d6a6e364ae56", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--829dd5be-f501-40e5-afa9-98e8b0e27ba8", "sighting_of_ref": "indicator--ebe92714-6861-4669-9c76-fa6a33d6056d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f614674-6419-418c-8fa4-8b5fb6241268", "sighting_of_ref": "indicator--a6bb4789-db2e-47d9-9eb1-4b79d674dff4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1422e9cc-7352-4a50-8ba2-df179789f0a6", "sighting_of_ref": "indicator--6cd577bd-6aed-4272-bf53-1daa72e35360", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5243cca4-524a-4916-a6a3-739aeb5fa182", "sighting_of_ref": "indicator--67318ffb-881d-4959-a8eb-3317d7b79d52", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da573fcc-6471-4468-9155-de76fbe09dfb", "sighting_of_ref": "indicator--78d86fd4-670b-4295-bbe4-38f8275875ee", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9810873b-752a-4296-8c51-b1c35d5fd721", "sighting_of_ref": "indicator--f08d2a7a-561e-4d86-9e39-ccf87b83c5be", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b317caf6-d402-4af4-be9a-f267b4ae27bc", "sighting_of_ref": "indicator--dc9a145e-47a1-4a10-aa81-336437cad25e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de6ad078-736b-4c1b-b7ee-8e38a414a7eb", "sighting_of_ref": "indicator--7e348013-f5c6-468a-a669-e947b392dba6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58f36698-b0d7-46a5-ada4-55d68894f38f", "sighting_of_ref": "indicator--1c9bb58f-b978-43b9-8908-f5cda20141a4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c04798a-4c38-4cf1-922b-5f437e205f42", "sighting_of_ref": "indicator--d4a239df-6da4-4ac9-bb6e-088ea2360d5d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b54e8d28-a252-47ae-9e55-59f3f9f1510e", "sighting_of_ref": "indicator--99bed3ec-975a-4a47-9b07-b2739ab44228", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1b7cdc9-d57a-4376-8134-b930f504809b", "sighting_of_ref": "indicator--29e11b5c-e51c-4d11-b47b-02cfcc0ba15e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07ae20f4-8653-45d6-908d-99d4c1febf1b", "sighting_of_ref": "indicator--c9546622-084c-48fd-be35-84637d4a2b98", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4380012a-b03d-4fa6-a489-52fd9e10fce3", "sighting_of_ref": "indicator--117e958a-1a26-489d-b267-e09ad529b89c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d585d02d-d759-41f2-a6a0-a5c90f122c2a", "sighting_of_ref": "indicator--a5f0118e-8317-4df6-8c31-2e498408a35c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c69ead4-95c8-4f6f-aa40-30581ca14e42", "sighting_of_ref": "indicator--bea84e18-2f15-4279-b649-40ef40c23763", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bea30bbc-0898-4bac-ad01-19a64ea68be7", "sighting_of_ref": "indicator--817ba413-d732-4610-a7ee-7f21c5da29c2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2f86eb1-ec29-40a4-9e67-dbd605542dbb", "sighting_of_ref": "indicator--537d9c3b-870f-424c-b4e4-834944bae6a8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b299ed0c-fe58-47d8-850f-4c8d5643090f", "sighting_of_ref": "indicator--e305d691-6f5f-46d7-8a61-9f28d6b59a68", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e192c11f-58de-471c-8867-7f1c66fbac2c", "sighting_of_ref": "indicator--edff30e9-eb79-46b1-96a1-4448ba2c875d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f04b2bf6-cfa0-4e64-a90a-f91052767f54", "sighting_of_ref": "indicator--81b88475-4500-4367-ba3a-d07510ac0b31", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f78e336-c627-40ef-97c3-9c5e140a895c", "sighting_of_ref": "indicator--bd372949-9f38-4f16-aad0-90661d3a7caa", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--227c716c-5384-4c63-8147-cb8252b63b2e", "sighting_of_ref": "indicator--df9598af-fa73-4498-ad53-cf388ba91ae8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08fd8d55-5b92-43c1-8b95-c9e95a00292f", "sighting_of_ref": "indicator--4206d6e8-c7d5-4303-baed-03d2e4379835", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4d4e3bf9-d657-44b8-a49d-2d6713bb58e6", "sighting_of_ref": "indicator--7f03788d-17e1-428c-a2c5-fe52cd9fff23", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8923091-b496-4df6-8a3e-bfa9b76583c9", "sighting_of_ref": "indicator--28bd5b1b-3bf2-44ec-acd0-101e00a3d437", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73e9a338-b197-4351-a8ec-a29886d57363", "sighting_of_ref": "indicator--6fb0366b-e1ce-45a3-86b9-8a5686f8d09c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ff91bbc-83d0-4651-bce9-f6b00a519cf6", "sighting_of_ref": "indicator--c357c2e9-0cc3-467d-a72e-54e4ce5ecc04", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1074bb2f-2d97-44a2-98dc-c118dd986c44", "sighting_of_ref": "indicator--b336b63f-74c4-4634-b1c1-3492c7464238", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7a0f51e-e3a3-4ca7-910e-5674b450fb40", "sighting_of_ref": "indicator--42e2ff4d-c169-41eb-a51a-cfdb28abbd57", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--140a85d5-2eb6-42de-9150-37a794566642", "sighting_of_ref": "indicator--6239e538-20b5-411e-85ed-73067635ddb4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33bc59df-e02f-40d2-a47e-da4572f5cd34", "sighting_of_ref": "indicator--35071207-966b-4fed-8500-aca8dd826d4f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b93f23ac-0224-4481-8a4f-a0dedb719da0", "sighting_of_ref": "indicator--130edfbe-744d-4d50-954a-3ca5036e5f21", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--244eb276-a07c-4d87-a96a-6d11cb9d47d2", "sighting_of_ref": "indicator--18ae8244-5da2-4cd9-9e89-4888836c01c7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--08f0085a-ae2f-4220-99f6-156ba496550a", "sighting_of_ref": "indicator--f2adac0d-b3a1-4d3d-a64c-06d323882776", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94e6a83b-9c16-4b4f-911a-5be786177f2d", "sighting_of_ref": "indicator--d57b2057-9dc1-41e8-8a0a-35bdc3a667ef", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--185a6415-e243-4413-b211-3b91a2229d07", "sighting_of_ref": "indicator--86de5f4b-710a-4ec4-932b-cb995ff0c979", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6b910dd-9285-4621-8425-3ec0d7580121", "sighting_of_ref": "indicator--a9ab69e1-7744-4a33-8895-ccdc13f7de28", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47a43f37-047a-43e7-ba1d-7b8c7bc45624", "sighting_of_ref": "indicator--9c42a04b-594f-46ba-ad1b-c7a38ea27ba4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df03d2cc-3c12-4f14-ad92-90677ea4e623", "sighting_of_ref": "indicator--bb24dfae-6bed-46b8-8b60-47b5ec9f2d55", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1923f715-c4f8-40c5-977e-5d043f007093", "sighting_of_ref": "indicator--93469083-4312-41eb-ac5b-59530280f61e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59d73620-411c-4874-8dcb-b496f160dc63", "sighting_of_ref": "indicator--78b9b612-e0ee-42e8-b7a7-ec4967adc607", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a4caad8-c219-4b20-98df-91d762b553da", "sighting_of_ref": "indicator--0438ff84-e8b2-4c76-8d3c-6244978d2381", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43cf0508-7d10-4172-86f1-bc3e34328d51", "sighting_of_ref": "indicator--85465401-9ba7-4e80-b461-891f04a47fd2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bca41d29-ec57-410f-a75a-25aa55f45ca9", "sighting_of_ref": "indicator--c442463c-a907-456a-82d0-0c1ad5e8c94d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--482271fe-eada-48f8-ba71-91d3029a8f28", "sighting_of_ref": "indicator--2938d53f-9ed7-4cbe-99d7-e46738fff1a2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32836299-6d2b-47e6-b721-1b29e0d2bfc7", "sighting_of_ref": "indicator--71a1fa1a-b2d9-49cd-bea8-8efc4068db60", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b09887a5-30bc-4925-a950-2d7c289ea1e8", "sighting_of_ref": "indicator--40018744-1f6f-47f2-a418-70e0e5112bcb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--368384d4-467e-4dee-84c9-84b9005c400b", "sighting_of_ref": "indicator--904a05b4-1db7-44d0-b822-c856fe85ffdb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75d211b5-5a83-4d5b-9fea-a4c59d56cb73", "sighting_of_ref": "indicator--e05470b2-7f72-437e-8174-b627df2a4201", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9a8167aa-4df8-4f3b-ae91-117ff7aedb7b", "sighting_of_ref": "indicator--fff2e0c3-2ba9-4525-bd4b-7aa4835f45b6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6404b40d-d2b1-4e96-946f-cec829eded4d", "sighting_of_ref": "indicator--a4c355c3-7271-4749-8536-8ab1828c3e2c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6ca41d2-49e5-431d-b176-ab689e989246", "sighting_of_ref": "indicator--a6b27687-045d-48e9-aa7b-0917ca47003d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3780039-883e-45c2-b05f-8755af6db847", "sighting_of_ref": "indicator--de47c0dc-2660-48ef-97e4-f61cdefcf871", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f015c671-4821-426f-8887-bf4e5c12b2f9", "sighting_of_ref": "indicator--a663ec01-5d74-462f-93f5-6439efaca09a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6efb79b-1c26-4aa9-abca-05d46bfbd51f", "sighting_of_ref": "indicator--528da811-4f20-40d1-adbd-818c96d89391", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72a6c92e-3b60-48ed-8063-77d4a9a6b5c8", "sighting_of_ref": "indicator--dd24494c-ae74-4f6a-a7b7-dfe0cd56eefe", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11022a36-b10b-4871-b874-1c078c817479", "sighting_of_ref": "indicator--1df1f55f-fb3a-4753-af78-a85e7300b893", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2512c324-9dba-47e3-99c3-c7af7786c843", "sighting_of_ref": "indicator--13876123-d518-4127-ae26-f1a40565efbf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67ef9f19-0416-4d15-a716-164e89bd8a37", "sighting_of_ref": "indicator--8e0928f5-6d42-4f12-9411-0eb5c0778847", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26b42aa7-fb4d-4091-b000-604a65d8b7a8", "sighting_of_ref": "indicator--ad07ed44-eb69-4a27-b563-6b213a61e476", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25db9631-7df7-4c7c-bd0d-eea3d6840f72", "sighting_of_ref": "indicator--8ee2db90-e1ba-4bf1-95ec-01f4122da8e2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e805a808-cdb1-4b07-b5e0-250750b37299", "sighting_of_ref": "indicator--ab6bfa3f-3c67-42d9-984c-d5758ca6813d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--128bf0bd-6e46-461e-b1cb-bdc4c3493a8e", "sighting_of_ref": "indicator--d1333c0c-7ffc-481c-bff7-af775259feb5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b207330a-67f7-4aab-bf51-ff625d66afa5", "sighting_of_ref": "indicator--a95aea40-1f7e-41d2-888d-40f233d40d1f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1738ca0e-5b64-4463-8b86-bcb69ac6c6e6", "sighting_of_ref": "indicator--79172b2e-2741-4792-a62e-d8b34cf4cbfa", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb659452-2b74-4c3d-8c03-23d14a8616eb", "sighting_of_ref": "indicator--08db7af5-9c9d-4e94-b954-0f981989d47a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce97bc98-5fbb-4940-9aa7-841b58be275d", "sighting_of_ref": "indicator--5b255c04-beeb-4f28-946e-6b5b2777710b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88e4f1d2-abea-4be1-9198-c807bf2f4f2c", "sighting_of_ref": "indicator--3e0b59ec-fcec-49ab-be83-d53b3427ec7f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdc73a01-8f78-4573-988b-55d42b040eba", "sighting_of_ref": "indicator--d559e9a2-ef20-41bf-ab6e-bf867e956c09", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--440dca6f-f5b3-4247-8790-cc66e14ab8be", "sighting_of_ref": "indicator--a9b7f992-491f-4888-bc87-7226cbccfe0e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ead9656c-b01d-41e5-b6be-a82bcb781a9d", "sighting_of_ref": "indicator--2243a69f-6c1e-46f2-9d30-8b78c79d83d6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f652f1a-bc45-419a-a304-899c078f2316", "sighting_of_ref": "indicator--9f90df36-26c4-45d0-b4ce-a09b43f069b3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf72c874-46b2-472b-b09c-032c2032d455", "sighting_of_ref": "indicator--b28d92bb-a0fd-4816-9565-fbe9ea8c2c36", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18e1de51-b6f6-4727-a6ed-0b17099ff6b0", "sighting_of_ref": "indicator--2adbb4f0-41f2-4360-9244-c0ceeaebbca9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2329afe4-adeb-4404-a7d4-739a0dc104eb", "sighting_of_ref": "indicator--c4969069-078b-479b-96d4-ef5d84264c8a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c874b11-4e62-42b2-b226-e7c208a48f37", "sighting_of_ref": "indicator--55d4e158-d39f-4da2-99ff-ae6706bf901b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6c7e510-192f-4415-8573-80a2777944d0", "sighting_of_ref": "indicator--a09703c4-d2ad-48c4-9bce-07ec82b25bf9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c50eda77-97b9-4ada-8c51-959e11880448", "sighting_of_ref": "indicator--c7628e79-b7f9-421c-8de1-d1cd9fd8c861", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1892d72-603d-49bd-ba19-5e359d707f66", "sighting_of_ref": "indicator--6b845728-3319-4353-841c-852dfa3029e7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bba13d5-6a6c-4106-b574-bea3a4db971a", "sighting_of_ref": "indicator--a141d6a7-a415-4bc4-aaa4-9bb0ae875ffa", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a81f7a55-312c-4fc3-8a12-550e2f1b5c2f", "sighting_of_ref": "indicator--8b2fb2ec-88db-417b-930d-2c55bd70da0c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4c27035-1a7f-4794-a956-64986d11b525", "sighting_of_ref": "indicator--a9fdd0fa-4e5d-40db-93ea-071edfbe37de", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8dc05b29-80e4-4ff1-b0ea-e29154de2265", "sighting_of_ref": "indicator--21dc5c68-cd71-4af9-a9bf-d009b5d7a5e1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--909161b3-17a7-46a8-a36a-3a2e3a7e9610", "sighting_of_ref": "indicator--8a1144fe-8132-4781-a53a-bb33c6c9cba3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60d56693-0b65-4e27-9a8d-a621ec393355", "sighting_of_ref": "indicator--f2157919-f57e-4489-8276-deedc359fd9d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--694e4b7d-e578-465c-83df-85e5e720dd00", "sighting_of_ref": "indicator--145b6c23-4aeb-480b-8352-1381868b731c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67afaa94-4fd5-4f3b-b157-f9c905cea0c3", "sighting_of_ref": "indicator--3aaf2fd3-3952-48a7-9d02-75fa76977dcf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--788f1877-2f9f-4878-97e9-3b7b510f2023", "sighting_of_ref": "indicator--3047464c-01fb-4412-b5fe-a2a7d63664a9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a11887b6-f509-487e-a3bd-ad7c424c5a6c", "sighting_of_ref": "indicator--4480fc96-0884-4d7b-a7e6-d4380e37197b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5502aa80-8e03-4e0d-b17b-c8fb0ae74a9f", "sighting_of_ref": "indicator--f07a8a40-1276-4d00-a6ef-e3ddb5fe4280", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4fb8e0b-b3d6-4af1-8dd7-749efdfd68b9", "sighting_of_ref": "indicator--1da3e34e-c5ef-4d5d-9d70-bf28f96ba0a4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acf5d615-b1a1-4bd4-9ec9-9d310c80076c", "sighting_of_ref": "indicator--c66520c4-1d68-4f6b-85ee-3a5e7b10db8a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a7c43af1-49a8-4744-b8c9-9c09e089d105", "sighting_of_ref": "indicator--68eee9e8-5dd4-4204-bf66-657651bdaacc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c3630c96-2a07-4c72-a74d-79503d341186", "sighting_of_ref": "indicator--7f4ecf3a-352e-4e19-8d5a-9e63d858afde", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c5e2ecd-427e-49b8-8981-0f362d41836e", "sighting_of_ref": "indicator--a9d8afea-2d7d-4af6-a18f-ab4187b992d8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--311e7c23-9daa-4fb1-b15e-73a652d35999", "sighting_of_ref": "indicator--8afaf22e-cd6f-4d58-b456-5c7eb9159fb3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2dd6ff2-fe12-4245-a7f9-948eb816e290", "sighting_of_ref": "indicator--4cb27976-5caf-4367-b42c-2540a1dfa560", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28b7d614-4ede-46da-9ecf-5b5762bec623", "sighting_of_ref": "indicator--9007abdc-db7b-4a7c-a14c-641c9326afe4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2cbeb3b4-c748-4634-bd85-2160bb0533b9", "sighting_of_ref": "indicator--b8301da0-b040-4943-b476-989d4ffa0b26", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d52b4ef-0a74-4d25-bdbe-0f55a0d0f531", "sighting_of_ref": "indicator--0758eb4e-5f08-44f0-add1-084934934699", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--307deb73-82f0-4c66-81c7-051a0cd004f5", "sighting_of_ref": "indicator--e285746e-95a2-426c-b692-16b7736c115d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36ec44a7-4953-4b0d-a017-52cc1e32ad28", "sighting_of_ref": "indicator--c85cc48a-afec-4d91-8b96-b28db6b95401", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98746ff3-a6b5-4f41-a4e2-a2a9f711ffee", "sighting_of_ref": "indicator--fcfb052b-4323-4da4-9f83-401e67abcf4c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e588e9f0-2c29-4e73-9112-60001707f1ad", "sighting_of_ref": "indicator--75048d43-56bf-421b-9151-96d7d8804c93", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4ff4492-3828-4fbb-b579-c5aed03ccb6b", "sighting_of_ref": "indicator--809c7d48-90e2-4492-9269-fc013272eb94", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07ca8e35-55c2-40f6-bcf3-df18cb7cda4c", "sighting_of_ref": "indicator--355e0dbc-534a-4d1e-9359-bb2a98cd7761", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c0f2784-34d8-420f-98e2-51266f4e087d", "sighting_of_ref": "indicator--0d9afaeb-e631-4831-bc49-5a6a048816b8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b009467-88e4-432a-96d1-1cfa399e67f6", "sighting_of_ref": "indicator--d067f9cf-9dcb-4633-8e71-488eea537191", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adb726b9-736a-44c3-82b1-227c2023314c", "sighting_of_ref": "indicator--6d1517e3-9abb-4703-8f08-f44bef0afdbd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e317de3a-bebb-4c25-b83a-f283c6fb0e2f", "sighting_of_ref": "indicator--b7db05f9-4a7d-4157-be76-242f039ae7a4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef8f2675-b818-4237-9962-261bd5f9d3f5", "sighting_of_ref": "indicator--2b64ce80-81bc-4f67-8935-b2d27d8aed8b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f1e30e8b-5dd1-47f4-a748-4b2559275941", "sighting_of_ref": "indicator--68954da9-753f-4368-8969-c745316709ae", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b655ba02-db23-4cec-8750-8d678dc1f532", "sighting_of_ref": "indicator--59888deb-cf7a-4dae-b145-f4741ee88c92", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0fd4621-f761-42ac-b090-92644476fa17", "sighting_of_ref": "indicator--e322abb6-461d-4b7a-86ec-fca5f134c0ab", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--633abc24-bae2-4caa-9f4c-6073f4868f8d", "sighting_of_ref": "indicator--3cf753d5-398b-48cc-8783-8ff13afa43f8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--533a0f08-fb6d-4b5d-b68e-7093028c13d7", "sighting_of_ref": "indicator--e5be04f3-8a33-4554-989c-c49bfc2c97f9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--463c4c37-562e-4de2-b230-f6ab1b303430", "sighting_of_ref": "indicator--fe0f87a4-ac8a-4498-aacb-40b92b23275d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0451af27-0bce-43bb-bdde-3b8c20aa2221", "sighting_of_ref": "indicator--b6ce8888-8faf-4e5b-b447-a6b099f25c47", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--814639c1-2f99-4465-a00d-601cd489a94b", "sighting_of_ref": "indicator--2a56b96d-28db-42cd-afa5-80c276e10879", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--218c0235-f1b4-4450-a511-0e4c4182ac26", "sighting_of_ref": "indicator--f0e99b41-8d50-45b2-b162-34786c9b8579", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2ba4620-1dd2-4f5c-b82e-4f1d5b6bdcbb", "sighting_of_ref": "indicator--f3075676-b66a-4198-b63b-2450972a4831", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdca3aae-a9a8-4c33-bb61-6052472415d0", "sighting_of_ref": "indicator--2be6adea-764d-4d75-b756-7850742e7cc7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--deee0f6a-bef3-4f6e-aacc-e6c3efeca59f", "sighting_of_ref": "indicator--323ba86b-dcce-4ff9-8b7d-aba179758d77", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da4822b2-13da-4871-a568-d7bbe1e85c74", "sighting_of_ref": "indicator--d2e2b366-a607-4d9a-a9c9-affea37af41c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee906057-5c31-4e1f-bcf1-105287e5adb5", "sighting_of_ref": "indicator--d637ee27-0958-48dc-9c4d-90a2448fd429", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9bca011-dc20-466e-8b73-84aa6107d873", "sighting_of_ref": "indicator--9c4ad050-32d7-4128-924e-2dd4d0795d0d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4043dec0-4288-4d0e-a632-7577dd76e660", "sighting_of_ref": "indicator--342ec31a-409f-4461-aaa5-daf3e43f4cc6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a6b939a-b926-4078-b4ff-95d2142e8a97", "sighting_of_ref": "indicator--d1bb8169-e5e0-42ce-b4ae-9c257cd4354a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2a6b0d1-f566-4f4e-b68d-fae5065f206a", "sighting_of_ref": "indicator--7733a85f-8784-4cfd-8e3d-753dca2caba8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23267112-21dc-4f0f-b093-5a38e090838e", "sighting_of_ref": "indicator--05b56e62-4311-43e1-a860-41cde9d487e2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6cade620-649f-429e-84aa-98df9bd3b8e5", "sighting_of_ref": "indicator--27c88187-eef0-487b-bdaa-9c2c9ed286eb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a764d7d-460b-421e-8ec5-7f04e0787ed2", "sighting_of_ref": "indicator--ab76ead5-3346-41a9-92ca-0f86a3f3f013", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8da281c-d40b-4352-8786-bf645bc54938", "sighting_of_ref": "indicator--90396bc3-dffe-4fb4-a022-14d1ff57f889", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d5b6559-c971-4c33-9463-b486dd3ba612", "sighting_of_ref": "indicator--03652ec9-8395-4498-ba39-1b51594ce282", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f5bcce6a-8750-4d51-8a28-adac69070da3", "sighting_of_ref": "indicator--13f84409-c3bf-4720-8bc8-bf45d401ac35", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab904605-1e16-4641-81b6-d5c6934f8411", "sighting_of_ref": "indicator--d6112990-3f6e-4f19-9ed9-724acca6de2c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--067958e3-4b2e-4d5e-8b92-ce75f7de9351", "sighting_of_ref": "indicator--35b49ed7-4be3-4f89-a88b-85ba3ed0307d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d23ea931-b19c-4e6b-bc6a-9fbec6a26604", "sighting_of_ref": "indicator--76b25c97-8d4f-4e63-b3de-871a16d31525", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--225d081b-e901-440c-9380-08c25e096bdf", "sighting_of_ref": "indicator--91284317-a867-4c6d-b695-15b602abfccb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73023da2-d60e-40c0-bdb6-e145197fc116", "sighting_of_ref": "indicator--09c55364-a600-4249-9e7b-4a36095a3729", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dacf36ba-b22b-4cbe-8c10-7264aa9f7101", "sighting_of_ref": "indicator--4c88f073-c467-4363-b220-21ca27b8e16e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef02a1bc-2e87-4ca0-b127-f4c459e2ce2d", "sighting_of_ref": "indicator--c38455d4-6ca0-4bda-a1f6-3573bbce0210", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e361e6d-6357-4b7d-aabc-986cd1c4a951", "sighting_of_ref": "indicator--9b769e5f-804e-4be2-9cf0-91137bc972b1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3b62490-ee7f-4122-9a95-ef862967a715", "sighting_of_ref": "indicator--876ad76b-fa12-47eb-bb3a-8a51c5f85b91", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9abce59f-73b6-42aa-a59c-ffb43be5cabf", "sighting_of_ref": "indicator--189c3975-a87c-44bd-bcbf-d85d696868f6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7776391a-a6a1-4753-9ef0-8c27a75de496", "sighting_of_ref": "indicator--83b0b4cc-f64d-4ba7-8873-cc8cf4a63e8a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b00dccd-c309-4b21-a042-9f8058bb6d8f", "sighting_of_ref": "indicator--8f6bfd29-f584-4cf1-8283-b662e7cb592c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4fca5bd-380c-475e-b471-c2e99cc095c2", "sighting_of_ref": "indicator--380d6cbb-bdc9-4bd3-bce8-ccd7004d2e87", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1093400-ce37-4266-b57b-865babb214c0", "sighting_of_ref": "indicator--bf3a11ca-33cf-478e-9c36-36c6f3d9ad3c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d5c372e-4946-4bac-80f6-346e7c91b595", "sighting_of_ref": "indicator--b0515775-87c9-4100-b4aa-856086baa388", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40769e44-55c7-4ee4-b013-d780e5cb5eb6", "sighting_of_ref": "indicator--7684b431-211e-440a-adfb-2f6807a7fe55", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0092104a-ed88-4daa-b7eb-b8d46d986c79", "sighting_of_ref": "indicator--1699dada-e4be-4b37-863f-b2d4c951fd8a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6e7ee73-4fb4-4fe9-816f-f8b079c25119", "sighting_of_ref": "indicator--5a2e4c82-d939-4606-98c1-2269823fd5e1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99db0b76-f384-41ea-a5b9-d0ca612eb0e0", "sighting_of_ref": "indicator--167b6666-b5e0-414f-a27d-c860fd9bda27", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f023977a-9c39-4f65-a941-14cd4fa6e2e8", "sighting_of_ref": "indicator--a565bb63-3ab0-40d1-9275-56112b6230b5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5bdbb76-7b71-4d89-ada0-d23d42347609", "sighting_of_ref": "indicator--eefa4f52-ed13-4692-a19d-37b32eaa055d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98b941dc-07c0-45af-b638-0e2b7d348847", "sighting_of_ref": "indicator--68b54ba4-6702-435c-900d-e0d6ab1cd4b4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4156339c-c5c9-40c0-9bdb-5980f3aa00ad", "sighting_of_ref": "indicator--fde45937-5599-4f27-9074-9959fced4d40", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b7ef35da-0907-4913-ade3-6dac3b4bd455", "sighting_of_ref": "indicator--40e77fdc-2ea1-4936-b475-5c900979c0f1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea0aa3c2-cc03-4f94-9142-2bb3e65d8eb0", "sighting_of_ref": "indicator--501e560b-ff90-4285-8510-1c3ace58fc6b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c552592-dd44-4ed2-b8d8-33021d03f733", "sighting_of_ref": "indicator--f58bdbbe-28e0-46ca-93d5-7d2e8f0c0890", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b0d46f17-c1dd-45f6-99fa-02184e3adbec", "sighting_of_ref": "indicator--590cd5eb-9add-496c-8866-6358d637a949", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94f1fec1-7806-42ba-b66a-f96b2549b34e", "sighting_of_ref": "indicator--3fe61109-ee43-418c-93d6-056889356e7e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02d58c90-8276-4dd0-a50e-ae2de06a1cf7", "sighting_of_ref": "indicator--7c7f7425-ca4d-40f0-9820-d85e28fbaa99", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eafb9e7d-7d68-4b13-aaed-6e1a4276f795", "sighting_of_ref": "indicator--a9d9d1b6-6e2a-46a6-a606-b6a8250527ec", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f07b4ae-956c-4bcb-beab-5400d1e6d2c8", "sighting_of_ref": "indicator--8dd86714-a066-4a68-86a7-502f60103771", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--616793d2-1754-4ce4-b0eb-f6e18b599f7d", "sighting_of_ref": "indicator--0f24cd02-2a34-4a98-9a9a-5087aa8cad52", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c32bfcf-670b-4482-9363-e49347e5840f", "sighting_of_ref": "indicator--b960fc8e-32f8-4f43-9ec9-6d23aaca8bd3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7660c98d-8d2a-4485-9aff-d2cc4e222aec", "sighting_of_ref": "indicator--aa77400d-68c4-4054-a7dc-d76c3020f32a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6299ad06-ec76-4830-97d1-17ec9b846371", "sighting_of_ref": "indicator--8a402762-972c-490c-bf90-5c85315bd394", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26a8316b-6b7d-4ea2-b42b-ce3611e598b6", "sighting_of_ref": "indicator--355f8460-12a9-4135-b67d-091b2bf8dfb6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46699987-06e1-4cea-bde9-b74251df1f80", "sighting_of_ref": "indicator--b631df5b-0e8c-4aaa-a788-978f40ed9a83", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d802865-483f-44f8-9408-c475a6acc596", "sighting_of_ref": "indicator--16e59588-f1e3-4c51-9ff3-4bc2f345739f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a900c138-1ab1-42d7-896e-d697852f7107", "sighting_of_ref": "indicator--5970821e-1a20-490a-8738-a948be3aa5a4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5caabea-8dc9-46ee-a1c1-39c256890f42", "sighting_of_ref": "indicator--ebab6757-207b-43d2-9d95-8f4be7e15358", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e4846be-a5b6-4189-9178-5f04e6371226", "sighting_of_ref": "indicator--4ffaba62-75c2-4659-b526-69fe606b8717", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebe26bad-1780-43a2-a119-e05b5a4db47a", "sighting_of_ref": "indicator--4fbb7d73-942c-4cc3-bc3b-e6adc15d6e86", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8be75484-faae-4284-b00f-80940da9ac1e", "sighting_of_ref": "indicator--d1ad493d-b5a3-4c77-97db-69eca65df644", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aea2524b-e09b-4c15-b994-737175f9b9e7", "sighting_of_ref": "indicator--3116a911-2dac-49de-bcdb-6ac10ddb36c2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21267e19-7bc4-46b1-a2a2-df3b6b7f2b56", "sighting_of_ref": "indicator--1ff411ea-84d8-4d82-8d2e-9e0745636fcc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a8def16-e666-415c-9e9b-c1c366db2de7", "sighting_of_ref": "indicator--c9c2017d-d599-4f98-b64e-601c5ba57033", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8415d48-0a9c-4bdb-883f-acb4bbbbc9e8", "sighting_of_ref": "indicator--d1baff73-03f4-4f79-bbf6-d7ddf6089c4e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9800294a-03de-4a48-a379-0916e4d7d9f9", "sighting_of_ref": "indicator--8edd22e1-24a8-480e-beb8-762be42a19c2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--256f2966-ce47-46eb-9a85-f05eb3ff72cb", "sighting_of_ref": "indicator--08dbfc69-fae1-4e7c-9601-f4608f4d0e43", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4fae27b-9a8c-4e02-a41e-b9938dd46c7e", "sighting_of_ref": "indicator--b501479f-c54b-4ad6-8c48-6ed5f2eaf564", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe4e8c06-0ab2-448c-9539-8b873ecbb9d3", "sighting_of_ref": "indicator--f4030031-5f61-44a7-b85c-7066f39de54a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93e7e9b8-c0a1-4bf0-9f00-b843e2a3e673", "sighting_of_ref": "indicator--ef0c17ac-ad9c-4b51-a853-6f2f81b8a8e0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0395617-b36f-48b6-bd15-712dd629e882", "sighting_of_ref": "indicator--d4e4a95b-3e41-4b88-bdf5-6fdc77f32799", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--837fa35a-c567-4cf7-ba37-9b19c1572f26", "sighting_of_ref": "indicator--e8ebb5ea-78e8-4129-8a2b-d97121d76543", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--924bb938-de71-4a8c-964d-42a21a6baac9", "sighting_of_ref": "indicator--ab9e6d75-5fa5-465f-baf2-c4d3e6365fe5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a242697f-1784-42bd-b438-84d817272943", "sighting_of_ref": "indicator--69d1108f-1cc5-441c-8e3d-8dc57b677db3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4dd7675-203e-4e8d-85d5-0f36e33d30e3", "sighting_of_ref": "indicator--5d7f46db-e0cf-4f64-b2d1-5983c31c8922", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f352825e-5739-4729-a27a-628d65f2dfa7", "sighting_of_ref": "indicator--f9f97508-22ec-4290-9cd5-96ca53a9807e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6263ecc0-43eb-4307-87eb-8c3c2cd5f284", "sighting_of_ref": "indicator--f2a5c43f-f572-404d-b5d3-316c4f05f5a4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e2d1112-77c0-4cdf-85f0-ed5dea20ea70", "sighting_of_ref": "indicator--f5b507ec-5f94-411e-8752-73c08c74d4b3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6f76106-258d-47fd-b3d4-128df06d3d0e", "sighting_of_ref": "indicator--9bbb8e95-68ca-478c-bd4e-129132f34cd3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--db77ecb0-721c-4392-9ce4-a7fac5989dea", "sighting_of_ref": "indicator--0de84769-6a4d-462e-ba62-728aa70adff8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c91d2d9-a474-42c0-960b-65a96a6029e3", "sighting_of_ref": "indicator--4e442167-1f2c-480c-b9ab-4348fee39a72", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a342e0b3-52e4-4665-8de6-74362702a63f", "sighting_of_ref": "indicator--f0681a68-62d2-4c6f-be67-c9d629ad3fcd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f9b715f-66cb-4c89-96fc-0127f7e66d59", "sighting_of_ref": "indicator--4df008e9-9c9d-4351-8187-21c2ca681c88", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94413ca3-9078-41a7-a419-e197f1ebd0f3", "sighting_of_ref": "indicator--e58e0987-ca2b-4262-b886-31bcb7e5ab5d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10961115-af70-459f-acfc-eec71c5bd32f", "sighting_of_ref": "indicator--dd7cb6c7-9d91-4b16-b2fb-d67c5105adeb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d9432b1b-1211-4fd2-a9b5-a7dd21811ffe", "sighting_of_ref": "indicator--78d71f15-477a-4022-9419-c1b2666fc806", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67e2246a-fe4d-4723-96e5-d0415912d239", "sighting_of_ref": "indicator--837e10a5-3556-416f-8471-8ccd89effd5f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab93ee24-092f-4467-8f03-a376e77d9f53", "sighting_of_ref": "indicator--03ece201-5023-4cae-bc16-bb0a0a1f559d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c1a7954-eddc-412d-a939-1034b1be05bd", "sighting_of_ref": "indicator--f862a4a3-283f-404a-939d-2c74896c5956", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78559574-cc7b-4555-9220-6e82f2512064", "sighting_of_ref": "indicator--91d069c8-7525-408c-a0b6-e9a60e75b3f2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12e96349-9642-4142-bb92-21d3d21f4b07", "sighting_of_ref": "indicator--d1e0ca3f-c7ff-47a2-99b1-75d43cde26e8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9ba956b6-d32b-42e4-8806-ac1ba97a496a", "sighting_of_ref": "indicator--1372bffb-6222-476c-b109-4425a636a1b7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99384e2e-97f6-4c14-bccb-b5ced956c510", "sighting_of_ref": "indicator--c3c5cc9b-0272-4b31-b213-25636e279239", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73e98acb-38dc-4d1e-9b3f-cc453e8d0bb3", "sighting_of_ref": "indicator--75f6c218-a33a-4c3e-afbe-a58f1049438a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21f00f36-04fb-43a4-9e41-2bd6e24c4d5f", "sighting_of_ref": "indicator--4b290be1-446a-4677-b8fe-0a6688efa01f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff194dcb-955a-4da9-8a3b-bccad151110e", "sighting_of_ref": "indicator--fc5a465e-11e9-47e5-953d-5913ecd2cfd1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93b4924a-4d72-4124-974c-a7676ec704f7", "sighting_of_ref": "indicator--ce9e5962-6632-42e7-be91-00a5324127ce", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--510b737c-45c9-44c2-9888-df85a186389c", "sighting_of_ref": "indicator--762bff87-20f6-445b-b747-dbaddb4a2bbf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab16af75-cf5c-4743-bee3-ae31e33ed01e", "sighting_of_ref": "indicator--200838e2-58a5-415b-ae2c-2871b479460c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce2fa0fe-68ac-4a81-8570-e226f30b5e06", "sighting_of_ref": "indicator--2bd866bc-f26c-4b54-8f4b-5bb1781383ab", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--033c2169-8ff9-496d-9290-509f801915cb", "sighting_of_ref": "indicator--66df0f30-8d4f-4ce2-862e-3f804522df68", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0716b113-663e-4ad0-9c2f-9840344e5ef3", "sighting_of_ref": "indicator--f463c345-37d2-4056-a3cb-776a78c3fdab", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f486005-49ca-433b-a127-8b47dc3dbe72", "sighting_of_ref": "indicator--e4d10cc5-eec6-4950-8736-be6a02507053", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea83c520-e8f3-4317-9c15-d4a6204fc282", "sighting_of_ref": "indicator--67032cbc-492c-4cbd-af2a-53793c58aea0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99842b62-971f-492f-b5f9-507cfea3dfb8", "sighting_of_ref": "indicator--3c902046-6c10-4913-997e-481c42f77570", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55e5d762-3bb6-4ff1-80a3-1144cfa8661b", "sighting_of_ref": "indicator--8ef1536c-0230-4c8d-a6ab-7e35eedd2ef3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--629e315e-6165-45a4-8c85-eaf60dfbbe75", "sighting_of_ref": "indicator--40c28ee3-36ac-433e-a43c-150113a69008", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6423d98a-e49f-43b6-92da-534c1fc9f306", "sighting_of_ref": "indicator--39c46b47-32d1-4af2-8f42-82d6031819f3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d27008b-7450-48b8-ae75-ee60f1bb7bfa", "sighting_of_ref": "indicator--e265d788-e371-4975-82a0-0f2ccf669dfd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--93572287-2970-4f2a-aa0e-d36df8438f94", "sighting_of_ref": "indicator--47866ce7-006d-469f-8fef-1ccc09fd3aa8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bab1d9c3-9bb9-429a-abbf-87b73f35bda4", "sighting_of_ref": "indicator--7e8872b1-cd70-4bfd-9980-57a6186a5b81", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7898605e-9b28-4b55-8c7f-823d0342ce62", "sighting_of_ref": "indicator--507e286d-0444-48f1-a59d-aa0e5bc0e623", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cca9445d-c03d-491f-b033-c53416832be6", "sighting_of_ref": "indicator--42b0a69f-a536-4809-941a-df5d7e4b8c15", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--af64f464-b0e2-450c-b4af-53ccfe7d57fc", "sighting_of_ref": "indicator--f8efd2a8-6f00-47c9-abe0-0203ba6d4b44", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--289f36df-b558-4076-9784-ce7316772422", "sighting_of_ref": "indicator--e241537d-459b-47ce-bffa-65e85cacb94c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85e66ef0-a183-449e-9165-7e9341c5e4f8", "sighting_of_ref": "indicator--3c86445e-d66e-42aa-b31c-098abe9f0fb7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e1d1cbd-6ebd-4e01-a7e1-f5af353c1779", "sighting_of_ref": "indicator--adff7750-6441-408e-b61c-75838699735a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7821cb81-4dbd-4bd6-9480-a2422689f535", "sighting_of_ref": "indicator--7f9b2eb0-5b77-4db2-a447-2b7e48bb11d1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b89c7a65-c89d-41df-a171-73898b54dde6", "sighting_of_ref": "indicator--6fad047a-1c8b-403f-976b-cdf295d06a57", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33ed609d-6052-4cdf-826a-5796464f5aad", "sighting_of_ref": "indicator--b1eefafc-ed9e-4bad-909b-bb0b639cadb3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b0699a5-8431-46e8-80e5-85375e283089", "sighting_of_ref": "indicator--2e7699ec-3f4c-4809-8933-8beecad1af93", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6a1a665-10ee-4eb9-ac88-0fb44c82501f", "sighting_of_ref": "indicator--e723597c-6ae1-4555-811b-0302a72d5c12", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd00a1d4-e649-4c63-9598-6d8d1e602239", "sighting_of_ref": "indicator--6251a2dc-86c8-42fb-97c1-5b44e2ba1ef8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--689dff4e-3778-4cfa-ba24-eadc7a439967", "sighting_of_ref": "indicator--f14b0150-9e14-4687-847c-e3ae77a16bc0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--58f8634f-8700-456c-9a97-284605da065c", "sighting_of_ref": "indicator--0baa7533-df5d-4feb-a1a1-5cf4da114619", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a217d54-d2a0-45b5-9f0e-b431db523d65", "sighting_of_ref": "indicator--0c38a641-91b3-4a22-92ef-876c6e38f8d1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b130812b-173c-4aaf-b4ef-aac869c1bcb6", "sighting_of_ref": "indicator--c681f6dd-92dd-4813-9bb9-d5302c6f6207", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3af001e0-8c5e-43f4-b066-3ef5665ad4f9", "sighting_of_ref": "indicator--cd834416-ddd4-4a22-b2bf-377b7635bcf8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6ce649ee-eee0-4b51-8937-82ffdd3b2791", "sighting_of_ref": "indicator--75d4fdd6-bd2d-4612-b6a7-9cbfad5d3f52", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a088e557-d018-428d-9c3a-f26c67eb8d67", "sighting_of_ref": "indicator--fa5ef401-ffbd-4c2d-be2d-5cab9f8a932e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54b777a8-cab4-4d32-91d7-8592a3218fc1", "sighting_of_ref": "indicator--4782f191-4024-41ac-80f9-ec1fa78809d7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64e5520e-a4c5-4159-a9ea-3b4103b8d01b", "sighting_of_ref": "indicator--3a407f13-b48e-4c5d-ae93-34c8a6899cdb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3b63bda-3645-46cc-b08d-11f6e041e673", "sighting_of_ref": "indicator--1243d24c-8ecb-436f-8e0e-09906f21bac1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0cba873-abf8-4725-ad2e-422aed82577c", "sighting_of_ref": "indicator--b5a9f2f6-3a0c-45d8-ad06-4ae2bee98464", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de5c32f9-0375-4f1f-b0b9-e641c31b40db", "sighting_of_ref": "indicator--06623794-5c4a-4c9d-b243-524d82ef1701", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--55b180b7-2c46-4c15-8460-0dea612ea24d", "sighting_of_ref": "indicator--09210e24-f947-437c-aa8d-acb9b40bc832", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f072b99-1076-46ac-b8c6-45303ccff7f9", "sighting_of_ref": "indicator--bba99a87-952c-4e5d-bfeb-07e563d7f2fa", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e113885f-140b-42ed-99df-69f7a0f147f0", "sighting_of_ref": "indicator--6f7f7e8d-6433-47be-86cd-d9d2218f993f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bdf14dc3-6a6c-4ff9-a7f6-69c4d2c015f1", "sighting_of_ref": "indicator--b0f8e1e4-c5e1-4121-a0a3-bce2dc4efb7f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d195a502-5f64-4bc7-815d-7af53e5bbb3b", "sighting_of_ref": "indicator--1c7a6224-d7b9-49de-8dc2-fdf3d2916a4b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--908dff4e-287d-4b78-9b7e-92ed1b329145", "sighting_of_ref": "indicator--72b89a78-bb7c-4dbf-aec0-6fd2e68fa352", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe5af993-5bd9-4b40-8df0-d1281ba9635d", "sighting_of_ref": "indicator--9abe24d5-963f-4e75-8e78-11a270e7345b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--476e5f0d-d7fb-40e9-9cb8-8d1254c2c494", "sighting_of_ref": "indicator--1377dba5-515d-4457-9db6-0bdf4e0a3b30", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--45213106-3241-407b-8ffd-c903628e40bc", "sighting_of_ref": "indicator--5bdca734-a282-49f4-a7b5-b97275e8bafa", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c2fa70e-5804-41c9-9093-e0ebf3643792", "sighting_of_ref": "indicator--53a8f210-9005-4982-afe2-49332352d417", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82d805b4-8fe6-4057-9a66-c8ad6bcb3718", "sighting_of_ref": "indicator--4ea524b4-7fb6-4790-9147-9e4cf091066b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5d1c01b-c5a4-4ca7-93c1-0c2f15eff188", "sighting_of_ref": "indicator--794ebf93-3adf-45e5-bd56-581d0b6d5faa", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6b3a215-991a-4161-9aec-e4b2eef4b920", "sighting_of_ref": "indicator--4f95da09-0565-47ce-9995-7e977d40ea67", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0833bd9c-140f-453c-98ca-7b9812a1c3e8", "sighting_of_ref": "indicator--e7d7057d-64f5-441e-8297-14c4bcd0edc9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cfde823a-b472-4675-82c7-6c826e4caa9f", "sighting_of_ref": "indicator--be365fe6-af19-47a6-9115-edb511370484", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--073e1ce4-e3cf-427a-ac60-2d1415a454cd", "sighting_of_ref": "indicator--4ae1f52b-ba99-4e44-8ad3-e1f6661b6541", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64eeb297-2747-4b5f-bb39-c565e0b609be", "sighting_of_ref": "indicator--36b6d2f3-7fc0-4af1-9699-e284c5cfe342", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e735a22-b6a7-4f6a-902f-6f07538a9d93", "sighting_of_ref": "indicator--22168a45-2390-418d-9325-7c759eff7d53", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09e8fc8c-ac30-49c1-99bb-f1d686037e2d", "sighting_of_ref": "indicator--e222b975-9b64-44f7-8eb3-f97e12cd016e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea2f21c7-e87e-414c-82c4-7eb789f211cc", "sighting_of_ref": "indicator--8fa7313d-effc-4f58-b623-11e72cce644b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6514ffdb-0502-45af-81c8-635b7363e3bd", "sighting_of_ref": "indicator--96727a8d-abbb-4c05-97c9-4381278db6ee", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ffb3d568-074d-4bf9-9f2f-f8c2ba399c41", "sighting_of_ref": "indicator--7ace1b12-91c4-4024-87d5-a1b6d81e221f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d04b3f8c-adb5-451d-b5e0-b27875b85cdc", "sighting_of_ref": "indicator--ac1ae11c-5972-4ed0-8305-32207f6924f9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37c2953a-e615-4e57-8791-850b258fe553", "sighting_of_ref": "indicator--39f11e75-9eb5-41d2-9b4b-beb79e788d60", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be14bf7c-00e9-471a-9da3-1508226e87c8", "sighting_of_ref": "indicator--e9436ee5-96d9-4602-a86a-a1d7b1b364d6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f7ba855-d5b7-49ce-becb-7cf61e695382", "sighting_of_ref": "indicator--af8824c9-932c-4414-a774-b5998b40903c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e12649a4-5345-4a79-b7b0-9469a5f0e51e", "sighting_of_ref": "indicator--e750d167-5b64-4a25-8072-7eb75516d8d5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c7ca964-4008-4725-b129-05e577bdb319", "sighting_of_ref": "indicator--96745bec-91cd-4ddd-b982-e047216e3f07", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6ad3268-9435-4994-84bd-f1a0cf075d89", "sighting_of_ref": "indicator--f39d8a29-2e6f-47ce-a236-07f59b02bbc1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec63b31c-12b5-45d7-87fc-810274307cc9", "sighting_of_ref": "indicator--ef5d6a41-108b-4c6b-8546-2694e12147f2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f704a432-549b-4258-9a9b-06e736a65122", "sighting_of_ref": "indicator--b72c620f-9128-4253-bb85-d53e3d139beb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b16fe665-8c84-4cd9-921c-b702b96e7629", "sighting_of_ref": "indicator--feb78c17-0d6d-4990-a4c7-355c2d2a042f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4560c3c-a302-4f2d-90f4-69a7c7f97902", "sighting_of_ref": "indicator--5d5f4120-694e-4acd-be09-1ab361733c17", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a5201e50-eb92-48e1-b443-884e10b154d1", "sighting_of_ref": "indicator--5f274d70-7746-4291-a57a-c783c73f4c4f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da49dd55-f7fe-4c99-b7b2-e5f5ee2758c9", "sighting_of_ref": "indicator--93df5a4b-fe01-4884-b13e-ef468779bc77", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f927c248-3ea3-46a5-9e4f-ef7da3f4c44a", "sighting_of_ref": "indicator--b62f1ec1-c93b-4dd9-b325-6fcb7e984d49", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5387f0a5-e353-4516-90f8-e50186d14a1b", "sighting_of_ref": "indicator--ee9ca179-3a36-4dbd-8156-422f885e5a24", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c9d20e1c-3c09-41ea-85ca-97b70b188304", "sighting_of_ref": "indicator--ddb04183-9eaf-44c5-a9f5-9c01a3cc3eb7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9013b184-65d5-4ebd-9791-9f83e9a9b1ce", "sighting_of_ref": "indicator--6e07c361-70b5-4fce-bd41-f6a61844fbb5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a95008a-0e17-4209-b271-665f73fabbe2", "sighting_of_ref": "indicator--7b17baa3-a921-4971-8b1c-83d4eb0a01fd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7843fd75-1019-4e62-91e0-2f6d1d17a063", "sighting_of_ref": "indicator--ebec1526-af82-4fc0-84c8-cad46a74f8bc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0e01e732-88e2-4625-9c67-fbb7141cfd89", "sighting_of_ref": "indicator--32dc4465-fd9a-4dd7-ae45-568affadd366", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f9e8b6a-6f46-4348-b2c6-851a52a7ee65", "sighting_of_ref": "indicator--dae3dbcc-2e84-48f6-b1b0-8acb7b850973", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81ef490b-ceb3-4fba-9329-7eddb03fa7cc", "sighting_of_ref": "indicator--9565d675-a416-46e0-80fa-f26cb51f7755", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83e8ecad-24d5-4bc8-bdbd-717a010e4354", "sighting_of_ref": "indicator--67b2c0ab-5832-4553-b387-db451c21e60f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb94d41f-728a-4cf7-9e0f-0b6d21f2b29f", "sighting_of_ref": "indicator--6355f43c-5f35-4c7d-bce1-bb91c51f8c38", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4166cac-c98c-40f9-a6f2-d1f4fb6b5743", "sighting_of_ref": "indicator--7c88b7f2-be0a-4ced-ac29-602389ea5d1c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1867cb3-d03d-4470-87d7-2e87d68c7309", "sighting_of_ref": "indicator--75d995c0-0661-44df-880d-ace3b3a0b2ad", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b3985ac-3e6d-40f5-898f-06254840e718", "sighting_of_ref": "indicator--a4e0ad68-8da9-4ada-a0a5-4e8fbe8914b9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bba699aa-ccaa-49fe-a3bf-433b5c5a3fff", "sighting_of_ref": "indicator--045281ec-0d3e-44bc-8ada-77f5f8c9c7a5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4eba6c82-4c37-4355-be10-85f21d988866", "sighting_of_ref": "indicator--7aa97df8-864d-4e89-8cce-39cb9f450828", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d82d111-d049-42f7-82ba-e0a14df19344", "sighting_of_ref": "indicator--22398aa3-65d5-4efb-8346-b5006d9c0f4c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--772eac12-4313-44f8-968e-e5cf57a13033", "sighting_of_ref": "indicator--0f9e83c5-1b5b-4323-a50a-c5fd6c9f7dcb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8f62407-9307-4b41-a8b0-0235244e4927", "sighting_of_ref": "indicator--e79d460e-61dc-4c5e-8a09-b1f09c39bfcb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b32a80b0-0672-4971-a089-50715b121988", "sighting_of_ref": "indicator--e5da250f-de7f-46ce-99d9-d75db213838a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a33700cb-dfdc-47cd-a4af-d80d718cb8c2", "sighting_of_ref": "indicator--0ec003d5-513b-4e85-80e2-73db391fc30e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8912504-4c2e-4832-9c95-38b618e7e976", "sighting_of_ref": "indicator--fe69a2d0-3303-4c62-8fcd-e0073fe8aafd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d1654b7-151d-4c40-84e4-a5a91c589455", "sighting_of_ref": "indicator--1a149e6f-32ac-4bca-bfbf-5ef9d899452b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b96ff65-eb44-40ca-b360-f0b370b772c8", "sighting_of_ref": "indicator--af21763a-3bc8-4da3-8fa4-b8861cab0b70", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3f6dac2-aca7-4e81-86bb-bc14012fab59", "sighting_of_ref": "indicator--20a30ac4-374d-48c1-8cf6-4d2169df1aef", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47b8d7c6-1e48-4e4e-8679-5f8fce56c371", "sighting_of_ref": "indicator--0954cb7d-5e01-4ae3-8075-73eefb05d814", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f60c1d1-6e78-4760-9cc4-0a4bb6123670", "sighting_of_ref": "indicator--c62b75ed-0c34-4890-a5f2-67dbcfbf80a1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49f3295a-3542-4f00-b180-13a2eba9d1ce", "sighting_of_ref": "indicator--f9f4c54b-fcd2-4b19-842f-8ceb8621f8f2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c53de139-de7e-4044-82f9-9b3a9edd8fa9", "sighting_of_ref": "indicator--26fb2fcb-8eec-4fe8-b444-370f0ab151a8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea69f6c4-bb6d-49eb-a5d7-cbdcc69913a0", "sighting_of_ref": "indicator--de019747-7c5e-4f17-8ebf-44fcaf123b9b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4e1d647b-b88b-4b60-bb8b-43d41fcf5a79", "sighting_of_ref": "indicator--2330bca6-27b9-4165-a7ed-2e2add515342", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69f2083b-4285-4baa-b8d2-7fd0fbf49790", "sighting_of_ref": "indicator--de056911-e26e-498e-94ee-b427bc2f09b5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--313fa6f7-8179-4083-b616-41d26bcf3868", "sighting_of_ref": "indicator--b3d1ac9e-31d3-4233-909b-5d5d21b9dad9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--00979d61-4b87-47dc-a160-35ca894f8fb6", "sighting_of_ref": "indicator--268c5080-c61b-48f2-bb78-59c469ec652b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aaeddf50-33f6-4295-b86b-b91e84b4042d", "sighting_of_ref": "indicator--c882ef30-d389-4334-8569-7e8208694d24", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d6556c18-fdc1-4044-977e-9a4ceb9bdb9c", "sighting_of_ref": "indicator--3452b3c6-583d-4a8b-b963-46da94378381", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d8919de-ea6d-4cc7-bd90-eb8e3db97c74", "sighting_of_ref": "indicator--675c6bed-4cdb-464f-bfc9-292be5bcf3ba", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbd0b95a-bd71-48c5-8aa8-5dff7409237c", "sighting_of_ref": "indicator--8746c5eb-a744-485e-85a6-4f02ddc4cf01", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a660a50b-c306-47d3-b448-39bcaa9c648c", "sighting_of_ref": "indicator--e354cb8d-22e4-4aab-b283-c81d9a82c55d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--868b8e29-6a10-4890-9f38-8b41b6ac246c", "sighting_of_ref": "indicator--5480a1e0-ac17-438e-938e-4d33c306ff73", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b3345d2-451f-46aa-b864-4665ff9b4499", "sighting_of_ref": "indicator--dfd5787d-a86c-4bf6-8da7-d98362776015", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5f527ec2-726b-436c-812a-f8bd1ea891cc", "sighting_of_ref": "indicator--29ad599d-bf22-4f64-aec0-512c238cb655", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--947cf6ee-960a-4e28-8ec2-e28c516a064c", "sighting_of_ref": "indicator--7786dbc9-3401-41da-9bd0-e07feaecae1e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61a6629d-722d-4c63-9569-af9393e76963", "sighting_of_ref": "indicator--652ef07c-1bfb-422b-8fce-929263f8d56e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--598cad98-356a-4a10-a1ae-b49e970eb0a4", "sighting_of_ref": "indicator--09c88c1b-6d5b-45c6-a790-bea935079b3f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31a3f780-0b40-4fe3-aba5-2d3653b65a90", "sighting_of_ref": "indicator--e5792502-81aa-4e1f-876f-d6551370888e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f89d134a-85a2-4953-8c5c-9988c8b9ced6", "sighting_of_ref": "indicator--3e9dbf29-112c-4067-9439-0fa70de871b7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c77d08fd-cb53-4f6b-99ab-f9fb93fd8518", "sighting_of_ref": "indicator--baa0302d-8f27-424a-95a5-3dffc9389284", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4600361e-1252-4488-ba28-180a73eeaa4b", "sighting_of_ref": "indicator--d78e0884-5df5-4d82-89cb-6b0bb190cd57", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66e36f89-c3f9-4c7c-a1b8-df42fbe0b712", "sighting_of_ref": "indicator--822bd9b8-447c-4138-86ef-d1ccd437753b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--631a5255-f74e-4e82-ad09-19102d5b1a6c", "sighting_of_ref": "indicator--56c4cbf4-2ef7-486e-b562-09843a76e249", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--228da243-fa6b-47ae-8b97-0cf99c9c7afe", "sighting_of_ref": "indicator--943fbc9b-5637-44d4-99dd-b278f75ba5e7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1858331a-f6a6-4777-a206-bc73ee5a8f52", "sighting_of_ref": "indicator--44818810-473f-4a91-b26a-33665a035bfe", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1e9fde3-f9c3-4180-8b8d-d3dac34ed7ef", "sighting_of_ref": "indicator--c1064edb-d80e-4137-8e5b-aa45cd1edb91", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1148ecc-b0a0-4c67-8d12-eba9589e0227", "sighting_of_ref": "indicator--2ff5ede9-d747-4022-a030-660eb8c13867", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1c7efd6f-15f9-47cb-a76d-0baa069ddc69", "sighting_of_ref": "indicator--8181aece-f5a2-4da3-b013-36d558b9af42", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f8b7d71-1a88-43d9-9f4c-dcd7ca67ad93", "sighting_of_ref": "indicator--8c9c678e-87bc-4a76-847d-e8c691457fde", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--409d77c7-e704-4019-9f72-821dbda18a34", "sighting_of_ref": "indicator--7a69fc2c-1eab-4bcc-9d37-eddfc81aa156", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a24362a1-ebc8-4399-9d92-0f756f22e4e9", "sighting_of_ref": "indicator--ced54a9a-1cd7-4c8c-bd9a-0a64c9a9f2fc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddb40418-039e-491e-8838-2b7d8613bccb", "sighting_of_ref": "indicator--1bf17956-8935-466e-af1b-e99e51afcb19", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcdfc08f-6d2c-4fc0-89be-ee23f2c271ee", "sighting_of_ref": "indicator--c5236140-258f-441f-9924-03a337f45799", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--25899bc1-3f72-437c-a0f2-9fcf5d63d3f8", "sighting_of_ref": "indicator--13f07bd7-e622-40aa-8d48-9f42b72835d5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--473d66ff-12b0-4f45-905c-555ca2297070", "sighting_of_ref": "indicator--09b3d357-541d-464a-bcfd-756f5f94ff87", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc14cf78-aa3e-4efb-ad03-c13cb6da6bb0", "sighting_of_ref": "indicator--fed61872-ab02-455d-8866-198b781d9084", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5eb7d04f-7e76-4241-9f9b-ef9087d32245", "sighting_of_ref": "indicator--ea60e0ae-389b-49b8-8126-b3cb3749b148", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--17ec4e6b-7dc3-49bf-9105-e6eadeb4bf46", "sighting_of_ref": "indicator--187151f9-36a3-4222-b182-9587398c3b10", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ad70204-4bf9-4a91-8a17-df004068d32f", "sighting_of_ref": "indicator--9bbd4d17-9426-4269-b086-ba6cd620dcf1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd26c34a-1566-4691-8291-797dc89203a1", "sighting_of_ref": "indicator--a745ea44-77e0-43e9-bf04-617173cd7071", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b85cdfbd-207c-49b6-99f2-d82559d3d247", "sighting_of_ref": "indicator--5729db8b-ee02-452e-a180-192fb4a3b84d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c31cd17-7890-46ab-b9e3-25d5b1c70c52", "sighting_of_ref": "indicator--a8e4d8c8-6342-44f0-8a9f-20372bdacda5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7fcd6d6-8868-4b96-90c1-8ebc5f12328b", "sighting_of_ref": "indicator--6f8d81ef-c920-4cb4-8c51-04ef9cd4f690", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d198630-8940-4ad4-87f3-6aff8df10c57", "sighting_of_ref": "indicator--30516d7e-70b1-4646-b829-f8a29184c698", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7eac998e-7fb0-47d0-b49c-314d6228408a", "sighting_of_ref": "indicator--d22f57a3-2e34-4714-912e-65a7f13a5bf9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--21add726-f04e-48f6-bc31-59df463832ad", "sighting_of_ref": "indicator--7cd8dd05-a1aa-4827-854a-51af29debba6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62a69a40-bc47-4a65-a320-d1e612244ca2", "sighting_of_ref": "indicator--3ad5db86-4ec7-49c1-9000-7a6dbf26daf6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a1dbc8f-963f-487a-909b-8816eeab1ef9", "sighting_of_ref": "indicator--e1bb811d-7518-480d-aa7d-89e5b5ecd056", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d227270a-2d0d-4bdb-ace8-0c766af22406", "sighting_of_ref": "indicator--cedbbda0-1827-4ce8-9d91-1a48a953e512", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d89eec1-d5e4-4552-a6c4-f83211a187f1", "sighting_of_ref": "indicator--07f976a2-63da-4466-ac5a-a61f5a3ca717", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85dfe047-5610-46ed-adbb-b1b4d95ba516", "sighting_of_ref": "indicator--37e1f96c-1ecf-48d0-b864-ce8e9823edcd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae6c12f2-cf71-4e60-9545-bfdb555b34e5", "sighting_of_ref": "indicator--208cc699-936d-41d4-ae82-08434713b0dd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--90d310be-4203-4262-a78a-5509e1de2e51", "sighting_of_ref": "indicator--926113c5-c7aa-4aee-a8b6-9bda9ed1cc48", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ccdc2b9-b251-4a96-8593-12ce00ebee05", "sighting_of_ref": "indicator--c60ca8d0-cfb4-40f3-a8d8-0f21e3f371eb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32f18b2e-21ee-415e-a71e-8e670028b17f", "sighting_of_ref": "indicator--24cef2c3-6861-4442-96de-9dfd2b97abe8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5206edd4-31dd-43c9-ae16-245992c76483", "sighting_of_ref": "indicator--7c206856-ccc0-4eb0-b1bb-878312812a59", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--78d4a9c0-6bb0-4681-9d09-30e108ed78aa", "sighting_of_ref": "indicator--1958abaf-cb73-4e99-b1c6-e3bda50a834c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cb89e763-680a-4653-a0fd-9106ff64fbcc", "sighting_of_ref": "indicator--21913f2a-53a6-40a6-9926-d61c9f708869", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--140bc179-a2f6-43d6-9646-f77faa05a989", "sighting_of_ref": "indicator--d2f20ac9-b362-4d8b-a29c-56f087d8da5c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c74bf12-bb25-4899-98c7-6b365d5341fc", "sighting_of_ref": "indicator--5b7bd71b-359a-4c7c-94d2-cd1e81d28686", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33af7bc9-63c3-4a94-816a-fe788fe25fa7", "sighting_of_ref": "indicator--2e902cdc-baed-49f8-b1e2-f4bbb04c30b4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c9e931e-d9c2-4f4b-a120-be92abbf5fa5", "sighting_of_ref": "indicator--7630f4d9-059e-4e67-ad56-c134d32cb690", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82ba5e44-1d6d-44ea-ae32-db38751251ba", "sighting_of_ref": "indicator--c02cf873-1a9b-4a10-9828-9f204c077a99", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7835a095-2fbe-4083-94aa-095a2e58a843", "sighting_of_ref": "indicator--e56c83d0-6350-41fa-9bad-20cf647547ba", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f486da6a-7686-4c13-9687-2ef97c08869f", "sighting_of_ref": "indicator--06852828-c158-4d35-9b61-658265dd3395", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd5c435b-8371-4f9c-b4f5-71db329c11a4", "sighting_of_ref": "indicator--2ab9389c-2ee6-4b8e-b857-dfe42b16f718", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0aed3d2a-64e1-4db0-9252-20f6c1565a36", "sighting_of_ref": "indicator--3dcf831b-56fd-46c2-8431-2fd2096e4daf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--246dfade-fb87-44b3-a67b-fe075d737b8c", "sighting_of_ref": "indicator--08aa8d3d-2d1c-42e0-8fd8-e4d1a92889f5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--388a408c-c481-4218-b35c-62386527f6be", "sighting_of_ref": "indicator--19bb7712-9993-4363-a317-f25f9dbd3846", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c633ef0-f165-492a-85d0-52422f949bb4", "sighting_of_ref": "indicator--66fa0d46-1fd0-48ce-8e3d-30c175c2a2c5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5a1a95cc-4d83-452e-a335-68dee99969c3", "sighting_of_ref": "indicator--0e7444fa-dcf9-42c7-80ff-3a1ce5634868", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbdc456f-5244-45d4-8fc6-3a2feb5042e8", "sighting_of_ref": "indicator--1a741e0b-c120-4d21-a4d8-5fa109e51568", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc36a8e5-d1ee-40fb-bec2-44f031160b60", "sighting_of_ref": "indicator--4577e426-0fd0-42a8-9673-5c6440cd1bd8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0448d2a-65c1-4940-a3e8-230bec28721d", "sighting_of_ref": "indicator--8b9e6ca9-0149-466d-aa71-71129c51d0cd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46071072-6087-4207-83c1-2b1aee8fea7e", "sighting_of_ref": "indicator--b48c0c2c-8daa-431f-b056-4d854b9ffaaa", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94f25b2b-94ca-4535-a37f-bd59f42a037f", "sighting_of_ref": "indicator--94cd73b6-7c24-4a88-b1a9-399ef4577df9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f54e78b-8e98-458d-8f9f-4c711bdbd5f3", "sighting_of_ref": "indicator--bfa1c504-6263-46f4-b782-c6bb16003272", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1f5f024-dddb-4716-b71d-a17b24623fbd", "sighting_of_ref": "indicator--4dfc5016-4737-4026-9b2c-8a3f2dc1ddd6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--203f2181-eee6-4dd6-9264-0cb5f3fe2a40", "sighting_of_ref": "indicator--dbcb239c-5ecf-4121-bc41-0db3e622e70a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02a1375d-e7c9-49cf-bde0-2852fc66cb9c", "sighting_of_ref": "indicator--32575712-dfe0-4b60-ae51-a41e90e7ad7e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b9ae66a-f241-4cbe-abba-e10ed1776096", "sighting_of_ref": "indicator--38020ec7-e268-42be-a297-9e007dd6fa97", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fd7ecd2-ce7c-42b5-8ec5-223150fa5e77", "sighting_of_ref": "indicator--57cdfcfb-9ea2-4306-bb25-1e8807b3a9d9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bca59e20-9cb9-4d65-b90a-bf125380b710", "sighting_of_ref": "indicator--5b023b8c-19d5-4521-a16e-27571b1e4a64", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70b84c8a-17cf-4e76-a61f-f5e8f4172665", "sighting_of_ref": "indicator--68d7ad93-c307-4470-8380-2adaa99e12ed", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--415c8ab9-675b-47d6-ac27-e9c75ee15b64", "sighting_of_ref": "indicator--4c5919cf-529c-462a-8023-d11319f7199d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a30efe4-1da4-4bb2-8e64-1bd1d7d7efbb", "sighting_of_ref": "indicator--fe1b3e93-bc64-4ec7-9799-44d4dd4d39bb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--086d4cc7-d0f9-42a6-823b-525f411fb8c0", "sighting_of_ref": "indicator--5049d486-557b-4447-9a09-97c8ffc7e34e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bcbb942a-4ec3-4281-9368-b79a59a5cbc5", "sighting_of_ref": "indicator--ed42f1cd-28fc-47cf-9d66-7ea9644a267d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f8a31d7-e75e-4b45-b19a-0486808e1968", "sighting_of_ref": "indicator--ccdb9406-062a-45dd-a539-9e695731b17f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bce65b98-7432-4dd7-be18-a3634bdf0842", "sighting_of_ref": "indicator--48dd0c48-b81a-4bbf-8f2b-c53875577393", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--861d9d38-f525-443a-a717-aff7021cbe33", "sighting_of_ref": "indicator--c49ebd03-068e-474c-87ff-6ed5f4914eb9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01ac3c1a-467f-41ca-a699-aa077b5bf089", "sighting_of_ref": "indicator--961e66cf-03b6-4d43-9b81-c6f1839ae9e6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f0d3216-a190-4543-86f5-ad16ccbd4d49", "sighting_of_ref": "indicator--cf9a912e-c868-4396-87a1-2bd893b64fd0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1a452c7-2584-461a-a31a-20c62015edc0", "sighting_of_ref": "indicator--30b20f89-21aa-4f0d-a3c0-48122cd85580", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4282b71-f4d1-4f80-bde2-45bcadef1b2e", "sighting_of_ref": "indicator--15b4b9e5-0ed0-4b94-a36a-e0a55f4d60b6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f0f350a5-9f6f-4c77-a672-33131e166f49", "sighting_of_ref": "indicator--27757529-05cb-4853-b51d-ba5991573551", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c297f2d5-03de-4be6-a3d6-2f240e02f4e0", "sighting_of_ref": "indicator--7e265146-fc88-4f71-aed8-757648261280", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e273646b-00c7-416d-aa51-7835238134f2", "sighting_of_ref": "indicator--0486ea0d-1ab1-48e7-be27-f771e7508a9c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b495c52-b7e4-47c8-b5cc-f275c1b70800", "sighting_of_ref": "indicator--913b7cc9-31e4-4ae3-a727-8d093a9c1711", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--915fc86a-a4e5-4e4a-869e-d0337451deeb", "sighting_of_ref": "indicator--266e71bc-6e09-4778-ac8d-f54a3590eadd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--055ca4cf-246a-4367-b8f4-46c1885a1771", "sighting_of_ref": "indicator--b1e66906-8590-4869-a6c0-1bc37ea3933b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--395032c5-0d2d-4f59-87cf-49ecb5810368", "sighting_of_ref": "indicator--982584e1-38dd-46f6-80b6-37c97c54fd34", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c64e213f-5bb6-45fe-82a2-c9574529ce19", "sighting_of_ref": "indicator--053e1f32-829a-477b-be1a-82815660a49d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86f0d8a5-3ada-4936-b7b1-f7f2fd051b86", "sighting_of_ref": "indicator--606d8f88-73c1-43c8-8fb5-bc3745faae4d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a68d319f-5630-4fd9-978a-9f844e376374", "sighting_of_ref": "indicator--f60edf1e-fc23-4a3f-b0a0-db82a537c97f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e5ac4aa-fcf0-4294-a586-ed3698b819d3", "sighting_of_ref": "indicator--6ea5dad9-5a8a-4351-ac0e-bc924b6a8493", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e55af381-755d-4ca0-9a60-1689f3fe9e81", "sighting_of_ref": "indicator--d9cfabcc-6257-4fcd-9281-bfc18c2fbe78", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29e1331d-0605-4ab4-9232-ccd523878e2d", "sighting_of_ref": "indicator--ca2a9702-4a7a-4315-ba5d-628977fc1f35", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0781822-0ffb-45b9-8e78-aef2424cde98", "sighting_of_ref": "indicator--f0ef5bcc-964f-4b57-9a77-7e5c398426d3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c74b69db-91f4-493a-868d-de8dac3046c7", "sighting_of_ref": "indicator--aad318af-285d-4b81-a48a-0e3c30ede2c8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a54f4d1-6bf7-46ee-b738-fd2da754595c", "sighting_of_ref": "indicator--9bdded72-b59e-4beb-8cc6-1107eba933b4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed548313-0223-4403-afb2-18913e51e74c", "sighting_of_ref": "indicator--76cd1c24-7e3b-406b-b875-fa56d6e63311", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--247ad4ac-1b5c-42e3-8b01-89b8f2e5a121", "sighting_of_ref": "indicator--423cdb5f-da91-4e2e-83a8-77a5dac3e5eb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a53d430c-3618-4295-b022-cba99682e22d", "sighting_of_ref": "indicator--d1f1ce1c-9a51-495f-a434-26f555c17d29", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c71b7760-e5ab-4a0d-9c72-7eb86b36fae3", "sighting_of_ref": "indicator--42e99934-972a-4782-9a00-030de1c189c4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb86442c-c1f0-4045-a1d7-3c60d8352953", "sighting_of_ref": "indicator--37677710-b6ee-4630-ad1b-ccdf3eec5707", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64ae1f2f-642d-47dd-bf6d-12715fa02181", "sighting_of_ref": "indicator--847760ae-d197-4f2f-8bb2-0f27f9256c59", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff0e5133-c3c0-448e-8a11-cd27cee6620c", "sighting_of_ref": "indicator--7fdca8d7-e9e4-42bf-9b09-a8cd72b9171e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75bc45dc-8aa3-4e62-b1f9-9df7e925ba00", "sighting_of_ref": "indicator--2d210420-7289-4a30-aeae-ee90dac6c18a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--69549d80-0292-4cdf-81ce-9965bfc3e1c8", "sighting_of_ref": "indicator--c0d9f2dc-2f7f-476a-9c3d-f8732a151e96", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a632c4b-9511-463f-8c67-159aaed6d047", "sighting_of_ref": "indicator--98264b2b-c343-4c9a-a4de-a857854b069e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdbe426c-73bb-489a-be68-3519796ec847", "sighting_of_ref": "indicator--22146966-5337-43b1-930d-606042d3c77e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fb743059-967f-4768-83e4-26ce50149b0c", "sighting_of_ref": "indicator--191b3338-446c-4808-b8f1-a607496844cb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b689aa78-ebf2-4868-8dfb-c9a961a03897", "sighting_of_ref": "indicator--8d530d78-e576-4b5d-a7ec-b78cf904ab6d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26ed0ed4-ebfd-46a7-a590-ed7a3e98cd81", "sighting_of_ref": "indicator--d5a31353-184b-4bd7-9943-b847df4ce44c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75fec616-1b50-4a76-9070-45396d90aec7", "sighting_of_ref": "indicator--491f6603-2d47-4cb5-890c-528f81487d53", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--faff64d2-cec9-4757-b0df-727efe178ec9", "sighting_of_ref": "indicator--ec9c3b97-cb4c-4009-b464-256a74098797", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba449231-0126-4924-a044-26a10bb132fe", "sighting_of_ref": "indicator--3bb48bac-fcca-416a-89f8-2d0ccc7bf61e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--600e0a0f-98b4-4685-a6d1-e6328c780773", "sighting_of_ref": "indicator--4af8136c-29fc-4367-a056-1eea32056821", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--570c1559-f102-4aa8-842e-078277366bf9", "sighting_of_ref": "indicator--9007ba15-d284-4764-80b9-cd7d612d2808", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--184472bf-b793-48b3-9de8-ea7370ee47f4", "sighting_of_ref": "indicator--f4d29acd-231c-4175-a7ac-edd805e5bc8b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8b44e86-ebc5-4d5e-8f33-34d9dc47a836", "sighting_of_ref": "indicator--ddf3d217-c1a4-48a5-b779-060214e612ba", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b27a30f-dd86-4362-871f-97d9e88fce27", "sighting_of_ref": "indicator--0cd65178-1276-40af-92be-32667dd36bf6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3caa3595-03cf-47f3-a299-715d3e709524", "sighting_of_ref": "indicator--e7dfe564-3a03-4e3a-ab55-280fbf16cd4c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--039221ed-c0b6-4991-b39d-0d075166d928", "sighting_of_ref": "indicator--5c9669ec-b470-43ff-b773-7094c550f9fa", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc9ae959-4d87-4167-89a1-303bbedcc8b9", "sighting_of_ref": "indicator--0b5a63fb-a173-4bca-b3cd-7fae41546292", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8c1417c-767e-49ad-9092-c90cb70d92f8", "sighting_of_ref": "indicator--549db56e-94e5-4172-b4d8-8a1a91a4bdcf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5f590b7-fdbf-4d02-a380-e853f35b7cee", "sighting_of_ref": "indicator--6fba0b4a-baae-44ff-8dc9-ce75cb8e7a1b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4cebcf7-9c5a-4f09-bdbe-31fe349decfc", "sighting_of_ref": "indicator--485c0b4e-88a1-48fb-bd35-a21dd0f5bd92", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3be22b92-6122-4f65-a3a5-b3b6659774ce", "sighting_of_ref": "indicator--9802a012-f5fa-41ea-b049-72c3499bc481", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--30f71de5-859b-4766-a48e-66227d827d0c", "sighting_of_ref": "indicator--21cbf335-61cf-4cc6-8611-4c2140ab7eb2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a3dc1d1-e3ef-45df-b228-bee7ae797863", "sighting_of_ref": "indicator--b419c665-8d32-4566-9de3-fb4a459999a8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19fd3bff-2f69-45a3-8ac8-0f565108a27b", "sighting_of_ref": "indicator--e4389b83-c614-4737-b6ab-ac870a303304", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--47edf2c6-eeb3-4ec4-b6aa-20b90c462460", "sighting_of_ref": "indicator--76f2484a-3182-4a1e-8094-01ec397a92fc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3097987-9837-4904-8534-0ef686132f5e", "sighting_of_ref": "indicator--afb895ec-7b24-4eed-8a83-b4ae55643e72", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94ab3f98-66e4-42b6-88b8-1dbe3c450114", "sighting_of_ref": "indicator--619b16c5-df29-46ae-8d9c-589707428ae8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--94448ce7-96e2-47ae-8330-88d212ef569b", "sighting_of_ref": "indicator--56083253-d480-4489-8bf5-77de64dd8ded", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18eafb28-5fc1-4359-bec1-85465a92fef8", "sighting_of_ref": "indicator--b35dd376-b265-41aa-b53e-a8b2de32cb84", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8985db20-fd4a-4b09-bd4c-fded5b61b110", "sighting_of_ref": "indicator--dcd3988a-1ed0-474c-b57c-fc7fdafe553b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f886fef-f02e-4f2b-aacc-0b439c6a4022", "sighting_of_ref": "indicator--f103beff-7ef5-4b7f-95b7-2959d8613205", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79464266-987f-496d-b920-dbbaba37503a", "sighting_of_ref": "indicator--e3c6b99f-5ea5-4fe8-86ef-fbaa0ec7279e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0fda1a2-65f9-4ed6-9bc3-684fd183da31", "sighting_of_ref": "indicator--2b41501a-7af3-4f4f-8ab7-f8728571b2b6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--daf62940-9473-4fac-ba5e-9c998c4d109b", "sighting_of_ref": "indicator--49744e8b-6240-4921-99e5-e93e278022a6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0055b9b0-24dc-4949-8c5a-11fc822b898d", "sighting_of_ref": "indicator--6126433f-162b-43d4-b8de-bb6b04818692", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8da7d77-b5a0-43ee-9a6a-e86d588ed378", "sighting_of_ref": "indicator--0f26a62f-159c-49c4-b29f-f7f4a6f3be1c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cca0aea-726b-4b0a-a079-de93a5494d19", "sighting_of_ref": "indicator--15e29d0e-e506-4b5a-a9d7-f06fd702949a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1800005-1ee8-4ad8-b2c0-3e68b3f06459", "sighting_of_ref": "indicator--118ad1dc-fdc1-49fd-8658-dd98a12eba95", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec5b4568-d6d5-406d-b619-4078074a0445", "sighting_of_ref": "indicator--ceaf99cc-3577-43d6-bdad-c3006244550e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9fc600d-e410-4da5-b774-c46c42fdc88a", "sighting_of_ref": "indicator--8040b74e-4cf3-4f7a-92d9-2e3683309205", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--479412ac-b279-48c3-ae39-31f57dc2f772", "sighting_of_ref": "indicator--c332fc3a-9e55-45f1-977e-9ffef69fc7a1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5c4d733e-6cde-4694-bbfc-a278ff67fb35", "sighting_of_ref": "indicator--edfbd0b6-78ea-44f8-b220-004ce0a76d66", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5bdd9ed-46e8-441e-aa99-ececa326f58d", "sighting_of_ref": "indicator--75ed7c05-ed9f-404e-88d9-4888be1b97eb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f28ae4a-2d0a-4492-88f1-0b75081ffc99", "sighting_of_ref": "indicator--c7a366b8-b608-49ee-8ebb-3b8339e9839b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7e64b66b-bdd6-44bc-8521-3812cfa179ea", "sighting_of_ref": "indicator--58c41945-18a2-4db8-b91e-cc0a38caec0b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c8994c07-9333-449c-9290-b68c6fe75d21", "sighting_of_ref": "indicator--083fff62-6d44-4c33-b391-513d329a5359", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef33f588-000b-4922-b010-37a8e17d3747", "sighting_of_ref": "indicator--f60998de-8044-4f1f-b50c-673ab2a801d8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f156211-9a76-4180-9cfc-80d516be6fda", "sighting_of_ref": "indicator--7f1ac6d8-42b2-4d21-9deb-f9e9011f5253", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79390d65-e347-422f-895e-adb1c228959e", "sighting_of_ref": "indicator--14bbbe68-a9fa-4098-92ba-cb9fdd2f54f3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f93e9fa-f0df-47a3-b186-8766275c8180", "sighting_of_ref": "indicator--d5cdcd23-2175-4170-aad9-e1689295fcc8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aada8f2c-9e8f-44c5-8d3f-4fcb7de77606", "sighting_of_ref": "indicator--052a6193-aabd-4d76-b3a5-b7f435591445", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d65fe9f-1abd-490c-8e2d-dcc4c2fa60d1", "sighting_of_ref": "indicator--fe810c3d-1caa-46af-9b77-e918563c4d36", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b18b0430-9514-4614-9721-59d9e94e10c5", "sighting_of_ref": "indicator--8de5a49c-8c06-4265-9638-3ae2a74e37ed", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f280699c-df28-4ec2-8fcd-3b468f8e963a", "sighting_of_ref": "indicator--77718610-1acf-4dab-a2ce-6103d9140c56", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--401fd0e0-cd7e-4fcb-86d2-5a317a6c0bb6", "sighting_of_ref": "indicator--4159d1b0-4d83-40b5-94e1-ddc2834f77ba", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2ae812e-7751-4434-a696-8650dab32e64", "sighting_of_ref": "indicator--8043665f-fefc-43c2-acec-22ce4fe0f5c6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec22d41c-1ece-488b-aace-1e7320577109", "sighting_of_ref": "indicator--9ce2cf37-c48c-4ffc-b230-8592f044f48f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6824cdd-4d00-4435-b5e1-ec9a3ed2b324", "sighting_of_ref": "indicator--cd49b7ba-0e80-4f7f-8868-3221c7dc295c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5bc4262-f02f-40f1-ad88-d692a3d75a55", "sighting_of_ref": "indicator--c7e44bdb-9b51-46fc-a9bf-10f5092c5b03", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a936b1c-305b-415e-85b8-ab4bc3b2bdef", "sighting_of_ref": "indicator--543c56b3-e3b4-4829-a65b-7000a0c3bbda", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d2bdb58-5b60-4a1d-86f8-038e193f518e", "sighting_of_ref": "indicator--ac516a44-fcf2-44a4-91ec-9e6c83542e00", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a66fbe49-769a-45f0-a855-0590d14fc684", "sighting_of_ref": "indicator--930362b9-70a4-4eb0-b834-2ed8c49b4237", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acd73928-d271-4b31-9504-ce3901bb5666", "sighting_of_ref": "indicator--d0966168-4a3f-4458-94dc-38b186413540", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fce88538-5c62-4770-b770-cef741d5ff70", "sighting_of_ref": "indicator--d93d2e7c-3421-4755-be66-966468410584", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--713bc59f-42ca-4cd2-9424-6319d54933c4", "sighting_of_ref": "indicator--dc5b9ef0-fde9-4d40-8b7c-a816c489d346", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9091cc0c-8d54-4612-b53d-8ca0b072c248", "sighting_of_ref": "indicator--0863596a-9e8e-41fb-b9c5-4d30f704d909", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26948acf-2377-4cfe-b79d-5e5d90bc1d49", "sighting_of_ref": "indicator--b1ea2611-abe2-4c96-b475-a973106ae233", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f84e7dfb-c771-4114-b6cf-c4c88e96d8a9", "sighting_of_ref": "indicator--850af05f-3835-4a06-ac01-6704c5c296ee", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e39cc83b-c07b-47a9-a9a6-4c85d50844a1", "sighting_of_ref": "indicator--d008437b-edf6-471f-9766-bc3de0e285d7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7f7a13f3-ba3d-49f9-a2ef-259ea26ecd9d", "sighting_of_ref": "indicator--067fabb8-1870-40f9-ae2e-2ea73559be28", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c9af350-e3ce-4d59-83b5-a9ac0844ce0e", "sighting_of_ref": "indicator--9b4afe8f-f58f-48f0-9035-a0cb7e6d8a70", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb5b9a3f-7f7b-4d6a-9dfb-514d8afc7687", "sighting_of_ref": "indicator--933716e5-233e-445c-9d18-e697c4cf32fb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b040a8bc-7a17-4d60-bf45-95d933f9fae6", "sighting_of_ref": "indicator--2db88938-77e2-4c3d-a3a1-42330395313f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bea52c2b-0ed3-4ea1-a1df-f156521b6f1d", "sighting_of_ref": "indicator--b4cbd52c-9149-4cea-a6e9-f0dd58c4b916", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf31cf79-9c4c-4b23-9457-c3c9f349a879", "sighting_of_ref": "indicator--aa7bd346-b4ad-48c0-8770-fab02327eb18", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b789648c-c1c8-4917-8527-0908375b3769", "sighting_of_ref": "indicator--e3e48220-3eed-4790-8973-8b7d83a658ca", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--01bc0325-480b-4993-9181-dcc74c0bb8b3", "sighting_of_ref": "indicator--10d8b306-39dc-4831-b2d2-bd823263b942", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--045e727e-258d-4713-8d6e-680cc0e87ab6", "sighting_of_ref": "indicator--2caa0f7b-a17c-4d05-9f58-7b465cd854a0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2db9cb2-301f-4229-9da0-8aefb264135a", "sighting_of_ref": "indicator--9cab2bfd-c141-46d4-a1df-fe8ab5fdecc4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05defc09-915a-4c4f-ade0-9a13ecdcb11c", "sighting_of_ref": "indicator--4100d8f5-effc-4767-a759-2083aa185d30", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31d265f9-fdf0-4154-bf73-36f3e2cf1d3b", "sighting_of_ref": "indicator--68a7cc76-3f21-474e-874d-e529d5d06aee", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e864b77-a30f-421e-91ad-ad48877f9f73", "sighting_of_ref": "indicator--e7c99c91-9c11-4d8c-a872-35ce050276ae", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f6a2352-1c3f-423a-8b3e-aed4f570ca07", "sighting_of_ref": "indicator--95189725-c154-4a86-8323-1a66d3e4dd01", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2ae95d17-a646-4884-bf58-38a5049e72f8", "sighting_of_ref": "indicator--e6cb44bf-4aae-4c3a-bcaf-3ca194d6e12f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eb29928-7130-4f1a-a7b8-bdc1b816cfca", "sighting_of_ref": "indicator--f82acfa9-a0d0-4691-a660-e8177bdb130d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c47b83a-5279-421d-aa5f-3fabdaba1907", "sighting_of_ref": "indicator--3c758644-3b9f-4b07-b9e5-256aa5e60cdc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--04368c9d-f884-4ef2-a634-956060325b5e", "sighting_of_ref": "indicator--0c679ead-3c5d-470c-a265-ec3587d6365c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c51d5e8-1267-4e51-b229-557b0bf81277", "sighting_of_ref": "indicator--ba08d9e0-f5d0-4e5f-a973-87177eb4adee", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5596258b-ff1c-435b-9606-5623ed7f4877", "sighting_of_ref": "indicator--e7c2ceb9-d604-441a-91c0-c9fadf800959", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4186ae47-bee6-46e6-933c-b970df8a6ee7", "sighting_of_ref": "indicator--862821ba-b6a8-4285-b11c-783cb66c2acc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72671f4e-a49b-4b1f-b9a1-bbb9fc89db16", "sighting_of_ref": "indicator--814d8c0d-3bfb-40db-a454-45792365462a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef772bed-399d-4acc-9516-458c0391e333", "sighting_of_ref": "indicator--8ba26f66-e74b-48fe-b254-768e01d973a6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32c89687-abbe-4311-b993-523bb7b46ab5", "sighting_of_ref": "indicator--37f31e49-7de5-46b0-8914-e63c7cf8897e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5ce4785-e047-46cd-8bdd-a1e7541da787", "sighting_of_ref": "indicator--d4a6a121-0eab-477b-a333-ccd9f5bca539", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd42ac1e-e11e-4b68-b767-0dec60d7e131", "sighting_of_ref": "indicator--f2568316-dbcd-4e54-aedc-dbef1972083c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59062495-99a7-40e6-aa1c-efb15a292594", "sighting_of_ref": "indicator--c91cee37-a132-48b9-b982-f5d235a4256a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11d80e21-3cac-4095-92f5-1716b280cd10", "sighting_of_ref": "indicator--58eb2f89-9f99-42c1-8643-069f39057e7c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8215fa23-255c-4977-a137-ffa8fdec202d", "sighting_of_ref": "indicator--82fe44b2-aaf5-480a-9b93-da1fd74b79d2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8258e89c-24cd-488d-8002-16558c970d6d", "sighting_of_ref": "indicator--69c47be2-44da-4cb9-bb55-1fb8cc7f5a13", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3da37c94-1729-40e2-be24-baf498bf5276", "sighting_of_ref": "indicator--b31c1039-e6f0-47bc-af21-0fcdfd3494ab", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--983efee2-021d-4135-bb7c-0de81355a907", "sighting_of_ref": "indicator--31700500-b2cc-4bca-b2e1-82c1a170a081", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf101c62-3f8f-4961-9f98-d38562378db9", "sighting_of_ref": "indicator--38b64e1c-4745-4a0b-8943-995ee568490e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1b37cd9a-dbea-4298-9c18-ea66b39910c2", "sighting_of_ref": "indicator--14d1e670-9daf-41b2-b1b2-b10b4e4ab5e2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72d98e43-61e5-4bd5-acec-3c355b5232c5", "sighting_of_ref": "indicator--c7a004fd-58a4-460e-9f87-0e0c6b40ad20", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--951ba6b8-0422-4a20-b1c6-faa66887316e", "sighting_of_ref": "indicator--15f48eae-0ae4-45e0-9df1-d8011d865661", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03612dd1-5d1e-46ae-ab3b-e91b25bcb7e3", "sighting_of_ref": "indicator--5900038a-801f-4833-acc8-61865ffa1c67", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c89f2561-86a3-4b98-9832-77ba089381d1", "sighting_of_ref": "indicator--69a5d2f2-bdbe-4a5b-9673-9fd6b4f3cb11", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e77efd8-2ae2-486a-b58d-3c632dad14d9", "sighting_of_ref": "indicator--33fdbf83-4a6f-4c8b-b8fd-b8dde5f61483", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3389b892-8987-422d-8e36-cae6ba76eb00", "sighting_of_ref": "indicator--86a42363-088e-418c-bfcc-c22e2c5730ea", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d0fd982-915f-487e-8d11-fe7000a8b78f", "sighting_of_ref": "indicator--c4259c79-c356-48a5-b7db-9a0a0f3f8da9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bd1cf400-9e49-4bca-8631-fc1955d623d7", "sighting_of_ref": "indicator--8473c16e-9ce4-4ba7-b02a-983fe910ac26", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--adefab09-c7ad-410f-838b-0408899ed39e", "sighting_of_ref": "indicator--e8c8f961-3c36-4fd3-92f0-6a2e889cc72c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9bad6a05-b772-420a-8c16-6e85de83d9e4", "sighting_of_ref": "indicator--096c699a-d97a-47c9-a23c-826568c224e9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c19a1778-86e1-440f-aea8-be1abdbc5f85", "sighting_of_ref": "indicator--f8dfa90c-5a81-484a-8dce-12fed39ed0a6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3169328a-9152-4981-9a8e-9b7b07a1ab47", "sighting_of_ref": "indicator--d1a4f71f-6717-4954-afb2-1ddad6ee7d59", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--674b36e7-154c-4ebc-adf1-75a8268917a5", "sighting_of_ref": "indicator--a0b107cd-d307-46b1-aa3d-17394eb3f16e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b19ee775-0a1a-413e-96b0-529ce941dfb3", "sighting_of_ref": "indicator--ba6173d2-bcdb-449a-a408-110e6f455815", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c85b254-9879-4893-9774-7a788772efc7", "sighting_of_ref": "indicator--e12834c6-17ed-43ea-8ab7-9828b14f4924", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67035eac-d21a-4aea-be4b-8cf4d7268ebe", "sighting_of_ref": "indicator--bcce339e-0703-4fd5-a62d-d150439897b1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c43e2fc1-6b6b-4f56-b528-9e1ea7cf0bc3", "sighting_of_ref": "indicator--66389f9b-fb96-4098-9d96-e3cfd40980f2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6251f129-e449-433c-a833-9b227b79f058", "sighting_of_ref": "indicator--d5455894-5179-4c6e-aaa4-e574415fd8b1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f5ff397-5f4b-44ce-98a1-26bc230f8250", "sighting_of_ref": "indicator--c999dd59-c8f5-43e5-8bda-7aeb1d7a5b66", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fdfc246d-f1ee-48f6-9d64-683dec9f5d6f", "sighting_of_ref": "indicator--a322ae2c-8b60-4ace-baff-cab9514351bc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3a5109aa-b966-4b09-9d72-a5a2b274207e", "sighting_of_ref": "indicator--bb04347c-0fef-40c5-b9e4-df4a1a8ad0f6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--72e4c371-0092-4789-888a-a24804f28366", "sighting_of_ref": "indicator--2e541f4d-f631-4808-933d-2c82a963a327", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b1150a3-0d7c-4532-b116-3746bb7534a1", "sighting_of_ref": "indicator--e4c0fa45-4fcd-496c-863a-4b841380e42e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44dc77b7-edd4-44fa-aa4f-492ec604987d", "sighting_of_ref": "indicator--1f4dfab5-288c-44bd-9982-9cadc9fa56bb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5c2c25b-e896-4219-a43a-15bf25976f47", "sighting_of_ref": "indicator--bd85ffd7-ba2d-4466-9d0f-814976817dea", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acd5478f-4ac7-4b3c-9c57-783b47caa46a", "sighting_of_ref": "indicator--48168118-2ef0-4302-8bb2-ddaa21dae971", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--150a95d2-18fe-4d8d-a388-1a210a858f22", "sighting_of_ref": "indicator--5a3be18d-81d4-452c-a0f3-57eb4e920874", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c07636c8-6571-430b-9b4e-6ccf9469e47c", "sighting_of_ref": "indicator--d190a6fb-db2e-48d8-992c-2450f968792a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95849ad5-902a-43fb-8750-f8498581b88f", "sighting_of_ref": "indicator--d3b96d3f-a0f0-472c-b0be-7967cca0db32", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--762b0c32-9d16-4391-b266-0bbe0cb85c19", "sighting_of_ref": "indicator--7af683d6-b2ad-418c-a440-a62093b33009", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--805dc17c-21d4-4dbf-9c25-a833a4a42e13", "sighting_of_ref": "indicator--1e19ab5c-b44d-4ca3-9151-3ab9cb4384b1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1fb14a6a-2902-435f-be19-270f129cf74c", "sighting_of_ref": "indicator--3c5192dc-34eb-4ebd-8861-ba67e5bff09d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44f1a8ee-ecdc-42e3-92fa-dfe04db937a4", "sighting_of_ref": "indicator--44152c8d-976d-4414-a592-5b635b5f6436", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--830ce155-be6d-4c41-9c5a-4a04df2dbd07", "sighting_of_ref": "indicator--72334534-0eb9-46d1-9722-341a4c60b644", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de6eee41-c129-4f4c-ae7e-83245b187474", "sighting_of_ref": "indicator--f5824dbc-ff07-46cd-9c08-6d61512ceb49", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b448a1c0-52a9-4f92-a2cf-d66cb60c9a14", "sighting_of_ref": "indicator--ef540c5c-38db-4c0e-a497-be76c2803de4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--905e70b2-f2e8-4985-8542-e0992e046033", "sighting_of_ref": "indicator--7fd70c79-9654-46ba-9f70-a190d4061d86", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71ce05d9-5e8e-4125-91ea-28683f4de150", "sighting_of_ref": "indicator--5ef571cc-8daf-4cc9-9333-2289e649da43", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b461445-c6df-4c50-bec7-3f14924bd92a", "sighting_of_ref": "indicator--7d34d50d-549b-4071-9352-391f16e70c39", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f124c1a3-06bd-47f6-a157-2adff478ab04", "sighting_of_ref": "indicator--2e06b489-0806-4b11-815a-00d3567cc7d7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3713fc08-050f-4373-9683-0455d6dd47d9", "sighting_of_ref": "indicator--112a76a1-0e99-4c73-9f01-8b092ca9aab3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b483b9a-1042-406f-87b1-7176029c3acd", "sighting_of_ref": "indicator--f2030951-7b14-450d-880e-6f0dfded1924", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e34adbd2-45b0-4ea1-a981-4c3b857655a2", "sighting_of_ref": "indicator--8bca2cf8-7eb9-4be7-8fdb-da4ab353e738", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ce7b09a-f7c2-4224-8b1b-be5b5b6331c2", "sighting_of_ref": "indicator--ede5eb63-94c9-4904-a099-859b1cf1c87b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c56b5b0-8d8c-4872-bb93-7659e3d6431e", "sighting_of_ref": "indicator--be7332c2-a904-4479-9c66-ba810f4ccb29", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2293ea05-2514-437a-840d-8b1d169bbd70", "sighting_of_ref": "indicator--a8a1773e-2e75-4cf5-918c-cea0fcfc2b9f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d780fc2-c05b-40fc-b0be-6fd865f3b04a", "sighting_of_ref": "indicator--33870522-2569-4433-ba65-046244a26dcf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--923d1cd6-ee5c-4fcd-ba51-ce368f9c52c2", "sighting_of_ref": "indicator--3db5f76d-8adc-4390-ba83-f9b3bda92451", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0083b396-59e7-487f-b492-f95699a98cab", "sighting_of_ref": "indicator--fbda9d62-557c-4f97-ae97-49940133a6fd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--801a1b14-5c12-4ef7-9b39-65b8df2dddb0", "sighting_of_ref": "indicator--ecf91322-5153-4272-81e7-b5362157d5fb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d37ac78f-3c67-4268-a248-cdfdc12c71a9", "sighting_of_ref": "indicator--720caba3-2151-442e-b5c5-3db612377c06", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e7e3899-d4b5-4653-9782-93f565daa696", "sighting_of_ref": "indicator--9978c6de-1257-48a6-a0e9-e7bbea3129f3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51d8c460-9e04-42d7-9526-d532ad5ff8ee", "sighting_of_ref": "indicator--108e98f2-69cc-4ea9-b7a1-36e1ee9c7ba1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4b90cf2-4abe-4c87-9e6c-6134dd8d9108", "sighting_of_ref": "indicator--20c7a6f6-22ee-4582-9431-de8192adf6d0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f8b5646-b384-4504-9b0c-b7bd39a74fb9", "sighting_of_ref": "indicator--aa804799-50db-4044-8039-771e4f038a99", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06f5f63a-f96e-41eb-96cc-7855a292de76", "sighting_of_ref": "indicator--17adbd9e-afbf-4f46-b1a0-362f491f7c40", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8289b5ba-a64a-4d8d-874c-1f2a07d90f2e", "sighting_of_ref": "indicator--8f688c66-68e0-4711-9c60-2b05f57123e0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3012d57b-a411-4429-b1fe-3f42f3b07c02", "sighting_of_ref": "indicator--17fedaa4-2485-423b-8cdf-23837c40d4e2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e69186c-8c5a-4743-8c39-3a01d8547df4", "sighting_of_ref": "indicator--0733b997-3a2e-49eb-8dd0-e75d6c78e7ca", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c549e28f-5900-40e8-80d7-f90c3fa1bd84", "sighting_of_ref": "indicator--7c62b8bb-8d50-4cfe-9f75-89926e9b134b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0eacc8bb-b86f-43b7-85eb-4dcc34ea273e", "sighting_of_ref": "indicator--dfbcb479-7285-4efa-829a-2edbcc9bb6a4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c275099-c415-46f3-aa9d-b272fbbe647e", "sighting_of_ref": "indicator--02c9b946-4f9b-4f5c-839f-89b9099e85c6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2fdf9464-86f2-4c64-bfdf-ce1a108272db", "sighting_of_ref": "indicator--cbb8f14e-7fca-4fec-b6a3-8c0aced050e3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--058ad99b-9cd6-424e-bfe0-3ed1667a5382", "sighting_of_ref": "indicator--6519984e-f18f-4d64-b63c-a42c851e4ba5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aef5aab-a2fb-4da9-8ff0-a1a0fe055813", "sighting_of_ref": "indicator--0ead6999-284d-45ca-bbca-3dc4eb560835", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2e23131-0e09-40a4-a967-67c84b6b6a76", "sighting_of_ref": "indicator--54c6a630-cbbc-4dae-8808-901e993decbb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2d865bd-8806-4c8c-a417-550c2e3ee157", "sighting_of_ref": "indicator--2fdf50fa-0e93-45ab-881e-f5d4d672f67b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e0d43a40-c2c5-4475-8468-6460b3ea9b58", "sighting_of_ref": "indicator--89d102d0-0e86-45b7-98ee-5fc322b80fcc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70740031-300e-47da-85ae-dddcf6b50a31", "sighting_of_ref": "indicator--3567e637-8326-4ae2-9833-e1b921f5db3c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e381233a-65e3-4a03-ad6d-afd48c4f2a08", "sighting_of_ref": "indicator--05b4ea89-ab4f-4afa-b88b-ca02a4b5e7e4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c95a5fee-5ea9-49a1-9a77-2986adab5667", "sighting_of_ref": "indicator--854fc7c2-2bdd-4238-8284-f29f81e8c580", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--60983710-7843-4547-adbc-7b9c33ab042b", "sighting_of_ref": "indicator--bae75bc2-52be-4ced-aa1e-bf0222c77e87", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b4d8207-ca5a-46c7-8ed3-aaebe9a2e5bf", "sighting_of_ref": "indicator--384fd846-da8a-4825-b41b-4b289387e58c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67da8c6a-49ba-4e62-b176-5e21a4699a38", "sighting_of_ref": "indicator--79eefdba-c9e2-46fc-b28c-f5acbced049c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--caf168fb-418e-4079-9cb9-83513cc9cad2", "sighting_of_ref": "indicator--03f8228f-df5b-477a-8aba-989cf1d5693e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a9d027b9-74c7-4a8b-ae7e-e127e17392ff", "sighting_of_ref": "indicator--94c69857-6ff8-41ff-8bd6-60478ba5a5eb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--32ffcf81-a8f0-4819-8c14-71f8f9a0b565", "sighting_of_ref": "indicator--5b355cad-4a68-4920-9192-184214106f82", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--37152bf3-0e4c-4f15-80c2-6bf7846cea89", "sighting_of_ref": "indicator--d25bef53-3c33-4cb9-b949-8f34e07eef87", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23f596ac-a4e2-46ec-b8bc-d95e164e1d96", "sighting_of_ref": "indicator--46a94c47-0df7-4c86-a3ed-d58ca3149ad8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--807acbcb-53de-4a57-b40d-7833afd0e1ed", "sighting_of_ref": "indicator--da292d12-41a6-4400-8def-e45029e8298b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--99cae418-a771-48d6-9118-c3e1b814090b", "sighting_of_ref": "indicator--43691631-d75d-4992-9386-d57a26fcb4bb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b679661e-7861-4a9d-afd3-1ec19daeeb4f", "sighting_of_ref": "indicator--9e11f1f0-d799-4f6d-98a6-41a8639bedd5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--57bc18e8-7a54-4cea-aec0-a3e82305e107", "sighting_of_ref": "indicator--d488161d-ea84-4175-ae88-1647cb087fa6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--86f4cde3-fe51-4d81-89cd-c15b72610b60", "sighting_of_ref": "indicator--5f1a773d-7250-4c81-97a4-83ed359aa692", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9012534f-1eeb-482f-b5a6-22f4c9ab7cae", "sighting_of_ref": "indicator--79fd6e46-1e72-4305-aaf2-f95fd10854a5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--77c64ed3-c8c3-4d73-8bfb-fe01c837f339", "sighting_of_ref": "indicator--c1561ba2-ede2-4629-8974-721b992b039d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4f1a6900-ea9f-4cd5-a2fa-598ffd2c9600", "sighting_of_ref": "indicator--d312c345-6e16-4729-a6fc-0b03dd2d07a4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--333e7741-e7a6-458b-831a-66ba8ab322f7", "sighting_of_ref": "indicator--2e75da52-57d9-48a1-a71f-631f183cdd91", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eeb77b42-b5c5-452a-8a50-ee54c8d2a514", "sighting_of_ref": "indicator--2efef715-0d8b-4792-b7e1-8bbec30b93b7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a364f1d7-7b81-4f27-9920-60ca20d11aef", "sighting_of_ref": "indicator--5b18bca4-1f90-41aa-b621-a717398d4a21", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c28b200e-5d79-4692-b652-b059e328cdd5", "sighting_of_ref": "indicator--26742a1c-b599-475f-b8ab-daa2ef367604", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2302b7d9-6d0c-4bc0-8678-c2838cacd1b5", "sighting_of_ref": "indicator--41ec7c79-6639-4020-af3a-b8d701a54ef0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bd8448b-770a-408b-b721-178b79322666", "sighting_of_ref": "indicator--f6e60ca2-ce8a-49e9-9887-b640c5d26d16", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--981941cb-d9cb-4386-84b6-d5fcc1730bef", "sighting_of_ref": "indicator--13015a47-e751-443f-af79-6bef18710bc2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a63d8a86-25a4-4f8e-84bf-4ccd9af90bb2", "sighting_of_ref": "indicator--03046443-4726-4020-8211-61df0abfbc13", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef44d7f2-22dc-4244-92b7-3cc1243f81e3", "sighting_of_ref": "indicator--4c8231b6-63f9-4ad1-8f22-c33e46a83e87", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7db5b63c-95c3-40ae-b173-a3f8b2735d95", "sighting_of_ref": "indicator--7d304a84-7750-4d7a-9d58-bbae759a8c42", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bab37ca8-686e-423b-8e1a-6ee2fbec1d24", "sighting_of_ref": "indicator--3d6f9441-64c4-4413-9ccf-9f7c84f4ae04", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8235f2b8-e2b9-4a58-9099-398ca0ff6a83", "sighting_of_ref": "indicator--222c3193-ccd6-48c3-b362-372b0bc570e1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2640fb47-453a-46b8-a136-9932170b5682", "sighting_of_ref": "indicator--55a8435f-b581-403f-bd68-3b75cb7f70d2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a087074-7ed4-4f8e-8aba-f2c52c92e05d", "sighting_of_ref": "indicator--656f14a2-d297-42bc-9321-cbe975f6bccb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4aa12e72-be6b-4e8b-947f-dcb3b7ef0f6d", "sighting_of_ref": "indicator--4e198098-7049-4b5a-9025-7ad4fdf33e29", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e5a8251-4718-4c14-ba0b-e838d3461072", "sighting_of_ref": "indicator--856c17d4-2ecc-4639-b0eb-23dca1cd198f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7dd95c6e-da64-4af3-96f7-b58470a4d068", "sighting_of_ref": "indicator--566cad37-56c3-4359-b176-1ed89e45c4e0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96c48f28-cacb-451b-af67-0377396baffb", "sighting_of_ref": "indicator--e6b9286b-c229-4297-984b-2c3790dc09f0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f9b3b64-9925-429f-a81d-79eb30359eec", "sighting_of_ref": "indicator--8d8bd406-955f-4784-b1cd-5e2dc3681676", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f6b2a6fd-6ed4-4618-8509-e75e7c31ceb9", "sighting_of_ref": "indicator--5e398740-0910-4b4f-8cd0-67d91460fa4f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b1eed52-cdee-4a3b-91cc-1acb30778c6c", "sighting_of_ref": "indicator--11e93708-368f-4fce-9aba-8f249f131947", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65c12499-da95-400b-b52c-04a6254f6026", "sighting_of_ref": "indicator--578b66a8-208d-4294-84be-bc71a75439fb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e532366b-b1a5-4234-a122-c99649bdd513", "sighting_of_ref": "indicator--e908365f-146a-402f-9096-028fc51b74b7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59c19fa3-b8cf-46cb-83ac-a6626c4c2f6d", "sighting_of_ref": "indicator--1a4ed9f9-8d1d-4622-b75d-7c950648fcd2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--07295c57-fc48-4f8a-b544-211432323416", "sighting_of_ref": "indicator--e1f78117-4063-43b2-9b29-85a1b5609664", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bad73834-20a0-4369-bd0f-90db9ad042d5", "sighting_of_ref": "indicator--7c405e26-8247-480a-97f6-7170d7190cd5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9886e8c8-7f74-4134-acf0-5cfe7e68583f", "sighting_of_ref": "indicator--cfc63dbe-51fb-4018-8a4b-a1f2efb050d0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ec749f4-c838-48db-9e8b-ecd8f1e2056c", "sighting_of_ref": "indicator--b042117d-1cbc-4c0c-bd16-06c87a2d9360", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f54c26b2-192e-4332-811c-0a9232865dac", "sighting_of_ref": "indicator--c56baaed-935e-465c-a0d7-7840442be73b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--227643ff-9f0b-498a-9f25-210fbb5f04a5", "sighting_of_ref": "indicator--b8441b5b-0d87-4df7-ba04-21a58d420260", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--882aec44-149d-4a17-b012-4b021b7935fe", "sighting_of_ref": "indicator--d4aacdde-4872-49bb-9167-7c9112e3b3a0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06519a28-2b67-4f83-9958-2699589237d2", "sighting_of_ref": "indicator--5adbaefc-14bf-4102-8be6-c61fa01490af", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5b0b932-deae-4219-a9cc-1bc9431c5abe", "sighting_of_ref": "indicator--c18ebc0b-ac10-4043-8275-50a1b2a1704a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--979753be-a453-473b-b13d-141c6d9fec98", "sighting_of_ref": "indicator--0bcedb74-8139-4898-af12-8cfbe2ed45a7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--949106c8-f37e-4ed1-893b-478027c76049", "sighting_of_ref": "indicator--1b1bea98-40c6-49a0-8f16-15978075dcdd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7d6f4340-a818-4a86-bb81-5a0cdc507939", "sighting_of_ref": "indicator--fb90a6b8-f338-4e26-85b9-e5afc6bd5dc7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4da30ca-c15b-4c52-b4fe-f421747c3c65", "sighting_of_ref": "indicator--da0895af-351d-4ff7-aacf-090a1c2b63b1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76ee7ea5-b40d-40bc-b47c-1b0a79d6c3b1", "sighting_of_ref": "indicator--5bdcbf70-d15e-4911-b602-bd1774ee343e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63aac941-e94b-4c9d-946a-594e506c7d91", "sighting_of_ref": "indicator--8c08a15c-d392-49ff-8aae-186aa28cd6d8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--52953e10-72ed-4f51-880a-1fb032738f2b", "sighting_of_ref": "indicator--3f5c0a85-8fe6-4f79-ac72-7e8734ec7dbf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f8c214b-7fc2-4a39-ab6a-b5f13256c444", "sighting_of_ref": "indicator--df62be99-5338-472c-85f1-a34bd0a80dae", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd05cf0f-0907-48d7-bb26-53a754abab8e", "sighting_of_ref": "indicator--089b6a79-ad31-4c3d-bc14-c51f8db0f1d4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd0b862f-03c4-4536-88b2-5cca5da1bf39", "sighting_of_ref": "indicator--a0285fbe-0733-4566-9ce3-9ddf16367f95", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7ecd77a-3312-4c6c-854c-49ea257e30e7", "sighting_of_ref": "indicator--2de94279-bf2f-435f-863d-8d31fa462efa", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--112fd6a7-74a4-4086-b9aa-0a8004cdfbf4", "sighting_of_ref": "indicator--54d955aa-8b76-43d0-830e-a853f0357216", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e872bf01-f944-4b30-9685-b8c686b0b954", "sighting_of_ref": "indicator--64df7011-bd92-45b0-b95b-38f0ca5e3e86", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95da2e40-3d2f-46e1-850d-c2fa365084be", "sighting_of_ref": "indicator--ac5a7c5f-1e10-40ad-9a9d-ce194f5f7496", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7af31bb3-2a1c-482d-9c75-69aa770dfedd", "sighting_of_ref": "indicator--8ba986f3-bfdb-414b-bdbf-c4703a1e0e17", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40217374-80fa-4713-a74d-5db57bd33347", "sighting_of_ref": "indicator--fd4ae7c6-332d-4b7c-b6d8-09d1845a098b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2e7f004-7327-420f-99f7-e6e7d3716144", "sighting_of_ref": "indicator--ce04d341-d2c4-4061-993a-954e989b7ac3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36bc30c7-3489-4be4-b9bb-b93d5446d5da", "sighting_of_ref": "indicator--7fae8e25-5765-463c-b89f-618f234de7f6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38fa77fe-57e8-45ab-925c-798a682e059e", "sighting_of_ref": "indicator--27586265-3008-402b-948d-661f28711034", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9483d741-197f-4a4c-825a-fd37aa9b7559", "sighting_of_ref": "indicator--ee495f49-5ec0-4f97-b65a-628067e2cb04", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5c08215-4a3a-4af8-bbf1-aba2144d05ef", "sighting_of_ref": "indicator--01d65efc-8409-4f49-afa1-565bfca54fb7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f468e8d-f43f-4b1a-8d16-307b9c0f6ec1", "sighting_of_ref": "indicator--b7fc776a-d764-4827-a6c2-b6eec952d150", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--095f7be5-f575-4904-9a95-6fca57aac6e3", "sighting_of_ref": "indicator--54989137-c5f3-4970-a5ca-80bd429f2907", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1aa58431-9aee-48a3-9df1-20d34ceb1ea3", "sighting_of_ref": "indicator--c8e66b69-ebc2-414f-8285-9c40e0614119", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d9cad02-f50f-47c2-8c8a-93318628a0c7", "sighting_of_ref": "indicator--016cdee6-c882-417c-8ae2-2b1dc03615d5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7624c8d3-405c-465a-a1df-d0b8a5c4ae33", "sighting_of_ref": "indicator--b15b6ca9-dd6e-4b7e-90b5-dfccd8af0b6c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--12c5633d-cf88-406f-b621-57615f2db249", "sighting_of_ref": "indicator--441700eb-06e5-43f8-ae9a-017f4b5247d3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d02196f-b847-4aa3-9b45-fb1c36790758", "sighting_of_ref": "indicator--3da26fac-fffc-4c4c-938c-e28372a2496e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de9b6c76-1133-4069-8708-a825e4a57ec5", "sighting_of_ref": "indicator--18166e0c-9f0f-410a-b1aa-c28d2980fdb7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3471aa4b-4351-485c-90c1-5a6c2d606fef", "sighting_of_ref": "indicator--199d7a8a-57f0-468a-8f8e-17505b849bf4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--262d1c95-1068-4cd8-b0d9-d55d05f04427", "sighting_of_ref": "indicator--7e52b4ba-3019-48f7-a465-a046a09a1a58", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee7145d3-5f19-402c-9ab6-1fd2b5ca4c13", "sighting_of_ref": "indicator--252d1e4f-1534-4efd-b80a-c2ab74b20972", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa21a7ce-6909-4c3d-a041-1b24df93b603", "sighting_of_ref": "indicator--e9ab3ccf-daee-49b1-be22-24b7b6f6b19b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f2703e34-75fb-479a-be1b-f043af506da0", "sighting_of_ref": "indicator--8d8bb4ad-893b-4a61-9ed7-e8c1d3223e3a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--66e7f309-abc1-4ce4-96f9-f3361fd29828", "sighting_of_ref": "indicator--c8a29155-950b-4226-9601-48321e840f64", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eba6077a-c58f-4561-bd62-9bb35b9f9665", "sighting_of_ref": "indicator--86336847-491c-4100-b85a-052e8ea69bcc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d2e021a-454c-4652-8eef-96c779a67c88", "sighting_of_ref": "indicator--a5551898-3625-4107-9513-16f71a7cca7a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--634ee037-4bb7-483c-8456-e3edc116167d", "sighting_of_ref": "indicator--3a6ef24d-f1d8-43a2-8887-ced0a8735560", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c8067e6-c148-417e-b7af-fe6d6baaf2a2", "sighting_of_ref": "indicator--889ad89a-3ade-4321-9133-5f8174a56413", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ca7da29b-c12f-4363-b116-fb689c1ae68c", "sighting_of_ref": "indicator--32674a97-c662-469d-a45c-2dd1eba4d8a7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b89cf538-2db2-4b22-922a-dcd0de2db654", "sighting_of_ref": "indicator--9f7d9566-599b-443e-906a-6c5a81a57b25", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87c0674e-3f2e-4b9a-8ccf-c292bb201692", "sighting_of_ref": "indicator--1c724d98-1439-4417-bb22-035d500d3cdc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3da1c7b3-ac1d-44e6-9e6d-929e901f2797", "sighting_of_ref": "indicator--7c290db8-efc1-4151-8404-066e18eed176", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d82f6b5e-02dc-4644-aedf-8c13af0cf463", "sighting_of_ref": "indicator--b2ca8fb3-5c6d-4d1f-94dc-f12a27273a5c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9abc963a-5d87-460a-aa70-02fb66fd1d3a", "sighting_of_ref": "indicator--3077c2d0-4627-4787-99e1-72552f13ea9b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40fa1796-0eb5-42b7-9310-f678f3a7d692", "sighting_of_ref": "indicator--c308944e-b896-43c8-aa4d-2682c72df710", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--26f8f74e-1ca5-40de-87da-fb81a5973137", "sighting_of_ref": "indicator--a6ba5c2f-9acd-40a6-b92a-02288e3e18fd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96123ea3-9a86-4b24-bb7e-1064ae9e6f4b", "sighting_of_ref": "indicator--7c482891-763e-43e4-b7c4-5307e2a63cf2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e37d87f-6d18-494b-b2a5-03ac2259973a", "sighting_of_ref": "indicator--8d148443-abef-4d2e-9366-9136f56b4452", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84157440-f99d-4b7b-abc6-2e5591d00b10", "sighting_of_ref": "indicator--b19c3e6e-3cc0-414c-951f-f980ed419861", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa8c3e5f-b1e6-49db-b9da-e9a4f1d45140", "sighting_of_ref": "indicator--6d51552a-1769-4c2e-8304-5f355de075f9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b97e5839-bd52-4891-92bc-7a48b6033d99", "sighting_of_ref": "indicator--6111f435-aa98-48df-921d-cd7351dae8ef", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c69f08ef-211d-4dff-95f3-683d9bf0e78e", "sighting_of_ref": "indicator--f4980427-783b-4b62-b1ae-7487c1de7ca7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a89dc18a-8026-4d98-bf65-681a5b3da9c6", "sighting_of_ref": "indicator--bc29e17a-f39a-4cc7-be5e-0cabf8f3cba9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e69b34d3-6c89-47f1-88f7-d284e72b3c96", "sighting_of_ref": "indicator--d593c40c-0cad-4948-bd5e-ec6375eae54e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cb6b654-0af5-42ec-9512-4e3584037022", "sighting_of_ref": "indicator--591dfa09-02d7-4b36-af72-0fc7bf09a6d4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c22c481-7a23-4652-bd03-e8e5fe5a0ed7", "sighting_of_ref": "indicator--fa8cb189-0a16-4895-9e48-dbd5149ae412", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce468352-071b-4060-a07d-6d1ea4171bcb", "sighting_of_ref": "indicator--9f46e442-6a39-40d2-b353-b78fa28b4c7a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c5f5d489-8aed-42ed-ac6c-321e20864951", "sighting_of_ref": "indicator--93ec599a-a506-45f0-b60c-025245a884ca", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--83a969df-19ad-42e4-9d88-e2f094a2d343", "sighting_of_ref": "indicator--8e421302-8f8c-4a06-be58-4049a778cd00", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--282b6ba9-6631-40f5-8f66-df0d12654ca3", "sighting_of_ref": "indicator--698ff0fe-4503-4b22-a830-127a8fdd2b4d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9324f1e5-ee42-4d62-8136-2788a23c42e4", "sighting_of_ref": "indicator--89752205-03bc-4db9-a5a1-2e130c3e6279", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--423685c4-702c-4ec6-8265-28e28964ed0c", "sighting_of_ref": "indicator--db6af78c-7053-43b1-a3bc-f56278e75ced", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4313f4af-65f2-4276-ada9-844114cecd93", "sighting_of_ref": "indicator--97f3e255-801c-4c75-b1ca-a3fc0a481b1f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6ee4f17-95c8-46d6-8300-b47540ae10d7", "sighting_of_ref": "indicator--b53234d6-261f-404f-a903-feb933e9fcef", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a8b494d-f8a8-4c27-9d12-0cd2ac13569a", "sighting_of_ref": "indicator--588351bf-0c6f-4df3-930a-0cb53a817540", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c878126e-beca-4108-b5c1-71fa991e110b", "sighting_of_ref": "indicator--f1bf787d-8ebe-43a8-803e-f4b1d5b0d338", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68ed241c-4320-4e2e-a458-2ecd6e399f09", "sighting_of_ref": "indicator--ce48776b-8b64-4403-aa7c-4659974881b3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8aadfc3a-4890-4862-bb39-b4ffe0e34af6", "sighting_of_ref": "indicator--2aa027aa-9b15-4fdb-b014-5a87d410a17f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1479c9ce-d190-4787-a50a-8736553cafae", "sighting_of_ref": "indicator--1678fa94-05d0-49c6-a69b-9b0ae0121125", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f4c1254c-1e24-4679-933b-ac8563b8081c", "sighting_of_ref": "indicator--36032aea-145e-4801-97a1-41b996d43ce5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ceabc5f0-77e0-47ce-b3d8-3778c20e0fd7", "sighting_of_ref": "indicator--c90af3d0-45d2-4f80-9277-1d0e628db474", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c28c9fd8-f548-4aeb-8c61-fc40ec018952", "sighting_of_ref": "indicator--74c0ec56-8409-4978-92f3-a79df6374ddc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6382b018-970e-4706-bd4f-8d8c47c94ae7", "sighting_of_ref": "indicator--ba729c70-c962-48b8-8b81-b27f5740d71e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aeb84ad3-18bb-4f33-ad30-ed5ede995022", "sighting_of_ref": "indicator--7c5690e8-bf02-4eed-b1ac-833c2ea20bbd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8b3a9fca-315a-4035-900a-46f6663ff7ae", "sighting_of_ref": "indicator--fd1d7d4a-a421-44f5-b703-1acd8989db16", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6a8c74a6-6181-41a3-8192-1060c9601f43", "sighting_of_ref": "indicator--118d36e3-8f27-44d4-b209-776e3f365df2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42aebdfe-8b60-4cff-bb46-f9992b4a5755", "sighting_of_ref": "indicator--54296da6-2ad6-4fee-ac8c-aa248f7b35c5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e37dcd44-0138-4e14-af64-722429e6d67b", "sighting_of_ref": "indicator--cae177c8-776c-465c-a54d-12bec3691641", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97aa73da-7a27-4263-9565-3b033a82f19d", "sighting_of_ref": "indicator--907e82e5-c122-4908-a461-309ab7f0c2ff", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e3d1edc5-6bf1-4ad1-87d7-b0e012664bdb", "sighting_of_ref": "indicator--d3cf095e-afc5-443f-a1ce-2815dd101a53", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70549ac5-6e01-465d-b0cd-8159b09fe067", "sighting_of_ref": "indicator--760138c4-7927-4bc4-94a5-81316b21307f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be009e4c-efd8-4b80-903a-1c556f60d49f", "sighting_of_ref": "indicator--bae80d9c-6e95-4602-b165-aec3da61f23b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b3fc883-6d8a-4077-a804-fb1544a29a4a", "sighting_of_ref": "indicator--0b8f26c8-bd12-4dfb-8cac-b18077aa28ac", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c1f18caa-cea3-4286-8b19-13391d42f1e7", "sighting_of_ref": "indicator--a3949a9b-37aa-409f-95cb-9f05a2582a2b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--33212322-ab9e-4b10-b967-a5166cc3f897", "sighting_of_ref": "indicator--82d3efd9-d18f-489a-8bce-0488dcf2279c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5cf44b8d-1bb3-4392-a720-154dd08520a1", "sighting_of_ref": "indicator--d3d3eceb-cacb-481c-aaa9-8c7546718e53", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02ac8e35-5584-4ec4-b02b-3b21985e384b", "sighting_of_ref": "indicator--ecb1f600-b967-47e3-b07e-f4b618ec2fae", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1d4b026e-fc80-407a-b8dd-e951c3f4f9ba", "sighting_of_ref": "indicator--31a6cfbe-2039-4a11-b52a-9c6f3084d142", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9827df7c-413e-457b-9c0e-bb3c437d9fc3", "sighting_of_ref": "indicator--df4417fd-8141-4cef-a4b0-b804ff309e06", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb94365f-e1ab-4e7b-948d-685b65904be2", "sighting_of_ref": "indicator--cac2830b-c48d-45a0-ab15-834b0b43a549", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8211f666-b1c8-4822-9361-eb4ea32b2b22", "sighting_of_ref": "indicator--5b5f63cd-17dc-4d36-965f-eab77dc5db8d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a7b1ecf-5040-4d64-8d87-96a923ab1841", "sighting_of_ref": "indicator--32927faa-d14c-42f9-8e99-42bf8ab6e8f0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38fb045d-595f-4e97-afe3-dab9b1460a8e", "sighting_of_ref": "indicator--3fefa32a-63fc-434c-a97e-b6c5a4ce1450", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7666c301-6022-4c8c-89c6-41aecf4a1e02", "sighting_of_ref": "indicator--a5343291-3fda-4f39-9549-9b1fee7106db", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ab03e7f9-0744-43eb-836d-da9d0207103c", "sighting_of_ref": "indicator--b189e125-1328-49e0-b95f-d8b2f63d74f3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8962acaf-5e83-4a16-94ec-1ec8fe9ddb84", "sighting_of_ref": "indicator--388b3c05-84f6-4e66-b18c-9a802c1584c8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e2f21cf2-1914-465c-b62d-9a3e49417fd7", "sighting_of_ref": "indicator--8f5a7d09-3567-44c4-9ca0-fc8c13c3bc1f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--73c900ab-bcc6-49f4-96be-8be1781153f2", "sighting_of_ref": "indicator--3c3882c0-11af-4513-ad63-e90dceb80366", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d8e5fdd-78d7-4355-946c-3f5d03b729e4", "sighting_of_ref": "indicator--7cc1082d-eaab-4904-a932-6766cd4909d0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7a2877df-31da-42d2-915a-8a61eb8940dc", "sighting_of_ref": "indicator--4624a6a8-1c31-4830-ae75-a81fbe330c17", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02dc9419-567e-41ec-91a2-c964005ccacd", "sighting_of_ref": "indicator--a0ead707-1933-4d38-ab38-68d7d8ab1858", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9231a390-7e1c-4448-9215-b69c74c56bd2", "sighting_of_ref": "indicator--d07489c5-d18c-454e-a469-1806ea231937", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4de9e835-cc28-4595-904f-4d5160adc1f4", "sighting_of_ref": "indicator--58deeb06-02d5-4750-a6ff-3fcd5191eb70", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89453ba5-aca6-4ae7-a432-0f999946a841", "sighting_of_ref": "indicator--4c5fac85-ebbe-4be2-a2cd-864c8c993c00", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4b24d1b-269d-4c6a-8378-e179bd6de768", "sighting_of_ref": "indicator--e6454d1d-503c-4534-9c73-483c910e980e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4231328-6bfd-4298-bf97-cf57bf7d4554", "sighting_of_ref": "indicator--c81e10e3-9e89-45b9-8d56-cb7b6ce9f206", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a092887-785f-498d-bb6f-f0882746ec7a", "sighting_of_ref": "indicator--ea183055-0690-43f8-ba6a-08f803c848d7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--762c8cea-c3fe-49bf-8012-541b69cc6f9b", "sighting_of_ref": "indicator--3b650e91-7753-4188-95b8-ebd4fbd0d24f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc89629c-388c-4c6a-a00c-c78452d99558", "sighting_of_ref": "indicator--eb885dff-8da7-44b7-98b7-f8a2bc77b818", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d83d603-aa21-4852-a2a3-ce14d0ca9ae8", "sighting_of_ref": "indicator--10cfdb43-84b7-484c-89ad-7dbcd3bad28b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bb665308-84c5-404c-a40a-d6aff7e33d31", "sighting_of_ref": "indicator--79ad3b43-da78-4749-a044-540b6884fe0d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--89eed358-74b0-4c11-aabe-0814e8ad66fb", "sighting_of_ref": "indicator--87a3ffe8-3072-40fb-939e-3ce989fcadb7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eda00dd4-6f5c-408d-ae9a-accb3690766c", "sighting_of_ref": "indicator--a9e5c85b-5825-4453-b070-37a24f0aba7e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5330ed0-1755-48f9-bef6-4d35d8712a2c", "sighting_of_ref": "indicator--dab4354d-aaf2-4099-a460-1d6a08c11e2b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--257a00e5-4618-4c45-ba84-a1dd9569f7d5", "sighting_of_ref": "indicator--e038eead-4ab7-4c68-b4d2-80bd2c4bda10", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3c5cd6e7-47a3-4826-9b03-faf941c6a221", "sighting_of_ref": "indicator--e85439ee-6864-4051-bc2f-9ace02bb0875", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b209c33d-c58a-4fb8-a38f-02f5224b65c5", "sighting_of_ref": "indicator--900ed7fa-cec3-4005-9835-af0dac3bbed6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed5e3c7b-d9c9-4b8f-843d-f97ba693cc61", "sighting_of_ref": "indicator--dcca5a23-11e4-4fb6-a470-68fc05a3a043", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c70ff371-85d8-44b2-bb2a-028d6f904096", "sighting_of_ref": "indicator--ffa1165b-a4e0-4a24-993f-674f1160ae66", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71ab6cee-1ccb-49b7-a59b-d9e33114f0cd", "sighting_of_ref": "indicator--4e035a13-d656-4c1f-ada1-2ec383a49ae3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b8d900e-54a0-4eca-9db9-7282cccce5d9", "sighting_of_ref": "indicator--9ed392f4-c7b5-4444-8948-814888db82b8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--600e2afc-8fd5-4a99-ac78-5bc0666c9aa8", "sighting_of_ref": "indicator--63e4efec-c413-4b32-9d67-8ca7c1b6a0ba", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef67faa6-a1a9-416f-b19a-9a7e12c5b85f", "sighting_of_ref": "indicator--58de79ad-742f-43d9-b909-60cae88ec352", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--441ee2f1-0912-4188-8a3b-9c0f8e95e662", "sighting_of_ref": "indicator--71176f58-5982-4901-b8b5-1d477ba1bf84", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--047e3fb8-59bd-489c-9e1e-810d6c1c9714", "sighting_of_ref": "indicator--3e118a71-11ba-4194-871a-7638c2433258", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5aab233f-906a-436a-8282-79897251503b", "sighting_of_ref": "indicator--212ccef1-e2a1-4d0c-b767-5ed125eed289", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e672bcfe-ed9a-439d-83c6-66d7dae45860", "sighting_of_ref": "indicator--4da8d102-a1d4-4a35-9a32-803ec7a99923", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--24bc9e72-bd9f-4c7f-8735-00a642a4afb5", "sighting_of_ref": "indicator--9af5f629-e586-4ff9-8611-4ac5e3ca6abf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed6ad327-498b-4e7e-82d5-483755c3a10d", "sighting_of_ref": "indicator--a184a95a-0674-4aa6-ba81-2d92c78c9a31", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ebe75a9a-56e2-4129-82c4-538ca8c2863e", "sighting_of_ref": "indicator--3d6ec217-aea1-44a3-b3ea-968780ff1daa", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c477d40-9efd-4a46-bf7c-3650f9b69177", "sighting_of_ref": "indicator--f24a877d-9ca3-4a72-9945-1bc2ed69c369", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8bebb94-a9f6-4b0b-9022-fe263c9a29ff", "sighting_of_ref": "indicator--c6ca8bb1-6899-440f-abb4-a1f34ff45bdf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d8fa26a3-3ade-44e4-9e76-665b0ca6526a", "sighting_of_ref": "indicator--3f3a56d0-b483-438d-8d82-abb726756d68", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--19b2eac4-ed15-43ed-b0c4-9d61ce5d33d2", "sighting_of_ref": "indicator--2d52a218-e72a-4b45-a835-741f979ffb8e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6598b7cc-0f84-4f23-a6f2-e5df72c17194", "sighting_of_ref": "indicator--82be3b6b-f28a-4853-955c-020cd59cc99a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--46182226-58f0-4895-81d2-84dd204b1373", "sighting_of_ref": "indicator--0e792337-1032-442a-863c-2dff313c56e9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3eabba37-4ea8-4a57-aaf3-b28073043132", "sighting_of_ref": "indicator--598371f5-9883-493a-8b6b-5de136f630a3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3fb61de-a52d-42ae-ba37-0b6123fb08bb", "sighting_of_ref": "indicator--c63b735a-4187-48b7-8400-f3e5eecaf233", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ea35da8-f8dc-44c8-a8f3-bef60711c287", "sighting_of_ref": "indicator--f29fb7bd-c442-402e-9730-caa7b1f5922c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6d847878-ef08-401c-925f-c87c77375d51", "sighting_of_ref": "indicator--b782731e-cc8d-48f8-9728-f3bfcba137f9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bdfc81c-cb7f-404c-b6fa-d90b32104536", "sighting_of_ref": "indicator--09f7eeb4-47ce-4624-b433-71e0ed109324", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bbfb1072-61be-4332-83f4-fef0ff064526", "sighting_of_ref": "indicator--313d7c2b-d12a-4add-adc3-bb755e44a7c8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ea1bb048-1b75-445e-b5ae-9e1edf971bde", "sighting_of_ref": "indicator--c6f273b8-0a41-4f88-868d-8bb500abb935", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7f2c2c3-184a-4d19-bb79-81f3208afd3a", "sighting_of_ref": "indicator--1ca4b88e-9e2e-4a7f-adf9-c806192bdeef", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--979b88a5-e2b7-4e28-b6a6-3fd522d362e7", "sighting_of_ref": "indicator--6b63c7a7-805f-464c-bd80-18b0664ef092", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbd84a53-6db0-45cd-af32-a652bae88519", "sighting_of_ref": "indicator--c6cc2938-68a0-40db-bb56-f6db537fd613", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--973555fa-6e1b-4183-8e88-c6ce11db3942", "sighting_of_ref": "indicator--60a8f71d-f195-4b7b-9387-ad7b5a161096", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff716c4c-4435-488e-9e0a-c2273b8621df", "sighting_of_ref": "indicator--3a3dedf1-0b65-4341-9d2a-537eed79f52f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3f3305c-8eab-42b0-80ad-6b0f0590e638", "sighting_of_ref": "indicator--1594a97b-5f41-431a-90ac-9624e79c061b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b698c803-bfc1-4608-abd0-41732ceb55b9", "sighting_of_ref": "indicator--6c7be7bf-3c88-49f7-b081-bd18c4b9b0c9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43bb427a-fb25-4075-9858-eac1e8e452f9", "sighting_of_ref": "indicator--7b171381-33a6-4a83-8d2c-8dec2e1f3706", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e565822b-6ebd-4661-961a-d4bf1a3decad", "sighting_of_ref": "indicator--e5c4eb98-70dd-4883-b8de-f280e2ae197b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c2b52b3-f188-4365-8720-1eafa45e968f", "sighting_of_ref": "indicator--69db465a-190e-45b3-939d-a1849ad447f7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43384a1e-ac88-490d-81b3-105522e58a73", "sighting_of_ref": "indicator--df1407f1-3409-47cf-ad02-ce22a4c8fc45", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4b914e07-02d7-46e8-a295-8f165d8eaf35", "sighting_of_ref": "indicator--20d71940-5d65-450e-8e2b-0ccecc33d2d4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bbb8aca-0e13-4930-928a-d414038247eb", "sighting_of_ref": "indicator--a8bc8377-e6bc-4ac1-8794-d4404f3df73c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e51f892c-7f85-4849-a324-8111919ebda3", "sighting_of_ref": "indicator--b8afb128-d35a-4cec-90a1-6c48c66a4a1d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e570ed4-9417-4f88-a60e-c7496b690ee8", "sighting_of_ref": "indicator--19233e1e-1d9c-4797-9d3a-e3da9581c0a3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--463ff5a5-c25d-4545-b4b4-0bacf0ec39a1", "sighting_of_ref": "indicator--13ef2363-7e65-4a19-a8de-a03b39198a9e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--119e1898-8ea3-4866-ae55-32700399a4b8", "sighting_of_ref": "indicator--8511aeef-b1bd-4a99-9bf7-5a41a04e4f19", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9d2e5bab-8f37-4b09-bba9-46952de67bdd", "sighting_of_ref": "indicator--7da5c32f-69ad-4da9-8017-26f62218b16e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a4cb028f-9cb6-44ed-8e79-de9eb88458c8", "sighting_of_ref": "indicator--21ada4f0-6bd7-4ded-a5f4-eb3dd5c2eb28", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5826de9e-a317-4ce8-9f61-4212c3415c9f", "sighting_of_ref": "indicator--effa4b15-4d44-4c0e-8a4b-126684756393", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--759e0384-f94f-4da8-a236-afdccab536ad", "sighting_of_ref": "indicator--eb9bda5c-adb3-4225-8307-815c9bdd7ca4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ef33dd78-970b-4d58-85ba-d13441e823a9", "sighting_of_ref": "indicator--67bdb5be-7e75-4c9c-a306-76119205faf4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--914eee70-0cd6-495a-9ffb-b222f3134ef2", "sighting_of_ref": "indicator--5dbc8e10-7385-4f7f-a99d-b43d0bcd699b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc962b4d-a164-48bc-9507-595d27bbc882", "sighting_of_ref": "indicator--2bad1a39-01ee-448a-836f-0aa7ffd22996", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68c20c30-e8cf-496a-8bc5-00ff0951691c", "sighting_of_ref": "indicator--91a23ece-e6ed-4101-ab98-d59c5dcfdb1e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--031a97ae-0720-4c21-9a29-599306552e80", "sighting_of_ref": "indicator--f4027a54-0b4d-4570-86b6-da69689a4448", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f3132acb-14d8-4511-9f7e-f52edf688bdd", "sighting_of_ref": "indicator--3a53fcd8-0106-4a32-bea4-5fcbc013c4bb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcfc4df1-3c53-47d5-93d5-2fdfb59d30de", "sighting_of_ref": "indicator--d352b885-fdb3-4182-bd81-e19f36eab232", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--27f95dea-6f41-4a95-a7d1-eeabcfd05da6", "sighting_of_ref": "indicator--5c43e52e-3254-4bb3-a475-248e92ddb875", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b61a15ce-97ea-4505-9ee6-443d23b60e99", "sighting_of_ref": "indicator--b2222cc3-218b-4e8a-afc0-fb5996df34aa", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a3fbc95a-2e8e-4116-ae57-f1a0a963d843", "sighting_of_ref": "indicator--cce64323-9cc0-4577-ad2f-bb7d22987e82", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38c15846-fc9e-4f98-b681-58d212cd1358", "sighting_of_ref": "indicator--6b7f6cda-f421-4ad5-afa3-a279af3860a8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--514ef1b7-a68d-4ae2-a6bf-e6c41116c515", "sighting_of_ref": "indicator--c6e5fe36-8b38-4f10-acf2-a0fc655c84ab", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a862780c-358d-431a-9420-61621f3620c1", "sighting_of_ref": "indicator--47360267-aa34-487a-ad0b-00d952bd5757", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98b9285a-210b-4ceb-89c3-365da40779f3", "sighting_of_ref": "indicator--5e64e5ce-d9f9-45d0-91cc-94ddeebceb82", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da56309b-6866-474a-9325-3ab5d88bae42", "sighting_of_ref": "indicator--80c31bc0-cfb9-42ee-ac27-23aab9ae1ccc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2bcbbd7c-5a7d-4ae8-959b-38f9c62de85e", "sighting_of_ref": "indicator--cfdd8b70-d4fb-46dc-9033-4fc0778614f9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c52986da-e7fa-4f45-8399-bb16199bd7bd", "sighting_of_ref": "indicator--2f2bd360-b955-400c-a237-3fd8e7c8b9c6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9542443f-4d5d-42d0-91b0-672e8c8c9b47", "sighting_of_ref": "indicator--3d28d7a9-7a40-4f6e-8a4c-14d736aa8c93", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--87efb506-9053-431f-83e4-bfda8b169700", "sighting_of_ref": "indicator--e7f75620-1075-43e7-965a-d58b792100f3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e3399e9-76c4-4784-ae67-ef601e7d22c1", "sighting_of_ref": "indicator--d1f46fa4-0d4a-4763-9f54-d30fa6f8ad2e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b651b376-3a3c-4ad2-986d-875b24813707", "sighting_of_ref": "indicator--dbb43e74-1e52-4791-9fee-28e9b7e48a78", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dbea80fd-326d-4ffc-a8f0-85c049a9386a", "sighting_of_ref": "indicator--ea828f7f-847f-4d0b-a53c-fc57e36218bc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b987431d-2d95-4129-bfa0-f8b52ad7fb19", "sighting_of_ref": "indicator--e32187b8-7d2d-4452-81ce-3662168d560a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--754a9b6d-10be-486c-b7b0-e28f82785587", "sighting_of_ref": "indicator--3dd1fc82-1049-4a29-aa63-32d17fab44fb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--865955f5-7448-4239-a418-26d6ac3fe94e", "sighting_of_ref": "indicator--4f71fa58-3a7b-4793-8dfb-ddd2bf6cbe71", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--686f19e8-f98c-4f6c-95ad-9c50533cb978", "sighting_of_ref": "indicator--a92b10e5-b16e-44a5-89e9-8ff356a10050", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d074fba-eb1f-465a-b8e6-93ffc604d6d0", "sighting_of_ref": "indicator--d983a17d-125b-483d-b422-001dfb9118a0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd228398-0a95-4a86-9185-c4ccc241cca8", "sighting_of_ref": "indicator--0706b4de-315a-459c-89b3-65d9216a087a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82ec3b84-772c-4e89-b809-686e5eb05fff", "sighting_of_ref": "indicator--b41e6066-d7ca-473f-b01d-6c28c84810e6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--912b1b83-29cb-4226-860f-9cb546728faa", "sighting_of_ref": "indicator--5776348a-5a2d-4a3a-bebd-19d3a3457aaa", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee072889-68ba-4eb6-8ba0-02846eb869c5", "sighting_of_ref": "indicator--943d80c6-06cb-49a3-88ac-9334cc437302", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dec3b33a-38b7-4833-bdf4-0d55918dfdef", "sighting_of_ref": "indicator--3376bb1d-a3ae-4ada-9eed-34d17a75674c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2beecf77-54fb-4b1e-8b02-3d92f222111c", "sighting_of_ref": "indicator--f26f2672-beca-4c2b-937d-902d4210ddc9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3265a512-aa9c-4495-96f9-1c838339a475", "sighting_of_ref": "indicator--59f97a86-c8a7-4b45-b7ad-f2273d2cb6dc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d43147c4-48b7-4f20-aa44-c2ea258b3d3b", "sighting_of_ref": "indicator--565b315e-f0d4-4f25-a6ef-1c054d55aefb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6992c484-d7d4-4817-8770-622adcb3ee29", "sighting_of_ref": "indicator--5d08fee5-2b20-448c-861e-c7f19b377b69", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8803f988-16e8-42ef-9dfb-ba8e4ec2d0df", "sighting_of_ref": "indicator--a4b2fcad-34bc-461a-a2a6-768260df2bfd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ca57337-2319-44b5-9427-eec3fca89813", "sighting_of_ref": "indicator--e6d79b66-31de-4a52-a502-e74445f12d52", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2afd8efa-26be-4224-9c23-ee43492ead18", "sighting_of_ref": "indicator--f7ff7745-82c0-49f2-b496-2c768fd2d0bd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ee6bae93-b0cc-4af0-8dae-f1d6f34fa8dc", "sighting_of_ref": "indicator--1818c4ad-e382-4d33-b9ac-45cb5d0925a8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03a33ed5-2f4d-48b6-9164-f7d6ab73cc32", "sighting_of_ref": "indicator--ff8ce116-bc22-4931-a15d-efdc1f7ebc37", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4494570d-f8e1-4082-a96c-93185a1bb186", "sighting_of_ref": "indicator--9724a4c1-71bb-4d5c-812d-17c34b143dd0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e52da20a-7c17-4887-8452-8fdc4a46802d", "sighting_of_ref": "indicator--d1a0c1ad-1855-4022-9f14-960b7090bf7f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f157b476-0539-44c8-9b71-12d6d9b50d13", "sighting_of_ref": "indicator--699a4e49-469d-4bd4-a15f-f420af0ae593", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1ed21b78-57e6-4433-9fd9-1ab7c81eec2d", "sighting_of_ref": "indicator--eebe43b7-a0cd-42bb-b79c-51d4d1d741d0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf505c6d-7ab8-49c8-8c4f-a3c26bae2a4b", "sighting_of_ref": "indicator--5d41a0da-1098-44f4-ba07-eeb82c998b0e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--964c7fb4-cb8b-451c-878e-4995d103d44d", "sighting_of_ref": "indicator--0496a2db-905d-41f6-a422-d03184bc629c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce6650fb-7592-436e-b82f-f2731cfe3fa4", "sighting_of_ref": "indicator--431bb310-c732-4e5d-8a81-71306437fb52", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b8ac1e5-7dce-47e2-a781-8d3a70bd2a11", "sighting_of_ref": "indicator--13c612cc-5cc1-4d15-b017-a7a6397a3b70", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--060ad324-f14b-40d0-b1d3-10c43049f9fe", "sighting_of_ref": "indicator--fcb39488-12dc-464e-8dba-eb25bd12c088", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71d33265-522c-4eea-a06e-6e5ce14102a5", "sighting_of_ref": "indicator--9ca4cd07-536e-4e2b-9aeb-d0e8d85ae2d2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--23381d31-7cd5-4b6f-bffe-e028a6e5ebb3", "sighting_of_ref": "indicator--af67f045-6690-4496-acbe-c8045afa1e92", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b5cedfea-0bb1-4a59-ad5e-b5b06535c080", "sighting_of_ref": "indicator--8bc1693f-7fb9-48a5-aba5-9b13ce11bdf5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6461ae7a-5fae-45d1-a42e-0eea8eeea89c", "sighting_of_ref": "indicator--97186c8b-d5f8-4d60-9cf3-26689dc800a1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ced6fd7f-8734-4240-813c-54a871e49129", "sighting_of_ref": "indicator--4caee7fc-1f32-4bd0-bc57-953880da2556", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5534a5f0-4153-46b6-8e3b-b33078dc0aba", "sighting_of_ref": "indicator--dedc4696-1c64-4af7-9fbf-781a77d322cb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4563f832-3409-42ab-b915-4cde9b9013a7", "sighting_of_ref": "indicator--decccf8a-b607-4533-a9c4-68bd0e18c9e2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b353b1c7-7dde-450e-b89b-459febd7cd1f", "sighting_of_ref": "indicator--5806d195-7ebe-464b-85f9-ffdcacfd13d6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c0397d78-ec51-4349-b0d5-d4916bc0a99e", "sighting_of_ref": "indicator--bca2a526-3f25-4a5e-8db6-b4eb31b9f6c3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ee7ea6d-2d2c-4753-877e-95521eca6168", "sighting_of_ref": "indicator--cba09238-a9c3-4cb1-b48e-2067bb75300c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2a8283b5-6a88-4c1a-86b2-599e4928202d", "sighting_of_ref": "indicator--4687681e-6517-406c-ab30-a431e0a1132d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba10c66e-1850-44eb-a1d3-f59f4676ffb7", "sighting_of_ref": "indicator--71cb59e7-8598-40bb-be63-7a2557bb41cd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd2e22aa-9764-44c1-b028-95d2bfe5deb0", "sighting_of_ref": "indicator--b2c5c1b5-5c37-4f3c-8021-18fcf6befc16", "where_sighted_refs": ["location--c8625a69-b7e6-4cad-99d8-76632a875c20"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b3946089-d914-4f60-89e1-d2f48127c111", "sighting_of_ref": "indicator--f9f2e2ca-e55b-4678-8517-fa95d113361b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--399d94f6-f281-4486-9c5f-caf6bd6e6224", "sighting_of_ref": "indicator--d8c3d36c-09ab-4193-8c90-c2f298d8e563", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1a9f02c1-6dbd-4764-970a-ae4543570670", "sighting_of_ref": "indicator--3dc94a23-3594-40c6-88fc-4a0a71fde3b6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f900727-e930-4cb1-9e14-3b667c736929", "sighting_of_ref": "indicator--83c06f8b-c072-4709-94fb-0a9cf9b5f861", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82a8f958-e667-42ec-95d9-dcb5a7fef046", "sighting_of_ref": "indicator--a8a78b30-3d30-4e97-9ea8-bf7b1a9fad35", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cf1d29b6-cdd7-48d0-ac0b-27403e919c91", "sighting_of_ref": "indicator--03c07fd5-df31-4315-a4be-f998c99f42b7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed277236-dd4d-47e1-bceb-a5161e8e56d8", "sighting_of_ref": "indicator--b74573a2-fcfe-4dd3-b00d-1f3f2999b570", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4dfe382-2861-40bf-a8ed-de776177f399", "sighting_of_ref": "indicator--994572e2-1b71-4838-8e44-595922e79d4d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d1665242-7eb4-4b15-9642-9fdbda0813c6", "sighting_of_ref": "indicator--c7f15f4c-2f3a-4182-b201-b731583b776e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--59f5952a-d716-411f-abf3-96d7371e3e19", "sighting_of_ref": "indicator--aa603c80-3939-4f09-b6e8-4095c4363434", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--938da4b4-8d4d-4be1-946a-256fc65bbe72", "sighting_of_ref": "indicator--51480053-2934-45da-bba9-10d3a6ee9ec1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05b3774c-6c94-47d5-ab65-6b709c469cc1", "sighting_of_ref": "indicator--0fb412e7-e9c5-4f50-986d-de8d33db01de", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29cddf1c-59f5-4b58-ac26-537e8a1da5b3", "sighting_of_ref": "indicator--a4eec475-c6d6-470a-b485-d737322a7e02", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2234643f-a456-48c7-a41c-08295b6fea2f", "sighting_of_ref": "indicator--f046f0d4-b41f-4c4d-b604-cc9c7cda468f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--490862f7-9281-44b4-bca6-132d4b761cae", "sighting_of_ref": "indicator--5f2a5122-9c35-4574-839a-72d99f908b8f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dc29e85-a6c6-48fb-a18a-eba5a0a52924", "sighting_of_ref": "indicator--2509a010-e96b-4f0c-9053-9cf41a954423", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc34a1fa-14ad-4cbd-a581-c51329d9d0ac", "sighting_of_ref": "indicator--f801350e-ad66-4720-a2a9-15b89ff699a3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--358d0ebc-00b2-4fb8-818f-8e5cd3824fdc", "sighting_of_ref": "indicator--97eb85fa-cd4f-4af5-a7a7-10114cf3f9a0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e9330b3-4131-41d2-a743-7732a4468113", "sighting_of_ref": "indicator--117747d9-08ff-4e0e-838b-93d8f88b1ad7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98c18430-b454-417f-b4dd-e5f9a981f858", "sighting_of_ref": "indicator--4c47770e-30ef-44c2-b145-33a3289aeeae", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--321e8123-c23c-4ae7-9273-94ba22deefb8", "sighting_of_ref": "indicator--ee583fd2-d5db-4dbb-a472-87fbeeaaac3d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--348187e4-e8ea-44a9-967a-e8b56c66d7d4", "sighting_of_ref": "indicator--3df1df04-27ed-4528-aa6f-d18e16e904b5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f323a057-7b8b-4dbd-b652-b67422270f0f", "sighting_of_ref": "indicator--aef6d2e9-8091-40dc-8279-aaade4d6bf7e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a692e7c0-48e8-4c05-9d8a-e65ac20fa914", "sighting_of_ref": "indicator--4c1dcf7a-a66b-49ca-9f27-b7a28a6a830a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--63ba1f4b-65b5-4533-8c6a-b63357fcf270", "sighting_of_ref": "indicator--3a44893e-2664-4ddb-a9f2-cb0be5b06b35", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acd1d951-047a-4f9b-b9d5-a86814d974b6", "sighting_of_ref": "indicator--79dc9bc8-f764-40e9-a521-0d3fcc0b2f0f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0c8fc1c9-cd00-486e-ae50-7440e7a3957c", "sighting_of_ref": "indicator--13901ae4-f3b6-4ed7-afb4-6da69978bd3f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e760c173-041a-4518-8ab5-599a0551b61e", "sighting_of_ref": "indicator--bf861ad5-51ab-475f-aef2-604ba3b366f2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1af9b80e-1c58-469d-8e9d-4af73cfb63af", "sighting_of_ref": "indicator--581dbddf-9660-4cea-8769-937b20384034", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71e841a4-adf7-48cb-baa5-4c833626dbf9", "sighting_of_ref": "indicator--0396d409-c0ca-42ce-8205-5df86afb2bb2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7982acbe-578a-45ec-8d84-62e8f05901f9", "sighting_of_ref": "indicator--9373fa59-422f-4c84-8f93-276385252d27", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8480e77-6ea3-4699-8dae-d98a726c1f75", "sighting_of_ref": "indicator--67d3b851-67fd-49b6-aaab-3ba73b59af43", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92d949f0-5095-413a-9fb5-d2ae37691691", "sighting_of_ref": "indicator--ee17c2fd-4aa0-4fdd-b1f5-e31713f35588", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e7c89233-7803-4f6f-8ae6-29334fe8c5ae", "sighting_of_ref": "indicator--d308c302-6e6c-4c48-b9c5-b3a33992f448", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--622fcfd0-0325-4538-a6af-430b0e994893", "sighting_of_ref": "indicator--00e03707-66c4-42a8-9a75-b80ac302056c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--68b11162-e61a-4f55-9791-8212df6d9419", "sighting_of_ref": "indicator--45a75cd8-78c5-471e-bca2-aca49fdf322d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--16fae1ea-ab9a-4d81-8e12-0cc8e5baf651", "sighting_of_ref": "indicator--56224381-d444-4d47-970e-f724c70b0371", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2b05070a-0eff-4beb-b63a-cee7ff5fb33d", "sighting_of_ref": "indicator--780a9a94-03d4-4bb1-9514-2917f0edc948", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cc9160f8-f78a-4487-a972-ffc6892ec7b8", "sighting_of_ref": "indicator--0f41669b-5a87-4c5f-a751-d9a6177e5def", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--da57a833-3dda-412c-a6b3-5de42684ce54", "sighting_of_ref": "indicator--f809f293-c438-4d3a-b163-eb0e7e8ceebe", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85d57f9f-f6d2-40b1-a96f-a77d871021b6", "sighting_of_ref": "indicator--afe72eec-5262-467c-81c1-f543863eb4b4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d85390b-6839-47cd-8680-d30b8ee2c13c", "sighting_of_ref": "indicator--5094e152-dae3-4040-b593-5f90d326735f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0f08754-fba4-4a81-a93f-94990596171d", "sighting_of_ref": "indicator--f2f64342-5e40-49b1-b84e-0a8ac9ce1911", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f221ffab-80f9-4423-afb1-cad617d03b47", "sighting_of_ref": "indicator--afdb6251-4ff7-4f11-8a87-c4aebf6024c2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--058ca670-2be9-4d0d-9e27-f655fb163280", "sighting_of_ref": "indicator--be9c6934-0513-4c2c-abd4-ccbd9c95fda7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5c617ea-5741-49ab-a278-e72aa87084ff", "sighting_of_ref": "indicator--345d3140-fe91-4305-bc8b-59e07f6b0b5d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e4d2253a-2d15-4771-b5c0-914ce025e3b4", "sighting_of_ref": "indicator--08239558-9e81-4803-9d3b-61e413614fa3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dd6a51f5-52c3-4060-83e2-78f69cf9c701", "sighting_of_ref": "indicator--628b93b5-6e1a-4efc-9936-1e8408da8cb1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd45eba4-c923-4060-98c6-e114fd85ad1d", "sighting_of_ref": "indicator--81c3a082-174c-4f84-a223-c2af30185f9a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--13086902-c0b8-4765-b423-e257ca7f4c00", "sighting_of_ref": "indicator--c4809558-5834-4e06-858c-65edb692f929", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b61330a8-fb09-4494-ae29-a536a9829edb", "sighting_of_ref": "indicator--1ee14d2f-517f-41d9-ad54-9be22945a9be", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8fb5d402-cee6-4f77-99e6-c3bd581668c3", "sighting_of_ref": "indicator--ba3dbb1c-e27b-469d-94f5-8141659d883c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c134c2f-cd36-463b-9af1-620fa128e874", "sighting_of_ref": "indicator--adac3ce7-8209-454b-85b6-f654a8bd0c2c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c51af078-2027-4099-86a9-b23787802d5d", "sighting_of_ref": "indicator--de63d512-22e5-4f32-9844-7fce22eb2c22", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03a9b87b-e21f-4f78-9cc8-cbd5d2bb5981", "sighting_of_ref": "indicator--3b8ba5fe-1ffc-4754-a5be-048a704d1cc6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--71d62a90-6de3-4a92-ba03-f401954a236a", "sighting_of_ref": "indicator--942fa13f-ec3d-4ee8-974c-6980042baba5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0f76be84-3298-4aee-9dc9-642afc9666dc", "sighting_of_ref": "indicator--563e2ca0-24cd-4efc-b3d5-b05bdb40afa5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8cda0e3-f47b-4eff-8f3a-7a51761b02a6", "sighting_of_ref": "indicator--5c4a9da0-9e20-423a-917f-27a061919efb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--918d587b-78d7-42f4-8ffb-0204825eca02", "sighting_of_ref": "indicator--5873a76c-9f8c-4939-91eb-97a59fbcbe41", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba97faf6-56b7-45cc-8b14-de70628de256", "sighting_of_ref": "indicator--2a4b5e7d-ad6b-4f00-956b-64446de39f2e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--51946707-dd48-4ff0-bd8e-f4303433b06c", "sighting_of_ref": "indicator--8bbc63ce-4e3d-4da1-a9de-bbf32d80ca13", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--50233bdc-f221-4aa0-a756-2ca9b8081091", "sighting_of_ref": "indicator--29b1826f-328c-4f6f-99e8-9780a66d76dc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3b463f8b-05f9-42f6-b9e3-e9b4953ae570", "sighting_of_ref": "indicator--23bd6b0f-4c0d-4c39-b84a-2990f60cadd9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e70a113-3b8d-4151-9c31-4b475cf50e79", "sighting_of_ref": "indicator--099d7af5-f867-4a4f-b547-da3c52e8d6ff", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--046550c3-3ee4-49a7-b9ae-13ace34e2035", "sighting_of_ref": "indicator--0b9625c3-e5b2-41a6-b040-24ffce9d5162", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bfed4c5e-3a82-4a3e-b1ee-b15f6082a54f", "sighting_of_ref": "indicator--9cc2c475-eac9-4fc3-be3c-a4f324a170a6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f8d78ae-a3c9-46db-aeb8-33758483b2bc", "sighting_of_ref": "indicator--b0784165-d882-4a22-954a-810bfb564aa0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7365eadb-e5a8-4ab7-af09-bfc1b4eed4be", "sighting_of_ref": "indicator--f41b21eb-6372-4533-aa3d-02c6eb7cf9e5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6aff18c3-2395-4e58-bf5c-de8e96a9e057", "sighting_of_ref": "indicator--cb664f4d-8667-46c2-a875-2965167bb48f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42f4b6af-e487-4836-a7af-d11d0d960951", "sighting_of_ref": "indicator--dbb6867b-af02-4536-bb58-d71bcd590b72", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fcb8618e-eb4a-498c-94d7-bf47ee607093", "sighting_of_ref": "indicator--65cadf7e-66dc-4698-ad09-6c6a798b04f6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--754ff320-1bf4-47ca-9688-93886698fa8b", "sighting_of_ref": "indicator--f136a924-e01d-4fb5-ac80-ff92e4c3e82a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f6cfa36-ad13-4969-95d9-b42b3cfe40fa", "sighting_of_ref": "indicator--986f8dcf-9091-4a42-92cb-a94ce1714cc0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65fe0826-d25b-4fa3-91c7-6878edcb090d", "sighting_of_ref": "indicator--cce774e0-b71c-43b4-b464-8b0df1cc92ab", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ddeaa4c7-8677-4a79-8d32-79638341fd37", "sighting_of_ref": "indicator--33d2f577-9ebe-4a47-96c2-330a74d6eb6f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--377f63f1-3cb8-4633-971e-27e18470b3b3", "sighting_of_ref": "indicator--c4e1272a-829f-4f1b-81b2-f8fd4e6ed8be", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c056970a-6885-4679-b341-395aeb2dabff", "sighting_of_ref": "indicator--9ad61f0c-eb16-4483-bfba-c6e6a2ee5a97", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5516171e-67bc-460b-9d7b-f518e2e49a58", "sighting_of_ref": "indicator--bd5e02cb-5a21-4a37-807a-29357c50f3d7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5ce948d1-8219-46d5-8056-fd0bdf9ca4ac", "sighting_of_ref": "indicator--21d580c0-6e78-41d9-8f18-e9fecab02042", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dcda2147-1f26-4e82-b35c-ef9d91736d50", "sighting_of_ref": "indicator--7d3d9d80-8839-4604-a1fd-d0161a1bcaaf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--486688a8-0c15-47ef-95ff-bf43f68c8f63", "sighting_of_ref": "indicator--6eeadc62-3ec1-48cd-94b9-5ca0e3ffa20b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8816b27b-d458-46e8-827d-77a35ef9b54b", "sighting_of_ref": "indicator--36352387-1a43-4a84-9219-445b1ffa6b9f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--43f7cd98-846b-4889-a484-ab39867118ae", "sighting_of_ref": "indicator--eabbb03a-8008-453c-a2f0-e38eebb83e58", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64ad9558-f440-433e-a856-09b909d810cd", "sighting_of_ref": "indicator--627fb953-dddb-4efd-9689-5ff2bba57a3d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8e480124-2a5b-4918-a0d8-64f0d591e686", "sighting_of_ref": "indicator--c3d6d650-33f0-4d16-bc49-7ef376f513b7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ff34f8a2-f9d6-4eee-856e-ba376f7a7fc9", "sighting_of_ref": "indicator--ba824f93-9282-4799-82d4-9f435817f3fe", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c12cc792-9992-4a3e-9072-4be7cf59b840", "sighting_of_ref": "indicator--b8edcffa-a9ea-4a00-96bc-42a2b060b795", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d785f0b4-a15f-4162-ab41-0936af246fab", "sighting_of_ref": "indicator--f3e9622d-3ae2-409c-ab67-276d93020c6a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2de9a5b8-01de-4b54-82e1-fa22a3ff26dd", "sighting_of_ref": "indicator--e58aae73-461a-4b54-8d65-255b1cc66409", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0a17b6c3-d3a8-4486-9a53-06f299545181", "sighting_of_ref": "indicator--b4ed479f-4a79-4709-ac00-b60c5773cbcd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6205b320-e14f-4c70-9e2d-9fa33a8c7f11", "sighting_of_ref": "indicator--5eb2241b-3cb0-4e52-a2c8-d68a56954bd8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54680d7e-ae63-49f5-8646-acbabc3b119f", "sighting_of_ref": "indicator--3ccef1bb-81e1-4a18-8f70-a9dde048b7cb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1acd602c-1ed2-4d87-9747-bbb02d59ee52", "sighting_of_ref": "indicator--d1d789fa-da31-4f26-ab9a-405762b7a57b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--65c382a9-f212-4ca0-b843-8eb89bfb93de", "sighting_of_ref": "indicator--5b8a29c8-0fcd-4cc3-be11-dae0b5ea7526", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e1a03eca-47ea-4d33-ae12-558f3399fa39", "sighting_of_ref": "indicator--675e2095-f967-4a04-9b66-836787cb446d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--49a9d4f1-f4e5-4fa8-86aa-5fda0b8303fe", "sighting_of_ref": "indicator--ba7ec153-4daf-4e7d-8eae-9dd3f3efc7f0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe6b6754-746c-4228-b833-98c7cff36efd", "sighting_of_ref": "indicator--f85d819f-5bfe-45e2-a694-7741351fd813", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ec07ebfd-d1b2-4483-92ef-f9b456580af5", "sighting_of_ref": "indicator--abd2c532-8ea9-4efb-b7ed-2b0656bc687f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a329c169-1be6-4af8-94d4-e493a65f7451", "sighting_of_ref": "indicator--335cdf09-9bcd-4fa8-9a9c-73ca6e98e5eb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--44a7a66e-24c4-4225-b9c1-5ab39fe88a1f", "sighting_of_ref": "indicator--98a60a5b-425d-4c6e-a47b-3caea74ed675", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1673a94b-efd0-425c-90d2-a254130871bb", "sighting_of_ref": "indicator--a169ee35-d68c-43e4-8ee3-a7e2466a4f2e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--67b276fa-3d1c-48cb-ae34-c196e6b01768", "sighting_of_ref": "indicator--a92e709f-69c8-4bfe-bebc-c9fb92172040", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a13d6ead-019e-4c5f-8041-c75609ee5e1d", "sighting_of_ref": "indicator--af87418a-9011-41c9-82c4-42e713e9738c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa7ca754-558a-46d7-9624-e9a2e3bb29ad", "sighting_of_ref": "indicator--180a1f77-bbaa-4129-8d0c-c3b6e973ee6b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9da77a5b-bf5d-4b57-9410-38c69e9b89c1", "sighting_of_ref": "indicator--30c94f9c-65f1-4d68-89ea-07aa4cd0b337", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--38a7562b-61db-4953-a492-8aa416329a8b", "sighting_of_ref": "indicator--bd5ce4a2-90c9-4bc4-890d-f381c9d4dfb3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d38b6fe-8073-4b7c-bcb5-0706da7da27e", "sighting_of_ref": "indicator--e372033e-9f24-4c41-a139-292ae6759978", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9a58767-17a9-4d87-98ef-1c67f7f5adf3", "sighting_of_ref": "indicator--8b6b4f4a-3d74-44f3-a747-972fec44e47f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--662df5c4-c8fd-47dc-a494-c4fd78568da8", "sighting_of_ref": "indicator--5269c910-5fed-4be2-a362-e05229eb4707", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d7a26f49-321a-4a99-bc8a-1664352690a6", "sighting_of_ref": "indicator--9e528643-a14d-4904-b7cf-7a958186e137", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--03c7b58d-1319-48da-a9a0-576532a786fa", "sighting_of_ref": "indicator--4ca5c907-897d-4faf-900a-de33cf24a26c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--98704786-a0c7-4b2b-bbf0-29a1a6f3063d", "sighting_of_ref": "indicator--6fb6e8cf-b6b1-4b5e-b3b7-64bd6c6dcc8a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a27e8d60-d16e-4f04-be96-a28091d96c6e", "sighting_of_ref": "indicator--d8164f6d-4823-4e85-a151-0318bec8a59d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--873765a9-8a73-4b77-bf67-5e594bd24a59", "sighting_of_ref": "indicator--2c6400c0-cef4-428c-a751-c9e9115b8cdb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0db00fb5-d558-4b0b-a939-39ca0b2b210f", "sighting_of_ref": "indicator--3895154d-e133-4c3c-830e-08ac4a29c145", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e96c342-2e84-4e86-a18a-7250001cd0a7", "sighting_of_ref": "indicator--45421546-4d95-40f1-a069-934e6946d4fd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6392d74-346a-4601-aff3-c89a5b079993", "sighting_of_ref": "indicator--2435123f-1632-4424-a153-6c6a991e370f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--aa101d37-b418-453b-9424-85cd9cb94973", "sighting_of_ref": "indicator--fda10c28-a870-4865-b015-5ac7d29b5a33", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3d19cae7-8e46-48c5-8a61-1824c2f9b9b4", "sighting_of_ref": "indicator--e436a5f8-35d0-41c7-ad9d-bb380278d3e5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70c06b31-dcab-4e90-8c3f-4811ba3885e2", "sighting_of_ref": "indicator--14877e7c-17a4-4dd1-99ce-920e929017de", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e5e2466f-c69e-43ce-9db8-3e3cff016c30", "sighting_of_ref": "indicator--963640d2-f7af-4453-a808-18bad1c3575c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8662f79f-7428-43c4-8a0f-86e3d4a74594", "sighting_of_ref": "indicator--b3071fc0-3bb3-489a-bc09-bb4bce633cbe", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--75e4cd96-b532-49cc-9a47-fe3b32a04d48", "sighting_of_ref": "indicator--da856c8f-8555-469b-aed8-9237c547606f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--02021896-bcb6-4f4b-8ac6-a30f01157498", "sighting_of_ref": "indicator--e47a9e2c-1ac9-41b0-8645-60010e012b58", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6dca52e7-e8f3-4623-a063-3412017dd85d", "sighting_of_ref": "indicator--0bedff21-9126-4c09-b3f4-d07642d4d14f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b2e433ba-4498-43b7-b48b-cb8473fb4ec8", "sighting_of_ref": "indicator--9250b948-7897-4a44-ad73-71fc983be2f5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1cce2a09-d960-4b9c-90a1-065ecbcd2c03", "sighting_of_ref": "indicator--23a461ac-d991-464a-8737-4ab6c71a3fc8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9eb04b6f-79de-49e6-a2b8-106f57cfe1d1", "sighting_of_ref": "indicator--454c00b8-6c12-46ac-9cc8-e9f9ba13a2bc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df7f6aba-9661-47fb-acc9-2fe19d997246", "sighting_of_ref": "indicator--fcac75ad-2a35-4f01-a080-b1469fdccec4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f9986a86-d26b-4042-a7f0-26f8ce6942ca", "sighting_of_ref": "indicator--b6ba8d79-c1d8-4ac2-9c09-13305192522c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c6688fe1-861f-47f2-aee3-d66cd5ee12ca", "sighting_of_ref": "indicator--636f141c-de50-4df6-a38f-86e58f54e1df", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--31ff85c9-3f51-4da2-864a-33dbd75f91c7", "sighting_of_ref": "indicator--411cd95e-9883-458d-b1a1-8067c809ba0e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1048a585-da22-453b-a54f-9c0c401aaca6", "sighting_of_ref": "indicator--37fef060-74d3-46a7-b4c0-6eab4ed3149d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d2b4a672-bda0-4ef5-809f-bd30f00462ff", "sighting_of_ref": "indicator--45486876-7b25-4de2-b8c5-3079276c6f48", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e8390178-a52e-480d-b144-a366053a58a3", "sighting_of_ref": "indicator--08ca5be7-381c-48d6-ab9e-670b7511a8ea", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--496fa97f-40cb-4dc6-b06e-69fc60336477", "sighting_of_ref": "indicator--52261166-7709-4a91-86d8-53bff6072f18", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b69fad78-3a71-4895-abba-7f4cf50e65d2", "sighting_of_ref": "indicator--d1027ded-b60b-4079-8bc7-d183e7ed1855", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8f15bc04-0508-4883-b619-ae55b0b8dce8", "sighting_of_ref": "indicator--6fa6ef84-e7f6-4dff-a3e0-4b6ebd8b6d28", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9b8388e5-161f-4008-b6b9-453363b46f91", "sighting_of_ref": "indicator--69089259-24c8-4b55-b5dc-3d3d947b8527", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--96b222c2-15df-4aab-b274-4c6e5c705976", "sighting_of_ref": "indicator--5d0ca540-634c-4eb5-a666-cce4e435248a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d3f0eeb7-f658-4de6-88cc-370a608e68f7", "sighting_of_ref": "indicator--9c77f995-825d-4f55-ae4e-1d402349c648", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--800e23da-bc39-425a-8951-71e757cf9506", "sighting_of_ref": "indicator--d72c0f67-af8d-4551-9a41-0e65c335f079", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9c4673f6-3bb0-4c65-b008-1a28c9fa67cc", "sighting_of_ref": "indicator--a1f4211e-ac44-48dd-b86b-4140b9619d46", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e655dc3-716d-4b70-99d6-623870193368", "sighting_of_ref": "indicator--6b1d8d4c-cb7e-4e86-9c64-b204d7361aa7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2d2eef5c-07b1-4b8a-b8ab-d938e961ff42", "sighting_of_ref": "indicator--67aadfd0-e9a4-4854-ad32-d33cf7440575", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ce09b7cb-3291-46b0-a28f-8999a438fc2f", "sighting_of_ref": "indicator--55a51966-685b-48b9-ab13-3f9edbe2dbcc", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e9a7c14-2872-4210-83a3-f37e89318814", "sighting_of_ref": "indicator--2313dadb-bb17-474b-9e17-c627e950ff9b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9e646d0b-3f32-4adf-9e6b-90ed3c9b9e4a", "sighting_of_ref": "indicator--d3fa547e-e6b7-4f5a-acc8-ebfd3639b9a0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4bb2b208-1dfa-4598-8559-6aaa3ca1d1e0", "sighting_of_ref": "indicator--80d9c8e6-6c74-462b-92fc-105d3069f9a0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4a8e626-78b0-4781-ab78-6a0c0e917da0", "sighting_of_ref": "indicator--6d721d49-810c-4fc6-9b59-43d8d8346c25", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--890574d5-f604-4b5c-87a2-01c0b3a94047", "sighting_of_ref": "indicator--d28bebfc-0d82-4bd4-b6cd-a1349f742bdf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--41f0b890-379b-4bb5-b892-dabc46ab2771", "sighting_of_ref": "indicator--528c5f94-c927-42e0-bfef-fc0c979d4029", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--741bcf4c-7351-4c1e-8e83-0189c0f1cc1c", "sighting_of_ref": "indicator--b9bff787-24e1-4ad5-8ce6-5174b0e55c9e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ba121bc2-2fe9-48ef-a5dd-f6d173f7e264", "sighting_of_ref": "indicator--673712af-3b84-487d-ac22-8fe97e23ad4f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6b1712ee-81ca-4fb2-8cf6-1bc012aa18bb", "sighting_of_ref": "indicator--64145137-ea2d-4a3e-bc0f-9597bb3316d6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--558e3f62-9c40-4bba-ab8d-2a85fa92d284", "sighting_of_ref": "indicator--28762de9-7c22-451e-8480-b64b038ba3f7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56431432-e4c2-4dc9-9148-b1957308f800", "sighting_of_ref": "indicator--0442208b-df86-4255-87af-87a6fb6580af", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bf0e9104-e67e-42a1-8c9c-85f7253f13fc", "sighting_of_ref": "indicator--b9bffc19-d6f7-401c-bc6d-9778540991b4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a77fce84-e4c4-4a4c-af6b-84654b39f766", "sighting_of_ref": "indicator--6d6c9c3a-cffe-4d3c-a7a7-1159cceaeec0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--09f66de7-ac41-403e-a83b-465981dd1e70", "sighting_of_ref": "indicator--74cd46ec-e535-4523-862f-e0ab32267ffe", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--822a29b0-6069-4921-a89e-db611c1d5d89", "sighting_of_ref": "indicator--c2831823-91e8-4cec-9670-bc9c056e6e09", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--985a6937-05ca-45fd-ab36-580617aeb23c", "sighting_of_ref": "indicator--4d70fd62-17ad-4361-b598-e7fc750b5ee5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b8e7009f-caae-439e-8f3b-b43968d28e5d", "sighting_of_ref": "indicator--c597a11a-05d3-4c5a-a4ac-8dccceb683f1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--528e3e16-9ac6-4cbe-a522-5314a6b05731", "sighting_of_ref": "indicator--0b10d563-bb52-43a1-8de7-428d60c4c84f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--163b0e5d-be39-45e7-9edc-c82f84d3d0de", "sighting_of_ref": "indicator--57f36b9d-b84c-4123-a2ca-ba9b27f3804b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54cba6c1-1cd3-486d-9ea0-5d7b61c458fa", "sighting_of_ref": "indicator--695be69b-6e54-4194-a405-dfd7b1e59cb7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--29d9c3b2-213f-4907-a623-95b5ed72ff6a", "sighting_of_ref": "indicator--9b17a84e-3072-4a19-93ef-967931893548", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--202fd0ef-e3df-4c2b-8be0-fe674973ceb9", "sighting_of_ref": "indicator--f0cd0ea4-708e-4f66-a0f2-bf769e2dc38e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79a8e228-31bb-4166-9e04-c9199965cef2", "sighting_of_ref": "indicator--5b83a51a-a9f7-4aea-87bb-5532ddfa5651", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8603c428-01e0-4cee-9992-7261499f9425", "sighting_of_ref": "indicator--eec8a495-d826-4fa2-96db-9db6cd61f496", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b61a5b46-be02-48d2-bbc7-4c878a00cb47", "sighting_of_ref": "indicator--5ca119ac-c49e-4ccb-8e7f-fdb07c93b7b0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dab988a5-7c98-4881-b51e-e99fca8650e1", "sighting_of_ref": "indicator--d7372362-64c4-4f8c-a647-2864156b4d8d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--22a08a0e-ee6d-452f-a77d-ab29208b50e8", "sighting_of_ref": "indicator--35b21648-f65b-426e-ba07-d1631d4406ec", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cbf223d-1b64-46ad-9c69-034fed732437", "sighting_of_ref": "indicator--1dbc99bc-4233-4e2c-8d31-207f59fd29ba", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--bc2702b5-5076-4b78-9331-2b56b8fe4b4d", "sighting_of_ref": "indicator--d5459009-7a69-4feb-abf0-c6029bcabc85", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2189a699-b491-4ff3-8b72-6b01e9db54b8", "sighting_of_ref": "indicator--26a597cc-c7f6-4313-9b97-4635f21349e0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fc859595-f05b-4eab-ae4e-db2975c4a6a3", "sighting_of_ref": "indicator--461e8277-3f34-4c04-b04d-5883a7f8b030", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0ffb03d-fc47-493a-a31b-0aa0be3e897c", "sighting_of_ref": "indicator--84f2821f-134a-4985-8d49-8bd320df40b2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c2d843df-a45b-479c-8e9f-3484e824e593", "sighting_of_ref": "indicator--e3443d79-2694-44fd-862e-445ac434af2b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--813f8f76-ac11-4f6f-90b6-a3e0358059b1", "sighting_of_ref": "indicator--78e5e5f3-ee4d-41b3-b083-463bb71a7b21", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7bbdc761-191b-4a59-a0f7-c37286aca5a3", "sighting_of_ref": "indicator--148a2033-0cbc-4099-a04e-b0f807c2291c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d4b19f3b-5c71-4b16-8a51-aaab21a59a8e", "sighting_of_ref": "indicator--1b17c03b-4561-4709-b1f8-80ce79939d1d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c82cdaef-0f34-4e93-9ce6-12c512516197", "sighting_of_ref": "indicator--e4b1b727-e277-4ce9-9f2d-bcadf6db5edf", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f8c59853-6cb0-4350-a1b6-c122495469f8", "sighting_of_ref": "indicator--345782ce-9b63-410d-9f34-46e6dbf8f108", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--447fd899-7fba-48a4-b830-20c250c32752", "sighting_of_ref": "indicator--c55e716e-1968-4e55-8caf-c5d04808ce6c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--62b9a9e6-2845-458e-a169-b5ca1348dc59", "sighting_of_ref": "indicator--e997d757-b55e-43e2-a85b-c4b0a9bf60b4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36924c74-7896-4e8a-a58c-a72cdccefcbb", "sighting_of_ref": "indicator--40f55e2b-a4f5-4774-a086-ae81169ed9cb", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10d1c105-d798-4b46-882f-4db591e6eb89", "sighting_of_ref": "indicator--b1f9ccda-a8ca-4bbd-955f-fcb2885da5d3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--53ba8b0b-6d40-4dc2-91b2-88cdeffe2eef", "sighting_of_ref": "indicator--53402eb8-3584-4c6f-8b7c-88219ff9a194", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e436ef55-88aa-4437-be0b-0e2b1651ccc9", "sighting_of_ref": "indicator--0e240052-60a0-4eae-808d-90ab98128778", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ed27c4ee-b4f9-4ddc-924c-972f3f820221", "sighting_of_ref": "indicator--3acbdeef-ea9b-423a-b72d-b5b2612d6e9a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1e9e7708-8c44-4a6e-a463-8b5ec9832018", "sighting_of_ref": "indicator--df976191-8989-4209-84f8-914f9cda9427", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--644c1281-cf2e-4dd7-9efe-576e56728de2", "sighting_of_ref": "indicator--49902793-66c7-4bf2-80de-81025e73591a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4fb947a6-5ad3-467e-9bea-e6423c70cfdb", "sighting_of_ref": "indicator--97736b99-281a-4f91-aa21-6f36c6bc3cd8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0bc768b-6723-418b-899c-de3e62f603de", "sighting_of_ref": "indicator--7ccf1b66-6285-4f49-8ea4-af7a9ba3766c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f7fda867-f58d-4e3c-a572-1c520ba037da", "sighting_of_ref": "indicator--32cbfd54-4093-4869-81a0-5a1c9b97cb9b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d791f90-8eb5-478c-b435-29cc7483d3e7", "sighting_of_ref": "indicator--b22454ac-e510-48c5-9d88-32bf22398762", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--40be771a-6142-42f4-8f0e-36827dfe213f", "sighting_of_ref": "indicator--a0e5f832-fa39-465e-809c-38d3dd0feed4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--81531598-bbb1-4b3d-9d7c-25334fc23f80", "sighting_of_ref": "indicator--699af659-d703-4918-bbb3-04a8fdabd37e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a08e2f02-c5a7-4474-bca3-b5a652d02b0a", "sighting_of_ref": "indicator--ba26baeb-1e38-433e-bd85-125f485a8b37", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--1f067d02-7f0f-44fd-b978-842610463a87", "sighting_of_ref": "indicator--2631927c-18ce-4ac3-93e5-dd6b05e4e14c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7045341a-b49d-4696-bd2c-ef0bdaf0264a", "sighting_of_ref": "indicator--ab7c56c5-6cb3-4459-9ce9-e4206228b2a2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--079d9452-f2b9-422e-809d-262f3ba873be", "sighting_of_ref": "indicator--36d486cc-9ef9-4b7c-be10-ab243be445ac", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f61a696a-9161-46da-986a-6c76521de431", "sighting_of_ref": "indicator--9f73a347-4473-4dbc-89df-c52edda5b161", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9f68f514-98f2-4a53-b587-d6cc3c336c67", "sighting_of_ref": "indicator--b7a7fe58-b169-4dea-9989-6ec3841904ee", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fa9d1bfa-9603-4c88-ad30-cb19d04e6a03", "sighting_of_ref": "indicator--5470cab6-0df8-4e05-a6c9-90e357e11e2c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--329cbb7d-05ac-45cf-af59-a833f8ea8446", "sighting_of_ref": "indicator--8da4d112-a549-49ff-bde5-e9cb4e5480d8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b21fcb39-2c87-449c-959c-49cf5233b428", "sighting_of_ref": "indicator--ed62de42-edd8-44b8-aa0f-16c7f8aed60a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ede352c6-3427-4c77-9581-483e3c14c672", "sighting_of_ref": "indicator--0ff91fed-310f-44bb-b2e1-e9dcb36b6625", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b171ef31-12c6-4134-b8ec-4443bd1ba3b2", "sighting_of_ref": "indicator--4de7e751-be55-47ca-a2c6-dc5825dd43c9", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ae586ef0-6e1b-4aeb-94f8-1b1fec075775", "sighting_of_ref": "indicator--f7c48728-3087-4c63-b470-b7952ff7a865", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--11423ea8-208a-44b7-91bb-9c0d15d9e11a", "sighting_of_ref": "indicator--8c6e3cc8-6a23-45f5-8bc5-122d79e7551d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7992242a-088a-42d0-9ecf-16b827784847", "sighting_of_ref": "indicator--03807380-f154-4d74-869c-9bc89e6bdb7e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--14f10ff3-9903-488c-9f4c-1e34d5c71015", "sighting_of_ref": "indicator--0ac7234e-445d-409a-b642-2f5bde3e6e14", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df3be049-b251-4b35-bead-5fbb60cf782d", "sighting_of_ref": "indicator--1a1b84ce-7685-4884-8903-5c0b9261a1a7", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0dcd24e7-d889-48ee-95a7-0dfff2388209", "sighting_of_ref": "indicator--cad37e03-2836-4630-8d4b-e5baabece918", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd06203a-63a7-4e2d-8ff8-6bab89b2ecdd", "sighting_of_ref": "indicator--791d83ed-6cba-4b60-aa4c-e7e13cc7e3ec", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7ada6a69-90e0-4f66-94c2-ae0fc2cafe09", "sighting_of_ref": "indicator--da0a5bd0-60b6-48e7-8157-1fea2c412126", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28883d16-ead0-43d0-b8cd-c47da16e396a", "sighting_of_ref": "indicator--485f0373-350a-4195-9520-ef1e2e4d4550", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3e03e956-fd06-4f46-9882-23e1b0d9e960", "sighting_of_ref": "indicator--1b422c9b-c2c3-4516-a22b-558a0b9e4dea", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--be0cc1f1-bb91-4f2d-b3c4-ad18d53efcc0", "sighting_of_ref": "indicator--4a15c1a1-26d1-4716-811c-1422f323b260", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb60741b-dca6-43a1-949f-fac6ac3a61e0", "sighting_of_ref": "indicator--bee85c62-cd60-4a78-a27a-4699d14e5b81", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e6426bf8-3419-46e8-a68f-6dc7bc6a679a", "sighting_of_ref": "indicator--fee30343-49b5-49f7-9d70-9747c5eea1d5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b1c594b6-fffc-43f2-a448-df00626ab14f", "sighting_of_ref": "indicator--c7f664a9-af05-428e-8a50-cea4c66b6c8a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--36c5fef4-7836-4107-8758-ea4a137b39ee", "sighting_of_ref": "indicator--659d7540-b22b-4484-9b59-d20db95ff67e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a325eb47-3ca6-49e7-bf4e-8bc43982dec8", "sighting_of_ref": "indicator--5dff507a-283c-48bf-88a5-45d15cdabe4b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c040c37-ed4b-4d6a-bbd3-58f0ad3b93c8", "sighting_of_ref": "indicator--4f9b7d9a-f1e9-4921-b180-0d199d9c80e3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8ba20398-9f12-4076-9ea1-29c6504f9f5b", "sighting_of_ref": "indicator--4473a57d-dea6-4f84-a1a3-58a9cf4f388b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--099358f7-3994-469d-ba40-16ee4980422a", "sighting_of_ref": "indicator--557422e8-ee20-469c-b9cf-ce826c5bed71", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--de4144bf-40db-4ebe-8f0a-9c7f5ff4a746", "sighting_of_ref": "indicator--01a1eca8-44d7-4750-b7d2-91164273a130", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61c636fc-9520-4c61-89d0-956fed8da4b8", "sighting_of_ref": "indicator--7885e805-98a3-4523-aaaa-ae846cf1547f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7b9c445d-379f-4e7e-a385-1b5e87634d2b", "sighting_of_ref": "indicator--3bec0b56-f480-4a2f-ac62-d9b5bf20cab6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6f0543cc-649b-4fd4-99da-e3dbd31bee4b", "sighting_of_ref": "indicator--f41256f1-5cce-4f95-9c2a-1f872858100e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--42c4fdd6-a6a6-4d33-af9e-a625b37fa95f", "sighting_of_ref": "indicator--ae512228-a1e7-48e8-8a7f-6b9bbf9d0e1d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--854cecd9-7c02-46bf-a2f7-b7885f9899c5", "sighting_of_ref": "indicator--ed9a2e84-0230-4c99-a49f-0b83c76afb2c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0669ca39-915f-413e-b304-702849354f74", "sighting_of_ref": "indicator--a9e55854-b5c1-4e50-a25f-2b6fa298f34b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--35a6558a-40e0-4b41-b102-8b2cc65d2c92", "sighting_of_ref": "indicator--0ad3519e-0536-43f5-b47b-dd386d6f72c3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--28d2673b-b324-4a66-a9e5-a16ef2b46c9a", "sighting_of_ref": "indicator--3984766b-fa03-4fa9-9634-81d46e3064a0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--95bfa277-070a-4e94-a1cf-4f2a7d9915a4", "sighting_of_ref": "indicator--72ad7a2a-a1c1-496f-934a-282535b6ab2d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--eb85b510-16f9-457b-b9b0-f07482f7efdd", "sighting_of_ref": "indicator--611d6f4c-9786-460d-b242-afbf494d9935", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5641cdb2-9adb-4304-b026-23dd69365024", "sighting_of_ref": "indicator--2232313a-f499-4625-b060-3e99994c3412", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6629f942-52f2-4eb2-81ef-677703d49e14", "sighting_of_ref": "indicator--c369fa27-b02b-4e84-b2b6-c032a2486fae", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7cf79c22-de97-4ddf-aef4-ef62bf2350d7", "sighting_of_ref": "indicator--83bfee35-3e83-42e9-a86c-90f00ef6b12c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--97abc928-d146-4885-9dac-2b26b58d693b", "sighting_of_ref": "indicator--726c3255-6c58-436b-b40f-3bf93272e021", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--ad73525b-7838-4813-848d-21eb6df24d7f", "sighting_of_ref": "indicator--bc73db81-f409-4098-8a35-ed93c32207e1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--135ba8c7-2b7e-4ccf-bc1f-ad6a0d8c16d8", "sighting_of_ref": "indicator--f1ee0799-03f5-4ec8-82f4-10b3526b218f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe012040-4336-4949-abf4-324b63409de8", "sighting_of_ref": "indicator--9251c335-6636-4752-94ce-da450eaadcb0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c4a8a4c5-9d39-4939-ab78-3a0309c33754", "sighting_of_ref": "indicator--cb3a0433-06fe-4b5f-970e-442474a07487", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c59ccc3-2f30-4183-be85-cbbed8d92dff", "sighting_of_ref": "indicator--98be0cfd-bec0-4386-ab35-0939b19371c0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--feae4147-69dd-4b25-8ffa-2612ac5288f2", "sighting_of_ref": "indicator--fe05e8c3-4194-44f5-a1b5-4c388e3705ae", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2c92c8ca-cfcd-4b49-a6ef-86cb65637ce0", "sighting_of_ref": "indicator--a4f81d1e-f970-4d2c-8fa8-f4d3338d50a6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--c381b389-ab9b-472c-961b-8bc46fc53f21", "sighting_of_ref": "indicator--d1ef1c2e-e57c-4fd5-a804-f86b37f9ea6d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fabf964f-8966-42fa-b4d2-a8c49d1d878c", "sighting_of_ref": "indicator--ec0ef813-b5d1-4906-b351-e3a7f7afe942", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5b4a0ffa-aeae-4b5e-be0a-3c35c417ea69", "sighting_of_ref": "indicator--0b655573-a656-4bb7-b319-559dcaf210d6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dfb33b8d-5636-44f9-a367-205e9e1c6483", "sighting_of_ref": "indicator--54c5eba6-5ca2-42cc-9c68-6a43c4bf5bfd", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d5d298aa-b441-44f5-9345-e7793f2d900e", "sighting_of_ref": "indicator--1dd77a0c-ba11-4f34-9816-eb2515b5b4b1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b4cba79f-e053-4fde-b4c9-a1dbc7285502", "sighting_of_ref": "indicator--e562eb90-774f-41e7-b9f0-962321ee8f3a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e540b299-9ab2-4aff-8e9f-88bc5167a37d", "sighting_of_ref": "indicator--2663b60f-5a5a-4336-9831-1972c2c8f1d1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--18fb54f2-a214-4e99-84e1-b30cbf2711d1", "sighting_of_ref": "indicator--172bf9e3-dd78-464f-ac21-2878f39f7c44", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6c2c9022-4862-4169-aa53-02877845ac18", "sighting_of_ref": "indicator--52d94610-1f56-4e04-aea9-0992227cd634", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f29f2c0d-9ddd-4ff1-bea7-0a51685eb6d7", "sighting_of_ref": "indicator--d43edf1e-706d-4075-83da-bb625416b09a", "where_sighted_refs": ["location--c8625a69-b7e6-4cad-99d8-76632a875c20"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--56cb0911-3dd7-45f9-bcea-738ba808ccf1", "sighting_of_ref": "indicator--94e46f98-02ca-4bee-a26e-921e423fd3e4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fe0d91d0-c02f-440b-99e2-1c235ff11c7a", "sighting_of_ref": "indicator--1ac63573-5b6c-4282-82f3-77cc17bfb8ec", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--7c622044-1600-494e-9c89-fd694e48007c", "sighting_of_ref": "indicator--8dd2db07-4486-44c5-9e42-cf7ebba81889", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3572c394-3ea7-4b84-96e8-b8dead7779f6", "sighting_of_ref": "indicator--680691bd-1845-410b-8f5f-c3c817204879", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cee5831-8590-43f0-a702-3ae451dc96d4", "sighting_of_ref": "indicator--611f2c4a-aa97-4926-ae0e-eebd150b7722", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0d2875ae-c064-48e3-b434-f8e0ac91ab77", "sighting_of_ref": "indicator--ad77c6f6-eda1-400c-9127-e767d87ca24b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d13c852d-480c-4669-a52d-1ae40a4d64e9", "sighting_of_ref": "indicator--7512a2e8-864e-44ac-a598-0d8b8388c409", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e964fbb6-6738-420b-8e7a-e3ac33f39030", "sighting_of_ref": "indicator--68671ecf-a88b-4115-9313-7e117170b137", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8c641372-bf9e-4ba3-be8c-c6115fa9f8a6", "sighting_of_ref": "indicator--132116ab-3b05-4e40-b8b2-b186d5ae3082", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b71e4e25-4d31-4c2c-b2dc-8b4445545edd", "sighting_of_ref": "indicator--4ae3eb09-43ba-4b67-99c1-ecd9c5364f48", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0570f2e7-208e-438d-818a-ac2e3f851eff", "sighting_of_ref": "indicator--7456d3d6-5feb-4b8e-8933-c026b68ce345", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0cce8bc1-d388-4548-84ca-ad6ef4c0092f", "sighting_of_ref": "indicator--7f1d99b3-a29f-428c-adb8-c9cc26703291", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--f33d3c55-3a1c-4bd9-8076-093578147a13", "sighting_of_ref": "indicator--f562ce7d-03bd-44a9-b9c6-77906a0c9431", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0aa0bab-46c2-445c-b6e4-e9ad24b2b076", "sighting_of_ref": "indicator--088fdc09-fa32-47b1-a5bd-0d521366efc5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--06173016-2d8c-4587-b4f3-ee405a178e1a", "sighting_of_ref": "indicator--3eb6dad3-8e3b-42a1-bed2-5f1c875923f0", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79e4d8a7-1a4e-4655-a176-f386a82e78b4", "sighting_of_ref": "indicator--11066aab-ef1c-41d7-b9d2-4a7342bcf925", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2165371c-474f-46aa-8ffd-d81c7995a3da", "sighting_of_ref": "indicator--c95662e6-5a83-4004-9275-14f16c8fe701", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--518f4a00-d5dd-416c-a55f-000b971aba12", "sighting_of_ref": "indicator--2ae900f1-17b9-4ec1-b587-279f7a9fece8", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--61f20643-8ce3-4f43-9867-280964bc0028", "sighting_of_ref": "indicator--3c815178-255c-47d9-ae30-aeaf74c01a69", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--724cec34-a6f6-480f-9152-c72dbb5c15ae", "sighting_of_ref": "indicator--65c1620f-b930-443b-898a-5e56b598c1e3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0268e4c4-45f8-4705-a3de-5e5ec94a8058", "sighting_of_ref": "indicator--13e765ad-aa2e-4000-b489-4d1cdb7833e4", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--76f0a7ca-6b8e-47e2-b065-201af6932458", "sighting_of_ref": "indicator--fa3e53a9-f04a-4791-90fb-1b7b286e800c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a8c5ddef-a7ec-4e83-88a1-2786e003d870", "sighting_of_ref": "indicator--d57a7e16-9b00-4b0e-b9c3-de65dd2f138f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--d0470cd9-d260-4606-b7c7-dc10d5482594", "sighting_of_ref": "indicator--c9be029d-c8a8-414c-816f-ace48459aba6", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8cf857a0-8862-4455-9f9a-86fd7ce7467d", "sighting_of_ref": "indicator--a77407dd-61e1-4271-9e14-b8d4aa30a182", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b03ad2ce-8eb8-43f2-963f-0088e75799ae", "sighting_of_ref": "indicator--0eb5f968-addf-414e-8f85-7b5442e2cd47", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--54e1b55a-8a71-4729-9535-291dec9a76b1", "sighting_of_ref": "indicator--a9f2b5b9-88e6-4fc2-9fe5-de7a77ebe594", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--cd619d9b-1314-4928-9b61-7f252084a302", "sighting_of_ref": "indicator--7bdc3b98-8e71-47e6-921f-0b60674a073f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b6f9650a-c364-4599-b418-0ec815ad4ae2", "sighting_of_ref": "indicator--6c31251c-3ba1-4957-97aa-757ed532b35d", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--301143ad-004d-4e0f-b288-d6213193cebd", "sighting_of_ref": "indicator--55d38161-53be-4c34-897b-7cda10536d46", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6922d41d-85e0-4efa-a5fd-f3c2f9f61fbd", "sighting_of_ref": "indicator--4c242b47-2340-4dfe-980f-a8d5065ebc66", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--df315b60-f633-412d-80c1-645cecdea100", "sighting_of_ref": "indicator--80b2f115-31d8-4a15-b9bc-22571b66df30", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6e3af365-7361-4646-ba4c-047555794914", "sighting_of_ref": "indicator--d7a7450b-4dc0-431c-94d4-7ae82de23ed5", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--b01a6293-de65-467e-a9e3-51e8e6cb214e", "sighting_of_ref": "indicator--7d062a1b-ce06-4a40-8eca-a00f0d426395", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--79e9a125-7554-4181-beec-8062807941f3", "sighting_of_ref": "indicator--7eb54bf3-e67e-4477-ae76-ea778a4f954b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fd0b8db5-45f3-4372-b0c4-7cbc54cdd8b2", "sighting_of_ref": "indicator--6b5fdfff-507c-4869-ba44-8e8a65e5e45a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a6dbe3e5-c858-4a39-ba10-32c9a27faa8e", "sighting_of_ref": "indicator--0a781bb9-eacd-4aab-aca4-a23ab15a4a44", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--10a49866-c6a1-4190-b262-7aaec5b3ef9d", "sighting_of_ref": "indicator--4acff7c3-d581-4bdb-873a-ba081af2347b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4c99b0bc-779a-4939-82a3-c0d5f75218be", "sighting_of_ref": "indicator--1da377b8-4137-4d4c-aa23-a2a4156feb5b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--82f28a8e-4abe-4427-87f2-7a30bd239332", "sighting_of_ref": "indicator--74544025-3499-4ead-9e5a-8e75644eec9b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--3f8b4073-bbcb-4f83-a23a-2e4709a4ce97", "sighting_of_ref": "indicator--70235502-4f20-461f-84f9-ba34b9e03c5d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--91c83146-9d15-4e5e-a57f-ccd76b15ba2c", "sighting_of_ref": "indicator--67a0fb61-c150-4a9a-a395-8ddf49030ea3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5e8eeeb3-d47e-4634-b041-8be1ac709bb4", "sighting_of_ref": "indicator--ce487854-3b72-42bf-97b0-e4d1f32980ea", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--407ba42f-1b83-40e0-a36e-47dc3d86d124", "sighting_of_ref": "indicator--314f0cc9-7357-47bf-b61c-727153d5ef6b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0218d26f-bffe-432a-861b-edcd67dce561", "sighting_of_ref": "indicator--1d2b9697-7fd8-4bce-8861-5f43f6090af3", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a57654b3-f813-4e29-a8a1-12789bf8097f", "sighting_of_ref": "indicator--46dad616-c3d3-4ab0-b856-6fc1433bd49b", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--2786d683-311a-4129-8610-78d0215b3f47", "sighting_of_ref": "indicator--77748c3d-21a1-4081-be3d-b97b738305d6", "where_sighted_refs": ["location--c8625a69-b7e6-4cad-99d8-76632a875c20"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--635eda25-cec1-48c2-beca-f5cf99c9ab22", "sighting_of_ref": "indicator--dffa3097-0463-4e98-bc85-b43d71b818d0", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--541a699f-8fac-46ab-88e8-f4f28d168a3a", "sighting_of_ref": "indicator--5f44db34-2be3-422c-920e-fc2957bc3d1e", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9412f1eb-29d4-4278-aa63-574209b8c5e8", "sighting_of_ref": "indicator--0f13dede-a3b8-41da-a525-4f8ff792a6b1", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9307ee21-cd57-40ba-be35-fd2001642424", "sighting_of_ref": "indicator--4e35913c-3712-492b-b886-ad035a5b1db1", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--70a428ec-503c-43c5-a5ad-68b3e88e361a", "sighting_of_ref": "indicator--2225a0e5-6170-4f18-a753-957c0b2554ad", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--0beb73bf-10a3-44dc-9aff-68d5448a8f75", "sighting_of_ref": "indicator--36255bd7-bf01-4ecb-895e-28cf78aeee33", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--4df2c346-b4e6-4efd-8103-6adb845e1cca", "sighting_of_ref": "indicator--3aa3ab90-c25e-40d4-a136-a2d03d0fe259", "where_sighted_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--a0e938d8-ba59-477d-9192-3e6c37ce9c88", "sighting_of_ref": "indicator--d21c5c0a-4f0c-42ea-a29f-5ee37519566d", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--fbdd94bc-0beb-40fb-845c-7a27a9709702", "sighting_of_ref": "indicator--6f4bae02-5062-4f39-9e36-d631cc45ed3d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8a3bae6c-57c4-4e57-9bb5-66ff3b2b9e04", "sighting_of_ref": "indicator--3f71e7f8-2af8-4682-89bc-dfc6c6c6cdad", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--05ee688a-8672-4309-a55e-7ff851af3e92", "sighting_of_ref": "indicator--32079251-3dbb-4c5f-8e10-854e4252a10f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e9c3fe45-d6a3-46d3-ad7f-e7e994a1954d", "sighting_of_ref": "indicator--7b8a0896-7c32-454d-a276-36573952288c", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5d9a53fd-b893-4e9a-9a5e-4203d139a4cb", "sighting_of_ref": "indicator--83db0286-0e6b-46a4-b277-936de22803ad", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--92e85f7e-804e-4c02-9fdd-0911a4207682", "sighting_of_ref": "indicator--7a83bad8-9aa9-4649-9094-9af011122587", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--8d245ea7-ba53-4085-9c55-86ccfa4978f7", "sighting_of_ref": "indicator--8ed046f1-23f7-4181-a4f7-00cf1b58f258", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--acbdf91b-efec-4237-b37d-aa741a6044a3", "sighting_of_ref": "indicator--af56be01-cdfe-4aa7-a813-5a4a1f12f9f1", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--64672a67-e838-4040-8e6a-ee4f8af71768", "sighting_of_ref": "indicator--2980c32d-f47d-4d16-9d90-12b0d07dd173", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--84c7536b-24bf-4e98-a5dd-00876ce8da6d", "sighting_of_ref": "indicator--2d8f9079-0c3d-4424-bbc8-e8fb50f373c8", "where_sighted_refs": ["location--6152e233-0fe4-4ca1-80d8-e6937bc133a9"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--88c5580f-1aba-4e1d-8826-1d13268f7154", "sighting_of_ref": "indicator--c2ae0e0a-5ed2-4d3e-92c3-9b7624071eca", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--6129b6be-c53e-4e02-915b-84d7df08b153", "sighting_of_ref": "indicator--f56835eb-e8db-4eb3-a089-797b02a997fa", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--dc79af19-fdc3-4a8a-a263-f8955ad14697", "sighting_of_ref": "indicator--b19b32e3-dca8-41d5-8653-82918b2e893a", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--5dba3bb4-557c-436d-a67e-a3dbf84cde3e", "sighting_of_ref": "indicator--767a9ffc-49fe-43ab-94a9-9c05d7bbe115", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--e879c64b-ed3f-457d-88cd-91475804ef45", "sighting_of_ref": "indicator--a4ae5c87-dbd1-483c-8f63-5cff542920ab", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--9cf5800f-f1ff-4cdb-9daf-0a9a075c0255", "sighting_of_ref": "indicator--f904d5a0-fa7f-44fe-aca2-f69513d74d2f", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--85c022c2-489f-41a5-b6df-7f806ff019fa", "sighting_of_ref": "indicator--43dc4e63-7ee0-4c4b-ab12-dec1b14ae7b2", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "sighting", "spec_version": "2.1", "id": "sighting--afd8e605-e0bd-49e9-bd46-e02fef59e989", "sighting_of_ref": "indicator--3e4abe2b-c83e-41ed-a5dc-f585362ea14d", "where_sighted_refs": ["location--b35d6f36-498c-4c95-89ef-649df5576b3a"], "first_seen": "2026-09-09T00:00:00.000Z", "last_seen": "2026-09-09T23:59:59.000Z", "count": 1, "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "report", "spec_version": "2.1", "id": "report--f131a1aa-2567-482e-93ae-b892481f2d35", "name": "Threat Report for 2026-09-09", "description": "Daily threat intelligence report — honeypot bruteforce, web exploit, and anonymous proxy detections.", "published": "2026-09-10T11:00:02.066Z", "report_types": ["threat-report"], "object_refs": ["identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "location--c71c2550-5849-4a8d-b050-635a93ef5467", "location--c8625a69-b7e6-4cad-99d8-76632a875c20", "location--6152e233-0fe4-4ca1-80d8-e6937bc133a9", "location--b35d6f36-498c-4c95-89ef-649df5576b3a", "infrastructure--a1b50e4f-4cf2-4fcb-a89c-dcfffe6473d5", "infrastructure--d0c5b3fe-a412-47cf-a56e-bc3b3691121f", "relationship--41a42288-5651-4f92-9d30-39a32a93b244", "infrastructure--6c33c90a-8e68-48f2-86b2-0240266e08eb", "infrastructure--cf4e6eaf-8b04-4c73-9fc9-cacddb8dd48b", "relationship--a3664cc2-f155-48b3-abb7-524c28efde83", "infrastructure--425e1045-a88b-4269-8ba1-47bac6f4332b", "relationship--3b0c5b3d-34d3-4a1f-b82d-7994343384c1", "infrastructure--82310ab8-6380-41ff-9e97-92d2d7eb179a", "relationship--8dc2c454-75a7-47f9-a482-6d4abf2ce3c7", "vulnerability--9f6b4a40-b312-4d6c-8962-53e248873558", "vulnerability--3045e6f6-ddbe-4766-a0f4-ade41e3bfe58", "vulnerability--53f2ce60-c955-4767-b602-d139545467b2", "vulnerability--af124007-9bf3-4a17-87d5-a9b52e563fa7", "vulnerability--b5147848-022b-4261-a578-bf3291614d40", "vulnerability--89ba54c8-32ee-4c29-8d36-1bdeaa7ced46", "vulnerability--05684841-0870-4611-b7fb-21478ee0dc72", "vulnerability--7981112b-110c-4ce1-bd6d-9361a9d00747", "vulnerability--a28b04e8-ad85-462c-b923-9158a7008803", "vulnerability--611e800c-c845-478a-b4bc-40f780f1b283", "vulnerability--85ee6c0b-63a7-4b7a-b655-2209db1298db", "attack-pattern--dac02ec7-9fab-40e8-ab91-f7aa9152bf58", "attack-pattern--70763895-ef5a-42ed-a5bb-49eaddeeb4ed", "attack-pattern--0e6e4145-cd99-4e68-a56c-3613ee5420af", "attack-pattern--95634810-4d5c-4cb2-8998-8afc1f8d05a9", "indicator--bbe9497c-95e3-4741-a67f-edb0bdeec1cb", "indicator--245c9df0-33e8-46f3-a627-ff0572ce1309", "indicator--d70b5259-3e64-4b53-81a9-9ab0970b52d2", "indicator--6542d40b-ea50-4ce1-8a07-0784b594f812", "indicator--e22cdab8-f0a9-4589-a859-5a2dd8e11424", "indicator--fa8194e2-0802-46a3-a1c4-adbe43c222f0", "indicator--e92f782e-d230-4716-baae-65dbb4bdd2e6", "indicator--367c443a-b177-4f50-92b1-035ad1e0d662", "indicator--0a18cfdc-c08e-4d9a-89cf-b0636efe6fbc", "indicator--23698a96-8e68-4b6b-9b3a-73533dd8a0ae", "indicator--b0638914-087a-4aaa-9aa7-90a14592d726", "indicator--b7f94751-f249-42d4-aaed-fe8ea19b3e7e", "indicator--1acdedaf-d295-46f6-bbaa-9e844e802e35", "indicator--c336336f-2cbe-4fa9-a7d1-f873ea380644", "indicator--e0c03b32-3a33-4903-b8e6-f0266040453c", "indicator--4d7ac90c-36f1-42e6-982b-b7a61c1cfef2", "indicator--b9d4b8c1-4c62-41dc-b466-8f0de21a5165", "indicator--d1d98a01-0543-466c-9b0f-856e3bb6ff55", "indicator--064261ea-20e0-4bd1-83c7-ac9bd76a597b", "indicator--bbd00299-8ace-4f40-808a-c0fd00849ee8", "indicator--9d0b78a5-d0bb-4d3c-bd07-cc25b24582fb", "indicator--f0db6f91-729c-4ac7-826e-c5bd332a83da", "indicator--53303a5b-46e1-4e68-b457-00599e5590e9", "indicator--51b36fa9-d895-4276-a902-f0c91bd8f572", "indicator--3d1c240a-0e70-4819-af17-d8f09a8bf9bf", "indicator--d60062d6-5696-43b9-ab2d-1d40b2f73fa7", "indicator--1c4c2c56-0252-4c9f-957e-2a69946150cd", "indicator--afd1479f-04a8-4ce0-82e1-f361edcbb801", "indicator--5475360a-13e3-4d90-b091-8600c654208a", "indicator--5cb4c212-7d82-4942-88af-ae81691026ff", "indicator--9e4b5b14-d934-41fd-ba54-1c46de8612eb", "indicator--b3307811-8111-4e63-a00c-0397defcf661", "indicator--be1eece2-496d-476e-9113-af070ce86d8a", "indicator--3dd55466-8fc9-412f-9300-2bc8988736aa", "indicator--7bd15955-25a6-458e-8bd0-691ddcad31ea", "indicator--df05d8b3-0de6-4aa0-97ed-c2d60d7a2669", "indicator--c0cf765c-113b-4719-b919-cf1c23b254dd", "indicator--dbb80d28-661b-4699-86aa-3650f38f4b1c", "indicator--8819b3be-0722-47bf-b12d-8564066ef606", "indicator--5df7fd68-d119-4137-8b80-5e250fb8d627", "indicator--578b2e58-0a71-422a-8dba-4949f8a2e919", "indicator--20659574-7437-48e6-815f-928f72540e7b", "indicator--baf6ad07-c38e-425b-bd23-6f099f9dfbb9", "indicator--21373121-0f4b-41da-9adb-2c72285ed906", "indicator--5a043c7a-8eed-42d6-808a-a179ff3019e5", "indicator--41fdf0cb-97d2-4264-a9b0-a159a4428855", "indicator--f149663a-7030-4605-a392-248a7c28f697", "indicator--bf561b9f-4a01-4c37-8c02-1c05374b62d0", "indicator--de9f5cec-6659-4373-81f0-843046f182a8", "indicator--ada6e545-78f4-4145-9ee7-95fed50a9d5f", "indicator--9b676bff-0808-40d6-be25-a263996595e4", "indicator--d21035fe-96c8-47ef-8dbc-3e2e5840caf3", "indicator--978b00d9-9dc5-425f-bc1a-afc753bc37e1", "indicator--3b740a45-e6f5-41f2-ac66-f0f13797564b", "indicator--1d3443c2-1057-4efc-b51c-50a3a280931a", "indicator--f266be44-b4ea-4d09-83be-c935004413ac", "indicator--b2ff32ee-6fdb-4469-9b95-7a27fa14ea90", "indicator--a76bcafd-0219-4aa9-a04a-113a0f808a5a", "indicator--570171a3-63b5-490a-ab49-c32bb476223e", "indicator--496e3576-9dcd-415d-a278-b59e749794a0", "indicator--f323c79e-e2f2-4358-9197-3d487015551d", "indicator--0150d1f8-ea62-43c3-826b-d8cc4fe253d2", "indicator--44106968-9f65-48a5-b1ad-6df5a3bde8c3", "indicator--35cc87ce-c99a-424e-b9ca-4aa36ba29f7a", "indicator--9ce50bbc-5f7e-43f9-94b7-badd6532bb01", "indicator--84c8b50f-ea01-40ce-8bee-89087e39b497", "indicator--4efc85dc-52e9-4665-a108-ba2ca87e2dc2", "indicator--21c7cb98-5d25-45f7-ac44-60467e046e57", "indicator--0aba1f1a-48d8-4111-b125-713e6689e926", "indicator--a655ca5e-8019-41f5-9d91-432867e671b3", "indicator--2af59f0f-d672-4b7f-acbb-c68832765948", "indicator--12d729d2-0d85-4285-b54e-efaf8959596f", "indicator--2e194aca-4c63-483d-9dde-ef2b03d49aae", "indicator--6fdedc5e-7b40-476e-8856-5ba12e42158a", "indicator--3e5b66f7-8f1c-4f66-b065-9c0f86f81bf3", "indicator--c1a2820f-87ad-4773-9862-60d7cadc48a3", "indicator--266b22d9-c08b-4ee0-b54b-f60888b27f72", "indicator--f51a7070-7175-4bb5-8918-53b48be714f0", "indicator--90eb2234-f7bd-4955-88bf-d74497b2fff6", "indicator--8f861b14-1c66-427f-9eb9-22b6823eed74", "indicator--1053335f-28d5-4515-802f-435d647acd42", "indicator--5ddf4bbc-e09e-435f-8d98-6bc600ef8999", "indicator--25c96dc7-c6e7-4966-a542-b25a7ad86849", "indicator--25174c7b-e4e3-4656-82b1-0ccc6a28afa2", "indicator--87bb4ed2-a270-4465-82e3-16c0be604429", "indicator--825f8034-4044-4665-8847-96b26a799bc4", "indicator--645ced76-2145-4adc-86ed-727557e32f0a", "indicator--15301c19-1416-468b-845d-2d3a1abf274b", "indicator--f145248f-0b09-4ce0-9092-0aada3b3d643", "indicator--c71b0a9c-b6cf-41e2-ae59-1350e303fecc", "indicator--016e0b04-ad42-49cf-9df5-d64610f36449", "indicator--5e34c3a4-37c3-45b6-ae69-269177e352f6", "indicator--db9c43f1-001e-4e89-883a-e114cfb6e99d", "indicator--ee9dda14-95f5-4f83-b895-02ade690b4b3", "indicator--23cbf448-64b7-4a1c-95f6-04f5648a46aa", "indicator--8ff5c6f1-28a3-4aca-b759-77f197be066b", "indicator--f962e626-ce48-4ccb-8eaf-762a4d0ef6e2", "indicator--718d7795-8587-48c4-96e1-1f2454d22c8b", "indicator--de5d9217-2a9e-446e-a406-4a16713c9ce7", "indicator--69f688dd-2096-4570-86a9-9d14783a18cc", "indicator--9998201b-fe4b-43c9-a220-94022df55f0d", "indicator--e555d0f5-cb86-4397-89d3-83bad3d100f2", "indicator--9673c94e-6799-4b0f-ad66-deb42762c2ab", "indicator--4bf578e2-939e-4856-bb66-46c4ff6c30e1", "indicator--74ff6f07-ac07-4a33-9604-7753a868ed98", "indicator--a8bedc4d-dfca-4e0b-b227-7ea92722e171", "indicator--4d125a55-7b3c-4542-b515-a6e26abf543f", "indicator--69b38f9c-d331-4e7c-b287-a8eec257b9fb", "indicator--30c4e3dc-49d2-431f-8ffd-5f59e18e755b", "indicator--01fed1b2-46bc-43c9-b1b6-2115f55a3f17", "indicator--38072f8b-5d50-464f-8689-5494906409dd", "indicator--c2726385-b0b0-463e-a114-74e77c59bebe", "indicator--59188eb9-2f5f-47c1-a5b0-b188b02f48ea", "indicator--444b0ba3-b585-4eae-ac2b-69c5a945d559", "indicator--6232c64f-fc3d-4064-808b-ac7a86cc2205", "indicator--488dc3bb-e239-4b21-95ce-27bf17fe33da", "indicator--5ea4c2b6-aea4-456f-8549-52ef852ece97", "indicator--745f96fd-df55-42df-9946-465ac3536088", "indicator--5a436681-de52-4a4c-bbdf-18b29887dcf6", "indicator--a96847d6-c3ae-4098-8b9d-7888417ab3dc", "indicator--7b56f802-f5fc-4d29-a781-9055eb5ee3d3", "indicator--9424444c-b111-4f9e-a53c-a0b66bba2d35", "indicator--52c4d04c-f0cd-4258-ac9f-fc329047d2c1", "indicator--47708daf-34e8-4cf2-bd97-f6b68c456cd1", "indicator--f27685f8-0611-4054-aab7-91963041db57", "indicator--7e7ccfdb-398d-47d4-b77f-a1e2cf87db97", "indicator--71488eaa-c821-462c-aae2-1c972a1889a8", "indicator--19f0c0e7-e467-4716-948c-90358fc55ccc", "indicator--93669de9-e90e-4f20-8e48-81d2d63fac42", "indicator--188392c4-1356-42b5-b24d-5ae12315d926", "indicator--7916d28c-c6bf-4b92-8fe8-2b8408b3c47e", "indicator--26510252-791d-4f14-90ba-887f7e2824eb", "indicator--e636d686-d89f-4df8-97b4-f9b98bb6a6e8", "indicator--32635ad7-064a-47ed-8943-3239525407d8", "indicator--d7dce4b2-f16c-41f0-adaf-c4b2430e37e8", "indicator--4482f98e-ec54-462d-882a-38efa3f6e672", "indicator--1454e2bf-001a-46f5-9716-56c56b679777", "indicator--77d7a890-40c5-4d90-9aa1-74c45ef056c4", "indicator--73e2ea60-468e-4864-8be8-41d0ddc60335", "indicator--8e5c0914-c943-4fa5-bdb2-1561d65d23e9", "indicator--85373dca-fae6-4205-a723-142ea275fbc0", "indicator--25631c5f-6e84-4c24-a436-8fcfe4583ee1", "indicator--b37350cc-7e8d-4baf-b38f-963ac7f9e346", "indicator--d8f2593a-a8f5-49dc-aac4-0352d3980722", "indicator--9a9d7e8f-4dbb-4d5c-8fd1-4454f430ef5c", "indicator--f41d51c8-c74c-4f19-ad59-9a972447496d", "indicator--5fc7cc4a-8bf8-4d8f-bf8e-09907de8b31b", "indicator--44c111b9-88c3-483f-8c40-1f62e4086dac", "indicator--382060fc-edf4-42c6-a221-94c5d7bf7d8b", "indicator--0d4b46cd-577d-4053-9ae5-71df4475ca11", "indicator--59417241-abe4-473f-81b3-815a7ee65592", "indicator--bc5a134a-29cd-4012-8535-1cefe99c973f", "indicator--c353411b-f68b-4997-8776-075b2f872624", "indicator--6bb3cb70-87d9-408b-ad24-69989b595015", "indicator--5264e44b-73c4-4128-bb5f-faedf9dfe418", "indicator--5bc5ce83-6ae6-44d1-8343-f758849ef15d", "indicator--4540d9e9-091d-47a9-9358-0129ce33a5c1", "indicator--e60a46e8-a621-45fe-baf4-e685545e7c3c", "indicator--a4876eda-3566-4cb9-851c-741d663ce8d4", "indicator--d928659a-7160-49be-8744-6dd4f95a9b23", "indicator--ed9f1153-b3c8-4d16-a7c3-43bdb13f244e", "indicator--a25eb1dc-29d6-4eaa-87cd-634d6c07f9ec", "indicator--3a34ea61-4b1a-4a1c-86e6-f07ba714e309", "indicator--ee0bdf42-1b3c-4fae-9a4b-87f6c61af8c2", "indicator--f272feb3-e1da-4105-b04b-e5128c7a8c51", "indicator--a1079034-d773-416b-aa79-879c7c0b4ca1", "indicator--c004d7c6-fb11-42da-a5c6-43e38221eaa5", "indicator--6092b9a2-5ece-44b8-9b6c-bce1cf4be3b0", "indicator--ef5bcc42-a1c2-4319-b2ed-31cd3a10d340", "indicator--8d1e58d7-eb61-44fc-87b9-9cdef48a74ab", "indicator--1ee4704c-df4b-4bd0-aa5d-079f1c42e7cc", "indicator--6effa454-c887-49f2-afba-4d7108b28706", "indicator--161102bc-42de-4d02-8399-2a75280397f1", "indicator--a71c78c3-b197-4628-87d9-85fb715eaca6", "indicator--8874e8e3-f106-4aec-9bd8-6e35e0c51dc6", "indicator--89925a50-7823-4c1c-a217-ff983b63c27b", "indicator--7871c945-2e8c-4d41-a330-5f8f470ce84d", "indicator--f290a690-0c48-4c45-9701-9466f1d9434b", "indicator--a6ef72e6-161d-40cb-b817-503c2f16b5ef", "indicator--bdef5c0d-78bc-4a63-af72-f53be0f6f2ff", "indicator--0343b543-4d4f-4020-ad66-5310f5fdf2e7", "indicator--ac5f7f0b-fbb9-468d-96dc-b07a6a55b124", "indicator--80920913-66a3-4832-a299-cd80d1d24a65", "indicator--79c3d327-fb8a-4c8b-a03f-36b212811e6c", "indicator--75513ef5-5978-4d6f-a6a8-4d6143168ebf", "indicator--2d1eedde-85cd-45c2-9e2d-b3cf820df300", "indicator--fc4a92b3-7778-4434-be7e-4185cdcc2fee", "indicator--2aed6fdf-be15-45b9-aae1-2e1a016c2327", "indicator--56bab24f-7de6-42a6-bb11-165638c83131", "indicator--c97bc3c7-67a9-47b7-9657-907bacc4fd1a", "indicator--64d3b77a-0652-4226-85b5-8c74be486bd1", "indicator--69e2480a-75d9-4f6e-9210-4226d6054c18", "indicator--b23bcf83-d281-4334-a7a0-72ebbc81e74e", "indicator--3961e92f-7a88-46dd-8722-915e07edab39", "indicator--3c32bdfe-4ced-4e12-bf2a-be47c5229e40", "indicator--a5673681-041b-4f1d-a72d-5c23bfcea405", "indicator--de3d598e-6bf6-46fb-8693-5e84bef0b2ef", "indicator--f8f32465-7752-4c08-af34-c9b887d0c331", "indicator--dce417f1-80c1-4f23-bf57-7771a1522b86", "indicator--9cc5c74c-5a22-4392-88a3-119216a0fa98", "indicator--cdedb4cd-3465-4794-902d-0405c5c20296", "indicator--fc4bb1d7-2003-45e0-912a-5d03ab5ecccf", "indicator--bd3e2dd8-c486-433e-8d07-fa942bb67607", "indicator--5e34f9c5-295b-466f-8e8b-19d9c2f4217a", "indicator--9636c5d5-f7e8-4736-b6ea-789e34304779", "indicator--13277eba-090b-4545-af00-90f850c06f02", "indicator--5c906317-93fb-4047-a09d-ffcd84ef3891", "indicator--9dc75404-5561-42f4-af92-aec887600960", "indicator--dc7a784b-245b-4831-81ce-d96cc6a089b3", "indicator--3df5ec73-f0a4-4873-b0c4-18a1dc3bacb0", "indicator--75244b3e-2bc3-455c-859c-6e0233867401", "indicator--0b267c35-e516-4f75-a73e-9173f50dbd4f", "indicator--9b2b3472-7e80-445b-b514-18788bb585e6", "indicator--2fffb7e2-0c98-4d92-a0b5-fc754434bd17", "indicator--82be4f37-504c-4be1-93eb-3dce477b61f7", "indicator--0881ae24-08ad-4361-aab7-8d545d21e8cd", "indicator--193bfe47-c14a-49d0-af81-c70e3a0a143d", "indicator--d4eb9ef6-96d2-4e8a-a652-42064d63ce7b", "indicator--94574a31-7d7c-42e7-b1e1-e5f97148ae96", "indicator--412bde2d-ed96-4e4f-9d4e-e67c84005aea", "indicator--f72c230a-f126-47df-b77c-82529a206676", "indicator--80d51ace-453c-4c7e-b610-fa8281c0d55b", "indicator--8e439ba6-7862-4e74-bcee-21074bed5cd1", "indicator--7ce4eab1-5aec-4f1b-9697-cb143141749d", "indicator--7eb10767-957d-4c87-9f9b-d30021758c5b", "indicator--13db6c3b-25cd-4c19-8720-566990824c58", "indicator--f09bc852-17b7-4369-b6cb-281614924d0d", "indicator--fcdbf4d2-028c-4a55-94e7-759f2d4abc06", "indicator--e7db023f-1206-432b-be7f-eacd71876fa2", "indicator--6c56b127-7add-4944-aa29-d1cb95308257", "indicator--de701a6a-5b41-4795-bd5a-7bbd45f212b3", "indicator--20fb6215-b07c-4fa4-aa6e-f31e211caf3f", "indicator--6da2a93c-3249-40bf-a69c-2b2fad798466", "indicator--b6bb5a34-1089-4ba3-961d-04a9fdcdc053", "indicator--c3ef967e-9fa5-4066-b0db-c81aa72c39e9", "indicator--632701af-0333-4c17-8a20-83f14a6395cc", "indicator--defc80bc-38b5-4cd4-8259-49a192690213", "indicator--4f857350-d5c8-47f5-bf7f-8e94f7014ba1", "indicator--0f29f1e2-3d3f-4f2a-869d-796830dbf2d3", "indicator--aaa76a3a-3b0b-4095-820c-b7edf4b34afa", "indicator--fbaa42d5-5f24-4b24-b94e-9e1720b4c81c", "indicator--b2d46d08-9148-49c5-b6ff-9c9a85c3ff3d", "indicator--95f7fc79-368d-4e4d-83f9-8028fb63b246", "indicator--d52c408a-7bf9-4210-9238-837dc4ba9c6f", "indicator--51d1ba02-cad0-429c-965f-8ebc3f8db706", "indicator--11af89d7-9f21-417d-aa8f-20439a214f7a", "indicator--c2c16e55-dbb2-4bfd-9c2b-72abbb36de8c", "indicator--276a0475-cb73-4182-855d-1863de1229d4", "indicator--16dc27d3-3821-4995-8e8c-a83d3f60855a", "indicator--0839c383-e579-4497-9fb7-b21be0828ede", "indicator--d255c7aa-21fc-455b-9f46-f1f69aa6c254", "indicator--5bf4c51f-c40e-44b7-9df5-2942a9346a90", "indicator--c104c13b-f50f-45c3-b774-21fbaaf3c01b", "indicator--7c807797-deca-4a71-b9ba-318774569803", "indicator--c1321364-ac30-46c7-ac85-bde15652457d", "indicator--7027b3da-57d4-440b-b349-ccb9543b70dc", "indicator--03e10513-8c1f-4d4e-a0de-50d2051411da", "indicator--e9cfca96-586c-497f-b604-52a84dd71b2a", "indicator--9be8a38e-65bc-43a9-864f-ccfbf677ca54", "indicator--496f413e-bc73-466f-851f-9c37d2881a49", "indicator--fc608659-cc74-421e-bb05-ac1b043a38e2", "indicator--0751073a-4140-485a-a236-57dfb8b49147", "indicator--c8a6305f-3f2b-4793-a995-3a6cf9262b3c", "indicator--b1f3e5d0-140b-4f0f-9fc9-dfdb5a8a0052", "indicator--047c50a6-6330-4b98-a8d6-77a09edaabb1", "indicator--65f396dc-909f-46e6-9b96-cccc4e307701", "indicator--1fcd7c37-e3ed-4385-a7b9-864230bd91d5", "indicator--467ac19c-0790-47c5-82d6-f38a99cf864a", "indicator--8e9597e8-cbb3-4eb2-81a9-f3a9bc300372", "indicator--ffa8b052-fec4-4501-b00b-1beefcd43f35", "indicator--218786f1-5d6d-4007-a842-40d6a3623742", "indicator--adb5b41d-946c-4374-8eb3-03856a5b2af4", "indicator--56593fd5-7f01-47f3-a7f0-61e1a789c88b", "indicator--c194e8cb-398b-4a9a-9225-02a4f71a41ae", "indicator--d0e391c4-adef-4b73-8aac-4a6b186db383", "indicator--02c380b3-a47d-4e36-802c-801a61c05b44", "indicator--77485ecd-e091-42f8-8fa4-17970abc0f34", "indicator--3c46c6af-adab-4297-84d1-d7e9ded79016", "indicator--08e35703-2558-42cb-86e6-10e49bf21180", "indicator--437cf3af-3e35-4527-80b8-0144f78e83fa", "indicator--b23699eb-e2c5-4bad-b7e5-515e1a10e53d", "indicator--399411f0-5a9d-47ce-a380-17614bf33d63", "indicator--c27940d6-6c76-44a9-933a-684887621c5d", "indicator--aa65f270-3c04-41bb-94d9-7491a48d82a5", "indicator--1b66e974-1d32-41c7-ab4e-e5e39ad7bd13", "indicator--5e6263bb-069f-402a-bc3d-743af35d3176", "indicator--86cc978d-c194-4bda-af69-209a88b73f88", "indicator--6cb9ccd4-d6c8-4bf2-b87c-88caf845d166", "indicator--648bdb62-7513-4692-bfa0-3efde1b772af", "indicator--7b49e569-77f6-428f-a518-963a7fed952b", "indicator--379f74d5-3f6e-487f-97a4-a38058fe81f1", "indicator--215f8539-23dc-43e4-9e1f-a08f5188ad55", "indicator--322932a2-2518-48aa-a0c2-015f3d2b73a9", "indicator--dc1d0001-726a-4e38-93fa-8b4cac53a6fb", "indicator--dfd9d3c0-589b-4f7a-8464-17131c2639f1", "indicator--98843b74-aad5-4dd4-845c-ea00a271c583", "indicator--3602e437-89f9-468b-8474-8a258e112e4f", "indicator--a42a3957-bf30-447a-b69e-a61c9b6a5ef1", "indicator--58bee921-e5ee-4f22-b877-421c2dd3ff5b", "indicator--edd42e13-db04-4c55-9249-211fdcf0f134", "indicator--590fede5-5b0a-49d5-99ee-23fbcdd01b5e", "indicator--f5567dbf-b694-4203-b4d7-77831e86f0a4", "indicator--efdd5260-ca56-40c3-965f-43b40f755690", "indicator--ac894b68-69c9-4e37-9797-ad35d525b12d", "indicator--ae944011-8602-4cc5-8c32-430c93f71326", "indicator--ab5c2f78-233b-44bd-a154-fb494bdd4911", "indicator--f86d5bba-dc30-41b9-9ceb-63c4c9490af4", "indicator--9cc4f07e-154a-4ecd-a09b-e6dbf38eec9c", "indicator--54a16cd8-b822-44ea-954e-c781defe134f", "indicator--f88e8448-d5eb-4de5-bea9-2f4c2aa511d0", "indicator--22f4829d-0b93-421f-bbfd-0924527fa253", "indicator--49e5aa6b-5aa3-4d5a-a92a-c0430758a044", "indicator--b8c8ab65-c94f-455c-ad0a-95abccfa2e68", "indicator--dea94e48-a674-454e-8e56-5744693a055a", "indicator--e70c032f-d637-427a-b430-da2fe787e72d", "indicator--5d2853ec-d0c9-4917-b6e4-39fecf1782ec", "indicator--5040de04-6d0b-49a7-8502-42f2417196ac", "indicator--37b2f038-a9f9-4f82-ac5e-bcddabfbefa3", "indicator--935b6d47-bbc1-4c52-b795-60718128afd5", "indicator--b7b70e89-ce59-4ca4-a009-52bcbc709c32", "indicator--9a1a6ae9-5c02-4dad-9688-e04c6f6f06c7", "indicator--01a61f9d-0b93-421e-b34b-2df3af2aa886", "indicator--36826538-cf06-4375-9502-714ae8d1c4e4", "indicator--3c2021bd-a7e4-4282-b696-63d303c000c6", "indicator--b9e02d93-84b9-43b9-9ca7-1e431331a344", "indicator--1de9d32b-92d7-4d7b-a593-fa882c6f237d", "indicator--fffc9d85-96c1-4b27-b597-7753f729bcd1", "indicator--f0392cc7-66de-4802-bdcc-3c0124e8e4b5", "indicator--cd486d01-3534-479a-9af1-0901fec32286", "indicator--6fd4dd7a-cfa0-48dd-a22b-73d6db37a8bc", "indicator--d6e34be8-6cff-42cf-8b17-25462568eb91", "indicator--b2c9621c-bc02-401b-a5a1-02bac50bbfca", "indicator--83e10246-7427-492b-a234-03d0c1398045", "indicator--fce46367-426c-455b-90e5-1332e1ac4267", "indicator--f775c415-fe3d-4b2d-b4c2-5f66e1fd7fb1", "indicator--46670fda-450b-4ca3-8f70-f8c1a2508430", "indicator--20fac94b-882e-4a4d-b5f3-507831dea32a", "indicator--cefa1142-762e-4288-854c-ecb82bafeadf", "indicator--8b917d67-b637-4b4b-9a6c-b21a143b9567", "indicator--4ee284bf-a3c5-4419-ba56-24456024c98e", "indicator--9ea5d033-d7a0-412e-a389-6394052985e6", "indicator--9a174f89-8b9f-476f-ae67-d161ce42dd20", "indicator--2ec61552-54e4-440c-85c0-e0b520771f61", "indicator--03a8c4b2-ba36-4345-9b07-4a4adc1916c3", "indicator--8dc16bd8-18e7-402b-987f-a4f519275749", "indicator--b44a9164-87b1-4adb-afbd-c43da95fdd1d", "indicator--e9949340-0c39-4fdb-876f-273341fee7a8", "indicator--911813db-1db2-4943-977b-0d80b5604273", "indicator--c4210e5d-ec69-4819-8181-cd38fa2c2571", "indicator--e968de28-0227-42c6-b2c3-ce3998919039", "indicator--95fe1bb8-12cd-4b08-bebb-7ac240c280b9", "indicator--c9c8744f-579d-4366-8c59-c7fd270deb07", "indicator--9336d07c-2c3f-48c1-bbee-4f9677bd69f8", "indicator--4cf64b11-7b16-414f-8b27-a9b52c20220f", "indicator--fe6b0155-adc7-4572-9241-c12d370ce3e7", "indicator--ece8c4b3-05bf-41f1-977c-178bcd8c3369", "indicator--f44986f6-08e8-4047-8b3f-1d784d7cc343", "indicator--42122f3e-f942-4d8e-b1bc-668fbf8f6552", "indicator--ca04230d-4741-4954-a16d-e614ab978f1a", "indicator--662d2575-8ceb-47a8-ae2c-00bb76463d51", "indicator--4e3e7e9e-1a2d-4158-b314-efbd1043fc42", "indicator--01562dd5-f233-4c70-bd4d-e1c4556816f0", "indicator--e8226d19-bb0b-431a-bae9-990150fd7bfc", "indicator--3e03f401-7d36-4003-b39d-a3c4509d147b", "indicator--5f1567bc-518e-4cf6-b533-d43d9c8bd22d", "indicator--7513c494-20ec-47b7-8c7d-8269a1f229ed", "indicator--d5fdbc67-fd13-4465-890b-783329e73d48", "indicator--481dbb3a-253c-4493-b8bd-5003ec8b1cf9", "indicator--72720593-1b9f-4872-ace2-2e361a7e24b4", "indicator--02ae3ae3-5d09-4096-a0e1-dcc08015a56d", "indicator--5eb9c593-2f93-4834-a3bd-74ec91831543", "indicator--7b23babf-1492-4b9f-80fa-5402819129ec", "indicator--256eaa7f-a495-422f-be36-11d4d82f787e", "indicator--27e7e0a2-4cc2-406d-8f70-22d423df6a5d", "indicator--f3b1c732-6ad7-44f1-bf2d-998f91b0cbbd", "indicator--3339687c-ed84-4475-b1c6-173581f67077", "indicator--88286622-725b-4b48-8b4b-6a378814ea36", "indicator--ecec251a-0a17-4871-9f84-d499d900fe4e", "indicator--ce955ccc-fb8d-4163-b781-126e22875924", "indicator--760fad6b-b3fe-4e16-b141-e838e9c7e5d4", "indicator--b586cf5c-f425-4000-9885-b835dfdbcb13", "indicator--001c5cb4-e8e4-438a-8b5a-00376f66d30c", "indicator--d046f62f-8c3c-4ad3-8134-8ea0edea3ad0", "indicator--be056893-5642-4b86-9b63-f1aedc552902", "indicator--08cd7180-adec-440f-8e59-26a1449718f2", "indicator--9f20ad85-7628-4681-89fb-f0e668ae8043", "indicator--b03e151e-0174-46af-9469-6869115e79f0", "indicator--3037aafe-b644-4cd5-a898-7cc23410c079", "indicator--4f952844-2759-48bb-be73-a9b2957e664e", "indicator--5dc57370-3407-4234-a3ef-69dbb1e16bc9", "indicator--86b1b087-8aa0-48d4-9289-29a9a5ed5f07", "indicator--25c8ebbe-3fca-4d34-963f-c84a77b088a6", "indicator--1cbc21c3-952b-4e55-a5bf-4856d27d6786", "indicator--0895a5a8-1fe0-43d9-81b3-9db18f512a2a", "indicator--5fbdac93-6011-444b-b1b1-a4633f43e48a", "indicator--c1d31d5e-2cc8-4baa-ac29-5700b250bb41", "indicator--6a238bbd-867d-4fc7-938c-6214c9109c83", "indicator--a8114fe1-66c6-4c0b-a3f5-299d039152fe", "indicator--37134b20-e7bf-4ee1-94e0-31dd6c8a8d5a", "indicator--54bf2b0f-f3e7-46fe-b2ce-48adb208a2fb", "indicator--1c29c660-d429-4b93-b567-70992e662b1d", "indicator--41533380-a9bf-45eb-8ac0-71679933f73e", "indicator--0a3bb9a7-4a77-4862-ae27-bb21f9590557", "indicator--90c59cac-70c5-469b-87e1-58421d947063", "indicator--9f30dac3-6c08-4224-8772-2075b2b44c8f", "indicator--e58afbe2-4ad8-42a8-960b-e14687b3a54a", "indicator--325fb119-5e69-4826-8fb0-845901aec057", "indicator--2e5e49dc-88c6-4ee7-9250-686cc32612aa", "indicator--077e1e95-5971-4c64-a246-b16965fa91bc", "indicator--aeb13824-c243-4cf1-a297-8c444a2acace", "indicator--3f5a945c-9c20-4ae2-a1ac-c5218b1088b3", "indicator--a03a3db8-102d-4d8b-ae27-10c2c000ccf1", "indicator--349c3b7a-393d-4b9a-9695-5811e097a87f", "indicator--d86aef21-bdfa-4605-968b-1fa054f95f84", "indicator--ec96ab5f-e574-4fd9-8761-51bb2af3e380", "indicator--649705ac-52fd-4b84-8269-8d070d091fa4", "indicator--71332f55-4d70-4d51-afab-3918002ad569", "indicator--860b7510-be20-48af-975d-66b11187d04f", "indicator--b041fa10-4658-44bb-aaf5-9ecf413fd460", "indicator--56f7290f-743f-4cc1-8128-be4a015c04b9", "indicator--9d9b9c4d-cb15-42c4-adca-84bb3f5587de", "indicator--17163849-41f2-4e3c-99d2-6abe1b7fd358", "indicator--9a7ba721-28c7-4e6f-8661-b5310d2a8820", "indicator--f8a1c2fb-3d4d-4fc4-9a36-03401d549a79", "indicator--13af4ad7-d156-4ad9-933d-8e80a1e04f5f", "indicator--ebdefc5d-8236-4c82-8d58-021dd00ffb8b", "indicator--1f660373-edc7-4a9a-ab7d-acb5a7d436c1", "indicator--c3f34dcb-10f6-4ce6-9555-7878194e0125", "indicator--a70c1f2d-d257-42ab-b8b3-e30f0804b929", "indicator--491860a7-cf32-44fd-8559-d06b32185289", "indicator--fd5a37b1-bd3a-48a3-925d-d1aadcae158d", "indicator--f251bef9-849f-493f-8dc5-6f8e011783f9", "indicator--254335ff-7dcb-4a5d-9b72-3d1334d50993", "indicator--75e695a3-6755-4a97-ba55-3d53b3e53198", "indicator--d6373ecf-3684-44f6-8a43-f721f4a372d7", "indicator--ef8b3fe4-acd8-4cee-a3d8-35eb50ffae2c", "indicator--5b5fd2a3-f36b-43a0-90d3-af80b780acd2", "indicator--e16aa475-643a-4eb7-9864-6e1b917f8537", "indicator--e8c5f2f4-0b8c-4e78-9b89-59cec71d5b39", "indicator--7f42e038-bc45-4f9d-9304-97f021e4bb33", "indicator--a39366e9-3f12-41f9-a988-94706b5fbc24", "indicator--81ccd41a-3a54-43a4-b245-5933432fb12a", "indicator--87267495-a950-48ad-a0c6-3232a23ff536", "indicator--5f4e1b2d-92fb-4b0c-8dee-a52821c763ad", "indicator--9b035805-d4df-4eb2-82a9-ca252402e4aa", "indicator--e004d8df-1578-4a8a-b516-f5b536d22402", "indicator--d64a14f9-dc91-4ca7-886a-7b337b9cbf9f", "indicator--8acdfa6a-e3a3-4bfc-9723-1eea3780bb0c", "indicator--90e42751-f5ce-4838-9cc5-9e862dca5ec3", "indicator--efe7cc24-eb68-4841-81f5-28e458ad7a04", "indicator--7b5c58ca-45aa-4a76-8e4c-0acc1519da80", "indicator--e1e8a3e2-9925-4ca2-871d-22aedc71e15d", "indicator--3ca50c5b-3d57-40ee-84b5-4a87cfd8e3d3", "indicator--74b828f1-3ee6-4f60-85e5-64b4f9694a4d", "indicator--2eb6dcd9-dc05-4c8e-817d-c640d115784e", "indicator--9892f525-2deb-49fd-b1a8-3a0b30814f8e", "indicator--ba4f9ace-1634-4c49-ae20-4605dc957cb9", "indicator--0abfec8c-7203-4520-ad1a-7708db70cdbe", "indicator--a5cf1154-9945-409d-ac5e-f9e5f67593be", "indicator--8c180af1-1eec-414b-accc-c45d5a2c67b5", "indicator--b6772270-243e-46fd-a34c-495e68e5cf17", "indicator--a60d66b9-c5aa-4b71-812d-c6deef34122f", "indicator--2d4c4394-ecd9-47a3-be68-0657e50c09bd", "indicator--1c6befa2-ec33-4392-9ac7-cb9cb4d09d56", "indicator--c2746c76-d80d-405d-bbbf-f9fe4060544c", "indicator--c91e8648-0476-4364-81a2-a3d8cfa724bd", "indicator--0c09360d-f868-49bd-85f0-742d2f839dda", "indicator--68270faf-9a1b-47cc-985c-1aa712e07db9", "indicator--61a5b98f-3d47-411a-af1d-a102560c79ad", "indicator--73dc9fdb-d252-4b37-a554-599a528e724c", "indicator--4040ce63-05af-42f3-86e3-a4b911ef4753", "indicator--b316308e-aa05-4ce3-b09a-d903c8c8c1ce", "indicator--006bb4dc-1ebd-4aec-98b0-b82dd6527c07", "indicator--7525c596-7720-4ff6-a9ee-11738213da6a", "indicator--b70dc0d6-7539-45d1-a276-5bbe1615c0d3", "indicator--04edca95-73ac-4639-8aca-1ce046d5def2", "indicator--54d6201f-1802-4fc3-977a-0b8782f746d8", "indicator--7eed0610-1c32-4b22-ad88-087d1fb936c5", "indicator--bb102e33-7baf-4d9d-a5f1-a014172f9fb9", "indicator--469fb52b-7eb7-454b-ae99-338db9f43a67", "indicator--957e4b87-e770-4bdd-b9af-5671189f35a5", "indicator--1eb13d54-dfca-43c5-9916-e336c6220b98", "indicator--f1a57c9d-9d2d-422c-8ba6-5ba30b46ab2f", "indicator--a9bd3cef-0d3a-4b5f-bf1a-6642a4b47b55", "indicator--bf1b527b-c702-45be-bf57-8f68f20162c8", "indicator--9b566801-b658-46fe-b1b6-7e7ef3704955", "indicator--15429565-70f5-4c68-aea6-41da1fb4a982", "indicator--bd423f54-db34-4fa6-b03c-1b8db1a273c7", "indicator--75dd8268-de99-4fdb-b070-0631a71966b4", "indicator--3a4b1f2c-b13b-4835-8a91-be7af4c4bd9b", "indicator--890d95cd-60aa-4c8c-a08a-8a071402923c", "indicator--b2258808-6d79-45bf-b11a-f6f79e531545", "indicator--ab210931-16de-44cc-8dc4-d0bbd62f67eb", "indicator--14a261d1-1800-4bfa-9ff7-d51fcc89d62a", "indicator--dec1b372-4062-4917-806e-836478893efe", "indicator--650b7e79-f6c2-43f1-8dde-f3e197c177ef", "indicator--158d17ec-9507-4b4f-b6ef-15107ef6566d", "indicator--e5017c26-0acd-44d6-87ff-177007b28695", "indicator--5c24cfbd-cb4f-4a7e-bd64-163bfd7ce5c4", "indicator--a9d429d6-5114-4cc8-ac99-cb782e9fcbd8", "indicator--b88bfa90-e6cc-43f8-be58-ad92cdf835cd", "indicator--9f18bf3c-fb7a-45b2-8768-750d80bfbcd4", "indicator--77a0030d-9fe6-4eeb-9d84-fb4a3dee3364", "indicator--fc77f3db-5e8d-46cb-9c34-ce5a190f3a57", "indicator--b9b77e2f-9271-47bf-9c08-d792f16d1976", "indicator--a0defa40-6ded-4f3b-a1fe-734520cf78fc", "indicator--c0974c26-4a48-409f-b8b6-eb0d7135cab9", "indicator--0e374ff1-e845-4474-8d9c-9fae6b67478e", "indicator--d6ad8651-10d2-42bb-9ce7-6f9d283b7a62", "indicator--d59ddb54-b5bb-4572-8ba4-e22763ae5f1f", "indicator--7910293a-7a7a-4589-a675-a6b0a33cb708", "indicator--a1a2535c-9aed-42fe-b686-f2331b265760", "indicator--373c4405-ef39-4ace-854f-f06685442a7b", "indicator--e2c1547b-6c31-4418-ad10-9d5cc7376a86", "indicator--0b5557ae-24ff-44d2-a57b-a54743514d9a", "indicator--74970dad-916d-48e0-b7dc-a6a0b264ad43", "indicator--1689e818-e88c-4c85-a9e8-dfc16aa3b218", "indicator--19121931-6930-42fe-a8da-732b0647877d", "indicator--5f7632fe-c7e4-4f67-8dc9-93014023877d", "indicator--f5c9949d-7e68-49c4-9e18-7abcf79f7600", "indicator--86f01857-35a1-468e-97e3-39b1750cddf0", "indicator--41f1b581-8134-4657-947c-ecde213809c6", "indicator--ac14c56d-3254-47e2-8102-8a49dd0d6425", "indicator--10e89117-ff30-4339-a4a2-7c4af5c73b3b", "indicator--537c92c3-5ed3-4513-955e-4e85f1b76095", "indicator--65b06e3e-bba0-4d2c-b159-47ffdf09015c", "indicator--96efbf61-aff5-4bcf-9a63-af3f96b6fe9e", "indicator--4428c9dc-3a73-4367-8609-eaac0b38f1ca", "indicator--29d649c7-54f6-48ef-89fc-00fca681decc", "indicator--fdec7e4f-61bf-4980-babb-ada3645a61ef", "indicator--cc5519f7-efc7-4468-9d66-03489454071e", "indicator--ab61f8a2-6a35-475c-85cc-1c678e1215aa", "indicator--b9157948-ab17-4a69-b98f-7a744900a20e", "indicator--200203f2-a33c-472e-b963-6d12c1ccaad5", "indicator--628763e1-3cbf-4037-a1f5-d9294ccfe1ef", "indicator--cfdd172b-36c4-4e4d-863c-98f650653b15", "indicator--f0edfc7d-79a6-4314-881e-2d194cc571e0", "indicator--a8654873-ffa0-48d9-99a4-5b5f7d5e9c1e", "indicator--20aa87de-86c5-4c6c-a0fa-6b5017888754", "indicator--1bc79de2-dcc7-4d7f-81aa-a9a3bb928747", "indicator--2b26b648-cfd5-4a2e-84ee-1fb742e39c61", "indicator--0836e51c-8fa5-48f9-9c5e-877349ff3e5c", "indicator--4442c523-a793-4985-9027-41d4046bc3d9", "indicator--cd513fc9-f6e7-4632-bfb9-26709e6b41e0", "indicator--0a95bc85-8e09-46b0-a223-a42ce774c166", "indicator--98473b6f-0d72-4cfd-a4f9-7b524ead1055", "indicator--b525410b-a2a4-4cd1-9572-bc32a6a66bde", "indicator--4712348b-5afa-4cd9-accf-3b4cda8f0602", "indicator--44fa9601-d2b2-4d94-b389-f544699dc74c", "indicator--3e6d8341-514a-4b33-9b26-f79a449cdc5d", "indicator--f7a79efb-ecd2-44ad-91ae-164572d50f48", "indicator--b32f1ea8-d955-4c77-84a7-3c61cb37a3b4", "indicator--dfdedf2d-5220-413e-b00b-5d4dbe833f89", "indicator--de30d5f9-46b5-4529-a1ff-26387a40e0f8", "indicator--51c214e9-09de-488d-a3c5-ec2d767ed436", "indicator--d38b1081-ef0d-4da7-96bd-397c6a2e88a8", "indicator--7c9343aa-dc73-4e8b-b97d-23ac422956b4", "indicator--fe9b03d8-800a-482d-857a-2715fc7de6bc", "indicator--b6f99174-4184-4e74-ae00-c19c4105fe06", "indicator--9ba5f61f-e808-44cf-9c0c-3ea0da236868", "indicator--0b0bde42-60c7-403c-bc48-168ff0c08967", "indicator--21a4ef87-e251-4205-897e-4d3acb276213", "indicator--99631c3f-c904-4122-b0c4-d6f3b2e63cd7", "indicator--ea4aba60-e685-4b76-8143-439558b15ee5", "indicator--aaf95293-5adf-4d35-8a2d-3d1df2d55887", "indicator--9ef9f8f6-2105-486b-a15f-c3674be12fef", "indicator--4d9b0af6-7409-4dfb-abd1-3312e0be48ee", "indicator--71d6f58c-9e37-4419-87b5-08800fdaa037", "indicator--949e71b3-64a6-434f-b7fa-cdffdd777a66", "indicator--ec864010-1ccb-4401-94c9-7b2d94e4f302", "indicator--2614223c-6ae9-4aca-96cb-fad086840f46", "indicator--c625cc33-be16-4e7f-81e4-93a9220228c5", "indicator--0f5731c0-b18a-48f3-8581-d54758511c86", "indicator--974995d3-faea-465f-985e-7e7507682e6a", "indicator--50357909-0207-4b40-bfbb-9fab1dc614ce", "indicator--c6dc65e6-5457-49b9-a0b2-e51b7f824f0e", "indicator--c9be7d84-52e0-43bf-9b4f-099da13edfdd", "indicator--477bb785-24ac-4edc-94da-ff3f5ab4754b", "indicator--4d5a24af-2e74-49d3-934f-01a6eefc1f7c", "indicator--fe24214f-19a0-4b6a-9590-8caa4befdf1f", "indicator--e5dda39e-1861-433f-ac1a-b9f0eb211db9", "indicator--d98449cf-f214-4b18-bd19-e8b666d4c326", "indicator--119548d6-756d-4e5a-9675-0d04323e601d", "indicator--be70d3ec-4e19-4b8f-b41f-ee824117ee42", "indicator--dc9d3403-eb60-4da3-9ac0-59c48aec9185", "indicator--baad8939-5368-4b3f-9312-e5d8f183cf27", "indicator--33717896-631c-4b67-bdba-9eccbbd43e64", "indicator--b2d40a54-ffc8-4111-a310-14e606e94c26", "indicator--89fe4709-487e-4331-a7f1-cdd8117ad01d", "indicator--756bfda8-d053-4614-b080-6d94ee7d9374", "indicator--f268462e-5248-486c-aef1-9dfd1fde7669", "indicator--998921c6-f5c8-4526-94a0-3d8494519ec2", "indicator--38ae5954-5f35-4852-8550-a8b970e85d24", "indicator--166c6086-3c41-47aa-bbc2-7748101ca57d", "indicator--0213d093-1548-415f-9664-569601f6e973", "indicator--c0ce88ad-5402-44cf-baf1-a791a8dabc53", "indicator--5d5b905b-d6b6-4583-afa0-2ce9b05cd8d2", "indicator--efedb033-c374-4539-b770-a8fe32c2102b", "indicator--691eefd6-ee24-44d7-adb0-afab4f1f6f51", "indicator--c68d0aa2-5c1d-4f95-b685-f890fd6a5d02", "indicator--7aef45fe-39ff-47bb-9e33-70e2fef4476d", "indicator--57d7788c-b391-44e2-aa5e-b57b65f8e7bb", "indicator--b549d6fe-183a-49f4-a2ad-42ad73bab715", "indicator--ff4d9f9c-751a-4f60-ac53-ac9b830d0c74", "indicator--3ca1edd1-0bac-48b6-9aee-20817c6b64f1", "indicator--526c24a1-8a76-4c7f-88ea-ba1b0dfe3b39", "indicator--e9ae0fcf-fff6-439d-a4d9-74808d1a8e75", "indicator--42dfe6b5-5e15-43fb-969a-ff574373e1ac", "indicator--2377eb99-6902-43ab-b2b5-8466357faec7", "indicator--4136162c-8d91-4d34-9a7f-fdb8f0315208", "indicator--903b0a75-3d0c-43aa-aa0b-38f16274ccf6", "indicator--ba91adb5-5580-43e2-b228-aace6690d7d1", "indicator--6dadf1f8-2337-4ea8-8980-bbdbc44a0949", "indicator--9c12d4fd-28d0-4be3-a66f-bbfc81f00b0d", "indicator--54f0315c-bc46-4325-96d2-46fd24d99469", "indicator--2daf27b3-f4d0-4b98-9720-e3cdbd60872e", "indicator--b9225928-afb4-47b1-a86d-e1ac65639bea", "indicator--1f667221-4413-4a20-8e3c-456a0f3b876e", "indicator--813c1f10-f09b-4db8-9d12-3bcd120ec82e", "indicator--4c00568d-1ef3-4e39-8456-45efd4dc5faa", "indicator--22a4135c-c5db-4b11-be72-a054593e8cc9", "indicator--67c360d9-8c22-466c-8c6c-56f1ded39cd2", "indicator--cb7dcf84-54a4-47a4-b175-cdfe09e2e33d", "indicator--aa5bf798-e458-4dcb-bbee-557376ec3a57", "indicator--a6737c8d-31b0-4dc4-9c9f-6d25b8791e1d", "indicator--41c881ab-fb8a-4069-9d6b-6764dab5f537", "indicator--78b4d9ed-ae6e-4a31-af21-4a7364d6c9f4", "indicator--190766dd-0262-4d0c-8f5e-0d648e292345", "indicator--6072430e-a2b2-4af3-bff8-61aafd98cc04", "indicator--c61076cf-982d-420c-b0ca-e5b9fb698c92", "indicator--c164c5c1-386d-413c-8980-d726bc608226", "indicator--294f257a-1a94-4c6a-82f9-f70a09643df6", "indicator--abeed735-fdc9-4be9-bd2f-18ca41d7b82d", "indicator--9c24aad0-bb60-42a9-a380-7079f5062421", "indicator--f00c9e0b-ea64-4977-b860-f383cd5af53c", "indicator--c2fe8f61-3f8e-4d40-b410-59744c999b1a", "indicator--c078e800-cc42-4718-a8db-94c8e3414738", "indicator--29f4d04c-0c9e-45ec-b01a-b2c019e55722", "indicator--54becd69-16c1-4826-9a4c-471e211b62a1", "indicator--2c258db3-e2ca-41ef-b9d2-07db74ae1b25", "indicator--5927455f-d5be-4cf4-ba13-61b480f3a7ff", "indicator--334d129e-3520-48ea-95c3-726d74743b8f", "indicator--aedae914-e30a-4b87-842f-2b422705a274", "indicator--c1c41353-5c1f-42bb-bace-a6e85406a8ad", "indicator--44d7acb5-df92-4e0f-92d5-93c89f2b61ca", "indicator--c38b1579-e9ef-4302-926c-9d3ffe821805", "indicator--c9faa7a3-94ac-4844-860e-26fb75e977ad", "indicator--e1448582-ea62-46e2-8740-aecc5e0fab3d", "indicator--3b1980a6-c192-4a38-8af0-f891fe1049a8", "indicator--bbedbaed-b79e-49b5-86f0-41b95a94bb1f", "indicator--30030b64-d382-4ff7-9347-6d67e3496879", "indicator--1566d6b6-5b76-4f72-86aa-f987a38b13bb", "indicator--917c0f82-ca44-47e2-b119-9412bf95e22b", "indicator--434425cf-bd31-432e-b232-12445117b5e2", "indicator--2e33b1d1-0546-4f90-88a0-b80a81c806f4", "indicator--cd974db5-6f03-4039-aa32-5f4b2717f95e", "indicator--0a80b757-d816-4cec-97d8-c2da7f8f4f5a", "indicator--2947bbde-02ae-448f-ac5b-4fa55cbae7f0", "indicator--315ecae0-e9ea-498e-9397-be99be265433", "indicator--83e24c23-3702-4cca-8cea-fc7751276c7c", "indicator--bdd32144-9c8d-46d4-aa72-d02b9e662b31", "indicator--f9a42812-46fc-4275-8fda-7a0175a09dd9", "indicator--f4063c07-9a3f-474a-b8e3-5778310525ac", "indicator--99d084f6-1a5a-4fc5-bdde-2ef14ed4aa74", "indicator--116f5b6b-4b89-4038-8c13-6aa4d9c5db55", "indicator--ccc68ab3-d622-4bca-abe2-a02f40a90304", "indicator--dfebbf39-c105-4969-923a-4de49a319103", "indicator--6b4a9a16-95ed-4132-b516-920ce3454579", "indicator--669d5e9e-62d3-4f97-8f86-2f018fad8253", "indicator--0a7314f4-cd8e-4e1b-a955-7af9857a5c64", "indicator--0984ee3f-c29d-49d1-a532-28b0ae10114c", "indicator--aa766ca7-9274-4d86-b990-fe5675583779", "indicator--f8d46172-27fe-4806-a608-60bc62b0960a", "indicator--e20ed38b-332f-49d1-be5d-ed6800c9a5f1", "indicator--e2083d2d-0a75-48ef-a300-ecd1cefb4a86", "indicator--a9f3fe83-3652-4d02-a83f-07d98bb33e36", "indicator--4c918c6b-e7e9-4091-b2d1-261738f0a672", "indicator--7a7ece9f-ba9d-43ab-8c70-48a6abba88cb", "indicator--db9cc94e-d4cf-4010-a5f6-39b54af34b18", "indicator--4af3c7fe-f16a-416d-9ad6-4f1d69071f72", "indicator--9f2371eb-a894-4d31-b20c-3f3115473612", "indicator--94173fe9-0a39-4626-b08f-693f5cf713ea", "indicator--55e8c86e-3569-43ca-8cbb-73ac92250abf", "indicator--1f32db14-4244-49a9-8ad1-dcc0366a5f8e", "indicator--4e764fe7-f288-4bf5-9ce5-4c64f7397a42", "indicator--63cc6d13-b36b-4cf0-9cca-e1447014ac07", "indicator--0ef1689a-769b-45d4-8cd8-f05fd5e7d3ed", "indicator--85c4f087-cfab-455c-9585-d1932b80beed", "indicator--34e2893a-10c9-4f0f-af26-db0a0e29d742", "indicator--5fae3680-b23e-4c8c-bfe5-42c0e8f91ba3", "indicator--f9109fcf-f9d3-44a1-8234-8f9362b740e5", "indicator--f71f10a9-7352-429f-a5ca-5cb341dda107", "indicator--7e2da92f-8ea2-44c8-9254-9ff3aa7669c3", "indicator--c1e27171-7673-4476-a415-2e8bd553ce65", "indicator--d4f03e0c-54ad-4529-aa07-4a57e4ee2a7b", "indicator--25476aed-1bdb-403f-bf46-cb29a3de35b9", "indicator--707eaf91-ad4e-425d-a3ea-dec4deffd0d8", "indicator--05b25f18-fef8-438d-a3c4-06f6791c52a9", "indicator--0520a555-b418-423a-8e66-f7b8c735b17c", "indicator--38ce95be-cb58-4ca4-b532-296770afda87", "indicator--110cc2d5-6e26-4daa-82e2-cf95f2193a98", "indicator--f4dedc57-d663-45d2-8658-cf67077eeba8", "indicator--d278698f-9709-4bc0-a730-74d38fc1447a", "indicator--25f2c4c8-7f6f-4446-80b5-d6d4b8f4c1c1", "indicator--fc391b41-02e3-49b1-b22a-3cbc77e830a8", "indicator--f0f2270a-5dcf-4c79-bafa-500ade4e0e1b", "indicator--57c3f570-29e7-4611-a0e1-62c341d7b03a", "indicator--d67613e4-c677-445b-a923-521571b1a27b", "indicator--9bae6ec5-def2-4742-8b6e-f4b3bd747312", "indicator--a67f3bea-8c29-45cf-bee8-49005cc58e72", "indicator--43743575-ddc5-4c01-9905-b14835c63a7c", "indicator--2ee705c7-c276-471a-b9c4-805ca3f59017", "indicator--8fc6b886-9b42-4ec0-a87c-a95521bf51ca", "indicator--793c542c-77a5-400b-a483-4e6d723cc7b8", "indicator--4c8c63d9-c42d-47fc-be54-caed7c273308", "indicator--2419fb91-c461-433f-89fe-50e41759dca7", "indicator--71259005-14fb-4051-a7a3-18ed1e38a74a", "indicator--048c4315-e2cc-41ba-b5e0-7e2f39fd20a0", "indicator--fdff9f91-726c-498c-91fb-341a6d308788", "indicator--9c985f60-b77f-4e45-824f-b058bc055bca", "indicator--4b4ad302-37ef-47d5-ad36-96a476c15120", "indicator--fe8f0a53-b79d-40c6-b626-d98883d5a96c", "indicator--d4e93a5e-9861-404e-baa6-06d815161314", "indicator--9cd53e21-86e3-4f60-abc7-fc357f94992d", "indicator--32494e66-823d-4bbf-a5d6-d42463438c5a", "indicator--a3e38585-6ac5-4e41-ad54-bdfe99feb1a3", "indicator--40aef310-11e7-460d-98b7-adaecaab0eb0", "indicator--638a9d02-97fa-4221-adb0-27083fcfe663", "indicator--d768394a-0f70-49f7-b3cb-d7e915cdb77d", "indicator--fbb67f6d-aabc-43d6-aa61-cf6ced5c8f68", "indicator--0fc4792f-4c27-4c39-b0c4-76095c03c66f", "indicator--9a8a6774-d5d4-4dcb-a137-81f988d65c94", "indicator--1d02ff8c-b19a-4be1-8df4-b7afdb188bf7", "indicator--7a88fde4-1020-4339-85f1-cd68cf318f08", "indicator--11bf1d5a-9bef-4edb-9c7a-4d9ed07deda7", "indicator--298a0a6f-dffc-4596-9e5b-d3abc8dbb6eb", "indicator--ae2b6246-377c-4db8-864a-0f5970f344b3", "indicator--a399db28-9d79-4a70-8b85-8d8eca807ca5", "indicator--fddd5e72-e7af-439d-af36-df88487a66c4", "indicator--4582fee8-9847-4cb5-a5a5-935fdaa0f61c", "indicator--03b37887-4063-4291-be64-f539e5044254", "indicator--d182873c-0b0f-481f-9011-28672ac4d8c6", "indicator--9ec88202-1aed-4c01-bac2-649cb22a7bfa", "indicator--954ae547-40b5-424e-9276-bf132dfcc6cd", "indicator--a97ba4f8-aec4-4739-8e55-a474dfd8bef4", "indicator--408b7536-bbcc-4bff-9380-7ef8cae683e0", "indicator--75993d05-c112-4624-bb7f-77ffeb5cf0fe", "indicator--40842b9b-f1bc-457e-8353-1f23630d2c6f", "indicator--a0f041b9-8698-4ac2-9a71-7b2cf5020f81", "indicator--086a293c-96d3-4f15-ac7d-ea2ee94008ba", "indicator--fbb70a64-234f-4b4e-9ff3-56c45efad2a7", "indicator--7fd76f4f-7de6-45e9-84b9-6ac387edbf36", "indicator--1cb1eaa0-5074-423c-9599-e6ade893f4ba", "indicator--5a394131-ca51-4fb6-a4e5-39982550a482", "indicator--61b10283-3077-480a-88d2-36f42a6a4f0c", "indicator--139ad1cd-60a9-4816-962b-1b150e34a8c6", "indicator--5f420c4b-baf5-4fe4-9893-39e63f7b8d4d", "indicator--618739a3-4a02-4437-9971-951f2325fa65", "indicator--3f44d361-b900-4717-93c2-937ce1fb4c8d", "indicator--acdaf6d0-298e-4b65-a557-965275e15082", "indicator--3a200913-f41e-4b42-9b99-c2b996a94e83", "indicator--d600e876-69a7-410c-8be5-302049e4f186", "indicator--f566e07b-9f3c-40b8-bbdf-d6b6e73bc6d8", "indicator--4203262f-7881-4c1d-8a08-0c6100cdb8ea", "indicator--51f3f63f-f684-4510-8485-041391c21107", "indicator--a3fd1d19-82ec-449e-bf6f-59aade308237", "indicator--f02facd4-bf59-4e56-9673-e2d67bf49b9b", "indicator--503ed7f6-c446-4d16-baee-c73474922841", "indicator--1eba127c-3339-4e47-bac6-eb08090e7958", "indicator--d12f4fd9-5e97-40b8-918b-ebaeadba4d55", "indicator--25205dd1-8a4c-4fed-b07c-cbdca494f3e0", "indicator--9e39228c-ff67-49b2-9c9e-f2324d49b4a2", "indicator--9073536d-54ce-4ba7-a527-c9e0d9024ad9", "indicator--f2766a09-639d-47ad-82d7-bce73e57d463", "indicator--1ec2cdf4-729d-43e6-a513-eeefc23beba1", "indicator--cc2b85d1-708c-4e11-802d-986b30b7c519", "indicator--32de8671-8893-4a6d-a5e0-b83023618cb5", "indicator--0b8a0aea-865d-44cb-92ae-c35f6d4b81ef", "indicator--499be84e-fb4d-42e0-a5ed-a6d1a0750629", "indicator--9e70d5c1-403e-47e0-b3dc-d22121fea7bf", "indicator--ee289ee0-7d06-4a40-8d3d-ffc054f930f3", "indicator--83f93aba-2854-443b-bbd8-c3cb61a4542c", "indicator--70407963-35ee-4932-b25f-511bbef6f018", "indicator--f3a73a03-bda2-450b-a565-c96bc04e808d", "indicator--d86bed25-a296-47f3-95a5-2cb218ab3887", "indicator--05ea0051-1db9-4666-a0c1-1c27791507fc", "indicator--b58db6af-ea5b-486b-9a6e-186807b9c732", "indicator--15e660f6-f23b-496f-8c13-ff890c1ffb49", "indicator--b09b4cba-be41-4928-b53a-63bcdd47bf2d", "indicator--f3bc7dbc-a08c-4993-a4ee-b7bd17faaf39", "indicator--f63b89be-01a0-44d2-ba2b-f219a110db89", "indicator--b9a04b20-6b3a-4b82-b1db-2fad27b61e61", "indicator--37346658-9257-4b04-b245-8d8ddd701c53", "indicator--94a21903-894e-419b-9270-7e3eeba87366", "indicator--4deb6ecf-3a17-4b76-9bfe-8559081d6d6f", "indicator--70b25b4f-23e6-40a4-a0a8-b23dadb329b4", "indicator--b62ccbfb-bf8e-4eaa-a2b1-a2c63fda3f7a", "indicator--4de4e510-7248-45bc-96bc-183a659f32e3", "indicator--12359b63-0d77-445f-a27f-f656fbd1ba7c", "indicator--ff7be909-a360-4d44-8fd8-127885eeb285", "indicator--17965daf-d72d-42f6-82f6-6c031a99afac", "indicator--9d38435c-5706-45df-9293-804f13764767", "indicator--9a949806-160c-444b-9008-693234985396", "indicator--7feca234-6462-4431-af17-3b7c7c96e27d", "indicator--6d60ae1f-8427-43f6-9768-f8ba041713a9", "indicator--01a6b791-eac6-4ace-a58f-e014a6477c82", "indicator--2597b2b0-180d-4c27-b913-b7b05151f4c9", "indicator--2a3b2905-70e0-4c85-8c48-1f73c88ab8bc", "indicator--8c8e87d6-073b-45db-9f65-f16d313444dd", "indicator--bfafb5a4-d53e-42ce-81c8-4109589aa2fc", "indicator--9a4d72b4-6a97-406d-baae-8278e445ed07", "indicator--74446175-4568-4038-b6be-805506bf610c", "indicator--c9f66ec7-1ea7-4628-a7af-8944bd852895", "indicator--9554ce7f-8759-483c-bcc4-53f0c6b038a0", "indicator--cefffdb7-e874-4301-84e0-d37068f0dd2d", "indicator--8a146107-8563-4e6d-aa88-504258bb4aa4", "indicator--65568d77-4350-48a5-a3d7-6aebce28c726", "indicator--4c3dced1-3c3d-46b3-bf86-b6d495117a50", "indicator--f9f35dc1-57ee-4cba-8756-5d74ee6a313f", "indicator--d22ecc85-e2e5-477d-9cc3-3685a0fbf461", "indicator--85653e95-138d-406f-be57-9e585a05ecc9", "indicator--d228e21a-4f88-4374-9305-fa7e44c33518", "indicator--89b64b82-616c-446f-976a-127ae7613d94", "indicator--c3ca1a7e-e024-46a9-b28b-2c9766629129", "indicator--4211fdc8-b8f0-4fa1-84a0-57259053163c", "indicator--4b7a8417-c902-4495-845c-6ee1dab58f88", "indicator--546015e9-d81a-419a-90a0-e2a69905f06a", "indicator--267f27a4-d125-4fe9-91d2-fe47e4a9a7b7", "indicator--15dfcb43-50bd-4fdf-b8f4-b10a9fafced7", "indicator--ed74361d-9c4b-48dd-a152-892bb71d6c3b", "indicator--d60a6ddf-4fd7-4542-9182-a87064700233", "indicator--ff009a39-2308-490f-ba20-91d8f76bf0fd", "indicator--aea8cad6-51b1-48f1-be7a-51dfc28f0aa8", "indicator--bf99084d-a4c8-43af-a1b5-b8fa9423ae8a", "indicator--f035f251-a4c4-4fd2-8245-db8e82cfdb2e", "indicator--77551d01-5f8a-4135-a7b0-e59f9bd18ad4", "indicator--24789a88-a45c-4bd1-8c65-0b0654d2e765", "indicator--0c1fda80-ea72-4637-b362-7eccef17b6c4", "indicator--bcdea594-2f06-49a7-8b3d-901dfe116b74", "indicator--fe4f07b7-5aa0-4570-bddb-f1f6e2ea48a4", "indicator--fa592c37-b60a-4ceb-83f3-37bd0e170e23", "indicator--c116448e-4faf-4318-a8fc-8d829f3435f0", "indicator--1063875e-7d19-4b81-96f5-f48dc6122b84", "indicator--ccf32af3-3109-4242-97f6-6edc075fb3d8", "indicator--a4ccf1c8-3450-452b-93c4-ff9239f3c484", "indicator--730d5b11-13d4-482c-8763-edaf9b31c396", "indicator--5718f8c8-79d1-4bd9-920d-b18d8000480d", "indicator--73fcc05d-fe78-4b2a-aa91-b2291965f967", "indicator--5347db02-ef75-43a9-ac44-5583bc6e4e33", "indicator--73dc8c53-ecbd-4750-8c0f-5977a97674d9", "indicator--acac78cb-1ae8-4d40-a067-29065c7384b5", "indicator--02aebd54-2f82-423f-99ae-65f9d4079d2b", "indicator--af20e8eb-1130-4dc8-ad5e-0734788f98d2", "indicator--46706848-4545-4941-89cb-4aca6f911ee3", "indicator--725e05af-1d34-4b38-836a-d007d4d178d6", "indicator--f8dc14ee-b245-4142-bf42-540051b6a75e", "indicator--df297fdf-cea6-457f-a470-706c7cfb8b01", "indicator--0929c2f9-0e57-4c6e-867a-26bcf5a3cdc7", "indicator--b14b1210-23eb-42dd-8137-b0ab84d01ea6", "indicator--5f696bb6-ef14-4abb-b60d-604842ab5db9", "indicator--1a065252-f5bf-491e-9605-981617dd0e69", "indicator--f6c9f4c3-31b7-4307-8ccd-aaaa347df7f2", "indicator--cf5682cc-31c9-4411-8af4-aeb507549df9", "indicator--19618ce9-1a2d-4948-b211-06ca358749fe", "indicator--623467d9-f2b1-4c9a-9f94-258e4f419beb", "indicator--b289c942-ebae-427a-a028-838e583bc685", "indicator--fac1f1d6-e61f-46eb-a0ce-45ed2cca891f", "indicator--9bb41f8c-24f7-4175-a67b-f36008ff6477", "indicator--ec8f641e-ce27-4f0e-96b1-c5cd569fc135", "indicator--bf95fb57-bb4d-4bc4-8a64-3f1699427a96", "indicator--87a99a0e-b7e3-4ca6-adbb-800fabae9300", "indicator--6741c7a7-1610-4378-b60c-071d26bec778", "indicator--36af69a3-20d3-4581-9eea-bffc7fa81aee", "indicator--c757ff11-3a0e-4249-a109-6281cd6adbbb", "indicator--10dc6a36-cf13-4fc2-b219-205282890daf", "indicator--37b54451-df61-497f-962c-02c77aa86004", "indicator--afac5e55-00fc-4c7c-8265-cfb07abfdcdf", "indicator--10c9dfef-5b00-4045-8c47-95bace99749a", "indicator--c818d03e-0085-43e1-a113-0927b0217c85", "indicator--3da57221-dc54-4863-af14-77e50d22ada5", "indicator--f5362be8-2cbf-4d49-ae9d-e9c1e24fb901", "indicator--5dce8196-9318-4f2a-8db8-952f964c7552", "indicator--91fb364f-9d66-4096-9337-bfe8df01c022", "indicator--eec75de5-dc4f-4550-88ba-523d58c5e454", "indicator--137fee6c-e084-4d60-82e0-a3796df394c6", "indicator--6dfe9bd7-e930-4872-86d6-97c8c2ea496e", "indicator--1be5b08c-5925-452f-af98-562e798ed17b", "indicator--d7158e53-4606-453c-a2dc-32adbf509d46", "indicator--7b2f18e9-b67f-4ecc-9768-925b432739db", "indicator--d6afbe84-3a9a-40a1-a563-9b37d34b17c2", "indicator--0cbfd4ea-7213-43cc-ae60-d69574d86758", "indicator--c6dd9a08-457e-40a2-94bc-1a3c078fc075", "indicator--63ebaa65-63a0-4b6d-838f-de86672448cc", "indicator--5d8f0e1d-bc74-41dd-95ba-fc791fd867ee", "indicator--7a2f30dc-948e-4cfa-9091-340424d14453", "indicator--b26fcee5-9110-424e-a448-67035c5d32a6", "indicator--ba102eae-4cab-4552-95a4-4a695a887bd7", "indicator--cbf8d80c-8670-45c3-b370-a10df6e81eef", "indicator--746edcaf-8a06-45ed-aea7-844e95ec56da", "indicator--d822a188-089e-4549-ae3e-8c76099e78aa", "indicator--8e464a8d-8d40-4674-afcc-20998349dcf8", "indicator--992bf0d6-ba84-45c9-8179-c802ebf05437", "indicator--40299da2-dcbd-4d0d-a110-bed93e81ba68", "indicator--e79c37ca-4fd0-4402-a007-bcdbabaad202", "indicator--1bccd019-1387-45b1-b56a-b77ed417a3a7", "indicator--770ca77f-5fb1-47f6-8395-0898daca26a5", "indicator--c2b4eed5-b0a0-428b-8d8b-0f688dd390d7", "indicator--73bb4295-be93-4286-ae92-76dd929ab443", "indicator--b0de2c59-e0ff-462e-9a33-5d38d5cdb14f", "indicator--45442142-e212-4ad3-9f9c-99126bcfb711", "indicator--77f5ad60-2c29-493b-909a-b89757f36513", "indicator--b8011cd9-1c1b-4032-80d8-708c27bf397e", "indicator--1b1199bb-15d1-41be-90e9-3c867734f53f", "indicator--c1e35270-be47-4b12-98ea-d4da929ea869", "indicator--528bac50-9f81-45cb-ad3a-2ba815b1e4a4", "indicator--d231b4b8-71c9-4687-98b3-f59df3741478", "indicator--66a18dd2-6413-45f8-9a22-f84d4bac2511", "indicator--cc097403-6af7-458f-93a1-fd7518fe7fe6", "indicator--d19755ac-2cda-44c6-9ff8-01454f8be880", "indicator--fcd39b4c-f364-4961-8fd0-72013fd20522", "indicator--99b79b45-2de4-4cab-8276-a35a65a65481", "indicator--0ae3bd57-3263-4d22-b544-1698be7d5bdd", "indicator--a7e48b0f-373b-4d43-9c41-e1c913af6ab9", "indicator--c6d6d708-7d15-4632-aad3-2e3b6d908359", "indicator--850c2164-b8a1-4f46-9943-8c1e3116b74a", "indicator--2084b9a0-f317-4ae9-b347-97b069d22729", "indicator--ab62320a-0aa4-4075-bf7e-49fc4f28cbc9", "indicator--966072f5-cc3d-4281-97c6-6caed926418d", "indicator--19759c7b-be03-4083-b9e7-004e7093d07a", "indicator--95d695e3-a794-437a-935f-d23d8498b980", "indicator--de0a3b36-8bdd-46fc-a1c1-4e062a457d9f", "indicator--3d484154-a2bb-4676-85c9-d2f0e1ef9fde", "indicator--d7865301-3930-40a0-a287-7eb5284db363", "indicator--64ecd5d7-8d20-4fea-b9b7-06c3e83e8259", "indicator--b35f60ef-d446-45af-bc8a-8299a2b96eda", "indicator--6012be34-f976-46bc-a562-5960cf7fa726", "indicator--136998cb-3ba1-4f5f-8375-580ecccd3984", "indicator--d733b757-b1a8-499f-87cf-211c9f49c6a0", "indicator--e9992582-c55d-49a4-86c0-1da3a07113c3", "indicator--4bec1730-5ad6-4928-96ed-ab0d2ccf035b", "indicator--d6322d4a-5b26-47f9-9f7a-d3641257c59f", "indicator--25aa376b-cca4-4981-9215-a59316a8dd0f", "indicator--4a3d16a3-c529-4e6e-a972-59555cd6cd21", "indicator--410114fd-a70d-4a75-9c45-c48f1bb99153", "indicator--0dfed9e6-ae83-4076-8dcc-f9eaec331f4b", "indicator--524a05e4-723f-412c-919e-cd2685fec1c1", "indicator--fd59ae5f-95c9-4682-a9dd-c53bb0c14fd9", "indicator--bf2ef17c-7c7f-4fd5-ab44-5578f07bc052", "indicator--19645508-ee95-497e-8a2f-a2a4ba4cff2b", "indicator--09599555-dd77-4c12-b5eb-8563efa899b6", "indicator--f5242326-a2f6-43b3-aa4a-8e33a6b7e57b", "indicator--79ef5d74-8554-4069-8ee0-737e354a75d7", "indicator--29b51ba5-5097-4060-ad5d-cecdef341c20", "indicator--12cd5a4b-e313-44cc-84af-504550f063de", "indicator--7a362fde-adf6-4672-ba55-bbb894eb70b0", "indicator--e0a81753-8466-4bf7-b635-3d89484cf00c", "indicator--4294c552-02b8-4cb2-82bb-74c2435dfe5b", "indicator--2e8902ae-6a1c-4c8b-b3f9-3626a70f56de", "indicator--e0a8b18a-3b07-4b44-9658-be8716613de7", "indicator--cc8c5fd0-6e19-448a-93a1-07cba141a124", "indicator--d941386c-19a9-4e2b-861b-d014fe57e10a", "indicator--a108f945-e445-4178-b278-66502b8376e9", "indicator--b08c3ef6-05cf-4f18-9c7c-eed3bea753f3", "indicator--14723785-d5bb-4595-a238-fa6540d9f10d", "indicator--30a638da-9b2b-42fc-b8c9-083c29f05471", "indicator--5a90f0a6-c856-4872-967f-449484ed2cc5", "indicator--40b1965b-bde1-4886-8af7-4bf1c5493350", "indicator--bd8b18bd-f63e-4aa3-8199-fde85e26171b", "indicator--234df3c6-212d-41ed-a588-490b254bf4bc", "indicator--8703011f-4758-42f3-9e53-d7a507a74046", "indicator--c48545ce-9ded-4434-b04b-5f5869a20ea4", "indicator--c16d3e34-b533-4f0a-b4b9-8869980842e2", "indicator--3d08766e-9029-4436-b4ea-349103ca6813", "indicator--10a091f5-4e56-4e4a-9146-cac9a26fbf80", "indicator--03424c79-a002-47b1-8093-d1fe608abcae", "indicator--29d24d35-e93b-40b8-a708-4aac7126ed1d", "indicator--14bebf11-24d3-447e-8a16-8ae2a7758ea2", "indicator--3b942147-7e4a-46a1-88b7-d43d2e8570c4", "indicator--f66f7bfd-d7cf-4262-87b3-1fd8cb23a685", "indicator--f66c0c34-6f87-4362-baa5-039e10a32628", "indicator--d357153f-daaa-4e6f-ae64-823b457ac9a5", "indicator--bcfc0c2e-aed6-4046-908c-3baae0ef74d6", "indicator--76aff7bf-9eec-4386-862c-806d2d560ae2", "indicator--c647b7ba-1ac6-4e0f-90bd-a4d58fc3efc3", "indicator--58b0cd70-738a-4052-83e6-ca53c61e6572", "indicator--f0d32a19-55f3-4c83-8343-952feadc15a6", "indicator--f9037261-fad3-46f6-bec5-7b39b780777d", "indicator--bca8f329-a410-41f5-8512-ad45ca595fd4", "indicator--90b059ba-4aa8-46d3-8768-d384115f7ab2", "indicator--3ea92e05-f7da-4336-973a-eb5b40ff9637", "indicator--199ba19e-84ff-4b2d-8735-c49ab114c8c2", "indicator--6ef5a739-9829-451e-b72a-75c5f6cb721a", "indicator--1f5bb736-a3ac-49df-b6d8-e3800fe78c0c", "indicator--af532f7b-8c40-40a5-a043-412477291d24", "indicator--08614cd0-fcad-474b-96bf-7ee216d5ca57", "indicator--2625f273-ea2e-4893-88a6-6d5adf3d9cb0", "indicator--85a0f324-f742-463f-8aeb-fba0d63bf0b3", "indicator--d33b2e13-8ef9-42d9-9a22-72acb5d6c7f4", "indicator--778d29d4-1c1d-43d9-86d5-93d589325684", "indicator--3f5b37f1-2b7f-4d04-8ec4-1bbbb5034858", "indicator--d720a960-8c4d-41f5-b11c-a1e773e9461f", "indicator--0ca7c581-b508-4b30-a532-b3e85f0d18b7", "indicator--12b55be0-a837-42ef-930d-5077e7a6fe03", "indicator--c828f16c-4257-4537-80b2-c80fa713b735", "indicator--76402e5b-d8b5-4110-bcba-ba6b1b9388b3", "indicator--a225097d-ce91-468e-9ece-3fb45a100d65", "indicator--5370f917-c98c-4625-81ed-d39d3ea0729a", "indicator--509d345f-2b46-4296-9cfb-e02f71956a76", "indicator--f53d6a6e-4802-411e-94c8-2f1635622e5e", "indicator--c8d8fa72-7cac-41ed-b3c5-e4213919eaa1", "indicator--373de089-7f4a-48d5-8994-6d55770461c6", "indicator--63230f53-00c4-4dbf-99ac-0193bb7f9e82", "indicator--849ff639-6b40-418d-9725-81b4d35c7302", "indicator--bd81030c-a444-4242-90eb-e029839b0c52", "indicator--549083af-952e-42de-b2cf-d6f9be7f483b", "indicator--588f171b-d946-414b-b115-eda1b6719f6d", "indicator--a3e5ee01-d7c3-41b0-97a6-c552aa7e22fd", "indicator--0ca9a0e2-b943-4203-bc16-6391d14a9867", "indicator--240c9f34-6de9-4f86-97bd-a975db7f8ae4", "indicator--d9dde8c4-08b8-46c4-8359-d66a99cea59d", "indicator--0cc649ff-22cb-4764-9811-30dd3b0dc34c", "indicator--57e8c80e-a0ee-4ed3-8088-6df10da5f8e5", "indicator--8fd70c8b-a6e9-4199-a6ff-48fafe9ffd26", "indicator--4065d8e7-4e0a-4297-9ff2-ecac0aaffab6", "indicator--9528c853-e480-45da-a8fe-92eab57ca451", "indicator--53cdcf34-22ba-4e68-8e40-95763a999e09", "indicator--385418f9-f7f0-4b3a-ae4d-c6b32f464ebb", "indicator--787a6857-a153-43c2-86ef-e67431a81298", "indicator--d9f4a295-304c-4f93-b9ff-978c90408487", "indicator--315e86e6-4b1d-4410-9155-fbe5afa5ab6b", "indicator--74194248-7ff4-4d56-b618-3042471e11ae", "indicator--3d6d4555-b081-4d98-8236-db174dfa64ae", "indicator--e9030b5c-e290-4cdb-a1b6-a547adbc34f9", "indicator--d1b0bf23-8e86-4080-b5ba-12db17e044e6", "indicator--2406bef2-a185-448e-8fa3-ee4d82db2ab6", "indicator--c1254269-6ae2-4a94-9fc2-7326dbcfc75c", "indicator--5c2caac2-a8e8-4220-98f7-519c2aba72de", "indicator--26b6e69c-40d8-4072-b10b-9a87ef6d5d29", "indicator--ad020732-869f-4a6b-a0e9-75cda59a476e", "indicator--4e7a19e9-3786-4103-8854-f13f95eea12d", "indicator--b8fe6ca1-56ab-4d3d-a2ac-4c7c4ff08f45", "indicator--a3a99d48-0c30-4ea7-b5cf-15b45234fb86", "indicator--8a30afac-248a-4c2b-8998-28d44d0d52d0", "indicator--52f74ddc-a496-41a3-9a60-efd129bb6a3c", "indicator--eeec2840-b0be-4203-ba0c-bbcf8fdfa2ec", "indicator--7841a7fa-89c1-4474-886d-9cbb59ea55e0", "indicator--36fb560a-3e83-414b-b2a1-e85d71937360", "indicator--ac743315-77b7-4ced-9c30-d231ba779f59", "indicator--e4197a62-74d8-49e6-820e-be847641fb6f", "indicator--de97d800-5fd9-4d5a-9847-aa17dde23b59", "indicator--a274f7a1-5bbc-4824-935f-87b6e2f8a05c", "relationship--aea85418-e477-45a1-a3a2-7a77a4cdbc37", "indicator--b3a74877-07f2-45eb-9cfb-dbec4b8a3ade", "indicator--1ac4eb60-b636-4c0c-aea2-e9b07d96580d", "indicator--1bdbbe03-872d-4630-82f6-988613917774", "indicator--08711871-c1d1-481e-a776-adba2aafc183", "indicator--a46d5f5b-5dbc-49df-8d60-67f5cf4d0746", "indicator--b78e6120-3f68-4cad-8141-b897d1cd6761", "indicator--a0609f33-0da2-47d2-ae28-ffdca558c247", "indicator--d7f2dae0-6d71-4a95-9693-7be0a2507ed6", "indicator--48ce8b4b-470c-43ff-a673-399756d6093c", "indicator--00be3cbf-f449-4522-908e-b8fd34a73a24", "indicator--f57fb3a7-e34a-430b-94cc-e3fc5e0f3f0c", "indicator--b7c1ed0b-8e38-47b0-ac40-6b636c25ec29", "indicator--374e555f-0f68-4006-973e-5b35136938cd", "indicator--71cdf1f1-7d42-48bf-81ae-9f84117c7a23", "indicator--1c7e6212-541d-4a40-bfcd-b197343d65e0", "indicator--ff953193-d124-4314-98b9-f7999e39b3b8", "indicator--a2a5e978-3afe-4fb8-87f1-ca6bbcdfc7f4", "indicator--9b9b03a4-8f2e-4dd3-aeda-f556f62fadbf", "indicator--16e3a249-a47a-46c6-8080-fb1e83f92efc", "indicator--356e4b90-37d2-466d-af02-355f1888d5d2", "indicator--f04b06fe-87a8-4270-9194-7b45b7c9c824", "indicator--1536945f-5501-4a1b-924c-db582013ded9", "indicator--de73faf7-4816-4e91-afdc-8ad8e4266938", "indicator--260e5aa7-60c9-4544-8a37-b1ad48216d09", "indicator--d85c45f6-bf87-474d-8990-90bb9530253d", "indicator--5a689ff1-d34d-4884-83d7-39232c547f7b", "indicator--8b5421b1-73b7-4831-975e-e61db9c3f740", "indicator--68e91188-e709-46d9-86ed-14168b3ee270", "indicator--a0b780e6-dcd6-485f-ac4a-19d94124d0eb", "indicator--5b3070d0-d517-42ee-9d82-d099ddfc584d", "indicator--ec0dcc00-e2da-4e8d-8bc6-181997c990c4", "indicator--050651ab-c1c4-4c8a-8b0c-ca7a70c9cf03", "indicator--0ad034c0-3565-488f-a39b-d9bccd339674", "indicator--6a2ac185-3dce-4a84-86fb-cd55a3baef88", "indicator--2e40ffa6-8ed9-4940-b8d2-83b76c14e5fd", "indicator--a40a76dd-ae17-456b-bbd0-a92dec660e99", "indicator--780b7bb8-5141-4647-8174-06de984a7882", "indicator--ea89d77b-fecc-4a2d-bfcd-58a278f62ac1", "indicator--877e25e0-525a-49d5-9b2c-39c273093b35", "indicator--0e45fa76-e782-4e3a-a8c9-f6123aaea276", "indicator--cf7ca62c-30db-45d8-8fbf-6c93f0c9b359", "indicator--6419681c-d317-4ef3-931d-b92555d36a34", "indicator--e53becbe-4d5f-4acd-a0cf-946627a9de5c", "indicator--4d577ace-2a9a-4104-ba4b-4b2588cb12dc", "indicator--ced50bd7-0092-42b2-858f-1b5ac1250ae3", "indicator--de898ee8-6908-4c6e-b453-bf8ca27dc6cd", "indicator--251e75bd-46f9-4e84-95fd-8034c357f917", "indicator--730ecbc6-93c0-4f33-9eba-17e808ae8871", "indicator--ecf0714e-27a0-481a-a388-c1d4554d8257", "indicator--c404d95f-b358-453e-86c4-91e6ac51c790", "indicator--33598cc6-b5ee-404f-9576-8f94d531524b", "indicator--bebfa10c-ed71-40a8-a04f-cd85f3ab2350", "indicator--25ec016a-ff72-4231-889a-5e2b015bc6c9", "indicator--11a05801-1d10-435d-a9aa-1f67a7fe5b47", "indicator--b51c1088-1fe9-4b62-a96a-458d193dc5a3", "indicator--7ece2e4c-cb26-46ef-b930-27e5f1ecda13", "indicator--a51bec27-2cd4-485c-9096-13372b792f92", "indicator--bc7fb715-8cd2-4edf-82bc-bf549eaa7f01", "indicator--7e2f7a22-dddc-4f3f-8f36-dfa6d4cd40b0", "indicator--0e16fb36-2056-4201-b0b5-06f6bd79a501", "indicator--320d1d2d-16a9-430c-be03-48499512195a", "indicator--9f3356e7-57f4-4432-81f3-096eef1e4d2b", "indicator--c7518d74-5198-4227-8df8-2cc6356f42b0", "indicator--00803fbb-18b8-491c-828c-24961a0351fb", "indicator--fcff956a-83aa-4fbd-a04e-5e7a45c4094d", "indicator--73a3ea9d-3607-48ed-843b-e7564dd6b269", "indicator--54990b34-9f54-4638-80f2-8d95d399b5e2", "indicator--19aaa86c-b54d-485b-befe-148d7a263cc6", "indicator--2916271a-6edf-4f50-a072-98c8a0d2fc05", "indicator--d7e2b8c6-0451-461e-a271-8bbcb1bf671c", "indicator--e08663c1-66a3-4324-a8a9-961e30dcc30d", "indicator--ad73f9af-7da9-425c-8014-999a9a5f675b", "indicator--d898cd81-7eee-40ce-be10-8d400750ba0e", "indicator--a84e1cb6-8d4f-4e32-867e-177c93212975", "indicator--687803e1-c62e-406c-aa1d-54b2bf8cd690", "indicator--a5c349ec-15b4-4e56-9b52-a9cf3181009c", "indicator--a689d148-3cc1-44db-9a7f-93f8d95d9461", "indicator--4ab0a1ea-a8ae-4d2f-9435-5c1076655a52", "indicator--b1807826-3ef5-4245-bae4-4529f80f1814", "indicator--88214b46-3f77-4cb4-88e7-345a7baccade", "indicator--0c907418-1936-48ef-bea9-1c4fce083609", "indicator--7675ae79-98dd-4454-be21-fc1b865ba78c", "indicator--3f6090ec-4b54-4a1f-abd2-49032aafcdc2", "indicator--ff8dbaec-181d-4169-84ad-9f0aef06bea9", "indicator--d417c530-c521-44d4-bad7-029bb272dca4", "indicator--031f9d58-e95c-402a-b804-4c9ab0d732e8", "indicator--3430adbf-1291-4aa5-8eb5-efd9fa6e8078", "indicator--eb04de00-6b32-40c5-b7da-76084ec13b2e", "indicator--b940e79f-5310-47f9-ac7a-becd46d54ca0", "indicator--fa810c7d-2682-40e7-92e7-b8cc922332a2", "indicator--7788f207-9dcf-4fd9-a1c3-a4e38fada498", "indicator--1a7cc225-9f4d-4768-89d7-973d72218569", "indicator--2d9a7ffc-2c76-4d03-bc52-e97b30d0f3ce", "indicator--6b41ffc6-67c5-47cf-9742-abed999629bd", "indicator--f9e59185-5f1d-4a75-9b55-bb70f94a038f", "indicator--0ee35b81-3b31-45f0-ad8c-cc94ff6a476b", "indicator--048df853-e2bf-4109-804c-824158f1e595", "indicator--c0c83d89-79e5-4ac5-b844-3679b4f39297", "indicator--b38dca6b-dd37-4bf6-a105-74e15ca445e0", "indicator--33c78ecc-b7c2-4034-ade1-dbb46078c8ae", "indicator--1b42251a-ad2d-4966-a934-6084b430cb53", "indicator--01c7ccbe-3357-47d9-b63d-a72e6640f87a", "indicator--7dcdfa50-5e53-4f1d-90e8-312c78c6cfee", "indicator--22a031fd-35e4-4176-b73b-e8c89e819e7b", "indicator--0e26e1d3-7601-4ecf-9a45-24361d59edce", "indicator--bd6c3099-dc3a-40d6-b74e-0140b540e7fb", "indicator--c4697acf-5615-49be-8e5e-f826fbe88166", "indicator--469e1fac-a053-4504-a6da-a5333f5908fe", "indicator--9384e1ea-b984-4f76-b661-85ef92b3e8e8", "indicator--8660317c-c703-49e5-8bc9-666bc0e53289", "indicator--1d7d5020-2d1c-4b56-8536-5ac4c82f4f2a", "indicator--189950e7-91af-44c0-84d9-5494c5bb5bae", "indicator--51d52da6-223a-4ba3-ad66-b973fd059bf7", "indicator--3a5b4a2b-1109-4157-b39d-db9ff624c509", "indicator--e3f162f3-2067-497f-ac7b-5b219e9da8ad", "indicator--9d2ea282-dcbf-4c7f-997c-942efb51b5a2", "indicator--155afb5e-790f-4e2f-b76d-cd1f9c2a3884", "indicator--3324393c-6e05-4063-a72f-fa64c2cba805", "indicator--59e38881-d886-42c8-a90c-3b5dd9a00837", "indicator--0e53a970-88f7-4b44-b49f-97262f4600b2", "indicator--6f41cada-b83f-4612-b559-988d9576d3ff", "indicator--db924b02-6024-4fb8-8e33-572933dc07b2", "indicator--7056458c-fa6f-4015-bf3b-0236dc8e0bf0", "indicator--def80a3f-84f5-4fe0-b8ac-fdf09bcc211c", "indicator--84cf4919-e119-460f-a36d-5ac3c94069ab", "indicator--cb4a339a-263f-4c16-afc3-1e4d6e7dbc8f", "indicator--0fa3a341-ceee-407a-93bf-52d6817b5784", "indicator--ec93a53e-988a-407a-a424-b77715688c91", "indicator--fa287125-0fe5-4651-b5ff-b1ab5fdfc74e", "indicator--e0b55017-a32b-44c5-b984-6ad4d13da417", "indicator--c9f0e8eb-2f68-4c95-860d-7b4a17d854e8", "indicator--7fb6174a-ff3a-4496-9de3-c759005f2433", "indicator--cc5624fb-8ddc-4588-81b2-8145eceac343", "indicator--32095769-1bce-4c7d-98fd-c5b1ad7048dd", "indicator--c9442009-8a84-43dd-9564-2513e9d62ea5", "indicator--55d85ded-9a25-47fc-857d-25d89d7acfec", "indicator--9ce3f862-25c9-4226-8b79-d103faf4f908", "indicator--0d69c5b2-ffde-4e91-8ce8-28e01cd0d4aa", "indicator--b32eb86a-3994-460f-a390-83fb682a9aa7", "indicator--15d1a48e-c8f0-4d2d-94a9-f525d6ed2c47", "indicator--18a7002c-3761-4eef-9d05-c109963c3407", "indicator--6ed05c79-81ad-4ae0-80c7-f863177f3f05", "indicator--fef5001c-0b26-4ab2-b120-10d4ef91ccc8", "indicator--73120aaa-21ef-4055-b2f4-ef2e4cc29cd3", "indicator--c31df822-01bb-405c-8230-997f2d5f9a08", "indicator--389c2991-8ee7-430c-9bec-55e64b58a4cc", "indicator--af444c51-0fc1-44bf-b966-d48227db4162", "indicator--a6f5a5fe-97b7-454c-be81-cd31e5f7536d", "indicator--8bd8c05b-277c-45f4-876d-a1ccdc0bc7c6", "indicator--df10bb13-1d16-430f-94f6-7ccc11e8c2eb", "indicator--66f21591-b7af-4e98-8c57-27b77c180d3e", "indicator--d6461062-1605-45c9-b11b-101bff279940", "indicator--c89e6da1-4369-477d-8035-ac889e81d54c", "indicator--edb75ec3-8d00-4cad-8053-7f0a29eef627", "indicator--73ba18c6-8ceb-4c70-8329-5792ae02333b", "indicator--73eeaac4-70f6-49fb-b43b-4525f7443652", "indicator--561476dc-a6b1-43f9-b721-7271dfc2375c", "indicator--17f3eaea-d84e-4958-949a-adc9e2063865", "indicator--e1b95584-d415-4ef6-aae8-098f1bdf2301", "indicator--5bcd5f52-7006-4114-97ec-44b1b4b3d719", "indicator--07e469ca-ab58-41a3-ac87-ac0b08ba7a8b", "indicator--efa23b87-a609-43ab-83e5-4bb2380aa956", "indicator--c4464f94-7829-4638-96ba-5bacde4c977c", "indicator--035fb447-fcdf-41af-a7b1-904b6c9c75d6", "indicator--d032a303-de25-45cb-a921-ad44346445ab", "indicator--20c084fa-e776-4ed7-b2dd-2d37b9d8d106", "indicator--3f9db759-3623-4b58-9a4e-8b7ccd4f3912", "indicator--082bce3f-3de3-4865-ae32-ddcf4a10f1eb", "indicator--0b1be23c-b0b4-4f26-8d3e-72253545b272", "indicator--4cce8b4a-e693-4ecf-8cdc-3743dcf7572a", "indicator--83b4521a-3467-464c-b327-c711995d8b6d", "indicator--58dc6b2d-2fb8-4b5e-9c19-bab909144ecb", "indicator--1313f3a4-74e4-4169-affd-07f046557ca5", "indicator--3fa39170-8e6f-44f4-bcd5-b9908e3341d3", "indicator--8104ca11-2385-4987-87d3-dc2a3b3e5ad3", "indicator--02e0e326-8905-4c33-a945-3882a96707da", "indicator--3d0b0533-7bac-4b3d-8930-0d3031dc677f", "indicator--dc178515-04a6-4050-8965-93caa9ea60bb", "indicator--904e4539-7437-4998-ae90-8c010eba207a", "indicator--b5492591-c511-44fb-ac20-70a6fd93f706", "indicator--1dc5826b-f493-451d-b045-6e744dbb8ba0", "indicator--c7b93bec-faa3-47a5-a577-4f83cd98783a", "indicator--8c077c11-5651-40d8-89e6-e67c8af113e2", "indicator--cbdf48c8-6930-44b0-b050-b4ded5d65d5b", "indicator--f6b8e75a-63d8-4181-9ef1-546e952cceb8", "indicator--7806c499-6526-4013-a0f5-06de730b7264", "indicator--d9757a1d-543e-458b-bb88-b2341dd28d66", "indicator--d3af7f74-71da-4577-8627-c549205d6c34", "indicator--d7b8ef2c-ef0c-4c61-96d5-564185ca4d85", "indicator--6b1dae8d-02ea-438f-aad2-b0106169d324", "indicator--93cd5f37-d685-4865-845f-9cec2c188023", "indicator--402e1204-6dd6-4f46-b0fe-0527e78fdf12", "indicator--b30f8468-6729-40b8-bdf6-a25ba8e85e36", "indicator--635c7979-d902-43f6-8249-b0325c3734bc", "indicator--fff11545-5fb4-4283-87d2-2a7ef6a81b0c", "indicator--7c3f1e8e-9921-4c5a-9ad9-da1ea419c612", "indicator--a72eb429-8b91-432e-a3a8-d745356e31f6", "indicator--3d440681-1633-450a-ba7e-ae1d325b66d5", "indicator--e305340f-4360-45de-9911-a850d9f04289", "indicator--89b7b399-ea58-4b76-98ac-bcece3d36924", "indicator--fafa9bdb-4a7f-4576-91ab-9341e289698f", "indicator--7664c0d6-13e5-44c6-8019-b28054b2634f", "indicator--41cd32bd-97fe-4f72-9bcb-e81305e2a891", "indicator--7c751ede-232b-4133-a48f-0c7c7fc50e2e", "indicator--e4c220e9-6e57-44b5-bd31-667cedbcc313", "indicator--3298bfa5-243f-4d58-81cb-5bb6f1e73ef1", "indicator--0bd51ce7-ac60-4bd2-b386-d206e23fa3db", "indicator--f86b2eb4-4b21-4716-a9d5-3f4645be5102", "indicator--c8a73dad-e02c-4d1d-aa47-e2758d20cd13", "indicator--33423faf-508e-4998-8fb2-276d8f4319af", "indicator--71d9e1a1-58ba-4831-8765-1ac47a485143", "indicator--275f644c-9e21-43a4-8970-f1507ad279ed", "indicator--56c70f14-8550-468d-83a6-f75e1d63e994", "indicator--354389b1-58fd-49e3-825b-1a97658bc747", "indicator--caaa3db6-2887-4547-98a4-e6ec612774ce", "indicator--584d4dad-829e-455d-86cc-19214444702c", "indicator--09003a12-88bc-4f70-8e8c-fc64158b18be", "indicator--c7007907-d917-4838-b32c-fcda82ebbcec", "indicator--5779bf7e-4ce8-4ed1-b13a-5c507a724b0b", "indicator--dc68151c-1131-4577-bf17-d42edad080b1", "indicator--00155a5f-d64b-4259-bab9-0ab996f98a2f", "indicator--344f8b77-e2ee-47be-a1df-c5390e806d6c", "indicator--43c43695-7f21-40e1-abe3-35b3c91f99f8", "indicator--9a5ff503-ff79-4005-94ed-eb2e1d314f76", "indicator--0fae4f53-5c3c-496b-860e-51f2d08ef129", "indicator--c9d8eda7-0d53-421c-8a50-eed6adbae493", "indicator--56dd65ae-f39c-4f87-8c99-fc72d6778350", "indicator--480128ff-0b0b-4fd1-939d-04136e0c1324", "indicator--3b40665e-9d56-4d50-bf2b-3db3c42e084f", "indicator--386f7a37-3a50-40f5-af17-05e595993a73", "indicator--9e292f96-88f0-4d4f-9126-52a33c1a1b99", "indicator--927942ab-3b97-43b3-8704-3177ccf44063", "indicator--d2ed036d-d1e3-4d72-8766-a41a73ca157f", "indicator--87dc8bfc-60fb-408e-b604-235a3ef9dcd8", "indicator--b8cd4125-fa77-42c3-bedb-f3581e49d1bb", "indicator--15525a66-9f61-484a-a3a4-a93aa61833b4", "indicator--d5f4f69f-a51e-4146-a588-3037bac2fc94", "indicator--fa88f1c6-9022-4604-9507-d1f33c579b9b", "indicator--8982ba99-d2b6-4139-8c56-1544c3a3ec2b", "indicator--f58ebd03-2198-4a2b-a2bd-4ca7929f7d01", "indicator--16782ffc-9a52-4b87-a161-ce8ac765e9e0", "indicator--9a2b7667-925b-4543-aa30-5928904c29e6", "indicator--7185814e-04a9-425c-9d93-c16222c6bfed", "indicator--13af4975-afbf-4404-93ea-0be53925db45", "indicator--25988bfa-589c-4d97-bb9c-74e23960c761", "indicator--5cd0463b-ac0f-44c7-9d8f-f40b5e60555a", "indicator--c3123c04-03f5-4786-a32c-e89400131413", "indicator--ae5a9c00-0337-44dc-8716-dc5a99f7b9bf", "indicator--26e69b7a-dbbf-4eb3-a2fb-9d59670b5c6f", "indicator--102ed959-9692-4f0e-ac7b-2ba065df44ba", "indicator--80b6bf33-f6fd-4ba0-9215-fb37925abeab", "indicator--43497d60-a138-45d3-bade-dbdefd27b27f", "indicator--6aee1fe6-8768-4949-9477-5e850673d757", "indicator--544e8e3c-8b10-4852-95d2-14f0a483a5d4", "indicator--8988670b-a501-4f1c-abeb-cc04f3aec243", "indicator--9d09ffc1-969f-43a6-aef6-c8f0a90ff563", "indicator--1834e81e-a9c4-4a27-bc5e-2c33ba21fea3", "indicator--45a6aa5d-f065-4bda-9c95-3baafa88c4d4", "indicator--023a52d8-d5db-4c4a-ae95-9fc4c394eb8e", "indicator--9645f2eb-1860-4712-a099-8dc256172606", "indicator--4eeaa5d3-e840-4e5f-b610-a3d89da31d3c", "indicator--c7722a97-69c9-4a40-9f5c-f3d1e12f0f23", "indicator--82aec5d7-e310-4b09-88e8-502439ce19b7", "indicator--86d633f8-a8c5-4d03-95d2-eb7624bba7a9", "relationship--b1790f11-ae29-4501-a430-8f302346d404", "indicator--bc6968b8-bfff-4bd1-adb5-4233d3900d05", "indicator--85cea1a7-da65-4f84-ba18-0c8093772835", "indicator--e2c4eeb5-34af-4bd5-896d-f509fba13702", "indicator--aff26858-f6bb-4416-95d4-4ad1faa610fa", "indicator--57a58a10-b2aa-4691-9e63-a0b9b4c51993", "indicator--dc8dce2c-52b3-4c14-a587-dbe68f015278", "indicator--ab18a72d-750f-4cf8-95fe-27a21bae4bbb", "indicator--d6c9f1cf-3b0d-4892-9848-5541f9f7072e", "indicator--c6ff78bc-1c38-47c0-b112-48193c2012fe", "indicator--0bb49cea-1e32-44c2-9a32-0988013df9e5", "indicator--44021069-2705-4069-a484-4afb45559ce4", "indicator--c988c00c-ab5c-4811-96e9-09034a530916", "indicator--15ba198e-2f36-45e9-9a92-183817876dc3", "indicator--774eb9fc-883b-4068-a1f8-24639ddc4b3a", "indicator--83ad34fc-365c-464f-9ae8-f70af2490de5", "indicator--4e3b8610-f528-4790-af74-7f645e039174", "indicator--a6e35008-a15d-4586-b4de-98a6758339fb", "indicator--f0f3495f-0f0f-4ba8-886d-77b9883006d6", "indicator--4ab93b61-47a1-4928-8bc1-114a21710379", "indicator--6e2572c4-c888-4292-90ec-b4c003ef7e95", "indicator--63b4f4e2-ca8e-41ca-b484-fdf099878b85", "indicator--12773d8d-f93d-42d1-89f5-f40761a24bb8", "indicator--3740d1a5-4465-47d1-a012-6b89b5844713", "indicator--d93d05d0-479a-4680-9169-1af8a8d6295d", "indicator--318c54e0-0718-4c98-9cf2-c4f1f16e3213", "indicator--92f54175-39ee-4828-af14-19982de25882", "indicator--4bf8d7c0-0f2b-4915-b751-b279bc4da2ed", "indicator--263c0edd-f5f6-4a3a-9004-d2370a54ef0a", "indicator--e54a442f-77e4-48ba-8626-3f6aa5107827", "indicator--c7d2ff97-643e-4478-9774-138637afcb94", "indicator--97854a4f-3582-4bec-a8de-3b4a29ee3d9b", "indicator--f8ab27cd-86b2-44df-8f75-0cfb0fca2da4", "indicator--d66d86a0-0be8-4d29-9cde-5a1821f00024", "indicator--293c8256-9c84-4743-9178-d2c7d81d1728", "indicator--95bcb95f-4306-4384-b373-d2ea89510d4a", "indicator--b4929bb2-75eb-4b73-baf0-376448f556eb", "indicator--1431a9ad-6440-4fc6-a73c-8bdfcb51f680", "indicator--43f12356-9709-4fb3-8d05-23bcf925b169", "indicator--382270f1-b5b3-4832-a298-44ccc7e7c092", "indicator--a1f5e720-8c49-439e-8429-1e84b7b0d7ff", "indicator--18ac00fc-354e-4218-a503-a04b489fd1f6", "indicator--cf641c2e-f340-45c7-b094-65de417d6dfb", "indicator--135f733e-6e0e-4ff8-855c-dddee5a42969", "indicator--b5080372-68b6-4a2d-9291-9aa2e0cf93cb", "indicator--e4523150-3f53-4d5e-88a5-5af532f63e14", "indicator--960b10a5-e49e-4545-9048-e58ed5233f97", "indicator--3f5ef9a9-37c5-4082-8cb7-28b0c25f0ebb", "indicator--82fb2950-cf7d-46e6-bdda-1eac1451b9d1", "indicator--85ae32dc-df23-4524-b56a-55d7f3521dd7", "indicator--a5c1539d-39ec-48d6-b35a-b81aa765eb66", "indicator--74de85ab-36ab-4ef0-9f84-74a8af6a8a75", "indicator--8b755ffa-d370-4fa6-9862-972a1f98b24d", "indicator--97c405ba-010b-4183-8103-12eb16bba6f6", "indicator--a9279a5c-67fe-486d-8e29-b8c8b8213d26", "indicator--0fcf145d-1112-4395-97f4-f4e186070e41", "indicator--c1a137af-d1ad-48a7-a15c-58b6cb021f5c", "indicator--a74cc576-919c-4fd9-a2a0-14ded5694c99", "indicator--33a8d2c8-8d69-4a41-bc6d-c9dc6e4ece0f", "indicator--627cd178-ec18-4b18-9bec-3e126414e0e4", "indicator--3c8cbc10-47f6-4416-97f3-684c8b8dc03f", "indicator--43160561-9a15-4eea-9813-0d00292c32aa", "indicator--7965774f-62d9-4952-b85d-9ec2d2f49e16", "indicator--6ec32c73-f8bd-4bdb-9c38-7a18ec4f2f4d", "indicator--dd7584ac-d56c-4b88-a414-8e8bcdfc9fea", "indicator--f586c8ae-f2b9-4fae-ab2b-a0e1e3176404", "indicator--9bf9bf3a-caa1-4f6d-a58f-8a2720a066d8", "indicator--e8a96158-92cb-404c-9146-a2f1c24dd02b", "indicator--0c9e2a16-b67f-43df-9140-11c0a569ff28", "indicator--d02cee04-b8e5-4556-b092-acbffccf46a3", "indicator--dd5f079c-dbbd-4ea8-a223-9821438af1b0", "indicator--6f886b2c-78f4-4f15-a668-0bf245c1f535", "indicator--fb518ba0-66a0-4323-b1b9-5da1ca04722c", "indicator--86224b5a-29d8-425c-81f7-93bbcc9c8746", "indicator--219bec3f-4848-42db-8f72-42374935e54a", "indicator--70107184-4cea-4f58-9da4-2d1c70e5fb91", "indicator--ef9b8b12-296e-493d-8b03-e3ac2f5893a6", "indicator--9ee3f6ba-6b9b-466a-b4b0-6f83d2a30a8f", "indicator--0158d656-12d0-40c1-b065-aee886f59134", "indicator--041ffb64-2542-4e52-9988-d3acc30880c8", "indicator--604af7c7-6bf6-467a-8b01-b36c4574cbf0", "indicator--ec25d864-c844-4e7b-818e-7802d0a4d465", "indicator--c0b32405-1010-418c-a5a9-6375e992f8f2", "indicator--0a0ca42f-3682-4783-8776-d6b3bf2ab083", "indicator--acae8f64-82aa-4ca1-a099-a6a5af0c45d2", "indicator--28e1692d-e1d3-4469-9fed-f9766dda2037", "indicator--5b37ae63-6aef-427b-9aa1-d4951df3b853", "indicator--eb01a06b-c859-4f87-9d26-15ca112a6014", "indicator--43ad2384-d463-4fb2-aec4-0a6921ce274b", "indicator--aadce70d-3d1e-4d01-a730-98bdef3a7075", "indicator--dcabf447-82dd-4c1a-8220-78813673006f", "indicator--f1972254-af86-4cbe-b4a3-f227f7ae6900", "indicator--62ec8559-60e0-40d5-807f-c32dafb6ff9d", "indicator--d814177d-6ec5-44df-9dbd-a12626c33047", "indicator--4e5aeb24-1a68-4ad2-8384-5959a5079ede", "indicator--a8699865-d092-451f-9785-c8d0aa509a59", "relationship--330636c1-2c74-4d3b-bbc8-1365ae4536b9", "relationship--1b28a286-4651-4363-af32-387042abd113", "relationship--0a9ef101-8264-42c4-a869-42aca74a8ccf", "relationship--712566fe-9ff0-4081-ada0-fbacb8f075a9", "relationship--6cddf096-d488-479c-8a19-90410ebb9074", "indicator--16517a6f-e508-415b-8786-fe66c5ea911c", "indicator--8389e46e-cf9e-4e9a-9493-193363dae45a", "indicator--ee70db8e-55f9-4fa0-9583-bc5c4127059e", "indicator--c118c9e6-824e-4a83-ac1b-0f5013f58132", "indicator--293e01f6-9bab-4105-9444-d220ae16d08a", "indicator--1dc1a944-ab9c-462d-a7d1-250e2d7ace11", "indicator--2fc71770-f00d-4aed-9468-b5dcecbd3f42", "indicator--f9b36189-2474-4604-8c2b-51866f100c62", "indicator--5f8a0856-5f5b-4b8d-9ec8-fe005b44eb03", "indicator--84e84087-533f-4839-a686-341bfe145ee5", "indicator--85fb97f6-28ee-43bb-8616-32a48af9a0c3", "indicator--9116ab65-7668-4c9b-8e5d-cef1e4f7aeba", "indicator--bcf76090-1414-4dd9-9cfc-6bbe09c16023", "indicator--c16af89e-b2cf-4a10-83cd-c77dff565a5f", "relationship--373adda9-43e4-4465-b512-6e3e64de3391", "relationship--bec37dad-8ad6-4b2d-b632-2f7999810dc0", "relationship--0061aa35-3cca-4a84-a94f-2c167d5367d9", "indicator--60efc94f-6aad-4831-a6ad-a957637eb973", "indicator--de94b722-6d44-4aeb-8f18-c8671937360d", "indicator--6c96c4df-ea7e-4c5a-b3b2-08bfb3e66351", "indicator--27aa797d-031b-4633-8e8b-65bd0951c8cc", "indicator--78911ee8-3951-4776-8958-083be748df02", "indicator--9ce5c348-aac8-4fc7-9609-be9eedcf632d", "indicator--b559cce9-d3a0-4cb5-a183-f728f57ec6c4", "indicator--830a714e-737b-4289-ba16-b4a425ad19e9", "indicator--ad6dc8a6-f2f3-414b-b9a1-981ffba53cc3", "indicator--122e07be-43cc-4542-954a-7d63d3b9412f", "indicator--c9d63365-91e4-4160-bdda-2578806be329", "indicator--e44cc495-52b5-44b8-b98b-aa66d0708d37", "indicator--ff9f0791-ba73-4a6a-bf98-63a0094bff0f", "indicator--6a4a2677-f1b8-4df6-b93a-cae0eb07722d", "indicator--dd0390cf-9763-4cbe-98f1-508dd58a969a", "indicator--a9267048-52e8-4808-b712-d5ae57d8caf4", "indicator--52bed67d-7a5a-40b1-89ad-2489e14d2b69", "indicator--da4957b6-5d57-4ed9-8756-2f02341cf10e", "indicator--3d24a687-9318-49f8-b915-1eb666cbff5b", "indicator--6b70110f-9d68-4137-a1dc-3732d7d21261", "indicator--79d55e37-5edc-451e-b0a1-d7649d4e7978", "indicator--63040676-76b6-4bc5-ba77-6afdd6770ff8", "indicator--4c9787db-dacf-4691-a31b-52143ffc040a", "indicator--9d16a4ba-930f-4c2c-94e1-7b7914811209", "indicator--1fed7dd3-1202-4824-adfb-6797b8b5cfe7", "indicator--310ea9da-5187-4bfc-906d-344e14b18000", "indicator--59973be7-6365-4584-ba9f-77364237c163", "indicator--cdebaf87-6dc4-420d-bff3-4368468e287b", "indicator--c6b6f583-e2ef-46d7-8165-b1bcdeebc1bd", "indicator--acd827b6-92e9-4e6a-ba42-a4dc73825698", "indicator--f64e492c-859b-44df-95dc-a2b964305bb2", "indicator--ae09ef57-6078-4ba8-96c8-998de2e4da25", "indicator--80e518ce-5773-4c24-9fe9-3bcb6419c783", "indicator--228a2430-342d-4843-ba38-5e3428dcd1fd", "indicator--207c57ae-73d1-499f-b316-890b438bcc4a", "indicator--a9480b21-d268-43b6-9976-75d6042d9397", "indicator--3fcb85cd-6035-4431-9aad-abb2b076d96e", "indicator--e55e43dd-16db-43bf-a83a-452dd67b7538", "indicator--7908cd75-0563-47e9-a881-24911f14f8ca", "indicator--84f6b1b2-5411-4d8f-a9ba-c0b48c137597", "indicator--07cce374-bf10-408d-bd87-4f377d5cd610", "relationship--f0826d29-118d-485f-8b38-fa86219e0a56", "relationship--06aa207a-ecc0-41bc-8265-40bfc023a92f", "indicator--ae428275-62b9-40ef-b80f-03739b340581", "indicator--e7b4a250-06ff-419e-96ea-91bd442474d4", "indicator--75e48f8a-d8d4-4517-b861-ad5b9b175ae9", "indicator--097ec03d-3dc8-4615-be30-222945a575e4", "indicator--1b08f842-7961-45a2-b796-45ed4031909c", "indicator--171a7f58-0942-4d73-9d91-71b1f2aadb73", "indicator--f9fe0964-613f-4c5a-b57f-e884cb7245e7", "indicator--f2443d1f-6bbf-4da8-9ca9-e2cc94a41bff", "indicator--83565f34-c09a-4a02-ab42-e5d68bce739a", "indicator--16b405e5-e238-4a86-ad65-adde97d4d070", "indicator--70b6657c-1c8c-4f15-a98a-ff4a4f2410eb", "indicator--66a8c3d5-caaf-4729-b092-1ddac036b984", "indicator--5142f0cf-9e02-48ec-9eb0-fcf4e03d46bc", "indicator--d3890460-c77a-4349-b946-19d565288a59", "indicator--08d0395d-35e9-4b4d-a9b0-4bb572c06545", "indicator--968faed3-115c-4659-b010-3c6ab3e2e803", "relationship--cdda7d2d-c34c-41d0-80e7-a09bcdd9bf3b", "relationship--3807e229-753f-43ff-94c0-483712a7b5c4", "relationship--9278a7af-9efa-43d3-8933-76016254f367", "indicator--b8df4dbd-9ffc-4947-809d-b1421e0c262c", "indicator--a4a8d614-8a6a-48fa-8663-548f5cddcf54", "indicator--e17e3234-301f-4644-9404-cc83ddaf26fa", "indicator--a2359a72-b70d-439b-aa6f-86692f6d3b1c", "indicator--8dc3d66c-b22b-4bd2-bd9f-316b71873ba2", "indicator--737e66ed-651f-47f9-9753-b2af0916c7d3", "indicator--3218323e-2eb2-4239-ade7-d16a394f7925", "indicator--14d84b06-665f-454e-9e1b-81fb44550614", "indicator--69c2e6d0-3545-425e-af60-0798a38edfac", "indicator--1da73df7-b387-4308-b969-276e7583ca14", "indicator--209cc8dd-3578-4151-a35a-ee8201e058d2", "indicator--a5eb9af0-7c65-449e-bdca-53d292af4b26", "indicator--dbe5d835-1658-4ff2-bd99-a728b74801ad", "indicator--c8049b16-d458-4167-9453-b7759525742d", "indicator--25b7c3d4-55de-4d63-9f38-4667be9f8ef7", "indicator--7137f3f5-e8e6-4cc5-a8ed-a73e927e565a", "indicator--7c65375d-a859-4b8c-a0bb-e1807922fc12", "indicator--c0e7d218-d5f8-4747-8cf9-ff4f823d423b", "indicator--a7e04c4d-0fb8-41d1-bfb8-553dae3d0fd9", "indicator--f0a917a3-3b4e-4ed0-abde-21d4f795327c", "indicator--ac2deab5-1765-4583-8ddb-265a572e9510", "indicator--4a62bb97-91fb-4e12-b038-cd007ed06125", "indicator--8c12394f-afd2-466b-ac34-d20aa7d63d42", "indicator--f7d231d5-b2b0-4e0d-8e44-0b09e36b1ddf", "indicator--4a7d312b-d332-421b-9199-07a8240d25a2", "indicator--880fce0a-9b5c-49e5-8e68-c0066159c5bb", "indicator--8c2bdedb-6ebd-4aef-b677-bbe989cd066d", "indicator--f7de4e59-32f6-49cc-b3be-ce320cccdd51", "indicator--e774b83d-af96-4715-8826-8c5fc196052f", "indicator--cb18bb93-096a-4893-b8f4-fa37657431b0", "indicator--65dbca08-14f3-40b4-b531-183a2662bd99", "indicator--3c29913e-f5d3-4d30-890f-ef5eb8535959", "indicator--1a0b94cd-aaf2-42d9-a974-41705655220d", "indicator--19bc23de-652e-463a-abbb-bcc9b7ae31ef", "indicator--77086f69-c633-42e4-a293-51f2596112db", "indicator--6ad0cad5-b76f-4db7-b67b-26d73183fc94", "indicator--e075b839-9d36-40af-9a6b-b149f9779835", "indicator--2901c0d2-de99-4531-8eba-2d95eb38f6b8", "indicator--a2bff8a8-7310-4fc9-82a6-65befcd5d677", "indicator--6fd303c5-4e3b-47b1-8b4d-b19cec087801", "indicator--ffb647fd-ad06-4f43-8f1f-99148f5a5479", "indicator--d64df024-5ac8-4992-9396-32ffb1ded0bd", "indicator--7c974999-4a66-4807-bc63-9ba9474417e0", "indicator--41a944b9-e67d-4fed-be43-52a03d4cf9b7", "indicator--77d46e72-3053-4dce-81a6-17157c8a3b07", "indicator--6023c5eb-8ab4-4e48-82ec-99b24e92c232", "indicator--70827f84-6080-45c5-a83b-aaecb0f083d3", "indicator--a5584cc5-4058-4fa7-95bc-82f5510664f8", "indicator--7af06699-2cc0-4105-a046-6a74126dbe54", "indicator--62275789-188b-4856-bf12-47385b8a24f8", "indicator--15c6730f-fd96-4639-9c8b-7c226ba45c1e", "indicator--f9a26502-bc6e-4498-9637-9d858390de8d", "indicator--ded76e38-335b-417f-bb06-d90d778d8cba", "indicator--429ed722-6cbf-4bd8-9e12-07eff4cd4811", "indicator--03d12f6b-3d5e-4d38-8fb9-9d30c64e50f6", "indicator--dd15932e-5eb9-425f-911d-3c1a705e9f07", "indicator--3f7c0ed2-dc40-4eb1-afdf-d6fb1efe28d5", "indicator--36a3cf25-1be6-4c22-9b60-473e861a2f28", "indicator--f97ab067-8d27-4268-ab74-1ef0911262ef", "indicator--357632a6-118f-4b66-920d-c357e44d3c56", "indicator--d4c4abbd-35c4-4ae0-9ea6-c80b4a519934", "indicator--9a964834-88d5-4743-8b1c-b93bc3b8114a", "indicator--3c350950-8557-48a7-8b12-8ae41e75029b", "indicator--9de03eff-ddeb-4865-a85b-0050745caffc", "indicator--f711d9b1-fa25-49cc-aff0-71d67c3ac18b", "indicator--ff33c5fd-9a38-438e-98bc-3955f2e5cb24", "indicator--14a2a710-7e86-4a4d-a4a6-ec27d934a7cf", "indicator--c8fc3595-79db-4f92-9e03-159786357a2f", "indicator--96bff6c4-facd-40cc-a5cc-7bc9b8386593", "indicator--fa6631b8-11fb-47f6-bcf7-f08c4b272d24", "indicator--05e016a4-d1d5-4dc3-a247-3a25aa018009", "indicator--c932e9c4-2217-40d0-abef-1b8c00b7608a", "indicator--afa0679e-324c-4b9b-a19b-86f6e0c8fc38", "indicator--864c7c63-9e48-49a0-988f-b434af08797c", "indicator--6eeccc3e-c0d8-45f6-8ddc-5bd9beba30bb", "indicator--17c7d5fa-6873-47c7-9e6c-4c4c1efd3483", "indicator--5657a64f-b953-47ae-94d0-fc874cd34ac7", "indicator--54b40c29-c185-4bb8-abbc-2683fdf5c00a", "indicator--c432f40d-13dc-48a4-801a-e4dd3c28e027", "indicator--d1f63960-7ed6-4cc4-938a-c2d3879417a9", "indicator--73d7856d-4c44-4d77-9f76-2ba8f7391a20", "indicator--d08dc057-8401-4116-ae01-c5214247b8ea", "indicator--7cd19118-c26d-4863-a0fe-ced252af4ea7", "indicator--d33321c1-15fe-423f-8a9c-ac2d5189d797", "indicator--bab670b0-7cc1-4789-ba1f-e689880dcbca", "indicator--47f67024-5267-410a-8648-b75673372234", "indicator--80d06a89-e94a-4ce6-b3b1-1fb081b1248b", "indicator--3898ed26-cabe-4f06-be2a-a35efbf7fcef", "indicator--c648cb2a-72c6-4c0f-bfca-5dc2b8d26aa2", "indicator--d0baa7b8-4f24-4454-aead-c1cbc4ad8050", "indicator--8daa0bf6-2372-4d80-b6f1-112953a5d791", "indicator--575f1e83-b625-48e2-bf2c-df5ad8e72e34", "indicator--38406183-a372-44a7-bd1b-aec3db12eb3b", "indicator--0ab561ed-d667-4360-8757-fbe43361b9db", "indicator--fad439b6-12e9-4a47-b8dc-d8ccde664265", "indicator--af531c74-1b8a-4391-ac16-b1e13c944aae", "indicator--a1d63f6e-ca7d-4adc-8453-55734a3e559e", "indicator--f3e48b4c-e394-4d46-9f13-fe818c0ce3fe", "indicator--90c7314e-2f94-4c6d-b529-124c391a9360", "indicator--5cf48821-71d7-4f99-a176-364c19373f84", "indicator--978e99f2-4006-46ad-ad87-73f21c5e5ee5", "indicator--3aa26387-edda-4880-8ee7-969b78d9eef7", "indicator--9663084e-a038-45c6-9481-aa3f495f21f0", "indicator--a949f49f-e6df-4234-8065-8421d92029e6", "indicator--56b9987e-7895-4a8e-a60c-b3ffe52938e4", "indicator--0ddced4c-e458-49b3-b3db-7c6c5768617f", "indicator--05003739-1c78-47ae-bd54-fa46695fffb4", "indicator--5d265706-65d7-4e8f-a022-fecafb2f8453", "indicator--59c49ec7-4cd2-4013-bd6d-8ed4e6cc15df", "indicator--2716adc7-5691-41fd-90ff-7d61a481d355", "indicator--c964c89a-3b21-4be7-8e5d-1bd1477d8f3f", "indicator--2128a935-cf32-4010-a9da-7cbdcde66718", "indicator--1c03115d-2db5-4278-a054-24701eac8dfa", "indicator--437f9be2-dd3b-40e6-afa2-44c8eb149f19", "indicator--a91b696c-7c3d-4759-b708-9e6bda0a74fc", "indicator--91b7f9b2-0eaf-47a6-8864-24b09805d1f2", "indicator--e7950255-714d-4dfb-9eb6-d7d22dccdfc3", "indicator--036c1fd5-d734-4c84-abad-b77250735546", "indicator--daa3f389-8403-4ad3-8cac-1d9d8e1d110e", "indicator--11123120-0914-4a20-9b02-74386ee734ab", "indicator--134a34a1-1239-40f6-b1bb-bcb0703e4c89", "indicator--6d663086-3ca3-43a8-94fb-0c4cdbbb8030", "indicator--4edd9c2e-1b11-42bf-bd7d-f14bc3f930a0", "indicator--6dc26acc-2e5f-4189-8118-7a2435663def", "indicator--8a71fc09-fc67-4b90-ac33-a28445a7b057", "indicator--c15e16f5-f8a2-42b0-b19b-f8a0025545a3", "indicator--4e75fd86-7651-415a-8fd9-8ba7e8d0badb", "indicator--32f77d29-6be2-407f-a86b-45dbb2e5c0a7", "indicator--f843f456-df57-4131-9a4e-1e1646dc2546", "indicator--e6fbe0a0-72b8-498c-865e-9a81b95e777f", "indicator--199cda95-0572-47b0-afcd-58d1d132cd1c", "indicator--75f41533-e03d-412c-a269-888c6a54ca3b", "indicator--4df2f772-99a3-4244-98f7-3bf6a766d9ce", "indicator--9f44e801-6c9b-40de-9bf6-c8eb6f9e0b87", "indicator--6a202d91-6c93-4d28-80a9-0bb4e08d939b", "indicator--eef58084-a66f-4a0a-bc48-8abbf9793b30", "indicator--b88963db-49a2-48b4-990b-97413428e937", "indicator--8e79fca4-c253-4b75-bd4e-8f635e5ad7dd", "indicator--b482e2c8-a766-447d-8256-1b3b868ba799", "indicator--815dfb87-2612-4cbf-8714-18358ff88b1a", "indicator--7c0d77dd-ffbd-4b74-a9e6-dd482b2ee960", "indicator--c939d339-c3d8-41e4-b926-1d5d22ecb16e", "indicator--7dc5d7a2-30e8-4cfe-834f-a52b3558c05e", "indicator--8b9c3d56-a636-4270-9b07-0dc524c03598", "indicator--978d9eb1-e2ef-4a68-87d2-3dbccef82764", "indicator--bcd305b2-c106-43b3-9754-5c0eb05f3c3c", "indicator--b74c7207-d840-4ea9-bb5a-775b5989b784", "indicator--949e955d-5a23-44a7-a673-37289c85da0f", "indicator--65072161-12ec-4d31-ab3f-0138a034bfb2", "indicator--4e826dd1-d019-4143-9e35-52e8cf94329d", "indicator--32bf2842-d1ac-49b8-8609-655c23b83c74", "indicator--bc7fe3d8-b99a-413d-a017-c80462b731db", "indicator--49ea164c-ee68-4abc-bcce-f430d7f65519", "indicator--2abdf40f-8497-45b0-b019-78e477d2bc28", "indicator--3747ee6c-0925-4157-b622-2dccd0b6be7d", "indicator--d6bda4c7-1bea-43ca-ab15-5d83007295be", "indicator--2d2d6f40-a00e-46e2-9aae-1337b6359e2f", "indicator--d96ef9a8-a1e8-4b34-b16c-1427b5247b53", "indicator--d3def754-bc14-4da3-950e-5228f26c3eab", "indicator--e0564d86-9ccc-4c45-98ae-7b6d6e69639c", "indicator--04fe8bfa-80b6-4e37-9547-b5f5005584a0", "indicator--9fc6d0b7-5d16-47f7-8388-db64c5f3390f", "indicator--49c90fe1-721c-4de4-b4dc-47c9a265aae8", "indicator--27104501-04c1-4c81-aba7-08ad9b110927", "indicator--3a40ae0f-7230-4547-9946-d6cd480d1e30", "indicator--b4f95496-06b6-4bc6-9627-c29e6602b3d8", "indicator--54fc9d7e-6b65-481c-97a0-3919e52e0cb6", "indicator--7213f42c-395d-4b13-ae82-ce935c32cb81", "indicator--edcc3ce5-7ef2-487c-bea7-eff1038f6ede", "indicator--e43fdc05-4772-4363-bd87-d81b13436705", "indicator--0665b28c-a2f2-4856-89e7-ef1a660426fe", "indicator--8e0d164f-1b21-4b74-b83a-70aa8a23aee4", "indicator--22a63e28-e794-49c2-b6cf-fb2a39f62a1e", "indicator--215c71c2-89be-4ba8-9891-d4b560909dc6", "indicator--1d027e94-1b7e-41a1-9b24-03f76c5d6388", "indicator--58470233-a73c-49b3-9855-a2fd4c67e857", "indicator--1a19a855-107b-49f5-88c5-7d3167231ca2", "indicator--1a7e7124-803f-4647-91a2-cb8f94704718", "indicator--a863886f-01c8-48fb-9f3d-9f51ef87f46a", "indicator--8a779a04-81f1-47c5-8feb-9f52ede27653", "indicator--09581033-b716-4cc7-90fc-84ce96b0ad30", "indicator--ea5d36bb-0dcb-4dc3-af65-c2c2d32e0e17", "indicator--07252e98-cfc0-491e-9522-c3ffcb33ae1a", "indicator--d5c1fb66-9ad6-4dd6-94ae-a848ec51bc22", "indicator--89402272-4805-4f55-ae8e-ec39096a21c2", "indicator--090c6663-1f1f-4717-8e83-71e360deceba", "indicator--01235d2e-2387-4934-b537-de0377477d53", "indicator--fb211051-82bd-4a68-a417-27cd74d82902", "indicator--e360ac3e-5fcd-46d8-ac5d-83c030a32c8b", "indicator--98f41858-449b-4753-84cb-750de23c9dd7", "indicator--c3f78b69-bf62-4fe2-b603-4aa5df5d7ad1", "indicator--0972954c-ab61-4f79-87a1-65d5fbe0a48e", "indicator--ed9865a5-6fb6-4a86-962e-5fef29b3be51", "indicator--af2c7c46-0036-49dc-bf53-2ff473322768", "indicator--bc876b2e-073c-45c2-b4f0-4d600362b096", "indicator--63cf8c5c-d28f-437f-b775-20c9e014636d", "indicator--12409b51-6cd6-4069-9688-04f9e0cc8209", "indicator--0dea989e-5809-42f7-b203-55ec7a2dda39", "indicator--e3649a46-3947-4117-b424-f1d741a7a828", "indicator--b54d0870-7ee5-491c-bea8-3480f13edf98", "indicator--6d205fea-bb29-4518-ae43-9741be20c370", "indicator--27dd3ccb-ae7d-414d-93af-b00a660ebc1f", "indicator--b8a48450-6998-4190-9537-f0afadc7072a", "indicator--4f0e9117-05e1-4781-bb59-94857b5404f6", "indicator--7146e94b-1ef5-4e6b-9db1-6897b05fcb9b", "indicator--2255b919-39fd-413a-b04a-62890fff2c26", "indicator--ec87ea31-c07f-42d8-9d74-e3bc04711ddd", "indicator--a2482c56-c409-4677-b6d2-8fe34dd55bf2", "indicator--a8e000e7-a890-4764-971d-f9c5467bc236", "indicator--d5fecb6e-b6fc-4b0f-b03e-936f217049e9", "indicator--9f6b624f-0d3f-4a59-99e4-412c79576628", "indicator--ba5fcc16-4f0c-4cae-877b-d747fbed365a", "indicator--23b8e50c-5ecb-4e59-9336-c463fe4d286e", "indicator--1c063059-f470-41bd-b931-b8a796d30bfa", "indicator--d637df1e-beee-4122-9f95-638ecf3c8e14", "indicator--46542c88-e007-45bc-a129-93d628299991", "indicator--23c36c78-9f7c-463b-9cd7-f6be3bd49031", "indicator--a2e1c492-ee6b-4c62-824b-d458f22930f9", "indicator--75d3478c-0903-4772-af11-35b451d0d882", "indicator--d7d37d8c-55c6-4572-9f5b-479006bb3bf9", "indicator--4bba1313-63d6-441c-9e9c-920015ea4baf", "indicator--abffcb72-47ac-410e-8cf7-b5c0e7eab6b3", "indicator--27d9cce8-7e3c-4612-9e86-c95a180e9271", "indicator--72fe006d-06f9-454d-85c9-06f2b4a86af4", "indicator--6da652e0-955e-4b13-a861-88f884a4658a", "indicator--50760d1c-b864-4df1-a78a-0d025f902d61", "indicator--2b19185a-5e59-4579-8c4a-5643b7f7aa72", "indicator--ea1de168-e9c3-45a8-85b6-c3bba9efc8ac", "indicator--b4ce4000-2b33-427e-9a66-0d7f2edbcf96", "indicator--db8bec33-18bb-4862-9d5d-c13ecc0a2fb7", "indicator--29cecca6-e1e3-4b53-be06-b9f96152701b", "indicator--7365e48a-317f-4e15-a137-52fa6c8e1ed7", "indicator--ecbe1f6d-7ce1-4d24-9285-2f8258cb00bd", "indicator--5103ef40-9377-475d-ac6e-56992a247c08", "indicator--a00da079-e673-4baa-becd-0100fb5e485c", "indicator--5e4a16c7-9007-4a3b-a8a7-44904879372e", "indicator--778c2255-02cc-4d1c-a623-5ee3ac023c7c", "indicator--9e02a034-f8cc-4067-b1a4-75f819d77633", "indicator--cd3098cb-8ec3-4fee-b038-3eaf91a6c5d0", "indicator--09143398-c6ff-4cdd-a717-f7c15d998998", "indicator--262f9c93-d84e-4506-b120-018dea50328c", "indicator--cac99b15-e9d0-4b4c-a6a3-076a641c8de2", "indicator--14e46302-2f3a-4c19-9d49-c2f63af05b74", "indicator--96e27a86-1995-4466-81ab-07e2991efe25", "indicator--45538e17-207e-437a-b1a5-9c7326a27b63", "indicator--0fa021de-6a73-4fed-a2f1-2eeff4b5b859", "indicator--55ac98c3-8ae6-4ed3-a40c-96b04dd092d8", "indicator--bad13dbc-06e7-4ea8-81c5-fd30fca79edd", "indicator--d3cf423f-7321-4ada-bee0-1db95086bca3", "indicator--ad3ef79d-e1e9-4049-8d8d-5f130e527b59", "indicator--a62b4f61-cb51-4919-bf9f-2161643c70fa", "indicator--bd7f80ab-df84-4a21-86bf-82d723e6383a", "indicator--b685d0f6-4ad5-48e5-8429-8a4218e84f29", "indicator--d6f9f94b-8e33-4956-8d81-a792e398fbcb", "indicator--162eeb5f-8687-4bea-b298-d540c81892c7", "indicator--6e9f2ac2-8bb8-4c4d-8dee-482a532b3a14", "indicator--f3ad6abf-b771-40d8-a6db-2cf4c85c613f", "indicator--386d4eea-8ef0-4e40-8705-2d249222cec4", "indicator--6527e4bb-7be7-45b3-89d4-273cc9496f19", "indicator--583a5a4f-cb64-4a41-b4ff-5469423ac80b", "indicator--15c54e1b-5cf7-41f4-a423-80f8e00203b6", "indicator--5ff85184-fae1-4190-9a4d-64b19eaff6d7", "indicator--d092bbda-4e7a-43d5-be36-1dfd2b973fb1", "indicator--650b37f1-d6da-46a8-ba34-b5724e488460", "indicator--377b832c-e237-4537-acb9-ad3c3e4667ea", "indicator--9aa261db-c112-42e7-8eb6-b5e02c61f175", "indicator--9323872f-ef37-4b3a-ab56-a70201f98eb9", "indicator--57c78575-3d20-49c2-9773-1551e4babd5f", "indicator--a771d914-9a2f-45de-a2b9-2c76dab9417a", "indicator--06c2984f-aec7-4b59-91c6-032e5fdec9bf", "indicator--5042d5b8-af36-4da6-bf6c-ef60e3db9f63", "indicator--9c722474-5f37-4da0-bdc9-f9a812006d58", "indicator--ededa579-9f59-403b-8ff8-113a97af8d77", "indicator--c1fadd20-14a2-4e6b-8577-7ed2df54f066", "indicator--9f4c916b-5c1a-4291-b556-e6e3b0ccf736", "indicator--d144e003-644d-4537-8259-a40f477d01a3", "indicator--825715ea-fb1c-409a-889b-0e73686a0aad", "indicator--480cec9a-9723-482b-881f-d78126ff77b2", "indicator--d4e221cf-8e60-4718-92c9-14564ea2f5d5", "indicator--af2a1637-f9c7-40f0-a7ea-ae1f3238795d", "indicator--c454d27d-3b60-4e3b-9810-dd4bc7371f93", "indicator--db1de61f-65bd-4ffa-a36a-e7f02faaa8b9", "indicator--8ce14fec-0ccd-4a38-b9c2-12a7a0e6eb74", "indicator--b1aed024-8267-4d76-92f6-7fa767c2c5af", "indicator--d4b0dcc6-6e38-4b4e-93ce-64537f2056cc", "indicator--f2fa5789-c209-4022-9c17-8d46e95ee395", "indicator--a2b2b02e-abd5-40d6-929f-1f883b101cbd", "indicator--b59761a8-6aa3-4a24-bb68-5fa481e360fc", "indicator--f79dfff9-33f9-41e0-a298-9fbe031e0240", "indicator--df98f5a8-8304-4073-8263-760e83bf1e89", "indicator--5c7af3a1-27c7-46d0-816a-d60f5fcb0c96", "indicator--80377602-e8a5-48a2-ab99-f06ed6fe3cf3", "indicator--7973305a-f14b-418b-9ec9-c863945146e0", "indicator--47691f5d-b9c4-4206-94dd-bc74076fafcb", "indicator--1d97388f-6eb9-409a-9c8d-b8d8515d3362", "indicator--01be04db-acd9-42aa-b8e2-84f5771845e8", "indicator--f02f260d-6b78-453e-a63d-42e5da142cb2", "indicator--cb46402a-f654-43a4-ac40-f0a0aec00dd1", "indicator--7998eee2-2fa3-483d-af57-945ce17bb560", "indicator--4c896424-a8d7-4fe7-aabd-480c0f9b9bd2", "indicator--d620a324-d4b4-4288-ad05-b6e5faf46326", "indicator--1ccca45c-cc40-4d56-be38-b2e29c2ba9a3", "indicator--1d81c10f-e0bd-4267-ab55-ab072571a279", "indicator--ce2f7769-c13b-4ff6-9025-d166c4ef4d36", "indicator--d899df2c-1723-45b4-8948-ef563ccf7eda", "indicator--cae90e6d-e08c-4ac0-92d7-d43a98c060df", "indicator--20df6a31-536a-463d-850a-4ce731914729", "indicator--1e5a4c10-e1db-4416-a71a-e3d0431b11d7", "indicator--7d5acd14-a44f-4efe-a35f-e9d7544ecf61", "indicator--1117661a-5371-4443-a7d1-cc19132ea792", "indicator--9a727ef6-092b-4f18-b262-2e3a9aa90464", "indicator--1d37b6cd-2797-4986-82f0-adb3abb53bbf", "indicator--10d28625-1aca-4c9d-bf2c-eeb0232fa86c", "indicator--8248f6cf-6c81-4c93-beb3-f03bfcd3c275", "indicator--9d726f28-ce07-499d-91ef-a86f1a8b2ffa", "indicator--cacdda26-6d7c-4bb7-a6c2-8855ffd0b2a8", "indicator--85950b3f-aeba-424f-a632-1492472e07a1", "indicator--8b847853-9350-4afc-97be-f86f85e5ea95", "indicator--073b5d5f-a93e-4552-98d9-295aef3b1a8c", "indicator--5251a0ea-9538-418b-af81-67f5ae6c4cd3", "indicator--12ca021c-6868-4ddc-8bdc-ce8fac4c0aa4", "indicator--c8577847-806f-44ec-a8d5-6789885d0639", "indicator--f9f93d1b-d5c3-4a60-be8e-c2ba8866aa6a", "indicator--53677223-380d-4fad-a768-347880271c1d", "indicator--4324bc60-63c4-4bb0-bf71-aaf970d00906", "indicator--b052fc5a-6943-40ea-9c9c-54c8d83f7d12", "indicator--c1b1c153-37c9-4b00-9729-bf3c2066b463", "indicator--6efed168-1050-4aa1-9a5f-84c298cc1929", "indicator--579e89e7-4aa7-4726-8f46-0114a5f8dfe2", "indicator--d1d7029e-d650-44ab-b02a-4cd782a492e3", "indicator--a92140b2-4661-4838-b02a-c322fc1e0302", "indicator--ccbf43a2-68c5-4590-a00a-5df1758ee414", "indicator--4344bcd6-43a8-41f5-babe-599a20f812a0", "indicator--54d127f6-3441-4f23-a36c-c26c52e2f7f8", "indicator--365dd2b3-842b-4033-86ba-9cfab3eb226b", "indicator--acc8516d-fc5c-4ef3-96bc-959ebf6cba54", "indicator--469642d0-a8d6-4404-9e33-c2f0df8729bd", "indicator--e98e2659-3579-4c67-a6c7-8dbb6a7189fc", "indicator--34d73682-7b3e-4836-b276-ba168d81d37a", "indicator--0e402b97-4fff-4105-bd9d-65f878253d04", "indicator--b8942152-48cf-4fd6-a88b-c6a95e828bcd", "indicator--f8c51e19-f504-4290-9bfb-35bc66ed4ead", "indicator--a6d8df12-10cc-4edc-a8d2-2220b28acd65", "indicator--328f1682-928c-41e1-9666-2f8593183c44", "indicator--7f9fee4e-d4bb-4ae4-a67d-dfc95956300d", "indicator--cf471c5c-1038-45b3-96af-f8d8434acc24", "indicator--c55710a5-7f02-478e-9691-835212a3f6e3", "indicator--5ae982f2-586b-4e09-b3da-ef26e0606139", "indicator--152ca983-c260-4562-b9f9-34890d6b7124", "indicator--0072d540-45c1-4fa7-abb7-607f49bb0e52", "indicator--37da378e-b5b1-4b41-8162-9480a2d5b7f8", "indicator--70ec7713-30c1-45f9-9c8c-764392a8cf31", "indicator--b08f3312-dc5f-42d2-8460-fd579d4afdb5", "indicator--0aaa196a-dfee-400c-94ba-57d27e3e8ac2", "indicator--2089dbba-57c4-4473-bd6d-2f5adc6d7e55", "relationship--5d4602ba-30dc-48f2-99b8-e47eb0c24c95", "relationship--6b6be544-9ae4-4a12-97ca-93143ed9735a", "indicator--af137565-549a-4191-b54c-0c2fc99b38ee", "indicator--434fe1c1-f800-4122-b7e8-9638f492a296", "indicator--2f260ed7-98c0-4b28-b2e3-809bedae12fc", "indicator--976928b2-4743-4847-99fd-52435f5b633d", "indicator--586a45ab-1c21-4a35-981f-73635077fbeb", "indicator--2b122bce-ab84-4a0c-8c7e-80e517f97a12", "indicator--3deb3ace-bb66-4571-bdd1-a8cd89d8918b", "indicator--1389650c-46f7-4bfd-900b-5a5d1912debc", "indicator--c3abfdc1-109f-40bf-9c05-5ae31f64d171", "indicator--fc8b5d6b-11bb-4af2-8916-9ac24ec1d849", "indicator--3af1af8d-e5a4-4050-9fe1-9919f879270a", "indicator--cfd22410-c81c-4783-a2b7-cf02ad7584b5", "indicator--867034c4-ab1c-4305-89bf-891e0724a329", "indicator--1a8e055a-a6c7-444d-87df-a8a235558409", "indicator--f0d49c93-0129-47a8-8c6e-d583b6074707", "indicator--f2165143-cb67-415f-9345-f75737c4a894", "indicator--b80b9938-4cfe-4d3a-b22a-0463fa982194", "indicator--5b403797-5679-4abb-be40-cb537e9f0abd", "indicator--4e84ed63-e97d-421b-9d66-c663cd391485", "indicator--5338538b-831f-4af8-9b64-21597bb2c4a8", "indicator--99b415c4-a3b0-4d1b-a5b5-b084c4455a32", "indicator--f71cf083-76cf-45c5-b1aa-3d63085dda0c", "indicator--fa40040f-e88c-4533-a47f-41e71b5124b1", "indicator--5bac524c-3327-49da-8938-ff8b3c9320c3", "indicator--ba818bf7-a6a8-42d9-878c-14ec3d788141", "indicator--39b0660e-03c3-4f16-9fb0-e4ae183d0f41", "indicator--67a55c6e-70dc-4e51-a4e2-da80717cb8bc", "indicator--6a9db144-2855-478b-8687-72851ff6874d", "indicator--3f362cbf-241e-4ef6-b314-7576578af922", "indicator--c277f28f-3fb3-4520-acff-142723fd6db6", "indicator--8aaeb49e-ee9e-4237-9d44-b801afdc6f52", "indicator--70b29448-8746-4ba1-a5ce-8501903ffc73", "indicator--5979edc5-2ec5-4960-b728-3aa6f6b563e9", "indicator--3ee43ba0-15ad-4772-bec5-c463be448587", "indicator--ad11e8d3-fb03-4ca3-abbc-d1390fb897c0", "indicator--12065d04-b39e-4834-88df-d842b5ce95f8", "indicator--33a75244-0cb1-40d5-a69a-87743ee77a9b", "indicator--a56a572f-0f7b-465e-bf1e-2aff758e252f", "indicator--837a17ba-d8d4-4c30-93d8-2f68212fcd2d", "indicator--31392abb-d639-4ebf-a48c-5e4f4a9881a1", "indicator--63b89c0f-ec7d-4b79-9a4b-8cd999b1262e", "indicator--af862ef2-f863-4f3c-b998-1512796c940e", "indicator--9a71391e-60cc-42a7-86e5-704ba26f29b9", "indicator--827bb8f5-fa61-49dc-9ac2-948d51b0c36e", "indicator--7ac7bdd6-c549-4992-bfd3-394c28c9dc6b", "indicator--2297c3ca-bf22-45bd-b820-500b396fc5e7", "indicator--1c872b48-0864-43ac-af28-f1e15fc8dac1", "indicator--fc3f2580-19c7-4035-b532-7bf3079c8b90", "indicator--e96b3508-3a5c-4e58-a519-51479d5ef50d", "indicator--a8adf642-a51c-4e3d-b217-6562bff5bb14", "indicator--f98844e5-9411-4d21-bf0d-7188c3622361", "indicator--a07e0d52-756a-425a-807d-b6137e250ae4", "indicator--93b8e8c3-964c-4841-9ac3-f29934abec51", "indicator--d3c1d44b-80e7-48d1-a759-789f8892917a", "indicator--224e257d-7134-4e21-bc84-90567d10be67", "indicator--33aa9ce4-662e-4ec2-be29-0a2777647529", "indicator--204a3219-49ef-4a5a-b38e-c593c5c89c67", "indicator--1a6b4686-59f7-4f21-8472-1599dfad918c", "indicator--b6513cd8-a486-4374-a294-4ef76b0311e4", "indicator--a5a89f69-00c4-47ec-9ea6-39a6559882c0", "indicator--09938acf-4c3e-41e1-a4aa-af51d337b640", "indicator--d5ded76c-62ee-4bff-a516-545c99f4ef83", "indicator--608b5f52-a690-4bc8-a662-b5d63b9321d8", "indicator--20fa0a79-7d86-4168-9f82-3b358452d0c9", "indicator--32be140a-e188-45a5-8ef8-4d599fc3a219", "indicator--90dfd771-e627-49d7-a939-1f273e41515f", "indicator--0131609e-6593-4f10-a27a-c71b533b8c3b", "indicator--0724b649-a4f6-4268-a7ea-aa359f12836d", "indicator--341099f9-be68-47d3-9cb0-3abba542f8f2", "indicator--9f44745f-c579-40ff-a9ad-b10e8334565f", "indicator--0883a817-7e09-4070-a3f4-9033bae28814", "indicator--bb32a72d-db68-466d-a609-6a644c56977a", "indicator--6fe5d014-a780-4bf0-a349-e6adf17665f8", "indicator--b98d8df0-3591-4c81-91bb-86f82e655364", "indicator--ed44f27a-dd64-4ca3-8cef-f68db5a408e8", "indicator--a7d07d56-2469-4cac-b347-9e9066f779ea", "indicator--5cab535b-1990-4d2d-aade-61ac3bffc4e1", "indicator--53505450-5bd4-497a-b69e-6ba6877c72eb", "indicator--7f83c727-5a2d-447f-90d0-bd5cfdb388b6", "indicator--627f6f4c-525a-403d-939d-63799030ebf2", "indicator--14848ebe-d19d-4195-9736-02982963a684", "indicator--d3a3edbb-7386-41d7-95f6-4e630064b1d7", "indicator--dc0b6c17-3110-448b-9655-9ed531c4eb5c", "indicator--264ee053-8224-4eb1-ac18-959bca972a26", "indicator--20d512c2-1020-4e09-aa81-31f369c00549", "indicator--c8ca9361-41d7-459b-9c35-67e19d8f7289", "indicator--77ebabfb-a0a4-43c7-8d8b-a5241da2eb6c", "indicator--39f9017a-2651-4e64-b86e-2ff86ed772d5", "indicator--6752d9f1-1c6d-4207-8311-5ada1d52805e", "indicator--636ff874-62b3-41cd-8fef-69f18703d392", "indicator--3682c87f-8bce-48a0-b348-55e862826896", "indicator--fd9f2e02-926d-4875-bb88-97f21f2ea524", "indicator--6e0c38a5-d8b3-48b5-a51c-fa363f42010f", "indicator--c2a54510-0cf2-4a23-9f4c-3ab4d90cd61a", "indicator--fcb18285-91e5-415d-95e3-ad64c6648e9d", "indicator--1753b5d3-2c97-493f-8dab-2eb754e47024", "indicator--30f86c80-5fbd-4420-a942-f3f9ecc13fe9", "indicator--bc59fa8a-37b3-42a2-911b-94b64250c493", "indicator--53bedcaf-e44d-40a2-b05e-546cc0d1d7a1", "indicator--f55613f7-602e-43c8-9489-018034934d43", "indicator--8a3d9cb1-b073-4410-892d-184cbb3fc6ca", "indicator--281e0c29-8f93-4a28-8867-7beec1fa160c", "indicator--dd1b312e-17ec-42aa-ab45-1cfafdb69cfe", "indicator--259e94a7-5c2f-4201-b658-0f32d242a0f0", "indicator--f434678a-57e5-4096-8b07-99d8307ef535", "indicator--da6cdd1e-4b95-452d-b6c5-e6cbd3d34806", "indicator--73cc2b63-801c-4627-8c16-29f529088e6c", "indicator--ecb0ac51-0777-412b-a4aa-5fcae5720d26", "indicator--af7db436-96a1-4de1-98d9-402c8ea1f86a", "indicator--a336a8c1-1c90-4514-9ed1-db596c6f251f", "indicator--2418d8f0-060b-48d4-a1ae-af7a4eb6780f", "indicator--c3388023-24ef-44f0-bd49-e007d679dae7", "indicator--4c831c76-285d-47ac-aa4f-059158bd2b8e", "indicator--c2a34816-ef88-4bac-9140-18cf43658ad3", "indicator--93005ac4-906e-46be-b4ae-6d3948dbc64b", "indicator--6e1d2c77-e0d2-43f5-93c3-b66089aa9c7a", "indicator--d21dc03d-d330-4652-82c0-13c72324e7ee", "indicator--8db58c0a-adda-4d2f-a634-359eebeb2b49", "indicator--ad80250e-6f7c-471e-8524-87340a80b0cd", "indicator--e0d3e831-43b8-49a3-9177-8de79f6ba827", "indicator--a32f19ee-dca3-4631-8b99-df7c2b46faf9", "indicator--fdc7f319-9f29-41a3-98a0-675ded9e2789", "indicator--b8fedcdb-a1c7-4450-ad38-38e704275cba", "indicator--9095835b-a0b8-4af9-a6ac-df1643095d54", "indicator--a5136395-0581-4cdf-9b8a-15852a4b380f", "indicator--677f156a-043c-40d5-935f-343ac1a494bb", "indicator--e675dcaf-643a-4275-af7a-72396c686674", "indicator--a53dcce6-3885-405d-ac17-c33fef21c278", "indicator--08325066-9e8d-4a25-8a08-7b7cd5bd3ddb", "indicator--8dea46e9-b55a-4e0c-a139-63bb1b58a5b2", "indicator--69f0f15d-252f-4de9-909d-2317fbb6e3ea", "indicator--819a17f1-ad9b-474f-8b8a-258f5e15fa8b", "indicator--3b0fdbb3-bab0-4f88-a7af-de2fff3aa09a", "indicator--d6695533-24e5-423f-9839-4871f2f233bc", "indicator--dd650e86-0c7c-4baf-a394-73a240c2a423", "indicator--7de2751e-1b75-48d9-9afe-5422a196cc85", "indicator--2acb6f8d-0ada-4d70-9d56-c54d79db5f06", "indicator--9d8f1793-10ab-4ed5-8244-ffb5bdd3b4f8", "indicator--30fe5092-2270-4411-b7a0-750ba0cd097c", "indicator--bed177bb-4739-437a-b090-1527670a960b", "indicator--e56f3344-8409-42e0-8cf1-da6ded249a89", "indicator--5a22175c-49ff-4518-a932-79d360e1f7a6", "indicator--4a71513f-9ea2-4e67-be99-0657aa1c100c", "indicator--2a9f634d-2754-4b5d-8007-25db793886ed", "indicator--6f551b5b-5549-4fa9-acdd-2a89e2d5fe3d", "indicator--51acadb2-16fa-4a4e-b6a4-7692e2a3cec8", "indicator--a1e444d2-798c-4358-b4f9-32b72993a2e9", "indicator--4f6245a2-5357-4629-bebd-bedffa7231b5", "indicator--3685fb03-123d-4453-8f91-176f223e3a86", "indicator--0dc6fd36-20fe-471b-be12-c9d15fdc6c88", "indicator--b5249692-a43b-4706-833a-f9fc4ff87158", "indicator--fde523de-afb9-4156-be0e-977c300f8de4", "indicator--4a81b284-612a-46cd-8044-6314853ba024", "indicator--ef8ac7b4-72d9-49a3-9c06-130506a48fe5", "indicator--63420af1-cae0-40c9-ae26-7148e8b97373", "indicator--c5b0897c-93d1-429e-b7c5-535a55c36c84", "indicator--67141a42-47c5-49e5-b190-c3595cb06d50", "indicator--69ae33eb-ee74-4498-90f2-94f375dc77d6", "indicator--3f1dc238-852d-4bb9-8e3a-647b30098bd2", "indicator--3fd112e6-3350-46d4-a389-3e379fbcd355", "indicator--3dfe3697-cd1a-4668-974c-7fb7081758bf", "indicator--b24bab59-6105-4a51-af56-7e561dba4c64", "indicator--40f2c13c-10b7-4ec2-9bb1-5d8a09b15e6f", "indicator--d77bc04d-26a6-4ca6-ad72-4d7b3e2785ca", "indicator--25f8304f-e67e-41f4-a20b-46c1395edbce", "indicator--9f147402-73e1-4366-8e92-9ab0b43dc554", "indicator--9795c5e5-6be1-4a7f-acd3-0148dff22c6f", "indicator--69bdb019-78cc-4df1-aa39-5058bb72bdb8", "indicator--94b2aeef-a5ac-41ed-9678-efcc868a9c5e", "indicator--141ea6bd-1c8c-4559-9603-1590a1cc1520", "indicator--d58b958a-ea48-4454-8123-ed726367053c", "indicator--5987085f-e133-4273-9f66-50fad862741e", "indicator--e4b16842-ae8d-404a-8bd1-5bc8cb8f620f", "indicator--62585118-6598-4f64-9a50-5d8f05699801", "indicator--0c08cf55-28d3-4df4-ae9a-5e33b8bf9895", "indicator--a5184835-e841-4d5a-85ac-6a89ba3bf90c", "indicator--e1f6d843-93d5-4a20-a1f3-4d59ed07f1a9", "indicator--676584e7-c3c3-4043-8a8e-89d6997f3eb3", "indicator--62388d71-ec30-4da4-a609-6fe61c477580", "indicator--34d7f5e3-36c9-442b-9ceb-795062ebc20b", "indicator--973673c4-34cc-4249-88a1-2763ead659f2", "indicator--e2a316eb-3c17-4982-9569-44a411bd558b", "indicator--ed174a80-8968-474d-8494-097cc0f5cfe5", "indicator--5a2f550c-409d-487e-8686-3a54959b092e", "indicator--ceabd657-aa88-4c0a-825b-d714a5bb56da", "indicator--2abceade-b48c-4c63-841d-870594e4708f", "indicator--59c499f6-e60d-4b20-adb1-314aa2b97018", "indicator--c4706753-496b-42d9-a586-e22658c6960c", "indicator--66a03e2e-da20-461f-a0e2-7b0a84e9d0f7", "indicator--c6a71cfe-4523-4320-8289-97632e2709dc", "indicator--21618037-ee69-459c-bc2d-e63386f1dd2f", "indicator--b15eaccc-63e7-4a57-8f6f-03e3a0fddaf3", "indicator--c09dbe13-5a0b-41ec-bd11-7d93075b1d5c", "indicator--be494e39-5b73-4c07-ac3e-eff8dcfbbca1", "indicator--e0f09c1e-d86b-482a-abbe-c7475d9c8a71", "indicator--d5a98401-ca69-48d9-ac7a-3b2046abf092", "indicator--08884bff-5d40-4702-9b65-13d0cb4f9cce", "indicator--157a47dc-8e5e-4853-af5b-043552323fc4", "indicator--75effd03-271d-402a-ae3a-8a6986f06f70", "indicator--f84cc501-e4c0-4c34-941f-043cf96618f4", "indicator--e3dc08ea-e320-4bc4-9e44-9c053bfe4dde", "indicator--de5592b1-d8b6-41ee-b1ce-26be07b242ab", "indicator--cf45ed65-057d-4265-9a72-f18925a9fd1c", "indicator--6c588f1a-3939-42b5-a891-a072bd528b09", "indicator--dafe01b7-c952-4a5e-a25c-7063269c15c5", "indicator--d14ba35a-7988-4539-8cdf-80919a5c8247", "indicator--8d502a4d-a025-45d5-b0b6-c823515ee6a9", "indicator--3ab66c97-c7c8-4ab8-8672-b048b067a527", "indicator--b418941d-df1f-40f8-a3a7-ea3b990b34ae", "indicator--319c4b57-ecc8-41fb-9da2-7790cdaadfc2", "indicator--59ad3e72-94d9-40cb-a9bf-740a8e6233d6", "indicator--333af4b0-c014-4c16-a34c-538abc110517", "indicator--5e8235ad-4ab1-431a-a09c-80d06b5f5553", "indicator--9f27e849-bd23-4869-8f2c-91e0bb5713d6", "indicator--b3fa163b-49bc-4c15-aeb4-5bde9dbf0738", "indicator--9db7a702-0ae7-44fc-a0f6-ae306b955474", "indicator--c71df0c8-1a0e-4332-bdf8-fdfcddfdd020", "indicator--3e44375f-7697-4733-be8c-7c0576eb4b98", "indicator--280a16b7-3688-46d2-991c-b7e781b826e9", "indicator--785e096a-9b76-4ed7-b752-9c2fcc1333a2", "indicator--3b0a1277-42f0-4922-894f-373db8e3b22a", "indicator--4de962ed-23d4-4bc4-9ead-475b9821f17c", "indicator--89ea6fdd-eb4a-4595-86b2-e86c7fe73153", "indicator--7b1db35c-6d2e-4701-a188-09589db2c3a5", "indicator--cca8a813-ddc3-4bf3-8d5c-e663e798e7c4", "indicator--45ad9965-0d41-43f8-82bd-c75f04bfa331", "indicator--1886c8d6-d25d-4253-bd39-a78858fa2992", "indicator--86014c9b-35c6-40e2-a7bd-5c19e61f3c70", "indicator--9b4ad513-55ce-4538-b43f-6ede618e2afe", "indicator--29bb405a-da80-4b52-b31f-93e7b151ed1a", "indicator--77165593-162e-4125-bbf4-5b539bc962c6", "indicator--56089fa0-182f-4cc1-b061-86b5c537d1e7", "indicator--d2852189-db3d-43ac-9afa-b6c777068148", "indicator--c0bb6281-3ae4-4a3c-a58e-b4e6b379be2f", "indicator--ab7f7d6b-16f0-4a16-8bd1-da8756894ed2", "indicator--9384833c-6fcb-41f0-81d2-c5f4cac974a0", "indicator--8b95a1dd-da1f-4e87-b044-59afb038e5fe", "indicator--363b0183-fcc8-4e48-ac8a-dae1d9a2628a", "indicator--106bf5fa-0b42-4336-b2a6-39e1fbec8cbb", "indicator--f7c09d55-a4bd-4faf-b275-b0b2d1361211", "indicator--1fec6c09-676b-4d66-85c9-4b84dc8d3dfb", "indicator--723c11a8-114b-42a6-a23a-d88063e27629", "indicator--350e93f1-0a5c-4255-a15d-cd5e7da65d03", "indicator--373a955c-58d6-4a18-a2c5-dd9c4cc5d28d", "indicator--fa6f6c33-d221-4f5b-a137-6f9861c466eb", "indicator--bdb7ae56-995d-4a03-8db3-de92cb68b202", "indicator--3b8a8710-a2f1-4467-bf8f-06c12e06635a", "indicator--514ff097-73f0-49b3-895e-dbcba3af0806", "indicator--34ede16d-fdb5-49a6-b871-74946f409b69", "indicator--db06e91c-a6e8-44c7-8a54-507266d18261", "indicator--2d60f670-bc87-4afe-a490-55553dba1ca4", "indicator--711f022c-808d-4689-b2ea-11148ba20754", "indicator--1a51b4b0-2de7-4c34-890a-632d2058d2be", "indicator--58e9ed23-ce39-4ff0-bed6-81a5feb2ad86", "indicator--9d78c5b3-afe8-447e-949f-4f1435c37ba5", "indicator--3648bd81-7cc6-4fec-867b-3850cffa9acc", "indicator--3f07f1a2-1a93-41a3-8a68-e5162099c93d", "indicator--e8868f46-5251-4337-bad8-2ffe2d46bee9", "indicator--a6424bd8-8084-4343-ad8d-c8b007b6bc6c", "indicator--fb3fb54f-ebb6-48e1-b04b-deef798d93ff", "indicator--73034a89-8b86-4528-b5c1-3a15ebef8bca", "indicator--9a0964ee-33d0-45a6-b5fe-3d282f9a367a", "indicator--86cb783e-ac6d-4a88-be65-1ee30e8c38d2", "indicator--9824a62f-14db-45ce-bbf6-c5874a57df3e", "indicator--b210a017-c1ce-4013-bebb-1eff92929b42", "indicator--53ad1c25-66f8-4c1b-a377-66c1e35cb86c", "indicator--b752027d-e78f-4fb1-bb6b-b243309b5257", "indicator--7cdb73aa-1abc-4b02-9ac6-2629bd1737b7", "indicator--9d146b55-2c46-4ff4-9824-58e68e331d11", "indicator--dc362052-a514-446d-8bbd-d0b029a5abb6", "indicator--8addabde-624e-4005-a772-8c39f5c48e92", "indicator--8d7dd4e1-d106-42c6-835f-5971634c5c29", "indicator--ee8db7b8-2934-4faf-95d2-f37a0dac84af", "indicator--cce275c2-2c8b-49a5-8ce9-cc0d095eb6d9", "indicator--aea233a8-6f35-4dc0-8676-d9801bdd8b8b", "indicator--fb1e261d-b919-4797-8204-8fbb4a895d43", "indicator--0f2a228c-668a-45a1-8103-f7075c5ae69a", "indicator--68344871-55de-4fc6-9c45-8b2df25fdd1c", "indicator--b8a021e2-3eef-49f2-8f1f-b483bc9d608a", "indicator--e4b706a2-0717-482d-99d2-fbff22b758cf", "indicator--06a194f2-61c4-4f9c-baf5-48193bbe0919", "indicator--39a04853-99b8-4403-bd06-2caf5449b9fd", "indicator--24e903b3-777c-4341-8c93-3085a90a0b07", "indicator--02cfc7bb-bb1d-4153-80fb-7351ae0d9ff7", "indicator--076a7b3d-fd04-4394-b854-36c7df2755a1", "indicator--a80a7934-6182-4d27-a55c-503150f05676", "indicator--166b0b81-cabf-4575-9981-59eb89faecfd", "indicator--0d265872-4875-49e0-b0e3-ff2278a68af1", "indicator--141f6eae-51c4-4ff8-bcde-b4d037e474f8", "indicator--21dc76b6-ed8d-41fb-8f83-95555815205f", "indicator--5416c12c-2eed-4f1b-b507-362db82fb2c1", "indicator--24b49508-97e0-4787-a742-3466bfe032e6", "indicator--38eed770-e46f-4e08-b5cd-0490e1b5a966", "indicator--aab1bebf-2489-4be8-8f2a-72e84f565d9a", "indicator--17949ba9-f8a2-43fb-8c02-4133a7387a00", "indicator--f3062aac-c9a4-471b-93c8-3ba4c19b3a3f", "indicator--911946da-bcc3-4100-9896-b4b3045d8a2e", "indicator--1fa1c983-8b88-464c-b0b4-2c7084ae7f22", "indicator--02e4f5c2-c0e3-4b77-acde-a5d69b649dde", "indicator--205c8b3d-cf0c-4b11-b429-57dc522926a3", "indicator--c2fbe025-2a71-4174-9930-17b912f13ed5", "indicator--a191ac07-869c-4839-b354-819b190ee9e9", "indicator--c409f7e1-43a2-4f3d-86e5-c1b172cb6009", "indicator--9ee9429a-a52c-47b7-aaa5-7051b47923d0", "indicator--2c06c246-dd87-449f-a15d-2cce3bab3d62", "indicator--8f6f249b-db6f-4bc4-af23-b222e6480bab", "indicator--bc921b3f-c09e-4040-bf74-aed7bfea6d44", "indicator--d654f2fd-8388-4c19-b0cb-82bc368b59b8", "indicator--e8880a4d-c216-462f-8b6d-4938611f2255", "indicator--f979bc67-bf95-45b6-ba39-ecd350b5bd09", "indicator--e05ea380-a726-43ad-82ef-771b642eecea", "indicator--99ea2f72-c475-4c51-828f-f371b0ca4c64", "indicator--6576362f-d4be-4687-bdf4-00f144ffbf6b", "indicator--ee3ac251-e765-4a5c-b17f-b40d6b042e3f", "indicator--95c83e24-d13d-4d9e-b75a-33bea673b0be", "indicator--ab3ea1bf-daf0-47b7-9120-ed3cae2ebd41", "indicator--ad0f9a89-7b32-4ab2-89bb-07ef84966d39", "indicator--e524cef1-a9a5-4f31-8f6c-58af6147d28d", "indicator--edba8f20-7847-4ec3-b68a-dac04a93edbd", "indicator--7f95122e-5d3b-4edb-b29d-46785c9a6684", "indicator--54e7deda-74bf-4881-8dc2-ead4aea2c040", "indicator--fc4cd197-9d37-4e9c-91cc-e1fe140a5edf", "indicator--25ff6795-d5cf-4bf8-a8a3-2c91f84e151f", "indicator--ae5b356b-7f87-4e9b-9830-888ee6d79841", "indicator--750cf3e9-ccbb-4bc0-9b00-76c765e28561", "indicator--8937cdc9-7328-4c37-a652-be0142c9334f", "indicator--2af629ce-d1e5-42ab-8e18-dd7e70a9f68f", "indicator--6511e667-961f-4e52-902f-2b10d936be34", "indicator--1799c98b-4b21-4705-bce9-9d2a13ec2186", "indicator--f4324014-5cae-4a06-86a5-8b183a6d5ccb", "indicator--50fa6364-d7c4-4f25-bf3c-64c97c74816e", "indicator--c868ca91-4b4b-41bc-b898-b094dda7017a", "indicator--59d5c289-8f4d-479d-b401-20b132f56c52", "indicator--969af3cf-cede-4360-864a-89df3385c3de", "indicator--f61f3cc2-d6ac-45ec-bc87-a4ae3e5184c3", "indicator--e9506710-8a0a-4636-ab72-df7d7c9d5acc", "indicator--24d094ec-7132-4fbc-994f-8f237929806c", "indicator--3c903cc8-7205-4fa5-91d6-db7be17e2328", "indicator--89768306-eb79-4eed-b021-d331f3fc2de1", "indicator--295fa1f7-7ea7-41c4-bf5a-671824274b23", "indicator--19502bac-f653-4c3a-b970-4cca905cf926", "indicator--a9f05b40-3eb8-49ae-8171-d2e3fb532859", "indicator--e429d402-0296-46af-9faa-92fe05bfa8ac", "indicator--1d38dc0e-a048-46b3-b2fd-072e521c549e", "indicator--4994a994-addb-4e13-adf6-a7c17b431f7c", "indicator--b6eb4cb7-c29f-42eb-9ffa-6a7834060764", "indicator--62cd2b26-ffe6-49a9-8388-d1ed7070ba31", "indicator--6a1a5fb9-c1d5-4161-b9ea-b59d845937be", "indicator--101e62b8-2aea-4fde-bb1a-5d873eecdceb", "indicator--43586933-325b-4dc6-aa18-5dbc31fb0322", "indicator--93e60bf3-e319-4ff0-89a2-6150a0b73cf4", "indicator--a2e491a6-8d51-4daf-befe-48eda861b54c", "indicator--715b4ee6-6059-476d-b902-e0804a8c4ca4", "indicator--4a068dad-4657-4cb1-818f-de49810ad195", "indicator--bbd56617-d4b9-4538-bff9-0299bd22155a", "indicator--5926b77c-5ce8-43be-9673-4e2d4c6e7304", "indicator--90a99771-51a4-4947-8039-8d4f1d5127eb", "indicator--54ddfdd6-82da-49bd-a3e5-ddc5a0f1cc89", "indicator--68eba7ae-3901-4cfd-a043-4a2901924e26", "indicator--b4214424-1a2a-4f65-bf4c-22c336033f59", "indicator--6e2107ec-41aa-472c-aedc-5bc6590e464f", "indicator--2dcf8529-a6a3-4808-a5ee-938cfb5ea3d6", "indicator--30dd54d0-260f-4d76-b725-4f7566dfa43e", "indicator--af2fe98a-8f51-4cbc-a815-ff3ca7a1f6da", "indicator--b57c57d0-fb5e-4ac7-8c42-ccd7f8faea9f", "indicator--e6686681-ee32-46d4-a384-5e31a143fbcb", "indicator--d1318af2-68bb-4f68-936a-c9ffb36a2445", "indicator--ba82e2ac-36bb-4580-b7a0-5f7dfd737f5e", "indicator--81bffc9e-3fdf-4305-83d6-c45dafa89270", "indicator--52316299-8a01-44c9-b1d2-9a68fdb5752f", "indicator--351f9a39-04c1-4bd4-9d09-8c3aba5cd007", "indicator--8679c99d-2166-4a27-9bf5-c0c3bdee7562", "indicator--dbeb4b16-7e2a-482b-84a4-c8e2b3c835e5", "indicator--fe2c4a01-b7a0-4700-902f-f7678c84b4be", "indicator--425ab5bc-931f-4da4-bbd9-216c62ad9e11", "indicator--987958f4-39f3-4601-80f3-3f34d4599f83", "indicator--6be73638-1eb0-4bd7-9bab-92877d2f4191", "indicator--4aa073f4-718c-4ed2-b3f0-d79c38c43efd", "indicator--b8324c77-a9f0-419d-b27c-b6200b8bcc84", "indicator--593d2a1c-5365-43f7-b871-9ba387bbdd99", "indicator--06169441-5f44-4ab4-af92-7883a30142dc", "indicator--ead91dc4-50fe-4f83-9991-36940fcf7bda", "indicator--ad6cfb50-5dae-480d-98f5-4ed0bdb117e1", "indicator--39e898f0-b74f-45a1-903d-620a472a5dcf", "indicator--db1c4d86-0164-46cd-be1f-69d2a073dbe5", "indicator--b44b7d5d-866d-4972-abd1-f3af7605b882", "indicator--0c276abd-d5a4-49b8-b58e-a932a76d35ab", "indicator--9780f31f-6c73-4e70-bcf0-87326ea2fe26", "indicator--acd3a023-99e5-4ead-ab35-056ba03370ef", "indicator--56dffb63-0cbc-4c3d-b4a6-35d2e59bf89f", "indicator--dd326cf9-3153-40a1-8cfd-64a3630e6942", "indicator--b00001c1-7101-40e5-abce-5a47eed949cb", "indicator--8d90a50a-8948-4af7-8fa0-7d26c732bb55", "indicator--addb4235-9601-4080-86a8-fa57d1ae219f", "indicator--92a175d9-966b-44c0-ad7b-d2f84c45fbaa", "indicator--0dd73879-249c-4161-ad9f-9b57bcc14e1f", "indicator--799a3b18-ce92-4f3b-b796-cc08b01bc6c1", "indicator--853e3b17-b252-44df-b8ed-bd5fd5f4a697", "indicator--dd27d12a-cf4b-44d1-a0c5-64a669365b52", "indicator--a9e02f12-9b3c-4d2d-9e0c-2b9f0389cb9d", "indicator--83a05743-476b-4f26-ad10-e611cc61eaac", "indicator--0fe271e3-cecb-408b-ae7e-40de2ab85a6b", "indicator--d2960ffb-ca6f-4d48-b012-da59a7ec0774", "indicator--66a04b58-a6f1-4807-91bc-b3ad794f48eb", "indicator--e00448e3-3b1c-4973-a3e9-e2418968a6c3", "indicator--ac4d2fd0-b5e6-4115-8eb5-48f74e2371e7", "indicator--7f179019-1821-4578-a2c3-67fbc70fc71c", "indicator--cfe75c03-7797-4452-9525-ef750d71836a", "indicator--fc1e10c0-4aac-4d9b-b0a6-3357e0ab0e2a", "indicator--a253a494-784e-406a-b25e-f5dceaa96ae3", "indicator--fb4be809-6081-4faa-9c73-e1a8d9cb94ba", "indicator--697003d7-8562-488d-896e-cddc3c07561b", "indicator--439dd39f-120c-483b-8e46-8a15fcc13c0b", "indicator--2ff735cd-3820-4398-97c7-8f253cbc793b", "indicator--37035992-7af3-4870-aa96-c65e74c42f8f", "indicator--5c420ec9-84f8-47ca-a2ee-ccff35f896d3", "indicator--7f964cf6-b9b6-445b-a371-b9b617b60509", "indicator--5f058d5d-2146-47d2-8e24-999098330411", "indicator--5c97f83d-6592-401b-848f-93437b0f4f41", "indicator--b11bdb20-dad7-4138-99dd-fd02acf74e9f", "indicator--7539d660-b3c2-4f74-815d-347c8c89f42e", "indicator--93ccf7ed-1d95-4c3b-9309-d71165d011b4", "indicator--ac5a77a0-dad0-4a0f-8a88-0f18374ddbd4", "indicator--8223327f-8f60-446c-bc45-046eebc58bca", "indicator--f14f020d-8f84-44a1-a3a0-ef96f28983e3", "indicator--d0bc9eb0-051c-458e-881c-57e8b3fb681f", "indicator--db3396e5-94d7-4cf4-9af8-3ca394d20d32", "indicator--ed4f2e3d-b9c5-4bb5-b765-b6dc76771489", "indicator--55523b50-c9ec-46ca-94cf-764de8237b1b", "indicator--d742e3c6-da27-4366-9128-fcf62d2719d7", "indicator--4e24d73e-6472-4256-a953-0c218324fa8c", "indicator--f05f329a-a921-498f-9037-6b6dfc21883a", "indicator--08cba809-a248-4ddb-a93d-8e94384a1b0a", "indicator--0008132e-1012-450d-940e-b9d9ec77336a", "indicator--3a0f00f0-2c6b-4bed-8f7e-461178eab10b", "indicator--c108c93f-3921-44cb-b258-2b1ff1a81fe6", "indicator--263364b1-62ec-4de5-a82a-c66ce4c2e132", "indicator--7c713eb4-7fc6-48ea-9faa-e764743fe413", "indicator--313e7184-0a4c-4b78-9807-a6df84008eac", "indicator--5fcd4457-4d65-4025-8e23-a332f55a0476", "indicator--4c797618-d58c-40a3-a029-080447ed2331", "indicator--1af08553-fe89-4d06-bf5d-c6ff92c290c4", "indicator--d38aa218-2937-4dd7-9d3b-537765bec2f7", "indicator--588fecd6-700e-4900-aa8c-5096b083776a", "indicator--4c8aa941-22f4-49bc-ae94-579931ef709c", "indicator--a8755958-cc83-45e2-b195-af23ee0829a7", "indicator--f72b2c7d-6844-4f58-bd89-e651f0e80219", "indicator--31db2d18-d65d-440c-ae93-777e364ed26d", "indicator--fdf05383-046d-434f-a8b1-c45c93a0e68e", "indicator--4c4e0441-6844-423b-a5c4-ac498aff1366", "indicator--e7d2ce05-6990-42ea-90e0-5a23b63a8d1f", "indicator--a3dd3415-add0-477f-aee8-6ca430f8c744", "indicator--44e4cf8f-962f-4eaa-9a7d-05bd0789ec61", "indicator--c3b2b3b1-f66e-4053-9eb1-c9c906201433", "indicator--b11c7eaf-2123-4251-b3e6-3a10a7d60031", "indicator--060d9071-483f-4ed9-b966-95539959643f", "indicator--e365230d-155c-445c-a004-ccadf6f27695", "indicator--6ca80cb7-93d0-429f-b530-c839dee42d7f", "indicator--6616d599-fc4e-4a5d-b53c-e2ff9360bc49", "indicator--76125703-aad5-4a84-8e29-ee113c89def9", "indicator--d593f19a-2256-4331-9d77-e7b59800971f", "indicator--c5202801-bdea-471e-9c50-9a387e5710c5", "indicator--9770d508-cfd1-485f-88fc-13d85dd5d193", "indicator--a686164a-cc58-4b1f-aa66-13268398c907", "indicator--6251fff2-588e-4f7c-8ab2-9be853a35c1b", "indicator--91dec1fe-5371-4bdc-8f13-83886cad34ea", "indicator--09d6f628-5f84-42e9-943e-9a2769447c78", "indicator--be8802c9-d42a-49b7-a093-e04cf7a2d958", "indicator--d3222e62-e6ad-48ee-96a8-5dcd1ad847fe", "indicator--c4f082e3-50d5-4535-9290-e34886a2aa11", "indicator--629e9be9-ce71-4e98-82ec-7ccb3941b459", "indicator--dd6129ca-91de-4192-8838-656d3511f40b", "indicator--cdbc0562-ee4e-4bd2-b139-531affb46954", "indicator--1d749059-4612-450b-a6a0-5f0e5964c4e1", "indicator--6f80519d-55cd-4dc8-839b-5e339d6a2ba3", "indicator--a491fc75-c438-42aa-ace7-ff52d18e0579", "indicator--1c909094-ed0b-4201-bd26-c131f46a189a", "indicator--b085e8c8-ce94-4c27-b788-9f8200e30b3f", "indicator--185bb718-1b4c-466b-8fcd-91911015975f", "indicator--9490cbc0-7f54-43b1-9603-5242a9953446", "indicator--619cd57f-0dd5-443d-9f58-29eabfbc79b8", "indicator--5c31a268-f864-494d-aa13-10954edd4f0d", "indicator--d85a0ae2-9a7d-4237-b99e-a316124bc8e1", "indicator--ef5174fc-318d-4a32-933f-384d67b41684", "indicator--abf7e752-9b98-41bf-bd5f-78d90f605be6", "indicator--50977fd7-7117-48d5-83e2-2d05c9a0e340", "indicator--c64e24e8-3bf7-4161-9361-a411eadc2e3c", "indicator--55f3d57f-1b00-4f29-bd67-1bec8ac97a70", "indicator--566b6f66-ecd9-4095-ad31-e93461387636", "indicator--aeb0cb7f-e766-45a1-9b3a-451aaa0328ce", "indicator--c2099361-ad88-4744-904d-e226a4f79cd0", "indicator--4dc3671f-4fa0-414a-a760-aa012c69c9eb", "indicator--9a12f8db-1077-49fa-b31f-f22bdca51044", "indicator--7fefc0ff-a23c-45e1-93d7-c0ece7b820c6", "indicator--bbd0a3de-c9ab-4a99-9989-165483287497", "indicator--5c67742d-af8a-44b0-b723-eb934ae67cee", "indicator--e0a349a9-572b-44ae-9250-c88d6ba4397e", "indicator--b5dfd2a7-80e6-479b-ab23-223a40d601f2", "indicator--ee6a3512-6807-46b2-adfd-4e9c01ed230c", "indicator--b6cf4cfa-cd46-4acb-a8d9-61e547219ecc", "indicator--c8fcaf0b-c63a-416c-a58c-3a3bb37f3847", "indicator--dad2eb07-0432-497e-8f35-a730c6f76d73", "indicator--871d961c-504a-4c65-9837-f1a2e04f8761", "indicator--5b2843ad-4806-4c07-a365-073a6b84244e", "indicator--5417d8a0-1cc2-40e1-b482-222e66626cd0", "indicator--ef1ecfe9-2104-423e-9f21-717f218ae880", "indicator--a73c7d12-1654-43d6-950b-1430ad281364", "indicator--e7d0bc65-8f42-44c5-ac89-1917def7e576", "indicator--23218ba4-c233-4229-af6b-28ba64f92de9", "indicator--c260cf06-f1b3-4a11-8a74-38510f9b50fc", "indicator--30253f7d-8dff-44c5-821b-42739af90018", "indicator--2a011554-4f02-4e96-ba98-9444d5aade79", "indicator--4f9c956d-c8f1-48c0-8427-097840d21825", "indicator--ba2afc74-83f3-46a2-9ae9-a9c4bfb6a5fc", "indicator--e2fbd675-e9f1-40c1-bbfa-b42fdbe74c1d", "indicator--3e05577b-beb7-4328-b600-320dfee24df4", "indicator--a409f506-b141-4841-83f8-1655d3b8f0dc", "indicator--f6ee3031-75b0-459f-8858-9214f3751929", "indicator--0f2bfbae-3649-440b-8940-b74c7037daf2", "indicator--1dd1cfb1-ba7a-400e-ba05-8d8260ed13a7", "indicator--f1402305-9f64-4568-81dd-6f92c6e421fd", "indicator--94d0e364-7048-4efc-bbc7-5114c8bffb91", "indicator--df798ec2-83ef-43c6-8a2e-a6f7faaafdec", "indicator--aba7a9f4-7297-4fd9-9099-6527274c5b19", "indicator--db7af443-47b1-4ebf-9c42-250f47877b57", "indicator--947e7359-e0ef-4d95-81cb-5b73f5f0ab00", "indicator--74a909c4-3302-4ba8-bfa8-f2a6e3095250", "indicator--7165993e-6707-4b3f-912e-5ac18b596801", "indicator--425cc185-3211-495b-92a3-d2276cc13a4b", "indicator--a0f44ddd-2856-4e87-9a2a-510e84a3123d", "indicator--17b68d47-c145-4e3d-832a-e545c511bbae", "indicator--7982b6c5-08ff-436b-869d-be97cb0f8cd6", "indicator--5d1e479e-f66e-4791-b80e-88da2b1ca4ee", "indicator--35634f60-fb89-4b55-89e7-869fada9270d", "indicator--c1b936c9-d4f7-4551-9f0d-db090000621f", "indicator--fbb8967d-d639-4ce6-bc33-ae3da80594e3", "indicator--179e06dd-91a4-4608-9102-517211bf9b28", "indicator--e38bb5c9-f039-4874-b9cc-14df166070a6", "indicator--3d14158a-57a0-4789-84b2-02efcbfa7d03", "indicator--fd12dd84-c074-450c-ad2a-123c961ece12", "indicator--b26afe2e-25d7-435c-a827-cac30e721a58", "indicator--4445e8f7-a1fa-4a17-a27c-8b6ffdeaa48c", "indicator--587d2bbe-f338-4924-ac90-ed9eb114b2d5", "indicator--102845cd-c8f4-48d9-8689-ceba6a4c96f1", "indicator--33189a35-4cf6-4b58-b237-6d66c7ef26a8", "indicator--062e9fdc-2db1-4c77-8b3b-7f6a288295e7", "indicator--e9667461-acf2-4d9a-8741-3b6ce082e43b", "indicator--811b1b5b-1a9c-4d3f-ae5a-5edbdfd395ea", "indicator--cc317082-c210-4c00-8e83-04036390bd67", "indicator--28039ca5-d803-45a7-b645-c52455fcc245", "indicator--e841aa46-65a0-4dc4-a8dc-d66547345881", "indicator--e4417ed5-e084-49e5-9c08-0cd59730063a", "indicator--21985d0d-3896-47b1-81d9-ffa390eb0b45", "indicator--63d448b2-e817-44ec-86c7-86c8a9fd5bf5", "indicator--b4f65a7b-a896-42aa-9390-e475057207e9", "indicator--6ee4fb6f-9ed7-4dc6-ba3d-f97bccdbfd1a", "indicator--35073cfe-649b-462c-a57b-e6e4c3a3cd6d", "indicator--9f1000a8-8ed4-4605-b795-5de27bc4bb5c", "indicator--7b1591ac-5dae-4fb0-9e26-9df5558032e0", "indicator--af7a62a9-d473-44e1-9b84-5a973b837918", "indicator--e7f971be-5c56-4e32-9331-3265a6b8b379", "indicator--a3b40bfc-2ba1-4fa0-8dbe-86fb3fc6ea28", "indicator--80f7ccbf-a941-4cfe-84ea-2b1dca09e11c", "indicator--d8dc8f4e-7521-478b-a7ca-61053e8941d8", "indicator--923c9b26-3612-457e-aefd-657be37e8b16", "indicator--5d01c034-dff8-4c84-83ca-eddb0bacec49", "indicator--223ab007-ae97-43e1-b624-2c2b10dd653c", "indicator--fa4b6c7a-6c38-4a90-b120-858bc6c32cce", "indicator--290d2b28-471b-4783-bc48-1e5ab60e1559", "indicator--6afe3a6d-2a61-4909-aea5-9932e96aa8ea", "indicator--b1919149-3f3a-4d99-8cd4-f96758fe1e8f", "indicator--ca109584-2e13-4527-aabb-6ef48e580cc3", "indicator--fbd06da2-7f48-499c-b4bf-00cebbc75908", "indicator--fb67fbdf-628f-4a2f-b97a-7c0f8b076edf", "indicator--e09e504e-e7f9-450f-b41c-585ee6306d44", "indicator--fdc66de8-2819-4e0b-81de-86acf24f7ea9", "indicator--2ba656e3-802a-4053-9de4-829230533b79", "indicator--04217500-d084-4221-b573-df1a32149c34", "indicator--7ea1d49f-768d-4b4a-8765-536f0ed43ce7", "indicator--f75bfaa2-a97e-4794-bcb4-22fbddf8adef", "indicator--a8f74c53-b2ca-494d-8740-86a05cd0302d", "indicator--b078ffd3-e33a-4444-ba84-f0ca05480824", "indicator--5cbe11e2-c13f-4775-9a23-4d580ebc3109", "indicator--cf05dec5-b6f8-4a4d-b09c-4ac366b6c24b", "indicator--7011cbf3-4623-443e-8aa5-9f4a243f76d6", "indicator--13186aff-6e38-4f22-9eb5-d28b94b8e5a1", "indicator--67a3339a-fec9-498a-872d-9138b4c13350", "indicator--b5fc1791-611b-4ca5-8e96-2deacd000aaf", "indicator--098859fa-82af-4834-807d-0d03fe665e32", "indicator--838523e3-4c78-4f17-809f-7b7888b22b5b", "indicator--478602d9-c4e4-4f08-ac56-eebe2c72128f", "indicator--fe576e51-5433-4571-ba03-34074915f4a1", "indicator--1782815b-bc69-49c8-8e3c-91ea59712fda", "indicator--0fb0985c-e432-4f91-9624-385f1e96c3f3", "indicator--a7b6d708-1ca1-433c-81a6-984bc085cd5f", "indicator--fb9fa1b0-5b55-413f-a1b4-0cb12724247a", "indicator--96c9db34-0f13-4904-a848-5fc68ce04eec", "indicator--ad940f90-551f-438f-a045-2da2644f6b71", "indicator--f66a5ecd-1f64-429a-9ce2-77c04c3e4499", "indicator--89d93a1f-d0bb-4372-b13d-7980be314a57", "indicator--f64c052b-1e60-4f32-9277-2bd03c0c1f5c", "indicator--c9f1cbea-7d3a-4fb4-a3fd-99ad1d695740", "indicator--ac46fa53-24de-4af6-8ec2-df10e22c6ac5", "indicator--5ff39432-1d61-478a-babe-8232c913564b", "indicator--20df93bc-3b6f-4cdf-b03d-e720bdff9aa6", "indicator--c45c5725-8d95-4611-840d-e17c31fa01b8", "indicator--720dbd85-1bb9-453b-8f52-da0e699a603b", "indicator--ad2e326d-5333-4c25-b508-46e7fb06e908", "indicator--8efecaba-4f4e-4eb4-b18b-be7d9a06290c", "indicator--9bc4b9d5-3cc2-492a-9a6c-a33b7dd82853", "indicator--0bd72b13-f252-4146-a112-e23d8d549d83", "indicator--bf6a7eb8-46d4-4645-aa9d-897cbff4fed9", "indicator--7d3f53c1-30a5-4f93-a224-21c6a26f7521", "indicator--b2d8b8cc-ba8e-4ee2-a998-f7e083302834", "indicator--4fc1754b-7af7-4bc9-b80c-c8cb81cf9ead", "indicator--d0168faa-f9f5-4c28-b399-2044fbf9cd13", "indicator--f3eff6c5-4d80-4250-aea1-83156515644d", "indicator--fe167564-2aaf-47b0-95c9-e809f4448fb6", "indicator--e55cb278-6fef-4181-bcde-a22ee04728e1", "indicator--8e596e5e-2d62-462e-a66b-7789eebb318a", "indicator--8248f850-15f9-494b-8139-d2c8c6c5b3d8", "indicator--9f0ac88a-dea4-4b00-9459-bf217b5921b9", "indicator--197ef5ed-4de3-4003-b84f-720bb71b3380", "indicator--4dbf779c-5724-4811-aa45-ad308ff3a93c", "indicator--104d563c-82e5-42c7-8e49-f74a8d6418cc", "indicator--e7eca756-8c71-4754-814f-76d731cd8b1b", "indicator--c13c1841-8882-4dd1-b669-6bd56f01af5f", "indicator--4fe12eeb-ca64-4fab-872c-7fb76b89905d", "indicator--a640b8db-1423-4ad6-96f8-3dbb3ea16417", "indicator--322d824d-e176-4857-ad9d-7418b07b6cbb", "indicator--3b4cc5c3-edbc-4897-b10d-d092dfff07a1", "indicator--3baed8a1-ccba-48fe-9005-12282b0259e2", "indicator--b2d8afe2-f598-4439-a5b1-84cf7e83c036", "indicator--4a8ef7de-b256-4197-b1ac-3c2c94be6c54", "indicator--0f0019df-5d41-4cfc-9173-8e6ec4a739d1", "indicator--eaa32fb4-b0cd-4291-b117-dbef6b23bbcb", "indicator--d22e9a38-e1b7-4d93-a102-24d1688d068f", "indicator--30c02b6b-6e88-4f5c-80a1-85e1d462c886", "indicator--1daee4bd-cf1b-446f-98c4-e1630c899c9f", "indicator--f9fa4ce5-6c15-4f5f-8b94-4ccdf2bcbcfc", "indicator--1b78da36-7d1d-4734-ad1d-4cbdedbec644", "indicator--334b47cb-5650-4bbe-8279-7baed2b55e4a", "indicator--0da3a03e-ef0b-4199-ac29-e0f2170bc331", "indicator--6112022d-9312-4f6c-a54f-a9fde12268b1", "indicator--f7f2d36c-c142-4caf-9bf0-4e8bed3d6a1d", "indicator--87fea6a5-3c31-461a-8fd9-87af0409409f", "indicator--1fe66ba0-27dd-4fda-9048-c15c87633b5c", "indicator--81dd58ba-84b0-4557-908b-4eba7cc4b9eb", "indicator--61ec0e60-b3ac-4766-8c64-3ff42cbf8d83", "indicator--a5c3ef56-aa33-45f6-8886-0a5c6d25efa4", "indicator--ab29a155-355f-45e7-b55e-02e54ae9e35b", "indicator--ccd072c1-5b1c-4b55-8ab2-73a23660375b", "indicator--f34aca5a-b7db-44f3-b94e-d9a7e0f80b71", "indicator--5eb57d15-4429-445b-9341-e03bd2439dc7", "indicator--1295feb5-44b8-4915-89f0-e2991a08a310", "indicator--803fb9d2-0e12-40e8-849d-7770a0df8dbb", "indicator--e7bd0c4e-914a-49d0-9ea6-8d2b0e8c1bf1", "indicator--2a056197-53ff-4bc7-a690-fbda50396b63", "indicator--a18a725d-3c28-498b-93b0-fb0959d0f644", "indicator--b75cd1b0-0af0-4e42-a509-74d4d2999f92", "indicator--a07975e3-f950-4733-b5fa-816031358ef9", "indicator--2a49fcc6-a495-460b-a22e-8c95886b8002", "indicator--c15b75c3-ae7f-4f00-8f24-fa2604cd972a", "indicator--f1467197-f086-4a6e-af98-08ee4a78c4f0", "indicator--72820e5c-5be8-4a6c-a9b0-bedf1240c204", "indicator--0dd3311d-f563-4279-9b2f-9ccd60d7a48f", "indicator--e88df09b-3eab-4e90-9fa0-89bc4a3cceab", "indicator--23cd77f7-c340-44ae-820e-9eff7151fa8c", "indicator--1feff941-70e9-486d-9c91-12916c3c1e9c", "indicator--c6ad9a22-3be4-47c0-82da-f2296b0b30d7", "indicator--21f39a53-9983-404d-932d-9716a3a43f11", "indicator--02bb8c1e-12b7-4f79-9f83-1bb085653c26", "indicator--8d9a3b09-e5f6-4693-a784-c6f63db20924", "indicator--9697fbc5-e06c-4bc1-97c3-17ea912ccc51", "indicator--a1ea19f1-d181-4e99-9f8f-ac1a40ce7b5a", "indicator--791ef747-c3d7-4a11-b02d-79a133edb184", "indicator--94e74beb-d04a-41fa-8b3f-aedc32b56d6a", "indicator--f24905ec-a274-4e51-96d0-6244913babd0", "indicator--c4e83cd3-deb4-40f1-bfd1-466d010c046f", "indicator--13602e21-5187-4468-9502-ce28892e4d56", "indicator--a4f9257b-2678-482b-8d8c-fe9bde855f42", "indicator--8392a708-731a-4a5c-994b-df947ce5e29b", "indicator--bcb44480-c5c3-4322-aca4-b5924a38b0a2", "indicator--2fd06c76-9886-46e2-a50d-1522018e36a8", "indicator--f1a51c44-43c4-4eda-86c0-9052275bab65", "indicator--5b78b049-3d68-404c-b0c2-9689d7439272", "indicator--32032470-d576-435e-a7ca-5e8a53d367f9", "indicator--373bc4ee-1b65-4afa-91a8-b59f88232c0b", "indicator--853b99c4-e8fe-4f25-ae91-65572c291601", "indicator--92fd2475-dc4c-410d-b52b-688071ef76f3", "indicator--926a4c0d-de3b-4e7c-8460-5b5b430093fd", "indicator--d637f08b-949c-4c92-8fb8-bab288fdbca1", "indicator--75f9c886-3430-4af3-9cf8-112420421b52", "indicator--acb0c454-2a9b-4bf2-b27c-a3e0d5f60943", "indicator--eca16d6f-b662-4947-926a-4c15d74c81ea", "indicator--f9eca8e2-7c55-462d-a220-6d1738bcfdff", "indicator--5ce8df7a-6c68-4c1a-b1a1-ea75b9788696", "indicator--ab0df928-73cf-49c1-8490-5d02d8aa5013", "indicator--cf0436b7-acd6-400f-8cd0-fc45435ed536", "indicator--1ead0ec9-4edf-4873-b8ac-5023b5b8887a", "indicator--7c8198ab-ea5a-42e8-8544-ba4226051426", "indicator--80b8e1e5-a182-4690-b291-2b0cb0b2d064", "indicator--d1034f77-61db-4464-9a3d-e1a44ef163dd", "indicator--b24bd063-aa45-4484-b458-3a9bdef5bc6d", "indicator--67bed9bf-14eb-431d-aa44-c9f0ddda2f5c", "indicator--aabe2814-96e5-4df8-b86c-469ffcdf28fe", "indicator--bc42e895-fb6e-44df-8acd-5150a42dc7fb", "indicator--5c964fac-5807-4ff8-ba55-af4d2c9758fc", "indicator--4a175d00-5709-4c84-9d47-2e2d8e5a7e4e", "indicator--2fca32ab-2ac2-46df-9505-299efd22e6b2", "indicator--83503b6c-c6f4-4abb-a03c-a6e4e54719ba", "indicator--b12baea4-c1fd-421b-91e4-9cac9b325bf2", "indicator--eb582316-d261-474c-8a98-4cd0c0ceecae", "indicator--02091891-6cad-40a4-b7b4-0a040d091c99", "indicator--10c15673-1be4-421f-9968-cda90fd47dd4", "indicator--26db6f4e-481b-4c05-a646-ec5fde72c599", "indicator--41a28eda-5f67-4bcf-80d7-7cfb86affe40", "indicator--b13f325a-b2eb-4d6a-8148-c2df23aaa878", "indicator--c26cd157-7ede-4557-8911-24efe34c6353", "indicator--f8e69c6b-f732-4e6b-a147-72e33f44ce08", "indicator--54c44e5c-fa9f-4de4-943a-8aa9aaba22d8", "indicator--1ea468dc-ea14-47b9-9a59-fe2441460847", "indicator--f7dee493-a9a7-4351-aa96-49fd1c08ce48", "indicator--bd812f8e-ae35-4462-890d-673d14209b7c", "indicator--1c65ab07-6bc8-4df1-8146-6c8e0db788da", "indicator--fa1ad1b4-f95d-465d-8111-e4eaeacb17f9", "indicator--a3f1856c-b23c-413c-8810-e6ae64fb665c", "indicator--c1b2d2cc-6e80-4953-8e46-f8c0fdc4feae", "indicator--45d69fe7-f4a7-467e-8c57-f3bdb5f3c467", "indicator--7826ada4-70dc-419e-9cda-a183a9877a68", "indicator--466c8281-e81e-49bf-866f-97987310df71", "indicator--9b32d6f4-5b52-4ec3-af65-44862b5536e5", "indicator--bcda3a5d-ebaf-46b2-aba4-c34f9b83d0e0", "indicator--f19afced-03b7-4f0a-b908-a51897c4565a", "indicator--0d44d124-b130-442a-93c0-23dcce62922c", "indicator--8ff7fb52-14b9-4817-95a4-4d0717ea4de2", "indicator--4f31c538-037c-477e-ac73-1f770e51240d", "indicator--b97271e7-7f78-4da8-9b5f-fd36d933764e", "indicator--e9c73229-6233-4393-8e4b-e3065bd808cc", "relationship--790a89ac-b95e-4ed0-8a6c-1de6971da293", "relationship--e17ff644-b843-4d78-ad4f-29976a33c0f7", "relationship--19984997-20d0-42c5-9496-0fcfdae8dd42", "relationship--7b47f2b6-ea64-426b-ac71-8fb4feb71601", "relationship--30fd54bc-485d-49b0-b749-0e3c491b83f0", "indicator--157b1875-871d-4fba-afca-096c76c581bd", "indicator--68c57a84-37e6-4b93-961b-b0082b555af3", "indicator--f44ffd37-c6ca-44d2-bfa5-0a20120d7257", "indicator--abacc809-94df-42a6-9538-7addf2a378a0", "indicator--f25d8b03-4a3a-4aa0-91b6-73ab7bbaa05d", "indicator--c9611b65-4647-46d3-83e8-72a1478d99db", "indicator--84468d5c-8d77-44a9-bd32-dcb67b1b4dc6", "indicator--482e4ab2-4bcd-46b9-b3a0-38bf528d63d2", "indicator--099da05a-0578-4602-b56c-649e7cb72841", "indicator--37732e98-591f-4229-a5aa-1bb31f45c670", "indicator--d4a39c01-307e-4fe9-abb7-4cc0b5e9045a", "indicator--849e4f20-fced-44b8-b826-3c2a854e4069", "indicator--0d912374-2a9b-4193-8691-99dd481ce26f", "indicator--29bfebe1-1433-4f29-8b94-adba00f83465", "indicator--af262124-6f44-4876-9a45-a7fb157cad31", "indicator--00ac4659-6019-4b1a-b788-7ad185eaa97c", "indicator--2d2e870e-1bf5-48c9-9894-9a688b5dc9ee", "indicator--333fe4c0-d759-4bd2-a064-0af560cea5c6", "indicator--eb3dc6f1-64c5-454d-83d8-0b607a2b1d2f", "indicator--7d33450c-197a-4c22-a491-3036f3f24862", "indicator--7df897de-56e6-404b-88d8-5343ceebc4ad", "indicator--bee32ebc-092f-43a8-a3eb-241a6360b87d", "indicator--f14f13de-4b8d-4372-8a16-1d1e0a106906", "indicator--27b1110e-e8db-47bd-86fa-3a02ddec01c1", "indicator--15a2da3f-c229-42ea-be05-228098de2c54", "indicator--1a3df7f0-c30b-4ac7-a5bf-6f0038aa346b", "indicator--cf482533-6573-4681-88b5-c594e8ceb221", "indicator--43d9887c-ffcd-4434-a8a3-70f13eccee6b", "indicator--c9d2f069-9d96-4f3e-860f-62d6b9c11487", "indicator--2a49d981-83a0-4189-8411-9d7cbc850e0a", "relationship--bd37b320-0f35-4e1c-a75d-1367757a28e4", "relationship--1df40849-799f-489a-8f17-a257d0bed14d", "relationship--066f0b55-9e0a-4f75-9d15-1b21be707b7c", "relationship--677e48c3-a4f3-4932-95a9-01034dc161df", "relationship--24f8dbe3-08ae-4822-ad97-2dfa07766314", "indicator--ba26908c-adb7-4dde-8cb9-9d8bb4fc74e1", "indicator--461f2faf-cbc5-4452-a094-42a1be1f103d", "indicator--ea68646d-dd6f-45e8-9473-593315e8a7ee", "indicator--34f95cc1-41c0-443a-9c79-72b6bebfb921", "indicator--ec6bd907-7f02-4334-b350-5ece04e456d2", "indicator--7d863306-b6a6-465c-a9e9-1d156dd14fe2", "indicator--2f89d6e4-9497-43aa-bf91-e02a8d5c969e", "indicator--4cae73b5-19d4-4d57-a871-59ee15df4e5b", "indicator--b6325463-ca05-4bbe-a8e4-a0116061d711", "indicator--4438160b-694e-428f-be42-8470e5275f1c", "indicator--518d5161-d500-49b6-9b1b-b7f87a8480ee", "indicator--710c84aa-cb8c-4375-b29b-b41be023dc8f", "indicator--c5533d9f-0691-4622-8263-26362a8479ce", "indicator--a6d29f3c-3c09-4910-b820-2a9ea4a8bbf9", "indicator--7ebed609-cb31-48e0-b481-a382ba2e4dee", "indicator--40db187e-d1cc-497c-b9c3-cb37cbfc95a8", "indicator--a8ee8e03-d476-4b9f-b4e1-aa150c2e558b", "indicator--e6152e4f-4352-4e41-bbec-549be1b5bab0", "indicator--b9820a57-d8d3-4433-a011-8d5a7e47d137", "indicator--3d5a14aa-bfb8-45a6-883b-df9ab2600232", "indicator--6658abc9-5b35-489b-a5d4-af71a6f2a02f", "indicator--d3bfbe89-f26f-4b0c-b1d9-cf97f793525f", "indicator--026d97d7-3c5f-465a-bbd9-acf41c6ce4cb", "indicator--63b60f4e-30f7-4fbd-960b-bbeedd9288ec", "indicator--5ef287d7-662e-4c43-a284-f36384568f39", "indicator--4ba2fd49-4bbd-4765-91bb-1a76e6aa7acb", "indicator--8d78a775-e16e-495b-9f23-3117d0a76760", "indicator--ae7369d4-9f94-498f-9d22-77ed37a3f32b", "indicator--d68b8631-5ed1-4863-b4de-d1437a13c3a3", "indicator--32031c65-7d2b-4eb9-bd4a-dfcc9aab3d5d", "indicator--8f3cca60-ccbb-4b29-a5d3-21f9cbee6cf7", "indicator--85e239d7-627a-4960-83bd-19437ab6eef1", "indicator--cbeb3130-49e9-4a20-a830-b278183dea8b", "indicator--c7b949e1-6278-456f-9852-2a016c081a4a", "indicator--2a2b9666-9510-46d4-9240-6d2e5e734ec6", "indicator--5cf896bf-6a05-4a37-b930-1f8c5eb12742", "indicator--02bba528-aded-4fc9-ac4a-84788bde57f1", "indicator--ea7d83a8-d295-4eab-9f50-98ac023087ee", "indicator--ced02a32-f1dc-4b00-8de3-89289a24efc8", "indicator--0a112e09-091e-4bc5-9565-b214cb82d300", "indicator--dcb0a390-c359-4221-8dd0-17f6a99acb73", "indicator--fb51b66f-3a5c-4205-b3f1-71133d5f11aa", "indicator--96a9a6b5-a2f6-4989-977f-ce7b8373b472", "indicator--b504d841-e729-42c2-8cda-16c6f4620abe", "indicator--cd1ce07b-6c3e-44dc-ae56-02e6d46bc0ea", "indicator--b2b83179-d78a-4f09-bb8d-1210d735d31c", "indicator--c5a3f4a4-5822-4578-a215-52c178dee8b4", "indicator--34bcc7aa-c90f-4c0e-81a4-b8acfb57500c", "indicator--055723fe-3ba3-46c1-a202-b0cf840913f7", "indicator--38342e98-8140-4156-b24e-2cda209b8c62", "indicator--20f6f22d-2c29-4055-80ac-9e7d4d04be93", "indicator--a9016922-6790-4918-a4df-4b132b5c2ee5", "indicator--00e8231c-cdc7-4681-b5f0-24a077e2d0ce", "indicator--1e73ed18-0c59-475a-84a3-37758280729d", "indicator--b94ae50e-4e06-4383-9dc6-56765c0f9f97", "indicator--1b3375a7-48a0-4107-bbb0-5d3657c3e124", "indicator--5b1d5a00-68aa-4eb4-a270-0944f3c75857", "indicator--ffd8ac6b-773c-4ff8-9eff-2adafcb03d3a", "indicator--f79962f5-c295-4a91-a5e9-c8492a9befc5", "indicator--9de73d91-322f-4fa4-8c86-09fedce65171", "indicator--53a34583-06cc-415e-949e-3a345d4c0da5", "indicator--0578f92a-d9a6-4c33-a972-e03c3d121975", "indicator--a934d59c-2d51-47a2-a876-914b5cfd8fe7", "indicator--ddf0d965-deef-44f0-b643-b5b623346909", "indicator--28a4a0e0-cf5f-47f2-a624-60719a65c5b2", "indicator--48650825-cb29-4c64-9f6c-57b447aeac92", "indicator--8d7ad4e4-6e3a-4fba-a2ef-16a12f3c1135", "indicator--fcc9a5c0-8f83-45a2-ac38-4d3aad0e4c52", "indicator--6c21acaf-baab-448c-9ab6-5629052fe90d", "indicator--35b2dd26-fd34-4d27-b3e0-871bcda7832c", "indicator--4bc8c5a1-c2ad-40c5-81a3-1b1680d8501d", "indicator--803d6418-09d0-4e66-b286-185c9da32b3f", "indicator--c28e289a-43d7-49d8-bfc1-30cd1f1bf2b2", "indicator--8cd7eae5-e4c8-4aeb-9a68-ca24a07b3866", "indicator--f026bd37-9890-46cb-93e5-af3204cefdf8", "indicator--9cbf3407-a14e-4103-bf94-621a40f50909", "indicator--3a48e076-b0a5-466a-a162-6c0a1f76ad9d", "indicator--1c485469-2f1e-4abf-9cf5-01f5bb26791c", "indicator--ce5ad88e-0eca-4b84-a26b-ae9d3df7bebb", "indicator--1ce905ab-7834-4d35-a387-1cf1139634a7", "indicator--c7b65ded-c7fd-4096-b7fb-399e8a00241e", "indicator--4d96ab74-6816-449c-b8d8-8175e7659828", "indicator--14acc0c7-d8fc-449e-829f-8baa151f8b37", "indicator--45c62e0a-a989-4500-9745-4a52d456af90", "indicator--4250822e-f58a-49b4-b0e5-18ee6e4c6c36", "indicator--917e1255-f9e1-42e6-ac11-a825b4e4aa95", "indicator--46fc71b2-64ab-4104-a322-aeaf80055d55", "indicator--2629f020-a87c-4172-ab8b-f66cb900f638", "indicator--9bf0fae6-947a-41b7-b533-c7901f8bb02c", "indicator--77ecfc2d-fde5-4321-8545-1213032f570a", "indicator--a8f7184f-a212-4f6e-9529-0d5b26a987f6", "indicator--5045a812-22e4-4c2e-9aad-7126efcb24da", "indicator--a334d94e-d8f5-42fc-881f-89303d19dd1a", "indicator--014f9666-e477-4822-9080-c262158269f4", "indicator--71fe661c-b258-4c86-9f67-7593156d8aeb", "indicator--c68ae0ec-b8b3-4e2c-8447-4619c0783aff", "indicator--8791a30c-3057-419e-8d2b-f8380808b8b0", "indicator--f3aca009-7bfe-4e12-981b-1d396c94c54d", "indicator--3abb877e-45bb-4c88-8b59-fdaf6b135deb", "indicator--3b5f4e02-f9f7-478b-945f-52498e9686d1", "indicator--becb7f8a-acf2-424e-be5f-f8d7e65bdc2d", "indicator--3f487517-f609-408c-83cc-fd14d85e639f", "indicator--e7b23b83-c3eb-48b8-9bcf-60912db34424", "indicator--300cd89b-7571-4246-b111-91fefe3545e7", "indicator--e2bba776-c455-4300-9e63-c7cdb6569a86", "indicator--5633b88d-2276-4231-b4ce-f0e151ce198f", "indicator--5828dd6b-5d77-4afd-9b01-acd049afa59f", "indicator--7e8c2544-4795-484d-95e5-0892d742ccf4", "indicator--8a458747-406e-4245-bdc8-4164ff4ed5ae", "indicator--d6052475-8e2a-4bf5-a3e8-9d4e6ec4786a", "indicator--a08af1c0-aab2-4096-b9e7-0c951a32bd6a", "indicator--3b686b7e-fc36-4282-8d23-b4e2fc3e5f3b", "indicator--ae191c18-721d-40bd-99d7-a043cea8a16c", "indicator--529b6b3e-1356-47c1-b89e-b8e12ac7dc21", "indicator--be313eef-99e6-4ffd-887a-e5ba20f67456", "indicator--9e4039fe-ed89-4a09-b104-99f91e79831b", "indicator--50d0e51c-075f-4efa-bebd-23cdf1ae3d60", "indicator--c868f937-dc18-49fb-8139-ff295997782f", "indicator--aedb8708-b0fd-4da8-b9d0-a9332e3c2e19", "indicator--200bfc07-7dc6-4510-872e-5a4610b80a77", "indicator--668fe7fa-e530-42f4-b1d7-843fab08f46e", "indicator--437c2bb4-d010-49fb-8098-bd93e85cf597", "indicator--0361dee7-8ace-48eb-8ac5-ea4078a2f390", "indicator--f6241817-9777-4ed7-9cbd-89c83c797f72", "indicator--dc2ad909-0a59-4b21-aaf3-aca47cf7e9a6", "indicator--c5af2276-d813-42c9-942c-d626097cecc3", "indicator--2684aec2-5499-4aaf-a598-7cf5352dce8d", "indicator--5bf51c6f-7b4a-488d-b109-95eb0faa9280", "indicator--a200271b-4ce0-4597-9e3f-2daea838b25f", "indicator--df9c02b1-f96f-49bd-8d73-4f7784bcf785", "indicator--a68a4a7d-6412-4a43-af6d-11575da2ad71", "indicator--d5422085-8048-4680-ac38-96e2a0df7836", "indicator--2cdc7ccb-ffa3-4498-948c-2368bba88851", "indicator--e674aff1-2012-4af8-8759-1a7e1ca08700", "indicator--6e9b09fa-f355-4a41-96e9-53faa346cdb7", "indicator--a1daade0-efef-4bd2-acdf-44b691e164f5", "indicator--a3e69fea-6aaa-498a-8cf0-a9048a9d1dc6", "indicator--e59fcf53-cd0a-4a8e-8272-47c9bd9c5fcc", "indicator--09d50879-6fd1-46e1-9dca-410f48f84e4e", "indicator--703fa3db-8262-4316-8202-a89251c3612e", "indicator--e9748173-430b-4515-a80f-9b323d4ccf9f", "indicator--0ae83e43-82d6-4ca8-b061-c104ba5b8114", "indicator--139baa4e-7197-4973-aa9a-1a44d3b0d8a3", "indicator--ff67ade9-f169-4252-bbed-703460a1db63", "indicator--647d32ca-71a9-49cd-95c0-5cba2717a97b", "indicator--250dbd70-1f7a-4dcf-a79a-5cbc8890430d", "indicator--fe9e9ce7-5f50-460b-9f75-cf53616b5896", "indicator--2fc63b62-bde1-4b08-8b47-7fe7bc257698", "indicator--2da9e232-00c1-489f-a29d-f8846bb3e709", "indicator--48e0d525-b852-4c39-ae6b-938c2e9f7588", "indicator--a76dc01a-12c0-416b-ba02-2c23db46730f", "indicator--b3c240ca-c403-47d7-beb2-817cf72e7e88", "indicator--6aff9eca-8196-4224-b9f1-43616aff07dc", "indicator--529412a8-adc2-4c54-8b22-170261e36565", "indicator--73de3605-10a8-4bd8-88ce-6614e7eb9a63", "indicator--166e68ba-b32b-448c-a740-4ad4f5fb3cc4", "indicator--08c62662-808b-43c1-8885-4a610f8841d9", "indicator--cd6bbd1e-e814-438c-a5d2-d162027b8fb4", "indicator--6b910bf2-3338-49c4-bfbd-ed5295dd8ba4", "indicator--b54d2daa-e7a9-4017-8e18-b44c55c5e774", "indicator--edc5e126-8892-47e4-87ec-fa2718690885", "indicator--32f45365-9012-4707-a90c-aec7564ac56a", "indicator--ba05e70a-3c20-45b9-b328-af0545635605", "indicator--475d00e8-cc76-4bfe-a00f-f5e5ba0a175a", "indicator--a24d41be-eb12-4f55-b8fd-3036f21ccabd", "indicator--e8ebd5db-1dd8-41cf-a0b5-4cde79772f7f", "indicator--4b73f2c9-a193-4639-97de-24fbd47fa41c", "indicator--b8699739-c3d8-4671-8030-89cf9ba65ed6", "indicator--75e8da9f-68d4-4985-8b60-d69fefa43bba", "indicator--b5dcc987-f363-4f26-bed6-35fb2ef95b96", "indicator--cec82fbe-8cbe-443d-9aa1-f18cf9067c77", "indicator--9857e140-8748-46e7-956d-6df8d687e2c4", "indicator--7dc3ed55-863f-4c8e-b6ab-79167114b74d", "indicator--56dccc4a-4480-4a75-8711-202fdb751f6a", "indicator--258a155e-6df5-4406-a4ba-c32b20646269", "indicator--8398b2a7-600b-4224-b23e-b86225917687", "indicator--b7eec2ae-a390-48f9-8fec-165542a8c18b", "indicator--f85c47e2-5274-4a94-aeed-02dd5ec85bdb", "indicator--e66678a2-1a55-4dd0-8b72-c9cfe5b01a1f", "indicator--4d129fe2-86d8-4a40-ae54-858c4c867977", "indicator--d9a5e619-66c1-4533-862a-b544136e2a64", "indicator--aab3a970-16bf-4c0f-9e67-be7dcca32fe7", "indicator--21b5158f-e71d-4e3e-b81d-8c21e4b37021", "indicator--aa57f423-f2d6-4dfc-a0f1-9c190ae49ab2", "indicator--230609fe-3a66-4ded-bdfb-9ef596435c25", "indicator--c373612e-59c5-4de6-9f4e-182a78c1350c", "indicator--c34097b5-36d0-41ca-84d9-b983afc87109", "indicator--951f7393-cdf9-4bae-95ec-2d16e3621a18", "indicator--5312ba25-46cc-4f62-936c-7839481976a2", "indicator--dd1e31ae-bc67-4b44-8ffb-cc3e6d807fff", "indicator--2018981b-f0ed-4f88-8241-950021b593f5", "indicator--50c73dc4-8a60-424f-b56c-afad799337a9", "indicator--fa0ad62d-61f5-44dc-b080-4be670a61e0c", "indicator--7c8b6080-c658-42bf-acfe-39286434f84d", "indicator--17a4708b-1d5a-44ba-9795-dddd86b7717a", "indicator--9609a223-d95a-4ac0-abaf-f3d9207d2776", "indicator--5470d316-87c3-499d-a802-d15c90c4fd62", "indicator--1cbf3e6a-1b11-44bb-8bda-313df7623c0b", "indicator--b42f892e-e1e4-4b44-b129-9890da2348bc", "indicator--55a0ec13-7f7b-419c-b6d6-6794573d9a73", "indicator--aa5d6e49-0dd7-4c00-9fbe-1102874c1923", "indicator--a111a350-e98c-4606-a96f-f73ad655ac49", "indicator--fb4b3462-c797-4cc8-9683-83e8da8bf187", "indicator--a0ada46f-7eda-40df-b79e-78bfbd7261fe", "indicator--60700b6d-b891-4202-aeaf-5f09c5bae540", "indicator--729ab5e5-61db-4dac-b135-6a3380938d37", "indicator--f986ecac-9d5f-4708-a916-69df04eb275c", "indicator--7bec903c-c3f7-4626-bff3-a02d58745689", "indicator--a35c0fe3-3026-4850-b5ce-95d5342ff73c", "indicator--58616058-20a8-42dd-8265-a2bc94fb59cb", "indicator--1283d372-f9ac-428e-873d-a2ba477d2a5c", "indicator--92781467-f933-47e2-8484-bd456b02f1e5", "indicator--3b56b2ec-9a49-4d97-879e-891cfe1af67f", "indicator--0013893f-c8c1-4d57-a772-b0942d75cc9c", "indicator--44d23729-7b5f-4131-bd5d-ae07694e005e", "indicator--241b36b5-fc05-4872-9cd0-31ada83c47da", "indicator--45d6af1e-76e7-4295-874b-7e489b32cc63", "indicator--3b56698e-e740-4c54-99df-3bac6ce1b759", "indicator--9e6379cc-b885-4f29-b5a7-ee3e51111722", "indicator--a7104f1c-bb82-483a-b3f5-051299c6d27d", "indicator--53e556a1-44ad-4f7a-a4cd-ec5144b19e61", "indicator--3a38401a-c8e2-4fe5-a2bc-f8f317ce32b8", "indicator--4b7a3097-6488-45f4-9522-3d3c620b64ef", "indicator--b41fa045-299f-4b88-8313-d0b8af7e5be5", "indicator--70b4ea7e-10d8-4130-90aa-1a1ed8bc8f21", "indicator--0d1cf623-3b70-4a82-89f7-e584ba2a681a", "indicator--938d7315-f6eb-499c-aa67-e7473e1da257", "indicator--9a2a5a5c-ef7c-4cfd-9374-6e8b6b14ddf1", "indicator--2a9941fc-d3bc-4b8f-9f43-2af0b42104d2", "indicator--a02c77d0-9c6f-484c-895f-bde2be33467f", "indicator--8ac968a4-0e45-4167-bfb9-11d8c15f271d", "indicator--a463533e-425d-4cb6-9f1b-504a4fea9f73", "indicator--1362bc89-ce4f-4c59-9480-5dfa3525418d", "indicator--16181f24-0d82-47da-9028-7ec993773625", "indicator--2040e8f4-93cf-4b6c-8f35-0d642d360da3", "indicator--63b0961c-e70e-43bc-b2c8-4b7b34ba777c", "indicator--63ca7b84-98d1-4066-aeac-65bcdc96c56c", "indicator--38520a1d-756e-488a-bf73-341b2ef5d44d", "indicator--febea1b9-898e-43b4-9fac-ff2063c64d25", "indicator--a7198c52-a266-4893-abe0-f653d7dc49f2", "indicator--e56e38f7-4e8b-4b0f-9ac2-f0d7ad49840c", "indicator--a5448c0a-3fdb-404b-bf36-c1397a95f96f", "indicator--247bfe22-5726-4822-9b7b-151d4cf35135", "indicator--06efdbc6-824f-4155-b2b8-c1ba337ce4ea", "indicator--3126648d-18a3-4102-b329-cc95c3834173", "indicator--394baf08-12e5-44e3-8f09-ccc0160bfe04", "indicator--95592e3d-c9a0-423a-ab43-a4ba37150b8a", "indicator--a4d18545-359e-4998-bd9c-2e19b378b85e", "indicator--c5042abc-c997-444e-8c9c-acf23a5646d7", "indicator--aae0add4-e07d-47a7-955d-7b8e2cc068b7", "indicator--1c10dab6-9291-425d-bf2b-a314057d0b67", "indicator--65d82294-088b-4b22-aefd-e6991fc67703", "indicator--8913b13f-a1a4-4c1a-9775-43b24319c98d", "indicator--2610c425-4f21-425f-ac06-58fa1034e184", "indicator--a480c694-589c-4f2d-8ad1-f314195fb592", "indicator--27d68145-5a02-42d4-9086-148fc36e7814", "indicator--018dff66-be67-46e1-a19b-539e00d8ee54", "indicator--e444c147-7c75-46b9-8f61-2fda37f20d9b", "indicator--aa70f69b-46a7-485f-9043-5c9456561883", "indicator--d52bdca5-eaf4-4d8b-b26c-1a848c564ee7", "indicator--6ecabd58-01c3-4fd2-a369-e9467ae953fb", "indicator--251a9242-29d9-4ae5-be02-2cda7a8da8b5", "indicator--17c0d97f-b674-478e-9844-5179ced73c6b", "indicator--395ba569-cb6f-4277-83f3-095f0f36e3ca", "indicator--353fa3b6-55b7-41c0-bd02-f813f044a0fc", "indicator--172878d8-1a4e-4037-a434-361ab0b7a5b2", "indicator--276b87eb-b582-47bf-901c-74be1fa13545", "indicator--3d4e8b25-632f-4a9b-b891-161ab0a4ad9a", "indicator--2bff7cbd-a4d2-4c99-a2df-5f1c33b61706", "indicator--33f69ca8-4306-4e91-aa94-af95dd40d0ba", "indicator--fd77dcba-6c79-44ba-995c-cbf5a22a0735", "indicator--3ced26a8-0475-47f8-a572-72c7395f1afc", "indicator--bf6628ce-f643-46fd-b2b7-dde1ab21eb7b", "indicator--91c279c9-6682-420c-a4a7-6f6b0b77cd94", "indicator--4ff613df-1501-461a-b0ff-e1da98f68618", "indicator--f93b9722-0b3f-4297-b333-3e124af06957", "indicator--8bf6808f-1de7-45e4-a046-310c4d4f641b", "indicator--c6719844-e2bd-42d4-991f-32688cce9db4", "indicator--20b955e5-8720-43b8-8f15-46ed1809b904", "indicator--ceb77166-8792-47fd-a1f6-390e1ab6da9c", "indicator--84ec472d-ae33-4d47-b783-9ab992b9a1b6", "indicator--eb34cf43-1abd-47bd-a580-15b482426a83", "indicator--60536246-3913-4f6f-8504-cdbbb177eb3e", "indicator--6648f0f3-1a61-49b6-9525-1c070db77207", "indicator--197231bf-38ea-4af2-9d4b-d40fbc6fdffe", "indicator--34dd005a-4ca5-4f51-8c9f-0add25c77c8f", "indicator--d8af628e-9270-4f70-95a1-9207f16ca07d", "indicator--53e6aa8c-8b0f-4d53-9937-deb13140a2fe", "indicator--e3e8bee4-7925-4a52-9c3e-e6b37c0feb96", "indicator--39bca7b6-c105-4796-b93a-83f773e60ddd", "indicator--ab3b302c-f9e8-4812-829d-4c58e860791b", "indicator--cebba87f-8d74-40ac-9563-c01b7950f4dd", "indicator--f1ad6e03-319f-42b4-bb10-f49222a76332", "indicator--06fe5b76-07a9-40d2-baf8-b26af8378847", "indicator--6bbef51b-988f-4595-8b32-787260d18b44", "indicator--a9ebdd48-c421-48ba-b5f6-598ff67dc910", "indicator--71a095ef-d3f7-480b-aaea-38666e4dde11", "indicator--36808d0a-e8fd-4ed6-9a13-4c2fda1fce36", "indicator--0ef02ff7-3f8a-4f5e-986d-135751d573f1", "indicator--6cbf58f6-c239-4697-946c-15a7e46a80cd", "indicator--84c485df-f887-40ba-a78c-43a3276b2ad9", "indicator--f1108d63-9a84-49a2-9b41-ac71e41c5a6c", "indicator--a7ab68cb-4393-4596-a221-81dd0461c77b", "indicator--41672f96-86e1-4b38-a6c0-6f97ea940ff7", "indicator--0b9081f8-47ee-4ab7-be26-a730341bb3ed", "indicator--136e9cd1-af54-4278-95e8-b921702ea9b0", "indicator--3a9dd986-e490-4173-b84e-e479344ddcd9", "indicator--2285ca9f-836e-4947-88e4-9854fcde15b3", "indicator--9512a732-ed46-428d-9f9b-33b8be683878", "indicator--63980191-90a5-4d07-b7ac-797eb5773775", "indicator--0cd495b6-d05b-4514-9470-6d3149a7aa97", "indicator--b45861f8-fb7d-4b66-804d-69220dac7523", "indicator--788b6fe1-e0fc-44df-9885-4434684fed15", "indicator--db573a1c-3db4-4790-b881-0da0c73596db", "indicator--ce04e6bf-5e75-41b9-8806-3bbd13705365", "indicator--313ac70a-cae9-4d1d-adcd-39d3499bca92", "indicator--e4c36089-2873-459e-a0f6-3031adcff1d4", "indicator--caeed7bc-ce1b-41e4-8d39-85ed0a9f4fb2", "indicator--0a9d7415-26bb-4329-a11f-6059acafce16", "indicator--c6e3ac48-dff0-49d9-b181-c9825c080b5e", "indicator--7bbe3429-9118-4a58-aeb8-1d24ec0d20ca", "indicator--9c6cc66f-3e3d-4bcf-924b-5dd989f01cc3", "indicator--4895e2f2-5fbb-4db1-8074-97581bb605ad", "indicator--a5ed3aeb-acc8-46c0-bb42-642ec2494632", "indicator--2c2d1fea-aa86-4aad-b0d4-4f6f0a59e831", "indicator--e5190eb6-e72d-402e-b589-5156428ab196", "indicator--830d6ed8-65c5-4ab1-a9e6-b434f652f825", "indicator--38e3df1e-40c7-461a-957c-1788bcbe9be1", "indicator--b682bb09-59e4-4da1-94ef-ed1a66a2eff6", "indicator--107ad5ca-8f83-445d-b0a1-3900cfb2567b", "indicator--1d3ef80d-295e-4ae5-8e0c-bae09e9d0df0", "indicator--b1a34c63-1e69-4127-87b9-432def313c74", "indicator--45944557-0b93-464e-8ea2-f3344114c035", "indicator--9b4da418-b9e7-42b8-82f3-0e76b69088a3", "indicator--ebf47701-6f93-4dc6-a7e5-7a6fa42935bd", "indicator--f4020272-139c-46e6-8ef0-b8ea198db877", "indicator--d0a72b19-d851-4306-b1ae-09eb31473709", "indicator--ce776eff-8aab-4ddd-8ce4-70e9420f31b0", "indicator--2063a457-7e6d-4c72-b812-36ff78ce14c7", "indicator--7cd2722b-5496-4cd6-9eed-ce2256d570bc", "indicator--8a960be9-5adc-42a5-8a6e-26fd9807bdff", "indicator--0fab9a1e-ee71-4296-bd30-df8f141807b8", "indicator--15982919-795c-4493-a53a-bf262c39b340", "indicator--f8560f95-b1a6-49ad-99a7-e3dc199bf5fd", "indicator--bbd03032-cea2-4b47-8b36-c539abbe00e4", "indicator--fef54122-bd6c-407d-b199-47b23af372a8", "indicator--075d1b6d-31c2-449c-9f8a-ab6729caef29", "indicator--6246c945-d18e-4297-ae70-7568b98b6d60", "indicator--0c639882-efa0-43a1-83b8-0c2025bbaa89", "indicator--da731ec9-799a-46c4-a5d2-5b127fa3759e", "indicator--5af8b1cb-18bd-41dd-955b-82a0bee9e006", "indicator--64ed9e6e-5199-445d-a5a8-c9c1b8d67cd7", "indicator--9c2d3d75-6357-4de8-8dce-ad52d1072aa4", "indicator--eccb5d8d-5609-46a3-8d23-253ce704f973", "indicator--5f3f59fc-2076-4f65-af65-d49c23ac9c9d", "indicator--a069638c-af59-4087-a7f0-8b051ccd25c5", "indicator--a67472d6-2f47-4691-b894-3cbc4c869cd6", "indicator--36d736f8-c2d4-42f2-89c8-e076144a6600", "indicator--9175e071-a944-4605-b523-6f29cd3dac38", "indicator--d4feb69e-99ef-498f-9530-52ec066a0b9e", "indicator--3a1fe137-dfb0-4501-a91e-1dc423cf020d", "indicator--848483f3-595d-45c9-b5e4-969a6bbfb54d", "indicator--6799d670-6634-410f-b381-219c8e249ce7", "indicator--e585273a-05b1-4df0-a15f-cbff4dfe10bc", "indicator--ff9aa9a5-6189-453d-b9a5-161056642a39", "indicator--1d51a0b8-ff0b-4a46-82ab-9d94c24ec60c", "indicator--f447b216-4d60-400a-abc1-3cb6955984e4", "indicator--41fdf71c-a04d-48cf-9d99-b026f371197b", "indicator--0301c7ef-38ec-4885-b9f3-194d9a6101d8", "indicator--88dc44b7-11ee-4500-9d0c-5a40d7b83d9b", "indicator--c078d168-265b-4d51-b066-5241839ac930", "indicator--f9e56aa1-86f8-42c5-a22f-0fe450d8378b", "indicator--4eec87c9-8650-4c82-97d4-3a71ced04470", "indicator--9aa81b1f-91ff-4eb8-b824-1cb67f0dc239", "indicator--9185485e-3bfe-4faf-98a6-ae160ce8b5af", "indicator--42b6a2f8-3cbe-456d-82b3-380d1842e84f", "indicator--24940d18-cb97-45af-8ad2-1230af31a7b2", "indicator--7ffaea8e-ed29-4145-9196-1e91638fee19", "indicator--f2cd993f-7cc8-497e-ae86-86d8deba7d1e", "indicator--86734ce2-4ce5-4a90-9cd6-c4f1e3d5841f", "indicator--55b49cf2-bd55-4b6b-b7de-4289ea0234ca", "indicator--a072e3f8-bf97-4d8a-94bd-751568b83842", "indicator--918d4720-bbc8-443c-9dbd-a9b8bec8d0a8", "indicator--f6fd5b27-1609-49af-b140-50a98cfe405c", "indicator--2bdd3af5-7e3c-4449-b24d-91f853601f9d", "indicator--ad98778c-3af6-4f1c-89ab-8ebf7e781d28", "indicator--bcc76559-4f2b-481e-9723-f5cf53b83459", "indicator--6d99fb1b-f916-4add-815e-cb29686f46b3", "indicator--616e8d79-e66d-4279-b579-6a5a1db87bcf", "indicator--1c0fadb6-50d9-4a8d-b61c-fbf783ca1d79", "indicator--37dae69a-00ff-4ab0-b055-0b73b8e7c4ca", "indicator--ff5a42a0-c4d1-4230-99fa-d191efcc352d", "indicator--b5244965-97ab-4ded-b84b-d5bbf978ebb3", "indicator--86aa7e46-e193-40ff-8852-5c7d0185a8a2", "indicator--23b984cf-44c4-4e1b-9479-644d7d1a89fc", "indicator--8203954d-e6fd-45ee-a592-b57dedf55e7f", "indicator--86a368b4-b9ba-4a18-9758-004093f4906d", "indicator--a08af5f1-e3fa-4f70-9628-aa36d50431a7", "indicator--ee40b86c-0599-4ca4-a7ce-923c3c0eece9", "indicator--244e9754-6a62-4793-a9f2-ccbf182c1a4c", "indicator--5c371271-d638-4df8-bca7-19b5acb62daa", "indicator--69dab458-7b88-4f15-bb37-e57d8f02a829", "indicator--01b65d42-35a1-417f-a11c-3638b336f73b", "indicator--18de1d14-0346-4c36-98fb-fd2ce9ceb7ad", "indicator--fb347043-e357-4631-88ac-53ecb128886e", "indicator--2b956712-6304-4acf-88af-4e51e8862eb3", "indicator--2abefd09-2a98-47d7-9172-feeeb54ffc1a", "indicator--6250eedf-46b3-4dfa-8a75-4701f7fcc15d", "indicator--723bdc76-4c27-4ade-af2b-0ee7cf52328e", "indicator--c0ec7817-b13e-4e1e-8aac-f5a014dc21db", "indicator--3ebbc790-bb89-4e1d-8731-ece0d7f14bcd", "indicator--38776839-ebd9-4ff6-bb91-e406a5e260ec", "indicator--26be51e0-5c2f-483b-822e-2715d1b1eb23", "indicator--35d4df38-cfd1-4a4d-90f8-4511dd5ba700", "indicator--85a49143-509d-4d64-8360-00c46c20312b", "indicator--a3136f3c-e7e7-4269-b0e4-42af2f09288b", "indicator--d2d847dd-ea2c-4557-a9cd-82aea76b02ba", "indicator--72b05159-1b21-4928-b370-d1d014423393", "indicator--8ad0d17c-1501-4336-aa49-9f27019d038a", "indicator--3c43c2be-cef9-4b34-843d-70a51ae4ee60", "indicator--20ed8d33-408e-414d-8a90-3469cbec6e88", "indicator--7c840627-c7b4-49c0-9657-f4897a7ed37a", "indicator--b9a49fe7-a6e5-4be5-abde-c7243ea2a90a", "indicator--c99c5fc9-0822-4d04-9134-9917f3800db7", "indicator--972fa531-17e0-4843-b16f-7988fae377ed", "indicator--40b37be7-1149-45e3-a584-b6c017a3bccc", "indicator--fd54809d-9dda-47d2-b1aa-476ac6ee1b3a", "indicator--cd7e4b89-6a23-408b-ad7d-900deb292c51", "indicator--f58db459-f68e-42b2-b3ee-5c88593c31b9", "indicator--d1c65775-3522-49d1-bbbe-f7c4986ac80e", "indicator--cd6569ba-3ece-4e7c-a9dc-4b404acb03a9", "indicator--853ffcb1-eaa4-4cd4-9317-a8e38c1168f3", "indicator--c76cd830-3431-473c-ac3f-40a73b83064e", "indicator--3344ea5c-1b5a-4ae5-a896-cc085c190313", "indicator--9c8cd951-873c-4b59-a84b-96585b08dc1f", "indicator--1ca281db-2622-46b9-a57a-efac102d6d70", "indicator--b49f1df5-26a0-4758-a7ba-552b4cd8ec67", "indicator--7a3da9f5-0b4b-4474-ba63-3ed213b19829", "indicator--37fed903-ae0b-4170-b686-3f4adb126441", "indicator--9eaa7de0-8555-488e-843a-f1bde7b82b88", "indicator--a9bd8785-1e1b-4afe-90d6-cbc893318957", "indicator--30699804-d458-4903-bde5-21afe551126c", "indicator--7aedb351-6db4-40f0-98fc-778d292eebf4", "indicator--1c27e75e-b25c-420a-961a-dfde335fc99a", "indicator--0c93e3bc-901e-411e-8556-b7a47c965559", "indicator--15f55957-e16c-4fa4-bf81-6f4447d95e89", "indicator--47e2f1ed-34d9-430d-a856-f35a670d219e", "indicator--bdf6e60e-4d2b-4523-ba76-8e9de03afb07", "indicator--8747e269-1847-41ea-b278-0892a012f15c", "indicator--26d8d62f-3c54-43dc-93db-abf7af36ac93", "indicator--e485581b-f632-4c5e-9e65-f55654df1008", "indicator--146cf5b1-8963-481e-8126-1098f063e4c9", "indicator--e3c3f670-ea97-40c2-b95f-b998b29d9359", "indicator--3fba9408-067d-4c6d-9cd9-539db46f8b81", "indicator--de93bf10-04f8-433c-8d8b-036d43087b85", "indicator--871155eb-73dd-4296-be68-d379b3f32703", "indicator--d43ed8b0-9fe3-4969-bfcc-1e6fca07207b", "indicator--675fb4c4-d183-479e-bf02-d69291e5bc15", "indicator--956d9c1f-f7f9-4076-8ed7-c61b4c1e8c04", "indicator--20404cba-2a1a-4756-8602-6bbda8f3ee87", "indicator--2e2b5a07-37fa-4c41-b46c-d4c973c2623b", "indicator--dc0732f7-b88e-4104-bc32-5fb9ee269147", "indicator--b5fbd8c4-b95b-4cd7-843b-96ec9bf784fc", "indicator--1356c0b9-90ae-48e4-97bc-84b1988402bb", "indicator--85bffdac-ceaa-4f6a-bc00-48e9aa588e6c", "indicator--32675894-a7d7-4ce9-a9ad-0ff26f073038", "indicator--b1821235-82a8-41c1-a74c-0706b6be6c7e", "indicator--bfb85f02-9e6b-4e7d-960b-37e65558fa69", "indicator--b5d05c17-9053-4348-b2bf-934cc8695fcc", "indicator--57e31ee0-d1f4-4c7b-9391-6b3015bafb8d", "indicator--2714fcc0-88d9-44cc-97db-b4d40e504950", "indicator--c92fc62f-e4f6-4dc0-ad8b-580c852b3606", "relationship--22b51b7d-731f-4fec-a5c2-ea37b61742b6", "indicator--d25c0fb4-16cc-465c-a0b2-ae21fd3a9ef8", "indicator--b4cfe658-fcda-492c-8892-782f5b11bec2", "indicator--1b376ae3-b1e0-455c-82fa-12b4ec253786", "indicator--ea6d076e-1f18-4e9a-a5c0-09b919306c30", "indicator--63df313c-8a4b-4e56-9f8f-e570e67e2b72", "indicator--2bd4d3a5-3077-4d75-8b0f-3fb77506a48e", "indicator--0127ab89-6f07-4a3c-a703-d25651251c9b", "indicator--8f03ff57-0291-4802-a7bd-286bcb852824", "indicator--c11ba5dc-e235-441b-8b3d-8681d2b3b5c5", "indicator--6a0351e2-92fc-4223-b64b-6533f9ff4799", "indicator--f5ad25d7-e57e-4426-be83-c21cde1e48a5", "indicator--2282c5fd-b6d5-43e5-b3df-8d9babcf8125", "indicator--40fd8cd4-dc3b-4384-b9e5-b7b3ac7c9074", "indicator--6007cc83-e7e9-4689-acfe-eaa50af3f597", "indicator--febc69cc-78a2-43cf-a527-7ca76be99ec6", "indicator--8ab634cc-f53e-421b-ab00-2d2ab8afdb58", "indicator--c2cc6c30-dda1-472f-bcae-1b8d458215a9", "indicator--da1d0b88-f040-494a-bbb6-5a8eceb83b15", "indicator--2085b63e-750a-4524-be8b-4ad7e77f97e6", "indicator--90fbee6d-a4bf-4bd1-bf95-59e0f20afb25", "indicator--59a3af6b-34a3-47ee-b22b-6b506974b88f", "indicator--4140c3ed-4592-469e-a6e6-bc9e734a2f49", "indicator--9cbfb4a4-8f44-42f5-8bba-c66a49942f3d", "indicator--8f8c78a9-9031-440b-93f8-6ee2f2ec873c", "indicator--7d49a1d9-da4f-4b05-850e-00dab542c5e9", "indicator--c2adcd80-235e-4608-b667-d3a8242b4770", "indicator--c0210134-79e9-41d9-84d9-33c00f60d90c", "indicator--bf3cbff5-08b9-496e-80d1-ce3c8ff38734", "indicator--0fd2ce85-bc97-4848-b1cd-91a542f9c608", "indicator--b0d645e3-4fe9-4d94-b4bd-6f3017fdc859", "indicator--6041c779-ad09-43fb-a994-166aeaee4971", "indicator--c2fbf770-5488-4a94-9d7b-95df9b1023b5", "indicator--4418708c-6656-4041-8afa-2713a47ebeb7", "indicator--a250fe18-6fdf-4d79-8a2b-3465309962d6", "indicator--3efee105-049e-46d9-acfa-c8f3e35c2ed4", "indicator--697f4bb5-ee0d-41fa-aecc-49173c60b8a2", "indicator--85688abe-657c-43a2-847a-763b7d5f9e12", "indicator--21762c2e-862e-42e8-b0f4-d5ab0acf2156", "indicator--8a32cd43-5324-4d12-82f0-a33954aaa94c", "indicator--e3773259-1bee-49e9-b409-03ae6eb04538", "indicator--528f4179-a31d-4fbd-8b08-80f511999d13", "indicator--6bbc2687-08dc-4cdd-8b95-a15d657abc7a", "indicator--3f00617c-81a9-4e36-9b4e-19990e8fe19e", "indicator--2587be25-6dcd-4b15-9250-193914878bd6", "indicator--71381a5c-232a-4513-834c-35bd8b8947c9", "indicator--ec6523d6-8f19-46a5-bcb3-cc2268851139", "indicator--d3ac53ae-61b9-4d25-bc95-30351059056b", "indicator--12842cd8-7f21-44b3-ab9f-be279a0795a3", "indicator--e982578a-581c-4900-8e4f-95f2d3460e6b", "indicator--6632cdb5-cc50-4900-b1d0-0a841c1a6fe5", "indicator--98529675-f5f0-40e3-bd89-9856168167b9", "indicator--8a106b6a-14c7-4bdc-9473-8ef139e3b88c", "indicator--3ec520c7-8d96-4160-9e80-67559874a7a9", "indicator--65b8b985-dc9d-4b81-9b8a-4447852afc6b", "indicator--aa79d1b2-936c-4eee-942e-bc12d6475d39", "indicator--32e97bf7-e963-41f2-91fb-5b2c13ff0f5a", "indicator--83b5cfba-8afb-4838-b78b-a51b20846114", "indicator--1792602f-d5fe-4230-9e55-9005e26eee12", "indicator--bd051ec4-1ce0-424d-9029-d42dcee88238", "indicator--52168217-8c96-408c-bda3-c12a22f74a62", "indicator--f5b2abd9-92fb-4cc7-8ead-1412121d71cd", "indicator--90622859-134a-4b7d-8c22-0ec34badaac7", "indicator--f883032c-3fe6-433d-b055-dc6bf34f2945", "indicator--bbaa4500-ea33-43e2-a419-921c4cf4c089", "indicator--5891a45b-9466-40d1-8b26-6dcf801f39c5", "indicator--f5bb39e5-ea28-47a4-bb74-1c6429b2f360", "indicator--97e5345b-7789-40dc-8368-52894eb9b0b0", "indicator--922cc7b1-6e20-4df6-a379-58461bc446b4", "indicator--e4d59e6d-7723-42ce-9675-d58bf3a44df0", "indicator--39b59614-2dd8-4c91-90c4-3c84c7d2b70c", "indicator--0e1897e2-6c7a-43fb-8328-62ccce3ed2a2", "indicator--1cfc059d-4934-4b5c-b4cc-7b3d62a1d731", "indicator--ce0a1c70-01c7-4ffe-84ea-997376d3db92", "indicator--ec71d7f8-0e8d-4cf0-938b-a0c5fb6e1c60", "indicator--4c422fdb-98c8-41d2-92e8-03bef8bea13a", "indicator--2774fd65-1fd3-412e-aa76-03edd07bd211", "indicator--ad50117d-2332-4ccd-a941-a785c7b31e5b", "indicator--1198ea9e-35b6-4a40-8e8e-a2ad9ec55815", "indicator--7da97325-aeb5-4bb5-88d1-36546ff166b1", "indicator--f24411ff-be8f-407f-b9d5-e9278034a273", "indicator--e31a16f1-4d9f-40dd-af81-d70d1d634f33", "indicator--2998e03b-1669-42e4-8bd4-c139311f05d6", "indicator--4670d6b2-d600-4110-aa4c-9ec17569ca2e", "indicator--0d5d92c9-ba5a-4141-ba44-18072bc655e1", "indicator--59d77f30-75ef-4db1-8bd5-dbcc65bb1342", "indicator--5c1f941a-b52f-4ee0-87d7-b9c5824cca3c", "indicator--8bffd405-01d2-4c77-a672-09aa250e754c", "indicator--a69a9307-a941-4f8f-86ed-7e530d61de53", "indicator--a46edd7e-0534-4d8a-9de7-cdc063c63847", "indicator--79902eb1-044b-4998-aada-c277e5fc9ebf", "indicator--d46f0a77-f57e-4f4f-8e84-2d936f11a40f", "indicator--140893a1-daa9-4d97-8fd1-332ebe8099ab", "indicator--32e15927-0d82-4ff3-9948-8546a4c66b98", "indicator--93d7671f-af8d-45c3-8beb-480d67fa36e1", "indicator--70de6b41-56a1-4ceb-8257-32fa1f15196c", "indicator--c907d413-ccb0-4ee0-ac41-7a0833354ec1", "indicator--4f527a6b-8cc8-41c8-98e3-7074157c0f24", "indicator--a3ad143a-b5da-48de-a714-05fe20dee8e4", "indicator--f801b7e7-94be-44ed-a0e9-34c6afb004fb", "indicator--ccb4895b-b337-4790-a34a-9af62d717b40", "indicator--4daa36eb-da1b-499c-9f7c-cbe4bbf6b319", "indicator--c1714c13-da78-4af9-8bce-6977f2738dc2", "indicator--0faf81d0-0aff-407a-823f-3f895724b91a", "indicator--f83b3c8a-adbb-49af-bd81-cd5d3983f8a8", "indicator--78fcc04d-ad2b-432d-aba4-7ced518f9561", "indicator--e36bf03e-a459-417e-9896-8fc0dd3e26e0", "indicator--6d06a726-8811-4e6d-8906-c4f24c927885", "indicator--9e2d172c-1b79-4478-b093-850c5baef563", "indicator--e802d9bd-c044-4ac7-b4c6-4c1f286a0504", "indicator--609abb51-82d2-450c-986e-a96cd7db5219", "indicator--7aa111ba-7365-4c26-b743-32b4556f10b8", "indicator--34ab57e1-36c4-4ef4-b93c-0c017a9a232f", "indicator--0f7d5deb-fb6b-4faf-9b20-f96884feffa0", "indicator--82454038-0cca-4758-998c-25c6ed1a3af8", "indicator--c2d5d66e-f5d9-4904-8a88-0bba5f694b10", "indicator--10bef290-76b3-4017-8cda-c202a61b5613", "indicator--4acf4c01-4873-4c30-be48-1707e4b2f70e", "indicator--303fab61-b3fd-4872-a909-b1f9fb5c8ccf", "indicator--16c90a56-ed90-414f-be08-3dd560f664c6", "indicator--31de46d4-760b-492e-8f97-fec1be0e3b68", "indicator--19e41cce-335d-4ea6-b3dc-2f1f1583de2a", "indicator--62a7fb74-693e-45c2-85aa-af5556215fcc", "indicator--4b619927-389c-471c-8608-96187f31eecb", "indicator--3fb3a457-7ce7-463f-aa1d-949d6cfabedf", "indicator--8ae6294a-32e3-4a43-bc39-4221f2c103cf", "indicator--e5266718-53af-4fc1-9b16-c298803d6091", "indicator--9239d1ca-13f2-4d00-87d3-fb6b8530ac8e", "indicator--3b22f83d-ada0-49c1-bb91-0740bc89b008", "indicator--603f64eb-64be-458a-bee8-a809cd13dfc3", "indicator--431ad302-7b8e-45a1-94b6-1fa555028569", "indicator--623d9481-4147-4783-9265-a89bfbce180e", "indicator--f43f41f5-a619-4307-803c-b6516e383563", "indicator--62a98c63-21d7-4b35-9ade-88fce50228ae", "indicator--28ce986f-6f70-4b27-920d-d06276c211f4", "indicator--34c50818-c4d2-496a-b78d-98a2eb45581f", "indicator--66fe705a-0b7d-4934-9126-33d1807cd7f5", "indicator--77c13935-b748-4da7-a793-9ab35d4bbd95", "indicator--17bac95f-6a62-4e98-b7f8-a8c30cdc0405", "indicator--6c350f49-5609-4579-bdf3-8d431b55cd2f", "indicator--c5624243-9312-4c4e-9dc2-82b12c2b814d", "indicator--5b50c9c9-d628-4eec-ae1e-a071bed2fc65", "indicator--5c6aa6da-103b-4199-b9c5-fb9a51f0fc98", "indicator--f3323b8f-6fc0-4c64-8ced-7b83c19531b6", "indicator--4350f321-746a-43d4-99ad-d1a75d962780", "indicator--593641a0-6970-46e2-a806-568e29e54ddd", "indicator--1e4e4419-6807-4947-bf1b-ef6bac8e8e38", "indicator--7694002d-d728-487d-9aa1-da9991c66ad5", "indicator--8048b72c-fb36-4b0f-a351-807d70d746c2", "indicator--0c57d41e-790d-4705-b048-a3151f4c8e80", "indicator--75982780-22c7-4ecf-95d0-e40758904b82", "indicator--f38658d1-4928-42e4-85cf-9bd8d281c42b", "indicator--3fbb8b2f-dfaf-4b55-ae20-182f9daec5d1", "indicator--60949663-7499-4789-be82-1e53e375f368", "indicator--225bbe50-bd3c-45d4-9947-6d17d73b2acf", "indicator--8c872532-e9a3-4531-8931-a23563cea633", "indicator--67d240aa-0da2-4ec2-96c1-24f239de74ac", "indicator--091017c5-4aa6-40c3-a4c6-bb63e06c6997", "indicator--1c718db5-192d-4f6e-a33d-a9579a57d327", "indicator--8237b337-4296-4cd2-9ad5-f99cee8e12df", "indicator--76270173-d3a8-4e51-bf21-017ed20f4c33", "indicator--dce76917-c024-44ef-8c39-e01f1997b38f", "indicator--17a0ce64-f9a5-4208-a840-dd7cef7f5623", "indicator--9c74aef4-ed10-4cfe-8627-657a881061b4", "indicator--455e76a1-f74b-4398-92e0-2a938f01e46f", "indicator--5b39257f-1cad-441f-b21d-14fdcd3ec522", "indicator--a0afcc1a-5c10-4f67-8243-c929b6c71eb1", "indicator--81b678bc-d11a-4822-8b5d-957e103a4ad9", "indicator--39d1c3c5-3e11-4481-b807-469bf8403e80", "indicator--21ba94b9-56e2-4d74-8096-ee89f575552c", "indicator--d03e1b12-ef6f-4564-90c1-06002b9f2f2d", "indicator--cb70eb63-2e13-4508-bbbf-48b687413d27", "indicator--2320324b-ce9a-455b-8cae-01a04c41e047", "indicator--0fd551fe-4413-439a-8da3-b793f63e2bbf", "indicator--7bce9f90-fb96-4d90-b63e-7d113f8a4047", "indicator--61f549c5-ea72-4e13-87be-4c8e70499986", "indicator--96ed1699-e6c5-4144-ae88-9425aa519be7", "indicator--b9f98937-4310-4d0d-a5da-5cb3e4f7c79d", "indicator--6d2d44a3-7038-4f8a-a8a4-398560f5b296", "indicator--acc83fce-d8db-4667-bc03-f81fbfca435d", "indicator--723f35a4-dae2-4290-a194-9ce0fec773c6", "indicator--2fcd6b31-93fe-4ea4-862a-7ec6768cd795", "indicator--07b55fce-bbf0-44e0-8ff6-9d7278681776", "indicator--dde42693-13b6-4876-92e7-6e529e17e9c3", "indicator--faf94c23-974c-47ed-ba54-4bf3398d10c0", "indicator--f370a5ca-8ddd-4c4a-bf56-33e55c6b573d", "indicator--b1cf4302-0c5b-46f4-aa6d-619fd7184db8", "indicator--9801f39d-1721-4ddd-969f-4911ae115cb2", "indicator--6712ceaa-4d51-4443-8e86-3beeb092f734", "indicator--34bdb7bd-054e-4cc7-8552-ea6d1d43c993", "indicator--c47a1f1a-714e-4185-9e97-0cfbc8179ab8", "indicator--61ade74b-e30d-4c82-b4cd-c7282bfa2b24", "indicator--c8f86cbf-8144-42bd-af4f-eb0f25805f4e", "indicator--add6480d-d87e-4e96-9c16-5593b757150a", "indicator--82c1bec4-577f-465d-8ed1-a81ad18add43", "indicator--b9479e92-fa87-42e0-b4b2-e777d14e1e59", "indicator--d67b4631-ded1-4d6c-8571-03524159dcc2", "indicator--e95d57aa-2cef-4c98-b1d5-9aa2583adc00", "indicator--0278486a-c128-4440-89d7-e05565a50143", "indicator--eb76d847-16e9-44f4-b899-ec2adfcecd62", "indicator--929091f2-505f-4952-8723-b0c506841110", "indicator--47f0f533-7159-4a7a-86d0-f4551713fa9b", "indicator--3d0e2a53-865c-4540-a09b-ec7dd1d873d0", "indicator--cfd65b38-623a-48cf-ab35-8c3da172e21c", "indicator--4c63cf89-6a1b-46cb-be89-8f39c83b9ab8", "indicator--013b7e7f-46af-4613-832b-b650276c6df0", "indicator--126cdab0-ce92-421c-a7b5-d54b99dd2ec4", "indicator--33b7e24a-3075-47c9-9dd7-8989e602c0e7", "indicator--d40bd296-8b52-499c-be18-31099a02bb66", "indicator--e6c59f64-15d3-42d8-993e-a7d83c2d68a0", "indicator--42e4d4a0-6311-41f6-90d1-1f20cdb4c2b7", "indicator--ee49284c-bfd3-4392-8926-da29a8f45889", "indicator--9b5a57a5-6ec3-4c0a-8109-7ef90f3873e6", "indicator--572ff74e-4d0c-40bb-935e-e8949135064d", "indicator--27babd70-9a0e-4c7a-8add-32235550d6e9", "indicator--d4f6eaf6-6b8b-490f-8668-7a966cc1818b", "indicator--29f91648-4ef8-4c97-8dd0-3b4a749521e8", "indicator--5cfdc01d-ccd2-4e78-bda2-052595c79ea2", "indicator--cceb3a8f-1f90-4524-b759-4b141bd6aab4", "indicator--e4b7e995-7c6b-4ff0-8b1f-c5a306cac466", "indicator--c40ae3e5-1b88-46f9-bf6e-8ff02238393d", "indicator--316674b6-8283-4144-a736-e57c1abd5fa0", "indicator--fbbacde2-34ae-49e0-8565-b5d87a9753ab", "indicator--481e7cda-f72c-41db-80d5-46c57cf8c5da", "indicator--2195ddc4-2803-42b4-8d8e-fb1746aa9b21", "indicator--703217f8-9189-44f3-8f0b-3f5c1ea267fb", "indicator--ab801ab1-82c1-44ea-a796-e88dea95cbe2", "indicator--dc4ced70-698c-45e2-a321-c0f8a37949e6", "indicator--534dd097-94b1-4722-917a-993653a474eb", "indicator--cf4f5097-0e3b-4bd5-9139-81aaeeee7c6f", "indicator--aac2320a-d9e9-4929-8e8a-818feb6a2616", "indicator--1d28923c-1497-4187-b424-5db3e46d1c28", "indicator--477ed209-51c2-405c-9e13-f074f729c4cf", "indicator--c98e04ac-b7d1-4074-867e-5d5fb15c0a42", "indicator--f86bd960-12f7-4764-8fa0-55a104f9a815", "indicator--dd9eb74d-6b65-49ca-875f-d825f852a2b3", "indicator--b50cdf53-beb2-460e-b33f-35d2fdf1c5d8", "indicator--87ea1694-4207-4ac7-a352-ae591f2e03d8", "indicator--b31b3523-e42a-43c3-9aa5-ca068c1dfff3", "indicator--69d1328a-1ad8-4dbf-a7b1-67ae2538b74a", "indicator--e2855bc0-0575-44b1-8b14-00401bc54465", "indicator--c70f39d9-251b-4117-b194-61af467df07a", "indicator--99f970fc-ad9e-480e-a0ae-911984f317ec", "indicator--38928d3e-d321-4ab9-913d-30ab389987a6", "indicator--082b5774-99c8-4638-b1ef-86cc5d65782e", "indicator--0c6b284d-fd5b-41bc-a4fe-f1b623c11255", "indicator--531f0168-3819-4ad0-8ed0-6d92a3561bbe", "indicator--561d5b98-f16e-4000-9984-215230b54a5e", "indicator--4390b180-919a-42ee-bc91-3ac445682a69", "indicator--7f63dc2f-17fa-4439-b39d-6fe05cfb2d38", "indicator--bf9cb9ba-5a65-4d83-bebc-9c154dbbd0ab", "indicator--116883b3-a602-4e3c-9199-2077e17806aa", "indicator--7b40a0f6-fb98-41c5-a780-497d0692f45d", "indicator--74eefeee-fd6f-41e0-b6ef-4ad6549260e1", "indicator--2eb4a43d-b1d4-46b2-8ef8-f5c24fdedb82", "indicator--d5b3746b-d887-4411-bdfc-2d263ee90057", "indicator--59afce73-8cd0-4541-8f56-09514fd135d4", "indicator--2a0a36cf-3d25-4762-9aae-49c9b2cc3633", "indicator--9a6efc6c-c491-4461-b70d-2dc94728dda2", "indicator--231c9ffe-b2e7-4e3d-ae9e-4201530cf3d2", "indicator--a3d8a48e-cc93-493e-816e-3c98cb2bba09", "indicator--47574cf8-c134-4e46-99b0-48def23afc35", "indicator--f4df6966-22e2-4be8-b5c6-f103042f0238", "indicator--2ef2a756-9148-4b07-b83b-098c3c50e0f2", "indicator--48a608a5-a8c7-4862-bd47-3394dd2b2aa0", "indicator--5bf277f3-24ed-4bcb-a66c-129cf4c178d4", "indicator--fdea1b06-35f6-49c9-ad47-9b49aba1934d", "indicator--0e1bdc1d-45e1-4f3f-bd69-9a8913feb789", "indicator--46e0047c-0a55-44f0-b390-e7cd245bb61f", "indicator--ee6d209e-9850-4cf4-b798-e29cb8b112d8", "indicator--2e44e47a-35d1-485c-a00e-bb1bdf5e3747", "indicator--6ce321b9-6e2a-4fa9-a617-580516f9fa31", "indicator--c9cca989-191e-4530-8d4f-0309faf99b15", "indicator--3f28ddbc-3a87-486d-9df9-1601d9994367", "indicator--609ae44e-78bd-463a-9d64-7a3117863f5f", "indicator--eb34cc9a-8feb-40ce-bec1-df5b6964fe3c", "indicator--2c0352c2-84ae-4ffa-89b8-82f286602121", "indicator--0cee12bc-306f-4db8-b153-41d2df760f95", "indicator--6d2ee952-47af-41cb-8f13-bbac54cb0db8", "indicator--67a52bae-8ba3-4310-998f-eb77a51a8c8a", "indicator--b8212197-1435-4f0b-bff1-900de539a2fd", "indicator--61c97a93-a085-4e75-94d5-4b2e872b9d50", "indicator--68864a1d-16e8-4ad8-9d62-a54d07f836fe", "indicator--85540160-ba77-4728-877c-d519065ec243", "indicator--d99647bf-34ef-4279-8ed4-2d332925c687", "indicator--d31e8bf9-aa0b-4c23-84f3-b4dad5f50ed2", "indicator--3eb6663e-bb24-43bb-b2eb-a8137dc5e2c7", "indicator--456dcf04-b0a1-4b8d-8f27-a7593dafb361", "indicator--730be393-8002-4533-b688-aa27f4eaadd0", "indicator--ff026247-d5f0-4477-962f-1abae0a16675", "indicator--40047341-67a6-488d-8e21-9123d4e6def4", "indicator--87c41e8d-df30-42da-8460-7e3f49bf9d90", "indicator--e4cd2496-45db-400d-89e5-1727a525e956", "indicator--4bcf4e1e-bd3b-4158-ae4d-9205c29a25bd", "indicator--b9df585d-b11f-4518-a58f-c88850c41bae", "indicator--5711744f-d814-41ba-9fe6-e9490648ab02", "indicator--345886af-8991-4103-abfe-bfc07c4632a0", "indicator--498f7c0c-b6f6-4295-91f8-4449064dd57c", "indicator--afdbc97e-636c-4fe8-805c-bcf9abfcf8a6", "indicator--3fd9064e-7deb-4455-869e-e1b5ef7b0408", "indicator--b06cc403-9210-47ff-99a5-b7dec1055668", "indicator--d77033c8-8c6f-49de-8053-a468deb0f66d", "indicator--4df0b057-a8da-43a3-ad2a-87c7ddc8033d", "indicator--18c475be-b0ff-4759-8710-4beae062e600", "indicator--457e7299-6009-48cf-a2f7-b9b313eeb515", "indicator--60234a5e-429a-4bda-a1c7-187e2e6c4d80", "indicator--1a2a7c9e-f9af-4ebb-85be-5ccfe0004ccd", "indicator--12d33f46-a1b4-4185-927c-1c4c4d383dd6", "indicator--27d9afae-0a6d-4f75-bdf3-2087116f6b13", "indicator--5f1f6ada-2166-4f8f-a5c5-5d831a97027b", "indicator--ff5fe299-8133-40ab-84a7-72f50ce741f1", "indicator--bfa35ad2-e52c-4582-be30-00ea5040abd4", "indicator--46c4cd07-806e-4a23-ada7-a67cd1e94c94", "indicator--fce759e8-fb92-4ef8-b649-5e0212fced55", "indicator--72d1aea0-9de1-4df5-8064-64d10d13db02", "indicator--a57eaf52-a7e9-4240-a570-809268f940c2", "indicator--37b9a8f7-7a76-41c8-b343-76fbb5fad87b", "indicator--485e6b26-8aab-4ecc-a56c-a3c8b80f4cfa", "indicator--0a35208b-0dd0-4794-a870-a47ae68a4fc4", "indicator--ee21f453-5006-44d6-b5ca-31418f890f2b", "indicator--6cf66324-adc6-4270-a390-7676ca6d4d7b", "indicator--c3d59701-3a44-464c-9fe1-d331717cbf96", "indicator--07cb1b6c-f1b3-476c-9a45-536e14aa6b7b", "indicator--c48d1b9a-5034-4aba-92ca-aaf0e94c07dc", "indicator--509b5c4e-685e-4d57-b6b8-566c699a7954", "indicator--b994f2d3-294a-418a-8a44-c7c7179a48fb", "indicator--d3afed1c-6500-4818-a3e8-461c4355e41c", "indicator--c492e396-4965-4e3a-b7e4-b6f3c269725d", "indicator--9e0918a5-7a19-47d2-8def-3c3386405820", "indicator--661cc5b4-5c68-46e6-aecc-3b33682249d4", "indicator--09285f24-6275-43bc-8d6f-83bb6c9f0816", "indicator--f891fcef-1fcc-4d94-9006-4ef1c72f0f84", "indicator--76410e15-b9ae-4008-b836-84a355f92943", "indicator--8713f5d4-65ed-4e5b-bcda-b1a40f1bed9a", "indicator--2f03102b-0a35-4066-9696-4bf8f2d2a697", "indicator--a5988ab3-e98a-46e6-b4f4-29fb6fe6dc2a", "indicator--d1356d4b-3a7e-44c8-8e5d-41002137171b", "indicator--213660d8-abb3-4b59-bb81-f9685cd64c47", "indicator--da8b322a-9d95-4ac7-9376-26d760610f8a", "indicator--7c692553-9e42-4be8-a36c-b0b86e8e5274", "indicator--41d96e4d-0f58-4acf-83ac-fdc9d05de1ec", "indicator--036fc574-d5a8-47d4-9957-088dfaae460f", "indicator--ebe26479-fa6e-4d14-bc22-417beec07450", "indicator--1e598a22-9c54-4c6c-bf95-418a4e43a44d", "indicator--b425524d-264c-45e9-9de8-b88401ec1b51", "indicator--e5261e40-2490-4bcf-961a-11e412e9828c", "indicator--99605515-a32c-48ad-83ab-a141862b9d65", "indicator--9e3197db-7678-4aee-87d3-e2389efc6fee", "indicator--6f46229b-02bd-4a2f-834a-54519a14ce16", "indicator--fe8c073b-88ca-44e5-8ae3-6f9cd2029765", "indicator--19dcfb0f-5ab1-45f2-8a23-a25c2c8d23af", "indicator--4d3bb5c4-98cd-4fdb-a605-9b379c102229", "indicator--f1ccc9bd-3705-40f4-8841-bdb382768260", "indicator--559e6670-e518-4a31-b9cb-606cae6d1f7a", "indicator--d3fcec1b-cf02-42e1-b05d-5486e08fb03d", "indicator--5bd4095b-7ecf-480d-a52d-f70b66f477c4", "indicator--127a5e3e-4f29-4307-ae0e-dd689de3bfdd", "indicator--aa515c7a-de99-4bd2-aa17-f733a47e671f", "indicator--2b72d4c0-cf80-4598-8da9-4d1f7c51df5d", "indicator--405a5ae9-3b68-4d1a-872b-e5c4ee5b8425", "indicator--ec7cf36b-9039-4570-a4da-2daf3da7f674", "indicator--90e63b7f-a47d-4279-b27c-3e4cf49d1822", "indicator--3c01aff3-05a2-44a8-9785-ab6db508fee2", "indicator--3d8657ae-44ef-4adc-9c1a-f4e6766933d4", "indicator--09a740b8-f0fd-431f-9aae-6333da23c881", "indicator--0bafc1b1-6369-458d-80ab-8944921c4197", "indicator--4d7b4e87-0218-47f9-b609-ac9608abb160", "indicator--30e6a6ea-57c5-46dd-9889-9f9852dfb43e", "indicator--4956508b-c3bb-40b1-bb31-74da0650e2d6", "indicator--db3948be-3ed1-4e15-a4e3-904b1c57d1e4", "indicator--34fcfb49-bd9a-4d75-9eaa-c13111e693c8", "indicator--8fa57821-28c4-4263-9b26-7a991de50444", "indicator--f14d73f3-f237-4c88-b63c-ed211900da8d", "indicator--efa9d7a9-2766-4bc4-ad56-857164449ff4", "indicator--085b9689-7e4b-447c-92cc-4afab5a5bc22", "indicator--f9ef18b0-df8b-4b7a-8652-0523d562c39b", "indicator--48cecda2-b0ed-4c98-936e-249aaffd3b7e", "indicator--7ea2a943-a80c-4d83-acd5-285d632756ab", "indicator--a4729028-2ba5-4cbb-894c-80bef507ae98", "indicator--3e5ecd3f-792e-4792-ae59-4c57a782d707", "indicator--0d3ad60d-1caf-4fb6-a378-6fc8aebdfa65", "indicator--d70c24b8-bf22-4d8f-a19e-7f9a21288acb", "indicator--9afbc5ce-b53f-41fe-a26c-ddf27d557661", "indicator--884c1cf4-e998-4531-8225-6f90df820894", "indicator--c0da27c3-2081-4dee-8eba-2565b735daa0", "indicator--a24fce82-1196-4d88-8fa6-85cf7af0fdb0", "indicator--7856eff3-ea23-439a-a915-4f68e64b186e", "indicator--96c4e7f0-2910-4a44-b073-618d63df5993", "indicator--315ad397-78b2-478b-9317-31e9774e79fe", "indicator--50105a12-67cb-4848-832d-4dc2c444af1f", "indicator--4120ff10-6ab0-460d-a5fb-44af476ab471", "indicator--cdbb9dfb-81aa-4021-b0b5-f77644c31765", "indicator--f7572c51-0cdd-429e-91fa-d0b3b3dda8bb", "indicator--37a3aed0-26f5-41e0-9a72-4fadd4daafba", "indicator--ee3a664e-40ea-411f-9c87-17a3db4e8b3d", "indicator--e410a64d-8151-463d-a041-f5ecb06dfa76", "indicator--5ac78678-4352-4908-bcf0-bbe0867e7471", "indicator--ec4d8505-0c92-4a00-bc34-b7e990b824ec", "indicator--24a7931c-f5f6-4d88-b304-5a41b30471b5", "indicator--337ff601-45a6-456f-8547-8d4385c48f61", "indicator--d2c405b9-fa32-45fb-83ca-e54284fd6293", "indicator--b5885b51-283b-48e6-aa59-737eb7298d8a", "indicator--78dcef4f-f585-422c-8460-74e025662bb2", "indicator--54e1f41e-4453-4e9a-a84f-674acf480a84", "indicator--4ed0504b-a3de-4371-8118-94aa4f13aeac", "indicator--392745fb-6c01-44ec-801b-8256c1c896e1", "indicator--bdf758d3-0f9d-4326-96fa-4278a4aebdcb", "indicator--31c8a081-377a-48be-8dd5-0a1c99013999", "indicator--e3898495-81f4-4316-8c19-cbe23eb96d78", "indicator--6ca2b87d-08a8-4599-b192-cfab017a918a", "indicator--8d54f29b-0532-4a7e-8a01-b317f182110b", "indicator--540bdd76-588f-4407-b124-7d722aa48c97", "indicator--312fe454-448d-44be-8a89-ec1ab079f20c", "indicator--1c740f86-b0ea-4120-b4a6-5c0e4086a453", "indicator--da05772e-def4-4c65-b173-cb456ea73d32", "indicator--8b8d8177-5e36-49fc-b76d-fa8e6c55b2b7", "indicator--e852f449-0802-4658-9d2a-a16f59b534ba", "indicator--d4b0763b-3755-47ce-9c3b-eabf54cef19d", "indicator--3bac9b1b-5183-4d11-8b1f-ef8c85c02c63", "indicator--67d8ecae-5871-474e-a4b1-c830bcbbf60f", "indicator--d4d7c1d2-ed7a-4ab5-b113-0649c1d8dd2a", "indicator--a6bd40a3-272f-4baa-aab7-7e141204a43a", "indicator--9bab9da8-4396-4ae8-8f68-050cc7eec198", "indicator--24871239-7faf-4d15-a5eb-a48ae3f148a5", "indicator--f7b5e1ac-c3c6-4c2f-8904-ca6a64ff1016", "indicator--b6af32aa-426f-492d-8d41-17b939edcc77", "indicator--463b9f23-1e5e-48fc-b804-41b08a5c02d6", "indicator--b39f50bc-d8f3-43de-baca-61fe482cdf89", "indicator--3986109e-4600-4563-9804-77767581a0d8", "indicator--1b008166-17f0-4cc5-87c6-8c1b8ddcb5bb", "indicator--94f21ad3-172f-40c6-b45a-cd316fb808de", "indicator--cbc88502-508f-4d80-acf0-11bc7a200953", "indicator--2a9215af-4f91-455d-87ba-0fea985b2bac", "indicator--cc110135-68da-4a7e-83ba-a6c5b2329c44", "indicator--ee024aac-e261-45ea-aacb-3a1a353b2c65", "indicator--296fb473-9980-48a7-9372-103957a9c787", "indicator--7a6ab920-5237-4a9f-872d-2d826f0fb5fc", "indicator--9f18581d-c1f3-4371-a17a-05712bcbe1e3", "indicator--846c926a-7532-4302-840e-cf1e2673eee2", "indicator--c69b50f8-8525-405c-bf73-2c60a1966596", "indicator--39e1e265-6aa8-4fff-8192-38e6f7c02da9", "indicator--37291fcd-fa4b-4553-8bbb-92a88aec6516", "indicator--f463bfc3-f2af-4c49-8f6e-afa1ef232cc5", "indicator--ea3bef73-13c6-410f-be61-a2e6680d7e3e", "indicator--6a15cd74-bb59-4f39-bd30-2bfe46e46b9d", "indicator--9c7c990d-3d67-4706-9206-fc7d4367b48c", "indicator--697b5265-a554-4471-b6f1-be30b23c95d4", "indicator--e22fe27e-28c6-4b70-94c0-b8fc84524118", "indicator--2ce7b029-675a-45d7-9099-3e1aca61bfd4", "indicator--978073da-1441-467a-b30e-5ee154dd4f46", "indicator--a800f23e-0a8b-479b-b06d-108d96d70ea6", "indicator--fc70d3b2-e234-4a9c-b2cc-9b97d64b7e33", "indicator--d89271e8-c7bc-479a-9017-bfa0671122a5", "indicator--ec3ee33c-d823-49e1-847a-99de5b5b2f87", "indicator--7acaf4d9-d0fb-411e-8406-954dbcfa7b5a", "indicator--20014738-ef98-4874-a7d0-120086eaf915", "indicator--4ba01bbc-d742-46e9-9a06-4b16e0a8efe6", "indicator--81cff66b-6a82-41f6-bd59-bbd219f6ea85", "indicator--c04b1f3b-90df-485c-99dd-2a235a93fde2", "indicator--c3c5b122-4827-4af1-b426-c83abb916308", "indicator--e6d8738f-57e2-41ed-a4aa-f0e875c78f2a", "indicator--da735515-dd79-4a6f-93ea-12b8dd3d6b52", "indicator--8bd7e9bf-3783-46ee-9e37-25a4c7ee4c1a", "indicator--624858d9-ba25-4bb6-8bd5-e54b7b398101", "indicator--e519c0eb-fccb-4fed-a7a2-4b98ac18720e", "indicator--5da49382-7019-4cdc-9d68-2bb11f261f93", "indicator--e7210f2a-cfa0-4d32-906e-ab4f22ca5d19", "indicator--7924d50a-9ecc-4fa2-986b-74df42610e48", "indicator--ecf2fbeb-2b3b-4476-8fa6-637f36bb69ee", "indicator--dc1fca04-20aa-429e-a2f3-4d37b85c6d64", "indicator--98485438-e350-4e26-97a3-643d5d16fc1b", "indicator--af6aa94f-be74-475f-8c18-63106ba15503", "indicator--112c6904-0732-46c9-b9ca-4049f92f4e01", "indicator--6cf97ba1-0e0c-4205-98c3-5ad0f89c2ca3", "indicator--9ad50223-e892-4866-a4e6-5a7e356876b8", "indicator--4a5b9138-b2a3-4f47-9c03-aaf247279e07", "indicator--9f5ff407-e55b-4388-8325-94e506cb88f8", "indicator--24172c03-12ed-4bac-bbf4-dbfcfcb2d565", "indicator--d4f24eb2-7601-4ca5-8269-b2e03e0815c4", "indicator--873da975-8dfc-438f-910d-ad895a5554e1", "indicator--1e73b529-8087-4fc9-9aac-0c6ab9249b97", "indicator--ed102e7b-8767-4959-b56a-7d191a211e9b", "indicator--d89d8f1e-b448-4c02-bcc7-c58c42ae09bd", "indicator--60bbea21-3d9c-49a1-920e-f788a98f6c3c", "indicator--435822b9-51d9-4d5f-9e1c-8af0ac2ba218", "indicator--d2ec9a67-ca53-475b-9f05-916d4dfff827", "indicator--320bba23-ca92-4840-9dbe-1b71c807e5f8", "indicator--1ad9b40b-849a-4bd9-b981-71dab3a875e6", "indicator--762c4977-5562-4790-bdd4-f4b9f1495fee", "indicator--0a31a9e0-a58d-4853-b5ad-7c795f462b63", "indicator--c8d5a11c-d85b-4168-8654-2112c643280f", "indicator--1a4f17b3-1735-4c88-ae5b-fac5f2f79bf6", "indicator--bf321e3d-a53c-46b0-b3af-a8c502b91097", "indicator--54221eb4-8d9c-42bd-bb1a-89b1e4d5cdab", "indicator--bfd3373d-32bb-4c20-a4fc-fcd59bc40118", "indicator--29ae3698-67d4-4592-93ba-91fcbdb44a66", "indicator--409d948d-0598-447c-aeba-c1d50cb379a6", "indicator--e5fd4372-4ef7-43d8-9df1-a65884b4c097", "indicator--355e8850-93da-4330-b29e-b5df4510f9d3", "indicator--766a2ffc-deac-4cd9-8fee-ba9c1fcf6c21", "indicator--f3353edd-7e5f-448a-9c2c-208758e32c72", "indicator--cfa68c11-0f12-402e-8090-6142d7e3ca25", "indicator--517e8d65-e108-49ef-97c3-9a327cbe4ab3", "indicator--a7e00176-c820-4088-8494-e2aff05a5c2b", "indicator--dce27b5c-c86b-424f-86f3-0637aacf30eb", "indicator--1b3d992e-e6c6-43a4-ba15-c841ab2a4358", "indicator--66bdc270-ee31-4819-896d-e2594d640dc3", "indicator--95cb1417-82ec-4c57-aaf8-2da084ecd682", "indicator--c2c82a78-dd89-424c-8375-901de073aa7a", "indicator--4b5d34f8-7eb4-4719-a740-6a5a2accd543", "indicator--b13c031f-f118-47a3-a0f4-4ca84cd2a9c0", "indicator--029139b3-417e-4086-b2aa-e64b2929210e", "indicator--5654f833-d76c-406c-9f3f-d9dc93b326c8", "indicator--03d6c44a-0ed4-41df-a5cb-ffbb855dced6", "indicator--0b45c45c-4280-48b6-b217-ac45cc1936ed", "indicator--afd77b75-186c-46da-98ab-aaa2770e8f8a", "indicator--7a7f64ac-c242-4a96-a800-cb02e020e400", "indicator--71fc2983-8403-43c1-b583-d54eefce7691", "indicator--01d32aa6-28f0-436a-aaa4-33785652d68c", "indicator--9e309c21-f830-4f7b-b00c-9d2cd9d679e6", "indicator--45477154-d7d3-4e33-9d5d-0b3990e70a2d", "indicator--90dfdc70-e0ae-4957-99ea-0ca31d7bac75", "indicator--c37c4ace-ad7e-44bd-a935-bac42454e329", "indicator--0722bb8e-c83d-4c63-81b0-f40cd632f2b9", "indicator--157d8207-f490-4850-88ea-6777dd73e129", "indicator--7ee7540d-47f5-43aa-bdc3-0e17386e5147", "indicator--02976477-72ca-496b-8725-44e63e955299", "indicator--dbeebf4a-c98c-4b46-97d0-67ad39ed9b02", "indicator--88ca8402-38cc-470a-b560-a46f69c6842d", "indicator--84effded-1fc5-4d66-b5c0-d55f8b9e3e04", "indicator--4e883591-e79f-42d4-94b9-f75095775278", "indicator--b296ebbd-d1ab-4ebf-a6e1-d880eff0e235", "indicator--cb62af2f-90fd-476e-91c3-f309a8cfacdb", "indicator--ed684a55-0dfa-4ece-a0aa-9535cfc05075", "indicator--c125cf18-7c17-4b16-a4d0-daf89fd2bf8a", "indicator--a829b7e2-ab2c-4f7e-84cf-29385c2b49bd", "indicator--2b18547e-48ed-4d47-ba10-c1f85a576ee4", "indicator--85820486-81e1-4ecc-87c4-0630a5ba84dd", "indicator--8cee5d92-0196-4a54-806a-fd111cf5fd27", "indicator--0ff981a3-aa93-48fe-ab09-0d5d627bda05", "indicator--36b54dca-acc2-4eeb-a70d-31dbcbf41439", "indicator--76e4c3ff-db3e-44a3-9360-142d085ec525", "indicator--10a7d6ea-ff65-4eb0-8fd5-c28b452ba267", "indicator--91a0814a-002e-4c86-b8e9-7a9da2fbe594", "indicator--ca00948d-6b10-4fde-94e1-9862bed2bec0", "indicator--ca92014e-bb7f-4497-a325-3bab4d0ac144", "indicator--5661217e-6e8a-4c2a-b331-ea7d6b427e5d", "indicator--c4d820f3-3e64-4681-af5e-229088d0f816", "indicator--73fbe193-afb5-4783-83d6-17fe6923e761", "indicator--7156eaa4-1dba-48c2-8f24-9cad8adc9e74", "indicator--e18198da-b9a6-4414-b685-e47fbe8b917d", "indicator--6a2aca07-cb8b-485a-a1fa-27431086569c", "indicator--49642e3e-9e49-479e-a5b3-1555be947f6a", "indicator--728a137b-1ca3-41f5-bf2a-fd5f536e7737", "indicator--a2480022-53d0-47d8-a36b-4ec3f3e50a34", "indicator--a53b3f54-0dcb-453b-af13-6cfad8ad5b31", "indicator--9c459792-d4ac-4746-9a5a-e059cc6aa241", "indicator--481467ba-99f6-42ab-9dfe-700907bf3b32", "indicator--26cee328-fc47-4b96-99bd-e44f0d333450", "indicator--49392713-c2f0-4970-abfe-90a73fb05b5e", "indicator--2f22cb0f-d111-4c06-aba8-50c8c7bb9f2b", "indicator--6783773b-68b1-4df0-a6b8-e3891aeade14", "indicator--b4d4bdbf-ebe7-40cc-976e-08563f833723", "indicator--23fcfc66-01d3-42fc-8917-847e921aa63b", "indicator--c92f9900-ad8a-47ca-afb4-e9e88447968c", "indicator--5039ca2e-e0a6-4595-b63b-718f615e6326", "indicator--b20b8bf9-519d-4a35-96c7-18412ce0a142", "indicator--7ff1ed46-3177-4012-9210-b3d61cada078", "indicator--8523307f-7b71-4acd-b010-b090d83662d8", "indicator--3f63f1a9-3e99-42e0-9952-ade2e26c2bb9", "indicator--d777b88b-a281-4aaf-90f6-49ecf6552862", "indicator--2452913d-e164-487a-973d-050799624489", "indicator--cdd879e8-d571-485c-94d9-663be7029c88", "indicator--aca6cd8e-07e4-4144-97e8-cc6d3e5cd635", "indicator--7118a7fe-1793-471b-b8c1-ba438cc9f12d", "indicator--9d017eec-9b52-427d-87e6-466938a7b1c3", "indicator--625374bb-460d-4af8-8384-cc0e7fd40bab", "indicator--5b729b88-1795-46ba-9f40-cb63695dae1a", "indicator--87bac75f-d275-4aca-bad2-2b73739576cf", "indicator--25d564a9-7e55-4558-83bf-3bf53d6e8377", "indicator--8e4dcfd7-fc5c-47ea-a3b1-33fd9528a61d", "indicator--1a20c684-3c48-4105-bf56-5c7502bce1ea", "indicator--c90e0c17-9a25-44bb-b9f7-353ff236678c", "indicator--adfcd1f5-fa2e-425e-81be-049f62c6426b", "indicator--07782092-7f6a-46e2-9989-ca1b396ef532", "indicator--96af4de4-ec95-4528-a2d1-66ee68900866", "indicator--174b2287-4c4c-4800-a38d-fc742ec5191b", "indicator--3210ba04-8151-4a01-a097-cb39fb9688b6", "indicator--071bc225-c5e2-4132-863c-37ea6a3c167b", "indicator--2f06c1e6-6974-4bc2-8c1f-dd8ac8dc4e77", "indicator--4a226034-2077-45d3-88ae-908574d87fb8", "indicator--28dffd77-c634-428d-b17d-4c485d1e8c85", "indicator--86cf385b-ac13-4d05-a3ce-a6a52779553f", "indicator--8a3dfb8c-e7a9-48a0-aa3c-b634c315df31", "indicator--972ba109-a828-4865-bfd6-e120909be28e", "indicator--48a95778-67ab-4c30-9fb8-647b333cec05", "indicator--b58ab276-7f09-4272-8179-95f817a83459", "indicator--b2b85ad6-560f-4a19-847b-e39fb9bb513d", "indicator--08ffbfb2-945c-459b-a131-35c05fb70743", "indicator--4130d9de-6267-48f1-a5d1-e628b82f1c42", "indicator--2d7aec7f-3f7f-4eb2-bd67-c62196192f81", "indicator--68549a74-6e10-4dd2-b973-5e0eee79a9d1", "indicator--6b89d1bf-37ec-402e-a75f-84ae474251d3", "indicator--5f739c1e-235d-44cc-a6c0-ed9626754cba", "indicator--5ca84998-0a3b-48a2-8d9e-64d746b6d53a", "indicator--d47855c4-2310-4235-92e6-f197b469c211", "indicator--0a0d287c-488c-4364-81a8-7235021089d3", "indicator--54c1d918-6f3c-4088-aa39-e51df79198ba", "indicator--7765664d-43c8-40c0-b051-bd2c8dcd8576", "indicator--be8a6982-ffda-4ac1-b3c5-a8509c972af7", "indicator--6e7b6672-5a2f-4b4f-909e-89ad8ced831c", "indicator--6eeb5450-b283-443a-962d-9c08c010621b", "indicator--95ac4c1e-e2a9-4e39-98fb-f651d7deb849", "indicator--a222c672-d7fe-4493-9bc7-2b3b96d3ca5d", "indicator--9309993d-53ee-40f3-a042-3f68358cfacd", "indicator--b3455aa7-6e65-44bc-bdd6-b721ff3eb08f", "indicator--6e2800f3-296c-4c74-bd4c-550f22ab3c44", "indicator--898a46e5-8410-45dc-b4bb-7f50a8f9d01b", "indicator--3788aed4-bd5e-406f-8df2-08a6ea532917", "indicator--704ddeb6-1991-47cd-9aed-8daa49500f7f", "indicator--69acd1eb-a57f-4ab2-b159-b919a5c6606b", "indicator--fd818157-e0fd-4263-bf49-6b1cf5e01ed3", "indicator--ba3742f9-1132-498f-8d88-adef7d6ef2fd", "indicator--e95a7c60-5260-4e12-9194-be20cd25c384", "indicator--20a4ba6a-6e28-4762-a2a9-2b2ae237fdc2", "indicator--0578672a-0a74-44f2-bb1c-237fdc8be05f", "indicator--eda6222d-87e8-4b7e-a588-93a4f7219733", "indicator--c0fdff59-f49a-4d10-ac07-5cc95b4663b0", "indicator--e2001339-eb41-4195-b3dd-9857930152a1", "indicator--8c26695c-7512-4658-a8f0-ce3e9d5c0a27", "indicator--1c0cb67b-67d5-41c5-b681-dfa49b6431c2", "indicator--f724e491-02c8-4789-9f5b-b7c37656dd14", "indicator--5cee2ff7-19b5-42fd-8a7b-d9147eb12c97", "indicator--c050f06b-a7be-462a-8ef5-d8f785b633c9", "indicator--68896f5c-41dc-4265-83e7-8296522ca2d3", "indicator--3e7de653-5ef7-4e69-bd8e-b32d685f76c6", "indicator--fa2a5790-9f50-45dc-abdb-ddb0c4b07598", "indicator--87f51bdd-e2cb-49e5-a84b-6ad737ffe282", "indicator--5df6dbc2-cca3-4281-ac7c-066c9c93eb73", "indicator--5f58c269-4e4c-4845-bb6e-0feb71a10261", "indicator--6df5c5a3-22cf-4bd8-9abd-f2847182c71a", "indicator--9ed9cf02-3d9c-4ac5-90de-9b4ed17ef068", "indicator--8238d6c1-07ad-4196-a66f-42a21c97db8b", "indicator--9e82d18c-cd30-407d-b522-6c7399b4d01a", "indicator--6bd073f9-b425-4e45-b3fa-bd03184a3272", "indicator--d4445c94-0cf6-45a3-bad1-990e2bb8d82e", "indicator--5293196f-a557-4f77-b5cd-1d6b74d0ddfb", "indicator--286d64a1-f907-477a-83d3-d09681c64571", "indicator--5bf22f67-e997-4d1b-b483-a39800a08c9c", "indicator--58a7337a-0f1b-48e8-b5c0-db220d3adef7", "indicator--a9f5c7e3-63a2-4470-bd9c-a58462f6b49e", "indicator--d22ef924-6cf8-47c1-8181-5cafe7055cd2", "indicator--cea11d5a-5c37-455f-876c-e87b2a58765f", "indicator--57fec38f-3c4b-471c-bf9f-3b88f7d0de7d", "indicator--3acaafa6-69a7-45fa-b690-ff1cdda05d57", "indicator--3f50ff59-051f-451b-8a0f-dc97f1e52032", "indicator--e751357b-e6f1-43e7-871c-c8dfc9dd0797", "indicator--b213fcfd-b87f-4aab-a08e-713c7c702f1b", "indicator--f8d56128-8a4a-4f83-aec0-e1bac3c76942", "indicator--d5764457-cff5-4384-b079-640c0adda64e", "indicator--7b367665-50f3-4b89-9e3a-23d300ecb268", "indicator--0e61a0b5-58d4-49c4-96ce-aa2735458617", "indicator--fa9eb86d-0de6-45f9-a1a4-a19ca5ba8c56", "indicator--8f9fdc91-b7ab-4400-9b78-b1a817a81608", "indicator--b6da025f-45bd-4fc4-ac35-3d8337792c92", "indicator--0bc803e3-b0f0-44ad-9a22-8eee7c64aa28", "indicator--6a5ffaec-8b49-4748-acbd-bc2af9ca98c3", "indicator--2c84dc64-7a5a-4803-900d-583ef25c2a0f", "indicator--dce9a385-e4b5-4560-82a2-dbd9757522de", "indicator--51081745-d969-4662-8bd0-616de401f4e8", "indicator--650d564b-5b9f-4893-b194-35217f06c5a6", "indicator--e8d83bbe-cbc0-48eb-bbb2-e7fa3d1cfac3", "indicator--22d21610-2a4b-4d7e-9000-9acdd3d034e0", "indicator--83943d03-0896-4272-ab42-1a43720a972b", "indicator--835f0aaa-f427-4e52-8a8a-b6883ea1bbb3", "indicator--f284ab5c-8fde-4d38-ac1b-60d1c652a6c9", "indicator--09fb04fd-17fd-4490-b668-59d318138232", "indicator--23bc586f-4b8c-484a-97b3-9df732d8aaf2", "indicator--034cdfe8-f4d0-4d28-832c-120832d22285", "indicator--0e8fffe4-bcf8-4af3-b874-ec579e9d41e5", "indicator--fb83edf2-ead5-4448-917f-eb4304a76aa5", "indicator--117f6fa0-5a6b-4c48-9316-b6950d00e9e5", "indicator--1b3cd375-0179-400f-b631-3ea365513259", "indicator--33e6d9eb-00f6-42a7-8798-e44eeedbdfc7", "indicator--e2b923b0-801b-4f6f-94b8-f9c09e6c9ab6", "indicator--7aeab968-e85d-4bae-8d10-ebcf5a082f13", "indicator--a5e2b44c-920e-44c0-a1fa-df4452923d1f", "indicator--8c4f0010-2da1-4814-b2ff-ef2047c93514", "indicator--e9a3b94a-9df5-4ad9-86df-229a4b135caf", "indicator--40327512-49ea-420a-b941-864489de949c", "indicator--3ec8e46a-ac34-4f8a-8cf5-70885dceb2d5", "indicator--b3511412-68f5-48e7-b0b6-c44fb7ec20ac", "indicator--1fe5dfbc-1243-4b58-91c3-ed1b64662ecd", "indicator--69a5e777-417a-44f5-8995-6323a2b0da9a", "indicator--cb474ba7-745d-4f5f-bfb2-9baffac6ecb8", "indicator--7bdb0b8d-f203-4896-be4f-21d289d97016", "indicator--b3394203-6685-4327-9b89-edd805705bc1", "indicator--db9e437e-6e1c-4db5-9f9c-afabe2808c1b", "indicator--07170c70-a805-4975-83e5-2d6fd6c101c4", "indicator--175a3c65-6200-4f93-aab4-cf6566466493", "indicator--3659641b-fb40-4586-bf2c-40c36fb99927", "indicator--ceafc421-1ef8-46d5-90a2-4c4176cfc26e", "indicator--71677832-fc4b-45dd-9451-e9fd960d4757", "indicator--cd1426d1-d7b9-4435-90dc-4cc165718aae", "indicator--1b830eca-659f-4c02-8fe1-d32456921bab", "indicator--5db41ad9-52d4-4d13-ac0a-19efcfabef82", "indicator--2b5b13ee-8152-4606-bcb4-45e0810ea14f", "indicator--315b8092-5107-412a-9204-85e834394271", "indicator--3f73edf0-06b4-4755-9531-154487e55d0a", "indicator--c13becfe-2972-4d2b-b768-cdc9380e7575", "indicator--423105ba-0b22-401d-b97b-76965bfb7035", "indicator--366caf35-6a2a-4c38-b070-cad9fb39a7ec", "indicator--00dd4083-f04d-42b3-a03b-83ebf8a3883b", "indicator--f16ffd71-afb8-4f8b-a4ce-51a25ba6070d", "indicator--cd9c7377-96c7-4571-a225-b19f61b1114c", "indicator--e2052544-8f74-4f44-9b7a-524d6ac1a61a", "indicator--21def164-eb15-4aaa-b57a-6fdbe0d8e73e", "indicator--b49527ea-b70c-45c5-b493-0150d69da09a", "indicator--ab5d9171-d4b6-4436-a937-b947cfb12669", "indicator--d63314be-0079-4cb7-9274-3d19256cf7b5", "indicator--1df780ac-97c2-4bd8-960f-241394711d6d", "indicator--e4f5b8b6-9181-4d53-b799-788b84826713", "indicator--5bf669c9-624f-4f14-813c-28d256712b97", "indicator--06163b45-c567-4aa1-968d-2739eaa9ccd5", "indicator--381e58cc-2d34-40eb-825f-db69271e796d", "indicator--7e9af744-6c04-4d60-a611-e6e31f31a41c", "indicator--0eb8e333-3145-41b0-a61c-a998e1663c20", "indicator--09641137-8f24-4fbb-ad75-88a96eb62491", "indicator--266e493f-6f30-4992-94ac-52545d8dc78c", "indicator--16d4c075-905e-490e-a762-bb57323c5d34", "indicator--33710f3d-e8a4-4ad1-9a01-6fb7647af821", "indicator--fb2d33c5-07a2-4288-9497-6baa6ee4011c", "indicator--0f9e8148-5177-4795-8f37-db0a3ea8c005", "indicator--f2048791-35a0-4513-a7a1-aa415ee33487", "indicator--dad0ed0c-9bfa-4141-9545-1444945f6b7a", "indicator--53b5751e-88a3-474f-8b3b-9f3e4aba7caa", "indicator--40450904-23d3-454f-9562-0b8f0ef9417d", "indicator--d0a94afd-8a50-448e-8662-390591639660", "indicator--6917899a-c414-4951-ada9-6643b76ea4e5", "indicator--3ed7ab78-46d3-42b5-a1d2-f10b1ca68833", "indicator--709e7e6d-a749-49f4-8fb5-f23a6e2d8fc0", "indicator--342c1b9f-d87c-4a6b-95ac-61c9f1de4241", "indicator--ef81c7e4-454c-40b7-a5ad-8ca95eada4d7", "indicator--37a6b5ff-17db-45bf-9c95-be9cd7937e1f", "indicator--4df130ad-ecde-4725-bf54-8011e4de69b6", "indicator--27897fc0-0052-482d-a2c2-ebd58548beee", "indicator--be365c17-b8a7-4f93-be25-447f79d356ac", "indicator--83443f6c-9a42-47f5-96dc-6d79bc19e4ec", "indicator--5470bbbb-ee24-432e-bb47-d94db2dec880", "indicator--41231c48-da5e-4870-96aa-9acd97be2b35", "indicator--77a21da8-873d-4301-993b-722fe7b4c06d", "indicator--4de8905a-7df5-4b42-a8a4-9a1a4c074ee5", "indicator--1b2876ab-1c17-4a1e-9857-1327fc26605b", "indicator--cfe2c592-d142-4b81-aef2-56a0ca9d71d0", "indicator--73dfab46-df7b-4f94-aa62-0d0f4db5a1da", "indicator--03cf21a0-3273-41be-8861-de3c8f89bd94", "indicator--b6fb6ba5-3bdb-4a43-b5b7-35825c21cf48", "indicator--092ac6c8-13f8-4747-a3c6-d12708dafd17", "indicator--87dad723-58b1-4fad-b222-0040e701be24", "indicator--6d52c4bf-b695-403d-972a-47882655b22d", "indicator--c50e129b-a209-4968-ab91-bb5c1c557552", "indicator--75870d58-f930-4dde-883e-dac4f67b0d61", "indicator--928e5ba2-07ba-4d00-9b3d-52e311fa783b", "indicator--eadda889-7601-4192-88c9-2133d487bee6", "indicator--4e2d026e-79ad-43b4-9d01-6648bd3ca8fa", "indicator--0411abaa-18ed-476a-a92d-0a5ace19adb2", "indicator--ae110ede-d003-4839-bd0e-e081485f55f1", "indicator--7cf48fe2-b2ca-4891-94d4-d211d176f8d0", "indicator--acf0f16d-5f9b-4b89-a5a2-59dc60c0a70d", "indicator--6a47088b-cfbd-44a4-84b9-9db9783e08e7", "indicator--8757d89f-752f-475a-af93-bbe709213186", "indicator--95c3c3d7-20a5-45ad-8215-05db1871d079", "indicator--e90e5a78-5680-456d-9e13-c7f451e45140", "indicator--cb27f822-1a9c-4836-91f2-edb70e04b9dc", "indicator--52939bfc-1014-4d25-a9f1-3a20cbf3319b", "indicator--f0f52fc3-94d5-4707-820e-4cb12dd73f29", "indicator--cd4ee7af-5ff3-4c9a-aab0-1fa789e53a4c", "indicator--55836a28-9721-48c1-ba7e-d3a73e79549f", "indicator--a269dac6-0e9a-4375-bb57-c4868df6a16d", "indicator--add64785-33d9-4ec6-bcd6-ec7ece3b2612", "indicator--1d9bc025-381e-44f0-baf6-b7672fc4228e", "indicator--ae70286d-468b-4dd9-b08b-4b65b9484556", "indicator--6b34adee-c89c-4e25-baf3-b41db7d9bdbe", "indicator--a167c6ae-2d63-4b5d-b479-de2bded15859", "indicator--c93c60dd-3f27-4901-8d7c-ab78b334c444", "indicator--057d4af0-36a6-466a-9772-82ccc9faeb4f", "indicator--48ac988f-f803-4a82-9e12-01d87dc8e6f3", "indicator--7f645f4a-631f-43c9-9862-71963b346e1a", "indicator--7117be62-08f5-4ac0-91cc-90a688a44e5e", "indicator--767a9798-c469-4ae9-9e3b-b63c6e06c0a9", "indicator--00fcec61-005f-46b8-bffd-ec1627f0da49", "indicator--7def69ee-9ca4-4534-a99a-1e0b87bbe099", "indicator--71f1038a-0667-47f0-bff1-8ff02c15e664", "indicator--4b38b980-f9c8-4b54-9464-141102fba602", "indicator--570ee161-5272-49a2-a215-1b5d2e0703f9", "indicator--507b310a-df65-41bd-b222-7c6828ed3338", "indicator--62af4dd7-25b6-4cb8-ab05-7316caec3efd", "indicator--971d9c6f-c1f1-43df-94a5-f0436a762b21", "indicator--fb5feaea-769a-4992-8f3b-b56350f91035", "indicator--3c4e9ba6-efa4-48a6-9aab-2d04b8ea1589", "indicator--46f3b90d-b8fb-4a83-b06e-550ffe4aab63", "indicator--ba8c3b61-dfc7-4935-b9d6-c17ab424303d", "indicator--719f2b2e-c552-4506-98c8-4441a743c69b", "indicator--e86a16ea-3814-4f5d-9a97-68c842c71b9d", "indicator--1a50a0c0-54a0-4bbf-9a45-78556f2799dc", "indicator--b1e9bf1a-596b-47aa-821b-5c4680de9e85", "indicator--736a1909-fbbd-4d3d-bbff-6b5ae38d39af", "indicator--886e31f4-b692-4fe2-b772-7233f6e20377", "indicator--a6e8d7bf-abde-4e6a-a26d-880104032659", "indicator--453b4e00-5b28-44a9-a0d8-65e7e0079c07", "indicator--135de850-39fb-4bef-8b1b-2ffe02d04eaf", "indicator--d2f82dde-f39f-4ef6-b4c9-c9fe04e6483f", "indicator--f337a7a7-1cc2-4949-bbbc-fa4d58814dc7", "indicator--e6e977d8-8e4b-4d01-ab6a-b6d93c6f3534", "indicator--18bff12b-bcba-45bb-b96a-dababae9facc", "indicator--27f965ff-b901-4a4d-a795-0de08f2a64fe", "indicator--95dba9a5-f2f9-4bc3-9a9f-95a41e5db92b", "indicator--d207af8b-080e-4080-8057-44a562d12798", "indicator--cab43efc-668a-4a6e-9d28-a00e339715ec", "indicator--bbdc969a-b338-4a95-bffb-ef8e18416ab6", "indicator--5d8cbddb-6b70-4f4c-b186-fe3baaed683b", "indicator--b2e79384-a7a5-4098-b79a-750050205276", "indicator--23c33873-5992-4cc4-babb-793a1ba879c2", "indicator--3759a41f-6143-4271-a686-e2cc266339ee", "indicator--f1ccab67-2bd9-438a-b7ab-4033ae4f75e3", "indicator--32a8aadd-ad31-4f84-88d2-61e997025a09", "indicator--65380d18-070b-4d2e-9e41-afd7cb9530de", "indicator--ab1e787b-5eb2-427a-be8f-7018d23eef26", "indicator--9accc84e-228c-40d4-9449-d135aedceb8b", "indicator--229809aa-db4a-48a3-a384-ad060ee5f65f", "indicator--d3b47f4d-922a-4732-9cc9-a2e4edc23489", "indicator--07c5bbfe-1add-4ddf-9161-0f0d52279614", "indicator--65f25aad-049b-4c69-9a6c-7c24ff639cdd", "indicator--fdafa492-ee2c-47a6-afea-9cf1888e60b9", "indicator--a5d33487-3c69-40c2-96d1-a6e72e46bd5b", "indicator--adf5c4c0-6060-424b-b2c7-aea3d90086b4", "indicator--b7fa722c-8812-4a63-837c-17df5065d702", "indicator--20f49489-2bc4-44a2-92de-494db4301748", "indicator--04e6182a-fa10-40ac-8146-26d02479fce9", "indicator--c837830c-7a6a-4c1f-9720-462226fa46e8", "indicator--9d35f40c-94f8-47bb-809b-2ffbdbb9cf97", "indicator--542ff1a2-204c-4c57-8fc2-9537a27c3962", "indicator--f502294b-60d3-48c1-8d86-7f26d38f0281", "indicator--442a37a5-6543-4907-87db-fa2d42413746", "indicator--da5083ea-909f-4ccd-aaa4-f056c541cea5", "indicator--a2017a0b-b62f-4314-85ad-bb369df6f639", "indicator--76092451-c0b2-4fb3-87eb-6b5c8dfb6ea3", "indicator--dd1c607d-6831-4627-98cb-d99bb0d09b84", "indicator--1e4269e0-9fa4-4ee3-832b-9e9e40640627", "indicator--b320ed72-c112-4e07-bdd9-99e06426f86d", "indicator--d79863cc-0633-48f9-ba97-9ec9f14b2491", "indicator--19088a7c-99e6-482d-9b27-c20fee8cdeae", "indicator--5f61418e-8f33-434e-8205-fd5f42ce7d5a", "indicator--6226f77b-feb9-4edd-b738-4fbf7482f39f", "indicator--5bbdfbb0-c423-4db5-8cc3-93a17f793359", "indicator--96633fc5-1503-4450-92c4-fb620be4791d", "indicator--62704517-9324-4c57-a60f-72a42758b21b", "indicator--38f2e3d7-06d1-46fa-86ea-481ec00d44ac", "indicator--c7d1e214-f4db-4d43-8454-e37de6436869", "indicator--5ff4c10f-d159-45b4-8a8e-214a4b001f3c", "indicator--5a5771bb-bace-43e9-8a82-396196058f88", "indicator--e1a43643-4757-4fea-b8cc-ddafaa3865c9", "indicator--9d6be815-4648-4aef-a855-01e5cca29021", "indicator--952c8351-ba4c-49e3-abe5-51bc65ce5185", "indicator--b8fe36c7-fe74-40d2-a9d4-0f8737488f53", "indicator--3b0757c6-875e-408c-aa64-0138cb838a5a", "indicator--7fcc1115-a87f-4857-9892-dad44c4e195c", "indicator--d0e0eb7e-d61e-469f-a059-30983603df0d", "indicator--283961fa-ed39-4723-bd2d-99fd3f227606", "indicator--d9edd37a-019b-4ce1-aebd-c16fe643a8bb", "indicator--6e9c654c-d793-4d79-8fb1-e723e661e982", "indicator--d5231e15-7fdf-4356-8794-7b184e7a40f8", "indicator--058f4ded-7535-412a-8166-8076a1437ba8", "indicator--e6930d53-4fa4-4092-8f3d-d19f0803c911", "indicator--bbe4d285-c53e-4d1a-9416-297d0df0fcef", "indicator--a626a90d-d46f-42a9-bcfe-44edb7a5d540", "indicator--7c5b8cb5-514c-467a-97d1-01044c5f444f", "indicator--961fba46-01c7-4d7e-b687-978f5b578a3d", "indicator--016fcb8e-ec06-4099-b94b-3d419b715904", "indicator--0fc9edd9-f557-4bbe-a0b3-7580a73b7aa0", "indicator--f429fe6c-8301-423a-8eb8-345f219a40b7", "indicator--227437bd-cd4a-439a-8baf-0c554d7d75a2", "indicator--c404391a-22ed-4d58-8d03-667d28ca7095", "indicator--c4f0faf9-cd6e-46f8-8a0e-402c3a491a87", "indicator--5e87c7a1-3f22-4b82-880e-db2cc536f3e6", "indicator--3527442f-a588-434e-bef8-562ed06f6ba4", "indicator--77842176-5921-4f6d-8a79-1dab4ff3fd90", "indicator--01d99d56-722f-4531-8886-7104b15682b3", "indicator--431a0fe5-7948-4f0c-8f14-170ed4b8d17c", "indicator--62e8e9ce-9b87-4624-b862-cbf5fc1a21d2", "indicator--e655d8f7-7caa-45c9-96b7-9fc20e5533d5", "indicator--ba177f2e-e800-4625-a09d-7abe336ee6cf", "indicator--fb5eb9c3-38f3-4643-9435-8de2475a3c87", "indicator--5385399b-883f-4c6f-a393-159d07cf291c", "indicator--aa78fded-ae48-4468-9132-76783e74b87a", "indicator--e316eddf-7751-42ca-b9e4-8e2ff0c889a2", "indicator--cf8da66f-3638-412f-bf66-52d5947832e1", "indicator--3fe462c2-a6fa-43fd-b8ba-28a83425ec78", "indicator--e5c0baae-e611-4731-b1b3-67dd50abe587", "indicator--5b0e0f7b-ed9e-4054-895f-8535e3d5fcca", "indicator--fdcbd677-d504-4ea7-97de-676b7f17d163", "indicator--e2047abd-8087-4487-b464-b1571efd8ed1", "indicator--bfa3f137-14c3-44c3-babe-ade5e2d3bbf1", "indicator--fa14051f-fac6-42c1-b42d-57070c53fdde", "indicator--f907e7fd-f1ea-4ab5-97e2-89938ce54937", "indicator--e73972dd-ad8f-4289-ae1c-6c348273a98a", "indicator--55da3792-5414-4eef-9fec-3f64812cc810", "indicator--f0d650e4-ac50-4137-b1c2-004d27eddbee", "indicator--86d1d91b-5c43-4e18-81f8-dada1837760b", "indicator--edf683c0-cf5b-4f1e-8f8f-a43288e8b94a", "indicator--eecd92dc-c6ac-456e-b658-fd74f660951a", "indicator--767d2fb4-7840-4898-a245-8d70546a66da", "indicator--9dc6d48e-4568-44e3-826f-c79a6397f573", "indicator--51c5d945-d46d-4e4d-82e1-18b5de9163c6", "indicator--2ba16ed9-38e7-4f44-929b-1fe97c6f4b95", "indicator--f56af92b-23f5-483c-84f3-b0df85af3b4c", "indicator--797e0f4a-0bc1-488b-8c57-978d4b2ca71c", "indicator--089c9bfc-d801-4516-9042-4b147c135416", "indicator--efe3d999-8a9b-41ae-9a98-1edd57ca621d", "indicator--f7b0bd59-d75d-4758-bfb7-a8576b9da3f3", "indicator--733978d6-3688-4c24-bfc0-0a028392a2d2", "indicator--58ab9076-6f61-41c2-be94-9ee82b59581a", "indicator--2e66a1bd-bae4-454e-ba20-6cc83b24a3dc", "indicator--263075fb-2831-41e6-9dfd-8193ef8dde6d", "indicator--1a835b20-5a4e-4fe0-9eab-50508e9d5c19", "indicator--a3560138-3e22-460b-b32e-47b11ea52cb9", "indicator--f1d97a43-f176-46ef-a443-c2636648ecd6", "indicator--c4be9e9b-a136-4ed1-bdd5-5b528355b806", "indicator--32e2efbf-04b4-4e4a-b72e-1636ae587230", "indicator--e9921f0c-9251-4901-8b35-d9ceb6c35c07", "indicator--802bd7b1-2b43-4871-9eb2-3f81581db87b", "indicator--c68ecce9-3c8c-413b-a4da-f5f691c996ba", "indicator--aa1218cf-c939-4b0c-84cd-2e5f8c01f9a8", "indicator--32ac4bd2-7fa8-4f15-86d1-0777ca9d70e8", "indicator--ce72ecaf-ddae-4ea4-84b5-179f9997e8e7", "indicator--a2560863-e104-4589-b1bc-e68ec40b0f72", "indicator--a713e309-2d26-4e49-8326-9954199ecc3e", "indicator--96256cbb-4f32-4d28-a4fd-1a9771ea5574", "indicator--b1a2cb7d-dd6b-40dd-8e85-41857fe9a712", "indicator--18764305-27fb-4348-815d-daebf8fc671c", "indicator--d464be3b-8b85-4962-8854-30d77dbb8de7", "indicator--0f08ca75-d9c8-44f9-954d-3e4bb243ecc4", "indicator--687ed6bf-f475-4d39-a121-932bed22edae", "indicator--6d945dbd-64b0-4a39-9578-195b8d65b4e5", "indicator--dd577acf-d8a5-4244-b744-09496c2773ef", "indicator--1ff7425a-0d00-4f54-b958-7fcbc48a867f", "indicator--85b33116-419c-43ab-93a4-e0fc0794514b", "indicator--d5a01cdc-580b-4f03-abd4-edfa25f9b66d", "indicator--235559a3-988b-4254-bfb7-829fdf6cbb1b", "indicator--d231d2e6-90de-458e-9e72-1665e1b17720", "indicator--9d10090b-daec-447d-9a69-5e58315f324a", "indicator--1c76cd3e-adea-45ab-ac1d-bda3be2366cf", "indicator--6627cc75-7cbc-4c8d-bb92-6bcb63dde2d8", "indicator--72efa2f3-0d5e-492d-80f9-ee67d8b65fd7", "indicator--11becb28-4ffd-4985-85e5-8347369d4511", "indicator--f9ce5d9f-500d-41b6-9801-4146f407b985", "indicator--0a8e3b82-ad8f-4bde-904d-417a9dd30056", "indicator--abf0db20-d71d-4d0e-8c35-f4c92b3c5482", "indicator--b1d340cd-0c3a-4c2f-8797-4aca738b2e09", "indicator--d3de6003-3444-4a88-9c66-fd4f9823188d", "indicator--a1d9fbcf-0b86-467f-8112-6f66a1017a9f", "indicator--cad79db2-80e5-4e8d-a33e-958e91294288", "indicator--de3ce5bb-3b78-4be4-b595-2e2878c9be8b", "indicator--c01b791c-57f5-444d-8a4d-e5b92ee53e78", "indicator--d7e978e6-8a7f-41e3-9c85-e6cc1a98a139", "indicator--d45a25c4-fbe3-44bc-bf9d-6d91eeb3de67", "indicator--33a956c4-6f50-41bc-8137-6d5732e03145", "indicator--c7633fdb-be12-4c80-b23b-0217b401d5d7", "indicator--02b41fde-f118-495b-ab73-78f417106ea4", "indicator--eab2408e-5932-46ad-99eb-52f6e213c8d7", "indicator--66f50e26-0dea-4069-8501-b37f9da28e14", "indicator--ef6ac9fa-52bd-4b45-8992-e1a8631d615f", "indicator--5b08802e-40ab-4693-9604-3d7756859461", "indicator--e1b990e6-3b43-4657-9e1a-2bee149436a4", "indicator--d40d83fc-76a7-4ae3-b216-e3755bb538b9", "indicator--f062d2d9-2516-4048-b8df-24f5307a9aa9", "indicator--0ce89cae-65c5-4a16-bd12-03448d3c1f4c", "indicator--330658ce-87a7-41ef-9c03-41b71a27d3ec", "indicator--bfe7d290-68da-4327-86a8-ab4085107448", "indicator--1ceac6e4-b595-4123-b253-690898237da9", "indicator--086836be-da0f-4184-9af3-710599df330a", "indicator--45fcf173-c4a8-4064-b9ad-a998a90b16c6", "indicator--1aff8079-17e2-4007-a67c-1af33ad8b484", "indicator--2fe0e33e-3ac3-4f4b-be5f-d83934115013", "indicator--78daf49f-a794-4f3a-9e2e-abea78c7565e", "indicator--a8c0a8db-1dab-49a7-93b8-784070c3a2f5", "indicator--18d07cb0-568f-4abd-8789-725667f45900", "indicator--cdcf08b2-1f72-4d35-93eb-6f88b00a6414", "indicator--8909b9c5-d505-477c-9e5a-f824c62564e8", "indicator--958911d2-607f-4273-975d-04e03fbd85bf", "indicator--c248d255-b90a-46dc-8154-42345191d5b3", "indicator--6f0092f7-8ee5-4fae-9cc0-b9895836fc16", "indicator--c75fd01b-beb2-4716-9387-e3b8a01958b6", "indicator--62fb135a-b049-407a-81a9-ea22bdba868d", "indicator--e5eadbd5-c9a7-40a0-8363-76614853c52a", "indicator--9d2a6955-91ff-444b-8acb-6e22be1144cd", "indicator--4a1be2f2-5bf2-4218-8571-150d3d15ce14", "indicator--172510fa-6e6b-46d3-b72e-0b1d5c947651", "indicator--24ac7949-dcb4-418b-9284-21615ef054fb", "indicator--15eea3bd-a6b2-42da-a12a-96de1fae89e8", "indicator--33ed58b2-c1c4-4b43-8190-b4dd689ba47f", "indicator--fd20ecd1-acb7-4b20-8971-a269e7765048", "indicator--d05578b2-77a5-468e-8754-e78307e70769", "indicator--3222e24b-6339-4cc4-9794-d1c80cd8cf0e", "indicator--e8a92de1-2f7f-439c-a756-eda13a96ed11", "indicator--a924f02b-3466-4276-a950-15635ba83a07", "indicator--28b6032c-d51a-499a-8b9e-baf41a823114", "indicator--9a7c6124-6671-4d0e-a56e-705c6019c537", "indicator--e31ef39b-615c-41e6-8241-bc1b53b200ca", "indicator--3f3d4d5e-5cee-48f3-ac3a-305d27848cf2", "indicator--e1d74cf4-8485-4e6d-8dc0-dd1b161fb7a6", "indicator--b0dfc874-ba15-4839-a5a6-f59e60d0d052", "indicator--cce7db90-660b-4034-aec5-cc5048424274", "indicator--db1473f3-25c8-4dc2-9644-73494c81a563", "indicator--969b5fcd-511e-4102-89c3-7bc8493b8601", "indicator--4de91b42-ced4-498f-a0c7-0f70e3b5997f", "indicator--d0c07e8d-cb48-40a2-b408-019cb976e6c8", "indicator--6040d905-5903-477e-8489-5dcf5360b74e", "indicator--ee480a90-ef95-406b-94f1-6253d32041cc", "indicator--77abdf37-9d89-4669-924d-3044ef8fda16", "indicator--20028e79-0ed2-4912-989e-a8f6a1c48fee", "indicator--0e63af2c-88fe-48dd-a8d5-58ef2401c250", "indicator--98143d8d-520d-44a3-a6d7-ebcc4e7306ea", "indicator--b971cfc4-803a-4215-8b7e-8f903f921995", "indicator--dfddd552-e855-42c0-b967-c48109dcbcfd", "indicator--fd120fe3-d448-42fc-8e96-5123856ba485", "indicator--e4059913-97de-4bcc-bee6-64852f272540", "indicator--131105fa-02f8-47e1-805a-15805b7d9475", "indicator--d94d42a9-667f-4d02-b7de-b6c74ffbbd19", "indicator--7b851136-b007-48c4-8b14-9cef3c78d163", "indicator--3df7cc27-33a8-4cff-9a0c-d8469e5a3efc", "indicator--cc492225-652f-450b-979c-2cdf58408bfc", "indicator--5ae2e05d-6fac-48c3-ad79-3b7626f02ffb", "indicator--8a2aeebc-a7a7-467e-bad3-8e9cdf8c070f", "indicator--d79f9468-0cd9-4cb0-b696-70b3ba91801f", "indicator--7d99c1d8-9142-4b3c-98ad-3206ac27aac9", "indicator--193669f9-f38a-4660-b4b1-bf6206969298", "indicator--40bb8ad3-2498-4b59-b031-4b974a588730", "indicator--c7f4b7b7-bd77-4b13-9037-c5969420d01f", "indicator--1bac1039-3ac5-4340-9624-e64041cc74fe", "indicator--8d399182-a9d8-49ed-a1fb-f827feee39b9", "indicator--fb248613-6688-406b-b85c-90c0a30f55cb", "indicator--8e710c26-e000-4438-b969-1bcece964cbe", "indicator--5eb8046d-9d20-4822-8889-8713b41c8a07", "indicator--9eba2eda-0afc-47c6-9d87-d814a9b1c52f", "indicator--72424875-2d70-44c4-b5ec-df85ce9afcbf", "indicator--5a4b6772-69c5-48da-8873-1e54efa965ff", "indicator--bc99cc0d-1f87-42e6-a6e0-a59b2c849fc7", "indicator--1b5ac8e7-075d-409e-adde-f8090e7d80e3", "indicator--a9a999f7-7ed0-4af5-9197-07eed8efdf59", "indicator--ec57be17-b6a4-47fb-888e-1de7d3b70531", "indicator--586637b9-e5a2-42f8-810f-3e66e34976d2", "indicator--8b793b7e-07bd-47d5-90fe-62cd2b6d5bd9", "indicator--d169ccbf-6e39-4ec6-8ca5-dcbfe9cd6cb1", "indicator--e39da6f1-d091-4d10-835d-0bbe320ba2c8", "indicator--18824741-4077-4fa3-aeb4-ca6183aa63cb", "indicator--b68309a6-09e4-41dc-a7b4-2e043366cdbd", "indicator--adf6ede7-3ce2-4487-8371-7a16dbf2f7bd", "indicator--4cf418a0-e630-469b-9d28-45f58564e4de", "indicator--1623c89a-8510-4e9b-9cda-6095baee111e", "indicator--b74af885-2b06-4bb6-8b25-6d85142fbe58", "indicator--23273232-305c-4c18-8ca5-c49e5f1302a8", "indicator--fb643cb9-2c42-42c0-84df-d0da0a74a8f7", "indicator--5ec4ef0f-7413-4708-b7fe-1da5a7297c2b", "indicator--66d9f28b-acd7-4d58-838c-0564a5f9414f", "indicator--17f0a2db-9947-4e2a-b715-01208ba29430", "indicator--d270c9a8-d531-4dd9-ae12-5fc60370c1aa", "indicator--dc6dcce2-7e3c-4e1a-98df-5ea6fcc3356a", "indicator--ad4e7520-453b-4085-a634-cb26d6cb20c3", "indicator--6ad9252a-8b6d-4c01-b1b5-795440ca08fc", "indicator--3d3125e9-af53-4365-a6b8-3ad100fdfd6d", "indicator--ff4abef6-aa6d-49c7-a244-6d4304ca232b", "indicator--e5382940-3948-4927-abba-ec428458d2ec", "indicator--a6a463d7-510b-4a58-9541-970f80ad2813", "indicator--c267881a-495d-4f52-95d5-e7b1c63c5e10", "indicator--f38feaef-360a-42ae-b85e-17fdb3c9a714", "indicator--6799b3f5-068b-4bcc-9ad3-61798accfcbb", "indicator--5e36c6d6-9d3a-4075-9559-a7ffb441bbe9", "indicator--06f67784-8a17-4a2f-b100-a9d111861fb9", "indicator--ced27708-c306-412e-87a2-3f4e3d842e98", "indicator--b9429b29-5450-4d95-9528-03b50696c6ce", "indicator--adb2d03c-5ed1-4952-8438-c9652ea26815", "indicator--7fd66edd-1fee-4a72-a68e-60661cebc77c", "indicator--c6d5bd03-e634-422b-bf89-2b001ee962ba", "indicator--ea4f5519-9a51-45dc-b084-ec96c3ceec19", "indicator--ac8bd305-c7be-462e-a587-d72a22ec76ce", "indicator--adf67efd-d8c8-4f3a-b27e-16d3e4e1326b", "indicator--1ee2beee-9ca0-494a-9094-290b79736b19", "indicator--1ada8d25-ba17-405d-ad01-0e3d92d3f22e", "indicator--a0377002-e400-48c9-8d54-b1a74d5392f4", "indicator--e1e9efb9-ae9c-4f27-8bfe-49f448f7fb23", "indicator--3b43b214-1b00-44e6-9ed4-ed1d9cdd042a", "indicator--804960e5-6ea2-4feb-98d8-ec063ec83795", "indicator--5433a063-df39-4b9d-8a52-b39d4b10a7ea", "indicator--43e670e3-edfc-453f-8981-7031f9173c53", "indicator--68efec1f-e3c6-48ac-9cfb-aa16f4b8ab91", "indicator--76e6cde6-d5d1-462d-9e7c-21519d4c2e62", "indicator--50865290-a726-4d47-b1b5-7262e3694e73", "indicator--a1248a15-4db1-4bf2-acfb-e24806a5a11f", "indicator--8065a71e-ef0e-48e9-a451-2783f1f736f1", "indicator--46d4c6db-f64a-402e-be78-d63c6713cb54", "indicator--4acb3405-4684-4f97-81ed-bfce19ee71ff", "indicator--e4ebc276-64e9-4bcf-acc6-a0824d6f06f5", "indicator--5c0f7c23-8c24-4392-beda-fecd45dc9cd8", "indicator--e212040f-867f-482b-9e2c-98cb24e202c8", "indicator--1738d870-00f7-45b0-8732-85c88c0273d1", "indicator--8847dfed-2443-4583-91b2-6b7f46e0301b", "indicator--c065d028-687b-476b-a990-811f55d5e2a3", "indicator--0a6e6a6a-785a-4553-aaa4-620c80aadd93", "indicator--d4f4ac65-a5b5-4c68-99c8-120af7bcdfe1", "indicator--f3816a9a-8de6-49b7-b2c7-81d003924bf1", "indicator--1fe15979-635c-4b02-8687-e965277d0693", "indicator--6a2bfbeb-4e7f-47a8-86a4-04a9b06ccb88", "indicator--b05b2727-b904-4f76-acd7-3160104d5ede", "indicator--128cf7a3-3a9d-48b1-b3b5-78266e386403", "indicator--ce57c9ff-0ef2-48e9-8336-483ab6f77d68", "indicator--f69f06e9-d431-43bc-ad0f-fde9fd178d44", "indicator--3dd53aaa-e82a-4b78-99d2-6025e092a73c", "indicator--df30018b-5f0a-43ae-b405-4eef8cc60ebb", "indicator--6180c7ff-7514-4022-9e3b-83f1f3f8789c", "indicator--a63642b6-a321-46ca-9701-c100a01821e3", "indicator--84a25f17-db92-4f59-aff0-81eabbe8d24f", "indicator--c1baff49-f182-43ea-b5c3-1fade3f05947", "indicator--31f8843d-1971-40f8-bef2-4b26e68a70a1", "indicator--a1a6029b-25e5-45d4-bbda-8855f0eb96a7", "indicator--231ed77c-ed84-4299-bb2a-168903eb5a67", "indicator--a3597cad-6b9b-4413-96c7-f6c4357811b1", "indicator--dbce2858-5426-4438-9a20-5c58bc0b9470", "indicator--02c40713-3366-4c4b-ab7f-263ebd847416", "indicator--e3b995ac-44c8-4e3a-931b-ae8164d4834e", "indicator--5626becf-2f9c-4066-8cc5-83940f5d1165", "indicator--6f11af65-676a-4db8-8e4f-be7e2f5fb3c8", "indicator--e1e91278-0a44-422e-81f5-cc135aad0e19", "indicator--2603ffdf-92e3-4a3d-bf04-b602e867654d", "indicator--fb2ea525-fc54-4a0f-b62c-7c7279b60347", "indicator--f013f865-5ca6-4a6d-9abe-279a58a52280", "indicator--6565a327-a880-421d-a332-2c4410ea464f", "indicator--4acbbb1b-fb91-492e-82cf-1b8a70df3a19", "indicator--2697ae9f-931a-4ac2-ba51-62490b47c8db", "indicator--044354e5-f5e9-473c-b4a0-33e70f208917", "indicator--da418ca1-7cde-4b09-9376-eb7797d00f5b", "indicator--59a5a9dd-3a56-46a1-80f5-00aa1b04d38c", "indicator--ecb8c8bb-3ce2-429b-a4b2-a01363fdaaf1", "indicator--f9be5c6a-c9dc-4210-950d-7be9d1480726", "indicator--531a25d2-3f42-4a0d-af4c-efcf1d186a29", "indicator--f93f5dc1-9a6a-4ce2-a323-b84e761b9bcd", "indicator--163ed71e-bc88-4c7e-8eb6-c90e98a5af9d", "indicator--b3c52dd2-3133-44f3-8ca7-625518d79fc2", "indicator--0b8fe8d4-e8fa-4415-a9cd-6c2c957f9555", "indicator--ebf5e22f-4c72-4821-b6ec-7d4284b925d2", "indicator--314fb28f-91dd-4dc9-8092-93f02eab035d", "indicator--fdbeca48-9b7b-4f15-8f84-b6fa52acfc2a", "indicator--86841688-80f4-4052-9e55-34204acf55a0", "indicator--6a3f4584-672a-4726-a919-281566730782", "indicator--61b1cb6f-1973-47c0-972a-55cfd6892d1e", "indicator--acb34ace-c627-43f9-abc8-791365c728b4", "indicator--b7adc235-6890-41b4-b07b-8ee6a678ff34", "indicator--4e4ae61f-d6d3-4ed7-8d86-5796ea32baa0", "indicator--2c3443c7-be71-4583-b5a2-d585b95695dc", "indicator--b15bb76c-0a2b-42d2-b646-cb219de2d2c1", "indicator--62e66cf8-5ad9-45a8-8541-8c51f8df99cd", "indicator--dd2ce9c8-e907-43fe-a8bd-92b044d91de2", "indicator--c1d9a3b4-e38c-4a76-a5a2-1e9c314e0370", "indicator--bab74021-6aa6-494f-89ca-6dcecb456bfb", "indicator--8cb54c1b-0012-40cd-a3cb-b0c0bf27639a", "indicator--18ce43b3-8dd8-4dd0-8b9e-b31935eadc66", "indicator--0c7f7f0c-4ce4-4a25-8fb3-cbb707710b9a", "indicator--d570db5c-d376-4494-8eb4-453f620c4eb1", "indicator--02fa772c-c058-4548-9aea-22fdae149608", "indicator--cdaefb32-d622-4518-9e5e-f3c2e30e5bcf", "indicator--8fb43679-5c72-4b95-9cc1-02a62920761c", "indicator--97359d05-6dc2-423f-829b-7994c3065d32", "indicator--11702baf-03c5-429c-905e-7f7615bd70c3", "indicator--1e424620-900e-4990-be1e-5b297625f0a3", "indicator--fb53b4fe-0d2a-451e-8ea7-6ebc177ca94e", "indicator--92087343-0ed0-4ea9-9252-ec3df64939ea", "indicator--fe802ce0-d8f7-46f2-b24f-d3d3d42b758d", "indicator--afa6a1cb-7fad-4500-83f0-472aa80d2603", "indicator--a80a4385-da2b-4409-a1a4-959f58f3780f", "indicator--0b6f86bb-a546-4509-88d7-716c5fd316a6", "indicator--2ea1298f-86db-4308-93ed-5c9a5f980f84", "indicator--ba20ffdc-020c-43b9-8164-24a433d7d966", "indicator--1cbbbaf0-18d8-4be4-bb24-f1759dfb9f86", "indicator--503b0f2b-6bf6-45b5-b710-a1a89d1c1980", "indicator--a5f020a8-5ebe-45ee-bdd1-757c4d043320", "indicator--b39d80af-7f03-44bb-88d2-23985e04c05f", "indicator--87591c4d-53ad-45b9-a017-2d827d6ee5b5", "indicator--f2104e6f-4a0c-4a5f-a92a-e401faf9dc95", "indicator--354803b4-8b8b-40d4-b133-7d2e70e95ca0", "indicator--d657cba3-2b91-4c05-872e-b5ed3d4f1950", "indicator--3ff47163-b60d-42c8-bb1d-0961506b2643", "indicator--27d335bd-9827-4311-99ea-381d4a8e8ffa", "indicator--2104b5da-b348-4072-a3f8-56249041bbc1", "indicator--9adf1457-4d0a-44ac-a50d-d680bad1f271", "indicator--37645473-ebbe-4ef8-bd71-de0208adcab1", "indicator--2ba59c2d-eba7-491d-a268-55ec4d92278e", "indicator--42f5d289-f1b8-42a9-9135-974d4ec0569a", "indicator--3e0b023b-74d0-400c-b6c1-4458e2d1928e", "indicator--df7b2491-6786-4ad9-b654-bcb6da074f3f", "indicator--9fc5a9af-f10e-44d5-81a9-4291a68b5d69", "indicator--61f26f7d-662a-4e99-8176-03bec9d8d335", "indicator--eb92ec1f-a610-46f9-ba7e-88dd57c18f78", "indicator--9dba184c-41f0-4421-b995-af661ee9cdbf", "indicator--4060f0c6-c3dc-4417-aa4a-84a2cc3978d3", "indicator--2ad28063-e8cb-4146-9fbe-561071be3ed4", "indicator--933b06da-c93a-4b3d-83fb-10c39d60bbe5", "indicator--e70504e1-678b-4dc3-9cae-ed42b9593cbb", "indicator--4d0a91fa-2153-40c6-bc76-58f0de63f584", "indicator--95867010-ce12-4172-9906-7879c8f94bd6", "indicator--da12c891-4005-433f-b8de-3160781905df", "indicator--c511372e-ef63-40bf-b8fe-9fed3141e592", "indicator--d58f5999-c490-4870-b833-76ae11c9604f", "indicator--00879db2-e9a9-4c0c-8074-94619846c53e", "indicator--9f6331e1-b1f7-4e2b-a464-bc1c6de5d9b3", "indicator--1efd20ae-cbef-4282-a6cf-33b0948cea51", "indicator--3d5e6163-e015-498f-91f2-ac85e1d5f989", "indicator--8d0ee093-93a9-42c6-956c-903f2b0c634f", "indicator--672e5ec2-46aa-40bd-b874-32d2cb1a935b", "indicator--8a0730b8-e37f-49e1-81d5-4c1ff9d3f51e", "indicator--e45cee71-4258-4668-a64a-388e1465fd36", "indicator--67cfff68-a7c7-4afd-8da4-d02f9e62b60a", "indicator--2a24e9ec-22df-4f71-967b-88f5d591b9fc", "indicator--e2dde642-b0f8-429c-bacd-d59c4bd873ed", "indicator--eb43835b-e017-4ad3-8392-dbdcff5f1050", "indicator--ba86d807-7f3b-4838-99fd-6203ab0c948e", "indicator--cb45bcd8-7b09-479e-a024-63256f79bdf4", "indicator--7f02148b-464b-4372-8fb9-6f5a6e49fd3d", "indicator--9ed59e10-0c76-4efb-bf34-4412743a0235", "indicator--303df562-04f6-49d2-a08a-711b6609cd56", "indicator--0e107530-a8ea-4e8c-a9ca-01c7f0c2a8c5", "indicator--e06d8166-ed86-4f7c-815e-209a85047cfb", "indicator--1a3231a3-8960-4dd8-a280-37f624602708", "indicator--6dc26275-9f44-4799-a966-a51290b7499c", "indicator--dcddde5c-bcfc-4b81-9403-f53fe6a62781", "indicator--83858863-0b8a-47dc-b9da-a3803f050d42", "indicator--3779aa27-bbdd-4afe-b3c9-4b95a72e42c1", "indicator--0bf14139-f427-4554-9036-40a51f78c598", "indicator--1ad39999-b24d-4ba8-bec4-607250ddce64", "indicator--a1121d6c-38c3-4da7-bc92-9e75148422c8", "indicator--bf936e06-0c7d-41bb-82f9-6f48cf9b5883", "indicator--06f8ea0f-d703-45de-a268-351f77fadbdc", "indicator--6b5c4888-d54c-45b2-8737-b6f30a39fdae", "indicator--b5c36baf-ddb1-46c1-8e45-d56d077598dc", "indicator--c942d205-dc49-4d39-8d50-5d0a253b1aa4", "indicator--0f3c3d2f-ac8e-4475-9bc6-228872fd6d26", "indicator--32524843-f517-4576-9b12-94a6c49a87bd", "indicator--d2ccd949-b6e0-43c0-ae3e-78160e092509", "indicator--b0465251-30c1-454a-a9bd-1d00b39d04f9", "indicator--13b89fe3-7da3-42a8-9436-17c835f62f21", "indicator--d060c0de-62fe-4d1e-a254-856fb9426c50", "indicator--6dc12af0-d2f3-4794-ae1d-c806e0ce448e", "indicator--20fe95f4-5a6c-4007-9de6-046f21f590f1", "indicator--7c27b543-550f-4a2a-9b6f-36f5151a6f01", "indicator--fd9ff294-c107-4ec5-8176-66e5761bfcb7", "indicator--dcd42898-16ab-40f0-bf4e-a5377f8f0c0a", "indicator--6afa68ae-1e63-42d8-b911-7013002f1463", "indicator--916b16d5-5feb-4873-b923-bda5e06f9f6e", "indicator--060dd98c-73cd-48b6-9528-cd476bfafaa2", "indicator--e8b5129c-6bec-4b05-957d-890da1dd5574", "indicator--f4967441-59dc-4b55-85a7-711601b95f51", "indicator--6f1dda83-216c-4a89-abf1-f183389712e2", "indicator--5b9a0d9c-537e-46c2-8737-99701e739e2d", "indicator--0413c2e2-3dd1-4706-baa2-727ab43753c4", "indicator--3003f229-9432-45d1-ac73-49c1b5531819", "indicator--58ad9cca-60ab-4c49-a487-eb09cd8743f2", "indicator--3576e55e-05ae-40dc-a05a-636bbd5ea65c", "indicator--09397ff0-e281-47a0-bbd3-13d5752d4413", "indicator--c8bd3bcb-48e5-475b-99f2-009fc4c0413d", "indicator--73a22f2c-57ca-47ad-b58c-ccb726f8f92d", "indicator--38d07fbf-093b-44d8-bb2c-8ed7757c3560", "indicator--ac0a1a84-77e5-43e4-8285-ba39c1e650ac", "indicator--d101e408-1ba0-4632-9886-24f13abd2ddc", "indicator--6653b0d3-9b09-40e6-a9c4-136d6e35e62f", "indicator--1b9343f4-26a8-45e5-a363-4b887d9dc5bc", "indicator--33791220-2a60-472c-b573-1647d9a6adaa", "indicator--ef1fcc74-05c8-4cb7-876b-0f5d7974ead4", "indicator--ac321677-3f9d-4e38-aaf6-6038caaaeef5", "indicator--30a12686-4e33-40d3-8d52-eb448d0b265b", "indicator--cbd5fa46-df8f-46a8-90bd-fd5b45ee061b", "indicator--7ec36d2a-77ac-4aec-a1ce-5c3d9ff925d0", "indicator--12db6df5-44ef-42a8-9e30-8309bf170807", "indicator--d634a7bb-8f5c-4a0a-9280-f24d7fb971da", "indicator--4bd7c355-7af9-40d0-922f-81ecdd35c15b", "indicator--fbdfaeac-9ed9-424c-b73c-bdca6e5f747a", "indicator--ac647ce6-e205-486d-b284-edde11496885", "indicator--6762fe7a-b641-4192-9c71-ba5ba5ef6637", "indicator--06ef0719-df31-4503-ad46-7f68af05130e", "indicator--0fef507e-f91e-468f-abcb-bc1218690a44", "indicator--ecbcdc31-545e-4404-991a-d1fdfe636270", "indicator--52f519c9-6df0-4fd1-8148-136f0de7c977", "indicator--8cecf9c7-1a42-48dd-b750-571accb04405", "indicator--e0ab5684-f8b3-4e59-bb20-60702c357942", "indicator--4454f772-e617-450c-b9f7-599d27991340", "indicator--39153e21-64fb-4c87-9860-dc692f6c81aa", "indicator--59a7fc36-aef9-419b-b226-764aed99e7dc", "indicator--4dd6c473-dd75-4d25-b2e3-724f676d219d", "indicator--4a2026c2-698d-49a1-93e7-849fcecb104d", "indicator--830d60e6-a48a-4a85-a4c0-1b507c08e69a", "indicator--088baa4b-47ff-4372-aac5-247a80616916", "indicator--31027d83-cba3-4706-93ee-2636065361b3", "indicator--7db4d35e-6df6-49c8-93dc-a4fdae87f765", "indicator--e1275e6f-71e9-4c07-88f5-868f56bf406c", "indicator--754f10e4-12a4-474f-953f-e971374cb1f8", "indicator--33b0f160-8061-4e8e-8501-a2c0ad0568b8", "indicator--31d4166f-42c2-4507-bd5d-10f1046140c4", "indicator--adf687f6-b801-4fd5-bf76-0c3cf586922c", "indicator--17fdbc52-6c9c-408b-9688-c97d3c537004", "indicator--7dfd9918-de6c-4ba8-9704-914b4fb29aed", "indicator--ab515669-c061-4ea0-ab83-9e6fff850eb0", "indicator--d20b1820-9f56-4dea-9af8-88c2712863fa", "indicator--ffa8722a-0042-4b4a-8ecc-69169e147e88", "indicator--712804e9-7740-4bca-8808-7edc7c6a235e", "indicator--fa149a56-f7b6-4ef6-b17c-d868f8c847a0", "indicator--b9fa659c-7d9e-4fd7-8be7-94c4648319a2", "indicator--f4a6dbe8-00eb-473e-9c70-17cf96b0a736", "indicator--f50a4fc5-e3eb-41f1-921b-86e0ae732587", "indicator--186f537c-79f4-4c00-a788-2953e06254d3", "indicator--f1088fe4-272e-49e1-a82d-bb3339939d1c", "indicator--8892d6f6-bc6b-4e36-87f4-9833884a288c", "indicator--8c02d93f-b6af-4b81-8590-ec0bb54c436d", "indicator--d18f1849-3a60-442a-a66d-ee88458e6397", "indicator--8f760c16-5f54-40a8-9e04-457c5f0647fc", "indicator--564b524c-a7d8-4a47-8edd-4510cd1b7c3e", "indicator--b9b84067-d4c1-4e90-80f4-34389fdb57f6", "indicator--1dece5be-08c6-4f9c-9ce4-4541d08515e6", "indicator--e0311372-bffe-4248-9327-417671982a1f", "indicator--b4d4c7f5-034d-41e2-b9a5-7fbf2d62303e", "indicator--8331612c-7fbd-4b4e-8aff-d890502f99d1", "indicator--3d6bf31d-f610-4e1f-99db-76e046915981", "indicator--6c9c7893-c4ff-4fa6-9aa9-2b11c18e8482", "indicator--367db017-b2b9-44a6-949d-9ab1a0f41e5b", "indicator--30f1364e-e6f3-42cf-8a47-72b147df1349", "indicator--0938adbe-eebf-4abf-8d8b-fa5eddbf8d6b", "indicator--f5478e41-3037-4553-9a1e-6a8f6e654213", "indicator--6a468a78-2b63-43db-9709-83f079f3c8dc", "indicator--042faf41-d28c-4fcb-91f7-00af69199b72", "indicator--b5240849-cadc-4573-80df-808635a15d2f", "indicator--6bc33322-5df1-4763-951c-ce42254d0033", "indicator--7b5e0d5a-2624-4125-9468-12fee23a9d49", "indicator--42d64c1a-2d11-4e8a-80c1-c096156a195e", "indicator--09832689-c3d0-4df7-84b7-f8f70484c131", "indicator--555adb4d-87fd-4dbb-8719-fc298fea216e", "indicator--58da3e63-d78e-4567-b54b-605b768cf434", "indicator--ca380b05-564a-4c46-abda-c4e1e4fb4ae9", "indicator--a99752ea-20b0-4272-a3ff-c83d3e78e39e", "indicator--96a3a155-6f10-497f-91b8-0a2c047d39b1", "indicator--eea50303-01b8-49de-802e-2d32e31aab33", "indicator--ac4432d1-9a20-4b49-b10b-ec9eee2bcdd1", "indicator--4800b8df-8abd-4ddb-bf84-f2f46b8e75b9", "indicator--9976af73-fe61-43a0-8b0c-fad30abb36f9", "indicator--87ecea77-f209-46c6-8c20-05ddc509a8b5", "indicator--94cf64d2-3b09-41fb-a579-f167160733bf", "indicator--b6a6666c-8419-485f-abbb-443b1a36feb1", "indicator--697a8121-621c-49b6-b530-9a5bfacb2524", "indicator--60d8a450-07b7-4557-9bd5-28251f732b70", "indicator--06a15625-70a4-48fd-a162-ab50237ef1cc", "indicator--a28b1f49-1339-4015-9a61-1b1c75aedef5", "indicator--1d12b4c6-53a3-4b73-99b9-64b09397ae70", "indicator--4783dfb8-12b6-4f45-9828-ff26556e2612", "indicator--d77d668a-8b49-4306-86a8-49c79021e1f7", "indicator--5049fe2c-71b1-48e5-9aae-14efc98bc834", "indicator--0219f352-0692-47cf-bf34-ecc935834ed4", "indicator--b606d30a-9141-4b22-a2c2-dfebfd6f33e9", "indicator--fa8b2459-2b64-496f-b5cf-43de24e54702", "indicator--e7aae9c0-44ad-4da2-9e6e-0a59b6e1cf6a", "indicator--039681ae-fced-4ceb-9a89-ede92ab0a20d", "indicator--b83a2b7b-f367-461d-b79d-fde56222283b", "indicator--d54bf8c2-3749-4041-9290-f8a2bbc22074", "indicator--2f85e00d-286c-419b-8d74-4d1312c6fcfb", "indicator--06014870-8929-4394-b16f-85c4f1ba85de", "indicator--ee894a00-b6f0-4c90-b56c-94720099616b", "indicator--ba2b066f-26f5-4a4d-813e-918757f632a3", "indicator--19225ab7-8775-4bde-8792-4ccde5e204fb", "indicator--b2a9d572-117d-476e-9b8e-cd85ade0b103", "indicator--0d292043-8972-4f25-9696-f9b60f41a025", "indicator--d15a2dfd-0595-4dc4-be7f-e2275d9df6e5", "indicator--682c636c-df89-4098-9f30-1893d32e46fe", "indicator--45f496e7-7a75-4995-8fb4-e2427d3076b3", "indicator--9a70d85d-46aa-44c1-a0f8-1c4572518439", "indicator--14efb3d6-037b-4aa2-abcb-943b2c08c87d", "indicator--5e0bf5fe-0485-4aa4-ad31-dd2bb24fe361", "indicator--3bbfa078-9664-48e6-b45d-fe2db2235624", "indicator--19443232-0632-43f5-aa55-6b44a1e72e9a", "indicator--1f957e02-20c6-4054-90a9-44648067e3b4", "indicator--6635d9a6-e3a2-4b8f-99cb-f669b29bceb5", "indicator--5f223e0b-f7dd-4dde-94d0-180befcbc4a7", "indicator--cd403e5f-8481-428f-9943-5f447da9e9ef", "indicator--b074cf9d-2b3a-4c8b-b9c7-67d7db3da253", "indicator--ebf93e29-5453-471d-bb00-69c29b21b8e1", "indicator--02fa04e2-42e7-4865-98e9-a4d980d43896", "indicator--78dae085-2f31-4417-bffa-b20ddc307b20", "indicator--80ca1f87-e7eb-4347-befa-3d838e369d6e", "indicator--05e6c69b-14df-48f8-9f6d-714c2ee0f90a", "indicator--633b7ffa-250e-412d-96a3-9d94c67993bf", "indicator--b3f0a8fe-66a0-4419-97ec-7a7e4cbd35a0", "indicator--c5fdfa16-0259-4e33-8fa4-a17ed3d8e3b5", "indicator--d0dc9340-e4df-4b2c-b56c-2dad131f1782", "indicator--1d3db202-1c18-44c1-b4ae-6dcfc31ef07f", "indicator--066ba7a7-25e9-4244-bff7-236db86b26fe", "indicator--d07a6b32-0a5a-4ccf-a55b-0ee6a4bfa330", "indicator--f4b9d4c9-eb43-4e52-800f-fd83adf696b3", "indicator--1461660f-abb2-4b36-885b-6e015378dd18", "indicator--b63c4cf2-09c2-4c6d-abc8-145934074a54", "indicator--b4c62850-93c2-45da-9546-392256df1844", "indicator--c29a35c2-5b1d-4a80-a81a-bc137c1f9049", "indicator--149ac039-97f9-443e-a960-f67cb225a86d", "indicator--f7054678-f09e-44f8-aa7b-2b286db12a25", "indicator--0d496002-8481-4630-93dd-bb5e33b3aaca", "indicator--c714b5d1-a9bd-4f70-9ddf-3ea1c8ee2446", "indicator--c374af41-4ab4-4233-b8bd-8f2a28f2307a", "indicator--bf96436c-5997-4a72-9f56-31b7bcdd4a4a", "indicator--c7397d1d-1a79-46e1-a7d9-0bcb4a8e8d08", "indicator--095d2d71-379b-4cc3-b135-f6eb7246fd26", "indicator--107e8afd-3f61-435b-a023-2ac02c71f069", "indicator--6eb71108-3c33-4879-ab60-04de3559b51a", "indicator--3735843d-2a5f-4ec3-9f25-f6e334e19e7e", "indicator--7b291a03-505a-432e-a2d6-dfc50cc9ae16", "indicator--c7755800-bbf0-45f2-a3b2-e3f7d15298eb", "indicator--e131ae6d-f4ab-42db-be28-648f8e0a747e", "indicator--acb0434e-0bdb-41d8-93ac-5f8726f5fcf7", "indicator--13c0c35b-c3ba-4d36-983f-d0b6d0e7f345", "indicator--ec0bd119-5300-47c8-8ba1-15bb5a73ddcb", "indicator--2ddfb802-6c44-4fc9-8b67-6d58716b1032", "indicator--0fd58940-b973-42db-a2dc-1a0af6d1d04e", "indicator--9c29e7a8-e92f-4a6f-b88b-4cfd15c3cc34", "indicator--3461f890-dcba-4a4d-a613-43c3b6899ebb", "indicator--a5eee2fd-3a0b-47c8-b4b7-5ef7341b8349", "indicator--d7bc3572-567d-4796-8e00-70e1e60c796a", "indicator--14e6aa73-b863-490c-80eb-cc9edb617a93", "indicator--b15c2b04-47a6-442d-a5ce-0df948b17ba8", "indicator--c3c93bc6-7e12-4feb-818c-1ea902c0e88a", "indicator--11cc8fa6-d91c-4742-91ac-ecd48eb4a458", "indicator--72fd3b25-c807-4efd-bd13-0c281a549f78", "indicator--626c7368-8c40-4672-91e7-083543ab78c5", "indicator--47af51c1-2474-4cee-84e1-b4d8fe319ae4", "indicator--9e12aabb-37ab-4fcb-b9eb-8ffebd2d690c", "indicator--b9648952-230c-4e4a-9407-f45728ee9fa8", "indicator--861979bb-0737-45fb-8133-b7cdfecf37de", "indicator--ace3d890-cb6c-4994-b3ea-e12519cdf412", "indicator--0933fc65-540e-4525-9820-d9e8b3ec2801", "indicator--99a14279-43a0-4427-a1c7-60b97bacabb2", "indicator--a7e092fd-004c-4656-86c2-8783782bc098", "indicator--7d475563-da0a-4ac1-ae07-c6f6289ae3ad", "indicator--c51e7681-c8c8-486e-a348-4247d2d58849", "indicator--e5c44eb9-8c10-4a14-a3e5-5d7f28e378f3", "indicator--6c4f5214-1031-4729-a79f-267e10d0dff0", "indicator--843804d4-817c-42a2-ba08-f9634f989a63", "indicator--4b7ee4cb-c0f2-4f61-9bd8-763b9977fdeb", "indicator--d1d840cf-b933-40c0-aaee-5d82d770af3a", "indicator--167b7090-8b86-4be2-9f7d-f992367481fe", "indicator--9d6ef692-c380-42e7-a962-c76f11be61d7", "indicator--daf80d9c-39f5-44a3-bcb4-c0190f803c7a", "indicator--92449124-f832-4366-ae9b-613fe23dc1c3", "indicator--26403dd2-5175-4f8d-8156-8dac40f037ab", "indicator--7bf40288-4440-48da-94b1-81df0fa1c62b", "indicator--1b921b3f-4f8b-4cab-861a-eaef21b93ede", "indicator--a91c76f5-63cf-4ce0-a531-d06d43634986", "indicator--38fc58ce-4b55-4766-8606-6df216e39474", "indicator--d59aadad-6189-4399-9059-454e8ca1a9b6", "indicator--7225bc41-4703-4846-8028-6d5d8f2f2687", "indicator--d1ecba80-351e-42f2-b5d5-51e75e257542", "indicator--168f5854-d3d6-43f8-bc6a-2257c4fa46d4", "indicator--e44b8e05-f03c-4da6-b2f1-e18f73668a59", "indicator--b978070c-a561-4fd9-a2ea-528183994755", "indicator--f2470d5b-46c4-42d0-b65a-3fda52afd2b5", "indicator--5027cafc-b6b9-406a-a9fc-9ab675240059", "indicator--9d4ce3f5-57b0-4179-9717-5203a7a82735", "indicator--313f05cd-34a0-4197-bb5f-44ccbdd14e78", "indicator--2a65a68d-f9f8-4aff-bdb9-25aead15fd0e", "indicator--f9872679-51af-407f-9c96-c3abe08e8cf9", "indicator--2ecac563-68a6-4bd8-8f3e-6425dcffa326", "indicator--4e4c7047-278d-42db-963a-c06eb41bd185", "indicator--fb6e922c-5113-4eb5-ab44-9e98d7e0201b", "indicator--ce739a9c-9f9f-4d19-a24b-b2cc0d1736dd", "indicator--6966fe98-590d-4185-9d42-f0fd9b4257de", "indicator--b39b403e-051a-4985-8d50-74c24d3e3903", "indicator--199aa467-32dc-4e28-ac0e-43355939003b", "indicator--235d00c0-01a3-427e-a41d-889513e114cb", "indicator--a5793a9b-a240-4dd5-b68a-3c0480637559", "indicator--db2a9cdb-c6cc-4a5f-9c9e-ed926aaa17dd", "indicator--8a9b77cb-eca3-443f-b7d1-2f58afe5ff81", "indicator--5d87c93f-8edc-4c9b-bcb7-23c79a2d0ecc", "indicator--651a99e4-e9ad-48c3-ad30-555e57802766", "indicator--2241b45f-9d20-461a-9c4c-9e748f62c70d", "indicator--56b2a937-3608-4e3f-95b8-802d9d54f7f5", "indicator--38a31452-cf63-4b88-aee0-71b50440f0bf", "indicator--dfc880a7-7352-4455-8969-3b4566eb5be4", "indicator--ef41c815-3322-4543-9b03-04a250ceeae5", "indicator--b9dcd798-8ac5-4694-8eb3-9c4613bf583c", "indicator--4b4c4706-12c0-4e09-a4d4-d407b97de58a", "indicator--a5885757-a9c5-4980-a04d-dee631557c7f", "indicator--73233b62-dc04-4cb9-8aed-b886a6a72f7a", "indicator--ce198787-d866-4a3c-b8cd-9e40291d8991", "indicator--92a64b46-dbe1-4091-bde6-074560a52d43", "indicator--57775616-017b-4f46-913b-dbf9934f7be1", "indicator--3077590e-1e99-465e-ada8-30148f1bfa80", "indicator--983ca2f2-46ea-4c7b-b4ff-1520bb604f2e", "indicator--8e4ffba7-6460-4c8b-980f-ce1f68a99dea", "indicator--bf0dea9f-7bd8-494c-aed3-6d94a2add8cb", "indicator--068e461d-046b-4193-8227-5c2b4f3af87d", "indicator--6dd588c0-8b95-40ea-a9cb-e6404739f581", "indicator--f3cbe7e8-cb0a-4cde-86e6-3932c7801c7c", "indicator--ac3262e1-8e3f-4758-8330-cc7bd0037cc2", "indicator--c7b47e00-8cb1-40a9-aa2a-c1d9dcc52e10", "indicator--a0e15bc0-df16-45cd-bbcd-656fcc763737", "indicator--5162514b-0df7-4dc4-9f11-97212800710d", "indicator--8ef4a4c7-51b8-4722-bcba-e26cb47ab69d", "indicator--a9a25a2c-4094-49bf-8487-0626095f9480", "indicator--be81cc81-f3c2-4c35-a6ef-dfa8609e6e42", "indicator--ce0c2b31-47bd-4238-b328-4116cc70ea26", "indicator--aa2f7513-ca08-4f35-87a6-0337910e068e", "indicator--1aaaad2a-0052-46f1-90e3-37dd94391a05", "indicator--1e81e3e3-be31-4ada-92b5-f5cb92ccae41", "indicator--b197bc9e-8f27-4882-a3d9-4b918a4521de", "indicator--9aa11707-ee0e-420c-979b-0c21fe46e465", "indicator--03e12deb-8fd4-4ee4-8adc-550922f3739c", "indicator--1ea12da4-ce8a-4e91-8f84-a4f29942bc95", "indicator--3c6cea12-d7a3-4df9-bc79-ee70e15ac89d", "indicator--6bf0bbc8-0f6e-422f-82a8-c114467c7d90", "indicator--30ed7b9d-df02-4902-81f2-1f9fd0292172", "indicator--eccdb01f-1dea-40fd-8919-91e41f159239", "indicator--9eb48f5f-9926-4aff-bf1f-a259f66e2f6c", "indicator--9a8dbc75-3a1c-4b33-9e5a-085b282d7e1a", "indicator--359b5f53-29e2-4eb3-aa3d-9b9c4b6b3307", "indicator--646b023f-af61-4c40-a32f-33ff816e0c46", "indicator--4b6331cd-7a5e-4cba-962c-6758a504d7fe", "indicator--4a9783ee-77a9-4783-b132-75507b5267d0", "indicator--b9da7176-e8c5-4826-9861-6e495a0fefc1", "indicator--a5145b9a-a5b7-4875-8bf6-8a50a373eaba", "indicator--4947d371-8358-4183-a083-69368fd67052", "indicator--0733e614-67d9-418c-b455-f7d27c9a894e", "indicator--80a75ff1-01ec-4f26-b386-d6db6682cc76", "indicator--61da7ec2-313d-4d1d-bd1a-3514b3feef27", "indicator--f11ae4ce-ccdb-4fa1-affb-0ffddc4d6c98", "indicator--232a7691-5c2d-4489-9a77-32983e2a53ba", "indicator--25b8c6af-08df-457d-aa1b-630610b83e3b", "indicator--c05169b8-541d-46d7-a9ce-b9b15d13ff70", "indicator--815c77fd-e888-42ce-ab41-e4dd85d50a7d", "indicator--4bb273ec-db4c-44d2-b6dc-e52324bcdacb", "indicator--62bc5450-e736-4673-895e-98b6a60044ff", "indicator--d01c0ec8-e231-4334-a185-49b25d5568ff", "indicator--08137356-8aeb-4aff-b8b6-0ad0f20c6857", "indicator--572a893a-3c59-4352-a582-ace140a339da", "indicator--d60ea80b-8358-44ec-ba5e-5dba0babac0f", "indicator--d3e6f2a0-2e88-4983-814c-f28955de9dbf", "indicator--69ada8f5-cb18-4337-bebd-3bef9e3fead1", "indicator--61bc8c16-f0d5-4dcf-930f-6093fd2bf970", "indicator--01526eb5-782c-4d7a-b922-cf6f7bdd9670", "indicator--9f2179b9-2c70-46f8-9f2b-97eaf8e343a5", "indicator--f47ea779-49bd-486e-aeaf-015a922f7d73", "indicator--6643903f-593d-456e-bd9b-dfe76309c70b", "indicator--9a60ec8f-dc45-4193-af58-5ed420cee552", "indicator--e13be8e7-330f-4799-a6c0-e889da49d98d", "indicator--876d8171-f784-4cc4-88ee-231653fd8e5f", "indicator--c0ec087e-bc63-488e-bb45-b228dcbd42e9", "indicator--f4fa66ee-b740-48f5-acc1-7cafa66eab3e", "indicator--75644503-1dbf-49db-8f47-c9c827d23f2a", "indicator--1caa10b7-276c-4154-85d4-5c1c931394f9", "indicator--8c935dd4-bea6-4233-b840-0eba04bb3738", "indicator--57fed2a6-3c0c-4200-b376-e5598e9fd80e", "indicator--edf5a346-8161-4e07-9725-da027801f998", "indicator--edbe3134-a807-4bdc-a8a6-3759050df5c4", "indicator--d138764e-046b-471e-9dcc-6dc5cba65d6e", "indicator--9b38e4dc-a9e4-41a6-9dde-67088e2d1c18", "indicator--98c69fe7-eb9f-423e-84e6-863bb54bb99d", "indicator--91dd60e0-17d5-4f2c-acd6-5e1bdadf4ecb", "indicator--42042a60-54a2-4b2a-8307-e88833494d97", "indicator--81c74862-892c-4a96-9db1-2ef2b80da178", "indicator--de1c4429-edf7-47d5-81a1-9ed0444210d6", "indicator--8f62728f-a8c8-482a-9e6f-2de0c8c86feb", "indicator--a88dd049-5eb9-40cb-8a36-c61a95f32ff5", "indicator--e42482ed-3c60-4f71-aed4-04373bdd974d", "indicator--bc69b581-995b-469f-8d00-725653cd90c4", "indicator--ed96804b-1baa-4166-86c2-e10a3c5f5a81", "indicator--328d97b2-454b-4f06-bb68-698edb610c57", "indicator--2110eb69-9757-4357-8bff-1ef186d36191", "indicator--6fa928e4-f049-44d5-8744-512207d13c33", "indicator--3ee89143-8d75-4d83-85e9-9b20def24042", "indicator--04e591f9-ae24-4568-ae66-6ea4486f6639", "indicator--8b7b5051-2316-4fd8-89e7-15af59c51491", "indicator--88a24b0c-0df3-4307-904d-02b0e52e1d02", "indicator--b3ee0e67-cb7b-4bac-babb-a598e5dca801", "indicator--fd82e238-e42c-4eaa-bacd-fc7f0e4b0aa7", "indicator--21f21bfa-975c-43f7-ae8e-24c784e839dc", "indicator--588fb2cc-da36-42bf-86cf-90b300e75a07", "indicator--7286683d-a9a2-49d8-873a-9d7554cf6cd0", "indicator--b3c96f48-991c-4860-93ac-8f3385af14f3", "indicator--fcc3585c-622a-485d-8e49-59036dd25e2d", "indicator--d4a7085f-af41-4f68-9867-ba0a616a991d", "indicator--8cf21055-a049-4a4d-b654-fd78f805a8a4", "indicator--83023a1c-4a9d-46e9-9112-5ea72aa4eaba", "indicator--3202a76e-6d7c-4fb3-9ab0-fcb0d7a5d770", "indicator--82a58fdd-985e-4122-bb98-532c908ef08d", "indicator--c87c8c5d-6327-474a-abc9-1bf13f503469", "indicator--45ffd413-bd09-460d-bdbb-ab1dea88f98a", "indicator--9227576f-aafc-4ba1-8cab-ea3642ddb3ad", "indicator--1d828ff5-82fc-4f6d-99c5-e8b60fcb0c6c", "indicator--fc9961a1-6a55-411e-be6d-8e08725e2454", "indicator--9f863280-fbc8-42a1-9ee9-d1b1ab5ba5ce", "indicator--1dad140e-6663-489b-959a-7960e334e660", "indicator--73a9b00f-b4e6-4167-907e-d54528462a8d", "indicator--6fbf9dd7-f0a1-4515-8d23-b6733ec60751", "indicator--82e7698e-25fc-42c0-a749-6445d8b5e81d", "indicator--3f12f423-e4a6-4288-a4db-aa1904b2667d", "indicator--a2139bfa-a209-4132-be17-90cf2b38b399", "indicator--e737628f-261b-4a55-b4dd-9b54be87289e", "indicator--35cfe1ff-b9b1-44af-9d5f-9a437285f07d", "indicator--7c5732d8-2502-460e-8c7b-2ed539a693cb", "indicator--db2fbdc1-1d19-49de-9b95-b4f1b8db8a12", "indicator--1b1798e4-00b7-49de-a23e-48136be642e0", "indicator--c10f0acd-83c8-4faa-afa2-6de6241959f1", "indicator--b35afd6c-1d0e-4e32-9b75-2137756493a4", "indicator--e0af912f-ef38-4f73-9136-8330a111e305", "indicator--917bd5fa-a349-4f7b-a302-52d42f315198", "indicator--04d508d5-b847-4b1c-9225-24aac59aafdb", "indicator--b6f016ae-22b7-4eb8-a5e1-4e3db529b9b5", "indicator--edf3737c-6a64-400a-a20a-1e69ebc2588d", "indicator--fbb6e653-000f-454e-a201-29750b32c605", "indicator--e0455114-42a9-413e-87f1-aae661a1bc23", "indicator--ac436c0c-e548-481d-a79d-5d2d25e0210b", "indicator--f808f816-769d-4e6c-bdff-acdce8959424", "indicator--d66d83e0-44b2-46c8-9241-c936d76e328a", "indicator--8211db71-4283-4105-8e15-1d01ec7050ce", "indicator--dcd4c040-66bc-4b9b-a939-c2139b19eb9a", "indicator--c75d8e63-80e5-4f65-8992-2ebfbddb8848", "indicator--94bfa0e6-b260-403e-9b93-4eec9dbe2ef7", "indicator--54a4f506-355f-49ac-b935-25c0600f3298", "indicator--e18f2e7a-99d8-408d-8a03-8bebd4638f37", "indicator--aa279d83-52b9-4aec-996d-f554f5e67be8", "indicator--c9da554b-355c-4cbe-abd8-d53cc57df653", "indicator--28c85f2e-2ead-4983-b7ca-9f65543db11c", "indicator--344d72fc-73af-4c5b-aa0a-4669ea7fe70c", "indicator--af678c1a-5fe9-4e78-a9c5-b309241c80c5", "indicator--2a372edb-c341-431b-a71a-b926ab78e025", "indicator--9a830c92-3cf7-4b1b-ac4d-59dc3b7d53e9", "indicator--f7107c08-50a5-4b3f-8a76-d7dfbcf0bcb4", "indicator--779a3eac-bdd9-4e64-8b7d-213013816fa5", "indicator--4240f11d-9b94-4976-8f2a-8ed8f410359e", "indicator--9d13c4e8-74c8-480a-bf5a-6398b4b5c3eb", "indicator--fd54dae4-13ef-4b39-b7b2-96279e04bd46", "indicator--32d807e8-3772-47b4-af97-db31446c4f7f", "indicator--ea422c91-8767-4994-8f7d-597bdaa2a016", "indicator--a05c5217-ce62-4c4a-92d9-ceb346adb896", "indicator--5e7b073c-9b0b-4e4b-a8ff-c1c5b37812bf", "indicator--6e1e3e26-e000-4edb-9432-c1668d87d828", "indicator--506fab46-4435-4413-94b7-feba087fe980", "indicator--b7b1cd50-4fa8-4264-9422-71aed07593ab", "indicator--edec4323-2955-4240-a434-4d6f29ef9f9b", "indicator--a2d2e45b-59a7-4153-9f53-fea0e291afa6", "indicator--392c2350-a5b7-413d-9d87-9b334e180e99", "indicator--d6f57fc2-584c-4311-957b-da29a428b528", "indicator--31902fd3-5e90-4c85-8d4a-424ec4e8a08d", "indicator--eac5f715-e2d3-4ca6-a378-2176c6a53aab", "indicator--9813e51f-07f3-41c4-8bd5-1e7d6bb3d703", "indicator--2f492b94-92ca-4b8b-aae7-cb6f6a28cb71", "indicator--2440964f-cf48-4bf3-afa1-f48d4d249762", "indicator--a03cb366-9d31-4bf6-a1ba-542686367c14", "indicator--e57a5517-d5ef-4912-9e74-fc2cc37729cd", "indicator--847e1722-a1d8-426c-992e-c949b56cb376", "indicator--f40c6bcf-123f-4a9a-bc20-d62e05f2698c", "indicator--7b577de1-ca29-4d06-be68-b7eaae5eb579", "indicator--b4c72058-4b18-479f-89d6-9f139f674050", "indicator--149acc66-9dcd-4743-958e-662d41e42c88", "indicator--96a5922b-d520-48bc-8311-cc8c29bd975f", "indicator--be487fbf-00a7-4524-95da-0817cfa5b234", "indicator--bbd4170a-10b0-4e35-a032-29be2b27c942", "indicator--33331d5c-8eb0-4b72-9440-d088fed5f732", "indicator--84458848-3070-41b1-94f1-a6d87402a301", "indicator--24317d16-290f-4717-8ade-b8da23726340", "indicator--6ffb4c4b-2754-474d-a69b-df7e30d4d19b", "indicator--48a585e5-18c2-4452-9b8f-71929fed1ec1", "indicator--4f83d688-3601-4694-bd74-15e48064d3a7", "indicator--12807e49-5097-40e4-bc81-257947af8ccc", "indicator--ac6b7146-a847-4bc9-9d63-197b6543a920", "indicator--43632e2a-9f1f-40dc-9bd6-dcae70743327", "indicator--a51368c4-b3d1-4fc8-9f6f-590e402dcb51", "indicator--0f342218-77ef-42f2-a3da-fb23c4a97e8d", "indicator--3f63d794-8884-4fe8-930d-fcbbbdaed0c8", "indicator--a4b10a92-912b-453a-95b1-f68fc2f3a10c", "indicator--682b7196-c037-4f0b-ba69-5616cbdcd19a", "indicator--f5406152-8163-4304-bdc4-95edc6507a29", "indicator--6179736f-79dc-4cee-8bf6-aebb5bea4d92", "indicator--3bf2c14d-3262-47b9-80b9-413f351d8a58", "indicator--f0a7cecd-09b0-43f5-9085-f8d8a651f797", "indicator--b1bcf1d1-ca8d-4b8e-84f1-84dd612f1b5b", "indicator--073335f2-b977-41ae-8eee-1738c3484b08", "indicator--22c2bd4f-40b3-43f2-940d-344d78a0808a", "indicator--895ea25f-237c-457e-b65f-3d58fdafe9c5", "indicator--96b1480a-822b-47ae-93a8-e977b32de0f1", "indicator--af6b72bc-c97d-4d98-8764-7900f697e887", "indicator--ef784552-221c-4359-bfa3-6ddb95d42db8", "indicator--eef76703-a633-43cd-9e85-99862d8d0808", "indicator--aed19077-620e-4db3-a78d-cad11df19b7b", "indicator--788e7666-810b-4c03-a1bd-a141b049a017", "indicator--b067ef49-9980-4652-a6ea-6812ad06dd9b", "indicator--a0dcf682-9fea-496a-98d3-0fd9305d29d0", "indicator--452d35c3-abaa-4650-9854-149ff9482560", "indicator--083bde47-5998-4cda-aaa2-20e1d77e5105", "indicator--1b58a990-237b-4367-8aa9-c82656f1df5c", "indicator--f6d66505-dd8e-4c7b-9e61-7dc67dc933b5", "indicator--3a12ecdc-1e9b-4be3-b1d7-1885ee169c69", "indicator--93669a0d-d652-4f86-83a6-d210a73fb634", "indicator--98663ce3-9b4a-409e-8e55-beacff3c70cc", "indicator--28c5c7f8-98fb-4b35-a447-0afc8319e51d", "indicator--b04eab93-8a82-45a2-bf88-5a5d1dc83228", "indicator--e91141d3-bb1f-41c9-8efe-65e1ee7ec416", "indicator--d2a0a6da-0076-498d-9dbf-8091aa7be32e", "indicator--97c427be-4639-4cef-b344-6f8e89c3c187", "indicator--2255eb93-c40f-435f-9442-6056d8589a51", "indicator--9808a9bd-5d5a-4925-a919-9352ec0c28bd", "indicator--6681600c-2fd4-4d71-9262-54492d1b0cf4", "indicator--0e353f37-d883-482b-8834-f1b501078ff0", "indicator--72921d6a-74a5-47ae-ae3e-29ff8bfe6b5a", "indicator--bba90a2d-8caa-4caa-8134-da7c05efb664", "indicator--27fc6db5-de5c-4b88-beb9-accdbdd1c4c3", "indicator--92293e56-4b23-4a44-b32f-7ee6e1eb6e9f", "indicator--c4978c0a-8a50-4b96-949e-f8441855de12", "indicator--fa7bf1da-ed34-4a51-a02b-39e72c5de981", "indicator--7d5fb21f-1542-4f3b-af17-8d594d2b69d8", "indicator--ed57bf3b-a101-4e6a-8c2a-a1541b5e5971", "indicator--4ad3e0c0-0a32-4ad4-9366-2e056c56eca1", "indicator--b66211fb-f395-437c-8a58-2e5ea6ad39ff", "indicator--2e8b2c92-461a-451e-813c-0688ea537411", "indicator--678af5f2-d0ad-45bb-8b4f-e53d480149b9", "indicator--7cc1683c-6bf3-475a-8ad8-771a3c7ced28", "indicator--dbf2885a-2a8d-4eba-9271-67f1bc38d1bb", "indicator--61bb047c-3192-4187-a901-9126ff1ddbc0", "indicator--ba01f5a9-6f32-4a58-9ef6-1cc0dc2cab09", "indicator--9cddc179-9a63-4f68-9b5b-8bb5dc01d0a0", "indicator--671f342c-bcd3-47d3-8c8c-b2cbf7230888", "indicator--e0a419fd-9cbe-4dcb-9b09-7fe85ebbdef6", "indicator--cd601d3a-b211-40d0-9b48-2190a8bfbbb5", "indicator--14e02312-8073-40ff-b931-c44017552062", "indicator--7709b503-4648-4720-9abc-45b777275a70", "indicator--9721a292-64bf-46c8-80ac-3639dad5daff", "indicator--aae9aff0-693e-4415-90ad-a824e3248c2e", "indicator--938315de-acf2-492b-b1bb-3b6ebca18835", "indicator--1bec8660-a3ec-485d-9ebe-8d8b0be3689f", "indicator--0ccbfb4a-0be6-4e2e-9f8c-d6d570af8e08", "indicator--7164e344-23e9-47b1-a2a0-dfa3bc6ac872", "indicator--1ceccb30-da3e-47a5-b337-008e8b326f9d", "indicator--4ec397fe-47c4-4e6f-9cb1-300cc22ef74c", "indicator--c70166cf-4383-4930-a5f4-a1e65fc6a66c", "indicator--9e29d294-134f-41ff-bbed-7b27b6ccee9e", "indicator--a21efa97-11d4-4d7e-b95f-e2437895a273", "indicator--bc2efde1-2a6b-4781-bee6-0c04b63c5b31", "indicator--92ea539e-d274-40e6-8d28-b210d0890b53", "indicator--45b82486-5ac7-4fa4-937f-0f5953b6fbb2", "indicator--c259d7b1-2074-4783-99f5-ff6417591d03", "indicator--a73e86fd-9f1e-443a-a9f0-09010e2c9cbc", "indicator--92833304-5424-4748-92bf-f28868ba059f", "indicator--a02ec566-ed94-4eb3-9f02-fcbe54c327dc", "indicator--28bc1035-5c91-4960-bb3d-e8691b58bcef", "indicator--81fe1d7e-995c-4f90-a673-e042dfd6d65a", "indicator--74986ee6-cdae-4b34-b54d-562a2c8ee23d", "indicator--f0c073ed-855f-4e68-8d5d-208068a61502", "indicator--c7adda73-4a69-4756-897c-0e778c9b0474", "indicator--6e56d2bb-53a3-4137-8545-399e731a4e38", "indicator--b310a3a1-f576-46e7-85f6-54a1e4266ed0", "indicator--fa057a57-ba9c-4164-83df-dc62a25e852a", "indicator--a61c382c-b02a-435e-b96c-be3efa649998", "indicator--4bcddf17-3f9a-42ab-9ea6-d5d152b0f3c9", "indicator--cb54acb1-b6a0-4dba-af96-7ef7102bb0f3", "indicator--06675b49-7f04-43ee-ad33-9a88005b894c", "indicator--9606bd87-b607-4765-9f4e-40c3919b5dbb", "indicator--a0701df3-7f84-42b0-b9d6-e8d20beba692", "indicator--b78517ab-f0d5-4a74-ba6d-2b7f348fcde0", "indicator--45ab89d1-58da-442b-b8d7-534c941ab989", "indicator--59aa27a4-15d2-4aae-b142-2b9c8d4bce00", "indicator--16732505-2c01-4c82-bbd1-42fd4db8889b", "indicator--e5308d62-9abc-42a4-8b99-dcf65db304a7", "indicator--49771dfb-f796-49a8-9379-113f4b6d01b3", "indicator--dad1e79c-24d6-4655-a962-a037c10ace38", "indicator--02ba9c2d-731e-4d0c-8999-6d53d9991eb8", "indicator--caecdc3c-2720-445c-b8c1-784fbbb0cf2a", "indicator--60346a0b-d899-47ac-905a-5aace1469666", "indicator--e6ca4131-5cfd-45ab-a01c-7057838b15e6", "indicator--2ed4d319-573d-40f3-b832-23198b78fb95", "indicator--724b25c2-05e9-4203-979d-aac900837dcb", "indicator--9a0014fb-661a-4c73-9f8e-8bf7c6aec678", "indicator--7be3a85a-a762-43e5-969e-1d472f3cf0c6", "indicator--9117aa2e-1b94-4266-aeb0-7b8b8e376898", "indicator--55d00288-e073-4c63-b046-1c6cbc178261", "indicator--4836cf88-0a67-4bf7-8c21-8eb62d1d06aa", "indicator--2c6e0197-55f0-4b6a-b8c6-c876128a63fc", "indicator--511df891-6887-46b8-8fa4-f57e3bf94d92", "indicator--5fdbcf2c-9906-460c-885c-33e28b3aee60", "indicator--d3876d85-1d55-4f75-a849-560b89c77b3d", "indicator--a68eeb63-08a7-4a15-a53b-db3cfc78bd34", "indicator--dedebba2-6f3a-40d3-8a02-579e7b82b58a", "indicator--6b1976a4-9fed-40f0-b685-bc6edd317284", "indicator--67750a2d-d29e-44da-951d-05a9c24e20cd", "indicator--71b785ee-bcc7-4b7b-9b80-0a3b2669ec2f", "indicator--346c773a-0323-4fe4-a762-c560e0383613", "indicator--6687a63d-e6f8-4fb5-8ca1-e7ee65ad6924", "indicator--b6ac5771-fd1a-4192-a59d-ad95b45203ba", "indicator--d59e4f3b-b58b-4e31-941e-33ed02af3e6f", "indicator--be5c55de-90d9-4df7-8aef-6a13c3a9efa6", "indicator--35d1c0d6-4502-4c16-9efe-a5742e81d83a", "indicator--b3ef8f0f-240f-42ff-8539-e7b8eaffc158", "indicator--27006140-1f04-493e-936f-b393395ffdfd", "indicator--098e56bb-98e2-472f-a5e2-dbfeeb8cf212", "indicator--a603c8f2-b81b-4b2c-b991-9d3353b1f3f4", "indicator--3317342a-2195-4885-a5da-f5de1023bc61", "indicator--b31dafce-8082-4570-9588-0f32374b5691", "indicator--468519ce-23e4-41e7-809a-6603430e1461", "indicator--c9e6278f-5a28-4f4b-949c-083ebaaaee7d", "indicator--b7256b0f-2cbe-4968-a0fa-da2ce67d4353", "indicator--78b55ef4-2467-4342-9c88-a641d74cca76", "indicator--a813d58e-ba2c-4dc1-a581-51675cd8e2b4", "indicator--5f507130-6752-430d-ab4f-827052e53c51", "indicator--d663b805-1af9-450e-be02-d08db83c9efd", "indicator--5ede54a8-d75f-42d6-9341-7b5b7a5afb82", "indicator--27f9f1fc-db31-449c-a6e5-b37d7d4b3518", "indicator--709a7f66-a565-4518-9de3-b22c90619730", "indicator--22347b34-9075-4540-8a16-522f378f45f0", "indicator--2b9579e8-8ac8-4d3e-9ddc-b3406a6d9a94", "indicator--a8ec3651-17be-4c33-97bc-afe8aa7c8e16", "indicator--91d8206f-be56-4850-bafa-5a06c8dfce53", "indicator--4a190184-be8a-4358-84b7-98939f1e99c3", "indicator--122f1e9e-3f71-4fc4-9dff-976cee862dfb", "indicator--0684d1b9-3073-4c1b-9563-80efbcedccb1", "indicator--2acff164-f84a-403b-80c3-955c24391d44", "indicator--5974dd43-2164-4e9d-a426-2c8d840790ad", "indicator--1cb77b4f-23f5-44c5-becb-d2b0780ac876", "indicator--b6c4c186-2722-4f22-a1e7-a46d96bb000c", "indicator--4982e03c-2d84-447d-ad98-bac8721f40ad", "indicator--3fa2849f-d8f8-42a1-ae8f-d65023a532f6", "indicator--0a26c40f-8c4c-49d8-a473-cfa9207ecca1", "indicator--9009a78f-0075-44b2-84e2-92e5534392da", "indicator--2a5876e0-60ca-4a37-aa56-09b515621d60", "indicator--2c68d3e2-b2e7-4450-92b8-21967d027f7b", "indicator--3b5a8474-56bf-40a4-9cfa-ce17787f7a68", "indicator--f1639190-8715-4fc1-bf91-ab8ef58a3bcd", "indicator--bcd7eca8-1456-4d99-b17d-05328e7f2912", "indicator--04ea1ff8-3079-4c3c-a2ba-3c338cbcc15e", "indicator--d9139b59-02b7-4924-97b5-55b8bd640ecf", "indicator--0675f77c-85dd-4348-88bb-71037df81205", "indicator--8c5c6b96-3db0-489b-bab3-9887d985576f", "indicator--75ea4854-aa43-49f0-9ac0-26be283f6560", "indicator--23abff2d-d7ca-4f43-b320-ef57394805cf", "indicator--6ada65f4-d504-4165-8dcd-b96f2f0b83f8", "indicator--8c9516bc-3733-4cf9-ac78-b7ae3991cd3f", "indicator--1367d32f-ed03-4a08-8795-7a3913a6b5bd", "indicator--0443fade-52bd-4250-b562-0c5f67215ea7", "indicator--dec3ca8c-00f3-4f61-9a0f-3a7ff38a7f3c", "indicator--40eb10ac-25ed-4076-8ac6-bfcb5c13fc5e", "indicator--d709dec7-a5d1-446c-a2d4-ad64d1ff3c3d", "indicator--77cf2154-328d-4577-904a-2346eabecd7d", "indicator--a486e5dc-2bc7-454c-8dad-b9794db99ea3", "indicator--90d8bd24-8ce0-4bf2-9fcc-34e7452a3771", "indicator--2abbaeeb-e656-4a53-8d61-e09a4a9b7543", "indicator--25e3f055-69e6-4b08-8495-0d53ca584d24", "indicator--2d0b7d89-9ebd-40c4-844c-95e10b2fffa5", "indicator--6ff115a0-dedb-47e9-bcff-ea23e91da896", "indicator--65f2dbf2-b3fb-4e31-9d53-67865e67fa7b", "indicator--a72c691d-6ab1-45c3-a669-b5a2a3bb5159", "indicator--36cf53e6-9674-4966-8c2d-785f6d837922", "indicator--c6543e03-6ee5-4a5a-a5ed-0fdfdfc854f2", "indicator--6abf381e-e9b7-4358-a340-40be9080c27e", "indicator--85f79885-b85a-40d8-a0c6-d27ea48a5e12", "indicator--e61fced8-11e2-4156-b869-8988f37a4957", "indicator--bb3a2021-8cc2-47cc-a03a-d99126c757bb", "indicator--0416166d-d478-4276-bd2c-9678ff9faba0", "indicator--49c7e619-ad9d-400d-affb-6e9f6ce1fdc5", "indicator--c8fb1a9c-867d-442b-9277-eb0d9b3a8625", "indicator--1abbc272-8e8f-4504-8d99-85d6dcf907c2", "indicator--9d98221b-af20-4fd6-9596-9b98deadc265", "indicator--f3c151e9-0ca8-4e9b-8e55-5d9033d8b12d", "indicator--54a81567-f4ce-4d12-88c5-fa81f347dc4e", "indicator--a68b6e07-b7d2-4055-b324-91a93731ae25", "indicator--43983d41-c87a-4345-be3d-cb9deb524892", "indicator--9823efab-5de1-4702-bcee-86c68773edc4", "indicator--7dc678d0-16e8-4fcf-897e-cf587e883145", "indicator--1c8a7a38-1812-4c61-90da-670f76cad71c", "indicator--1f68e150-756a-45b3-a38c-adcbca619029", "indicator--bf314859-379c-487d-bb2a-a345da2bc0d3", "indicator--0ac64f15-6754-4c1e-b5b7-02c8e2f700f6", "indicator--780a3892-dee2-4daf-84a1-4f99eca00566", "indicator--c5385aea-b21e-4e94-b5a8-d7ec94025147", "indicator--d316a320-2e78-4b75-9583-9787bfd21952", "indicator--7c2b081e-1fac-4307-b183-f4f9b89ae1df", "indicator--ada2a766-ac24-47a7-a558-e8edbb045786", "indicator--0ca874c5-da8a-486b-a956-06dd7356ffc9", "indicator--49c38bda-2086-4d62-8af0-7c7c2cda143d", "indicator--684308f7-7843-4d33-ba00-80cfdb3122e5", "indicator--d3f870e3-d465-4dbd-954e-520ff703f84d", "indicator--9b57a4bc-bb6b-43d3-bc79-c9f4f5ec4da9", "indicator--da895bae-dc95-4ab0-b051-e3bd536d3e40", "indicator--7a52674b-0152-4fb1-9e4d-b75407c56b8b", "indicator--4573dd0a-43d9-4f38-ab58-ac0349484535", "indicator--35840e19-aa2a-4614-9eed-e0abe0bfdc9a", "indicator--3958c907-ea00-480b-9ca6-9f296d215b93", "indicator--6239616d-2839-4015-a8e2-b9059a8e5422", "indicator--ff4e9ae7-54fc-4cce-a99e-37fb4fa946c4", "indicator--939d0748-2fb9-4f7c-b365-c9dff5130a13", "indicator--6f00d510-d72b-413e-9a1e-486e9f8e4146", "indicator--c14fa705-f09c-400a-8f2b-cca38e5c5a63", "indicator--5d3bcfab-c92d-45db-935d-1470cfcaae94", "indicator--0c998a39-f469-4abb-961a-35ad371e2d89", "indicator--a1901087-cd68-435c-9a9b-74521a1b3a39", "indicator--bec825dd-48c0-49f1-a6e1-0b53c28c33c1", "indicator--63fde4d5-fcc5-4601-bf54-7ccad69e6f7c", "indicator--c0d19b0f-43c5-4c19-9e5d-3093f77d24d1", "indicator--afabddf5-b19a-4cad-a84c-b669282c6e8f", "indicator--d389ec1a-f111-4253-b228-a94d8764fbec", "indicator--f3efdedd-229d-485d-85d3-3e56b180ba66", "indicator--14829963-578b-4a3e-8660-f0a37409fc70", "indicator--7b2216ed-7381-4ab3-9d39-51985dc8e8fe", "indicator--29c94b8a-84fc-4786-820b-9345373f9b6f", "indicator--18464f3d-3f9d-45f4-a90a-6c29d9020d6f", "indicator--42632897-c48c-4822-81d6-38415c421a12", "indicator--d6352f9b-c2a0-4a3c-b81f-4e7b148561d7", "indicator--cd1abce5-5814-4b70-bf61-3005ad6d7abd", "indicator--8b8c10ef-8771-4729-b83d-4162f03335e6", "indicator--39039aa7-15c3-43ad-bffd-e6da1ed82c1d", "indicator--cc249ee1-8f0e-44fb-a2f5-990206d7c69f", "indicator--24135b1e-5192-4bbc-b3dd-e1fd166bc0c1", "indicator--c3e6a6e6-d08b-4927-a140-6a471c09121c", "indicator--86b0706d-d449-4510-a06c-6d928c23a6c5", "indicator--8ccf50b4-c35e-49c8-af57-81d2ebc657d6", "indicator--af84c7e2-7245-434d-be8b-ccabd4014a6a", "indicator--58e5d0c2-0315-43ff-bb54-6cbbe32d5fac", "indicator--1364de08-9965-41b4-ac46-8724a5fbd631", "indicator--73bc592a-2f99-4cb7-bce3-0f03c281dbd0", "indicator--e9901d70-4ff0-4c66-84f6-f07ce31aba1c", "indicator--17adc778-bc5c-4445-b287-4fd368947acd", "indicator--a353675f-f070-46b8-ab53-da0a1bfe30ed", "indicator--1bbe85e9-59ad-416c-8fda-1b2a7eadba3b", "indicator--c7f08378-9c22-4f8f-aa73-5f86979800c1", "indicator--31081406-35b6-4936-b250-d4802e915723", "indicator--2fd399c1-1a9a-42f7-8ccb-8176a03d4b77", "indicator--f96946a7-267f-4cdf-92bd-b7fbf7d0f840", "indicator--1ceea768-356b-4890-8af0-00eaaa0824e3", "indicator--b62b3343-95fe-46f8-9372-4d96fbc7df98", "indicator--a75fa44b-56f5-4a96-8aeb-522ef1dc7ffc", "indicator--2646d17d-5368-4528-9af2-0e442d285d75", "indicator--2a5db07f-9006-4b49-bf24-9d4d89f65cf8", "indicator--1d0297e6-8de2-43be-a28f-35ad5c11b5ed", "indicator--f7aa5693-50b1-4c73-b90d-beee0a601144", "indicator--6a07a117-bb4d-4846-aac4-b7c103379e35", "indicator--79b015f5-dc61-4cd0-aa3a-28901ca47b26", "indicator--c36cc5c5-e4c5-4c03-b981-7a98ae0a5728", "indicator--00fcf89e-7f31-48e0-a419-62359f2af530", "indicator--c777cc7c-4577-46ff-b018-34b69c738a30", "indicator--301a7a11-4c9e-4c07-b3cb-9cb5842b085d", "indicator--cde7e7a0-9dd7-421e-9f62-bcb391a0d977", "indicator--e5d90c97-232f-4822-aa1c-69fb340f2979", "indicator--d5445461-b4b6-4ebb-8e2f-91fd0fda6543", "indicator--ddebd4ec-c83e-4a92-b384-6e90a69f6ebb", "indicator--23c7194f-8cea-48a3-af2a-9b27f5492ec8", "indicator--a601d914-c896-49dc-8843-9183032c4ec3", "indicator--5301aa8a-3d27-43ea-a7db-22618eddb247", "indicator--02ccb755-95ce-4040-bd59-ce5775f6d20c", "indicator--ba43c540-31bf-497f-b306-e566edc2dfd9", "indicator--c1c09911-3266-46a9-854e-c6cebd8a6023", "indicator--6bf76d58-69dc-43c7-b264-1a4a41c0d4c0", "indicator--97f4fffc-ee1a-4ad0-a54b-3c884b1ad22e", "indicator--a51fa559-7bb3-4db7-bb93-39355ab6c19d", "indicator--29eb4017-a653-46ac-b3e9-338805a635e3", "indicator--b4a37996-f158-43c5-a407-b3ef19ac85c0", "indicator--63a73695-9e22-4faf-9ea7-856e1df4899a", "indicator--7ec0cfeb-30e4-4bad-9a67-165746942d7e", "indicator--f101ef13-76a1-4d3b-bce9-d8993c0da1a0", "indicator--e6f69647-b503-4715-b6e0-52d59ec3fc4e", "indicator--583dac8f-b170-4827-8c15-5f10228350fe", "indicator--cb328a63-512f-48bf-8077-56bccdbccbc9", "indicator--c0ac4c4f-004d-4f6c-8fc8-3d8a5d92a0ea", "indicator--39ac1119-dca9-424f-842a-8e09c56240de", "indicator--ab089b5c-edb9-40b4-86d9-51f120cbacb3", "indicator--f7944146-87ff-411f-8349-e373f966031d", "indicator--549ef47e-b8db-4bd5-89b6-e18f6fbce7dd", "indicator--447c0d94-b3cf-494c-8f40-7b72ae6a2a68", "indicator--a12bd930-9007-43d9-9846-4e301d79e9cd", "indicator--860c4ea1-9745-4e38-853e-7d27d95eac78", "indicator--55f9dbf4-741a-4948-baea-0809db1e9200", "indicator--9a69934a-db76-419d-bb8a-db2ba545b0db", "indicator--467da565-649a-4721-a86e-5334e6650984", "indicator--0c95379a-e909-4f6c-8569-ecbc31ac4fda", "indicator--c9a29124-b54c-48e5-8e1f-4c566494fda6", "indicator--24979941-8723-4523-9880-50a6670c239d", "indicator--4368a345-d8ba-4d61-a770-888a964d4311", "indicator--946d880c-53f2-4880-bd46-f3307d60af73", "indicator--3d848d7f-b55f-4c06-8380-1b4255d57447", "indicator--67e29bc7-7748-446b-9455-e281a2b53732", "indicator--3792f774-77c0-451b-9fee-2145d0465f3e", "indicator--40f100e5-8d67-476b-bfb5-7ddd993c8f7f", "indicator--da47c5e0-d310-4625-ad97-8db065db5afe", "indicator--5cdbf98a-8cf6-4918-a2ee-a34685a3dd9c", "indicator--33cbff55-6248-40c3-a80b-bb2dad3d471c", "indicator--cb794e8f-02dc-4af0-bb82-c0100cb0aaa7", "indicator--d247c3f4-998a-4c74-9aca-ec089cd9c409", "indicator--492f8db2-8271-4c84-aa8e-785fd0142482", "indicator--b1e48b69-6a74-4723-a28f-3ddba1a33a81", "indicator--5702e851-6481-4753-982f-a5c7ef1d5ba8", "indicator--3c891746-bed8-46ff-ab5a-12459cbe4de2", "indicator--169c325d-b84c-4154-b019-1ec6b8e41842", "indicator--25021948-f0c7-4307-93bb-052f09a97b75", "indicator--eb995a96-838c-4291-ac53-8de247efd25c", "indicator--8cd5c65c-ade8-46ce-9dd8-f7b4a4f9eb71", "indicator--40d1c64a-9d1f-4acc-bacf-f8016ece4a86", "indicator--1304d96b-af97-41a3-ba31-dbdf410b8cd2", "indicator--b9a46351-3b17-46f2-9c45-48007a8ccad5", "indicator--cc62278b-8f70-4587-b5cc-e3be558d52dc", "indicator--c9e54e55-10c6-4b3d-86de-cf9016c830a8", "indicator--7dbf6bc1-631a-4d11-b11f-27f304318175", "indicator--5bc96b54-bb88-4763-920f-e80e2bf09462", "indicator--5e4e6d17-a871-449b-a8a8-3c8c17a79e4f", "indicator--b25636e0-10ba-4a19-b5db-9bd36180c9d5", "indicator--9fcee618-95a8-47af-b716-3a979bc9f43f", "indicator--5d611466-6e81-47af-afd2-aefe5a2e976a", "indicator--3c68eab0-837d-41d3-9205-2430045cccb6", "indicator--a523df7d-484b-4476-a582-2bea5a8b8a3b", "indicator--003756e4-2b75-4518-afef-88c47d6ff31c", "indicator--993a5e1a-0902-4b7b-bfa9-5b2e37c4af2b", "indicator--ba5d779f-a133-49ce-a4e2-3f6fb5e95ccf", "indicator--1a7ba2a7-5ec8-453d-a4f3-fb6107401d64", "indicator--36043f8c-6270-416e-b837-aca72c550854", "indicator--8c839c18-6a2b-44cd-99aa-4034be0817f2", "indicator--9f1d1710-f989-4aeb-8a63-86637fed005d", "indicator--d70f6491-6843-4b0f-8662-d80881565621", "indicator--a39c0a17-0ce9-4567-b635-39751abeb667", "indicator--6ba79d83-31e6-46e0-8b11-f92d9b9d3207", "indicator--664d0df8-24f3-4e5f-97ef-871a3e44ed91", "indicator--d40989e3-a874-4c98-bd8a-e1ffe547911b", "indicator--d19b917d-4c0b-4c37-a341-5d4cbdd8968f", "indicator--19dcbe04-1992-4af4-95bd-5d39ca1a106f", "indicator--eec25718-dd39-4e38-bcd1-dcb26685389c", "indicator--0c79e977-5619-4185-a9f9-d4d15eaabc62", "indicator--df8ed965-396b-4141-809d-7320537e35bd", "indicator--888297e4-a67e-4a39-8e47-5346c90fc955", "indicator--21e32d8c-154a-48e9-8b49-d706c9b691b7", "indicator--d6174b47-bfd4-4ae7-acbb-0c1d8b43d2d1", "indicator--5d08d71f-548f-44b9-a7fc-95c2e4914568", "indicator--abe557b1-e3de-4fc2-ac7b-d110e44bcff6", "indicator--7f38add8-925d-4de8-8039-ac05142c21ab", "indicator--9d3db47a-814c-48be-a6ac-034c6973e309", "indicator--cb35af9e-5075-49ca-8a5a-c73363d2fe5a", "indicator--d5bfdb21-fa1e-4957-bfd6-83d782143a0e", "indicator--ac799fc8-5513-4c68-b980-a1c248a38846", "indicator--4054d6da-f78d-455e-9008-9808f8a2ee91", "indicator--4d26aebb-7be6-4e9e-b49f-bdf8e4a38d81", "indicator--b88a6e54-e51a-448b-86b2-ec00c4c2063f", "indicator--addd6467-ad63-40c9-9ba0-932dbf88b8d4", "indicator--518c8f94-fa97-430e-9f59-3aea457fdab4", "indicator--8a60905b-3e0c-4d7d-8858-82ec9cc70892", "indicator--55586b6b-2a28-49ae-adf7-7fa313fd1aae", "indicator--63e6b12b-b131-4d8c-abd6-5cd4c8bbb138", "indicator--9d635c61-f241-40de-a8d5-d8b099f82f7d", "indicator--9c8422d8-4d2e-489a-acc0-3e6def0051f3", "indicator--58001954-d190-484d-acba-08c37b52514a", "indicator--aa892267-4b51-4bed-9db7-607eb11c0772", "indicator--3f81b5b6-b484-4638-8cd0-c7c481e10029", "indicator--076fd925-1514-4a33-a47c-c65ed984019d", "indicator--c65dc378-c88b-4bf2-b6a5-e8e67c8859b9", "indicator--28e2d5b4-c3b2-4d25-83a5-7c53220370f8", "indicator--6be73b05-e66b-4286-8fde-953221437a94", "indicator--4af67c6a-5c80-4801-8bd2-f3d293a830c9", "indicator--12c2d076-7222-4f9f-aa4c-661bef098d7e", "indicator--06b6ca52-6a4a-4f72-8795-c6eb8224f59a", "indicator--c7d11438-9467-4c91-b470-23e4016980ab", "indicator--e04e4cd1-05ca-4491-ba63-f824595fccc3", "indicator--e86739a3-1da9-4d76-883e-032695f9c17a", "indicator--eb9946c5-7136-434b-9c0e-3da28417b688", "indicator--0316c5b1-eeb7-48e9-a58a-0252f5d73be4", "indicator--48f6579b-68cf-49a5-bba4-391384d5248a", "indicator--a78e6d1a-1365-4e03-a9a5-cceb8fd8cb78", "indicator--a300b0cd-9133-4845-a083-d3e20cdf984a", "indicator--8fac45d5-ab40-4b53-8e48-526f4bb47cbc", "indicator--f9091958-9c06-4d51-ba6f-96bbb6652871", "indicator--54f08310-0540-4c09-88fe-b4cb0a95f39a", "indicator--66c8ca1c-f372-4f6a-bd93-8f82a7da6578", "indicator--8651e304-247c-446c-93c5-dc7195e5a827", "indicator--5041d3db-26f9-4723-af2f-945d1b30879d", "indicator--9ebf4ccf-761f-4586-9442-61ca2fb2334e", "indicator--efc1f22d-16cf-42e8-8833-d2ef4051a68a", "indicator--580d22ba-db32-4f9a-bfb1-be68a6f4dfe4", "indicator--9afd051f-b776-47ac-8598-718d5862ac92", "indicator--7bdcbbe8-dfee-45d7-b85d-ccd189daa5b2", "indicator--7c254318-0d64-46df-bdd7-161b0626c37f", "indicator--b71e57d8-b576-453c-adde-481439b2b410", "indicator--60b2214a-af40-4098-973e-92a4d69ba650", "indicator--5f60e356-0289-4c38-b511-2d94bd304c17", "indicator--7d5e83e6-742d-4128-b6ee-a4dc591aaa5d", "indicator--19594647-f4fa-474e-8fdb-1302c3f7c2c4", "indicator--9ce077ab-94b9-472e-b4ba-c991bf3549da", "indicator--456ff76c-e7b8-4ec6-98cf-f326c81ac876", "indicator--c8ae3973-136e-400c-addb-a3a594fad865", "indicator--75301d9d-9d52-4496-8c1a-565390be7277", "indicator--4c027b34-bcdd-4cff-b728-972c0cf522b1", "indicator--d66e7fb4-5f5e-4af8-9e9d-1be5d4e8a643", "indicator--90b27cad-bbd8-4fa7-904a-d6755c5d31d3", "indicator--faa9ad56-3ed0-4cd1-a799-d70cae61070a", "indicator--a5aed5fa-bcfa-40c3-b315-a34fcbebf048", "indicator--8e09a791-b1de-46ce-8f18-10c7e0bb172b", "indicator--4f2fff30-8d58-401e-a417-1a98b9edbce8", "indicator--26ff04df-6996-4407-9c5d-b8cd79ee7788", "indicator--ed2028d5-cf25-4b68-bcd3-88774979d39e", "indicator--98ab404f-7d77-414d-aac6-def9b0aa8aa0", "indicator--ea5725e8-8cda-402f-aa31-e254fd8b66b4", "indicator--a9dd3e4b-7a54-46e9-a23d-a07e2dfb703d", "indicator--8210d7bb-cbe1-4190-b7a9-1ba70a2a352a", "indicator--9e034748-6a2b-4e00-9dcb-002f903cb3bf", "indicator--64b9e802-a487-4302-a5a1-4a51e93e1e06", "indicator--920b8d05-eb18-404e-b43c-0cca8edf6494", "indicator--74625f7b-62b9-4efc-b4fd-e26a9bc68ab9", "indicator--973c8843-a953-463a-b62b-c13e563ae2d6", "indicator--5a05f6fd-2941-45cc-b296-271f8956edd2", "indicator--22a2ca52-6a00-4cd8-8f4e-fb487c77f496", "indicator--66ba3062-40aa-4677-9a27-13f04139f817", "indicator--18dc92bc-9ad9-482b-bb28-3132baa29b1b", "indicator--91e68e0e-c6b5-4855-a46f-2c1d30a60efa", "indicator--00a7d646-2698-489e-aef4-724c84f1e5e7", "indicator--d40f94f2-bb38-41c2-bf9c-89e76118a279", "indicator--0338ca67-8e1f-474b-beb1-a9189e0fe824", "indicator--a0eed590-1c2b-453f-9a28-1e736826da40", "indicator--1fb5e9fb-df01-4a39-ae34-43322f70e4ba", "indicator--5d469f78-53d2-4ebe-9ab7-fcba352c8e77", "indicator--c47d75b4-87f6-4aa3-b682-2fe0a7c9440a", "indicator--cf30a095-c57d-4831-b29b-2e9c7cfef120", "indicator--6dbef4c6-f749-40ad-8473-7b3725f13e6a", "indicator--af143a7b-f86e-4510-b192-9ce0ef6e9287", "indicator--3ace2fd6-2532-4a3d-a889-4cb3ea63c3f6", "indicator--70fe766c-1afe-49ab-82ad-562dfec05cfc", "indicator--e773d081-0361-4aa3-babd-d8630f412a7e", "indicator--60b62ced-e104-4b69-bf9c-28c17fc6dfe1", "indicator--45a51497-b857-47d3-85ce-ceefd167f8d5", "indicator--9594ab98-70bb-4ff7-9f11-37ad559094ba", "indicator--1a91ba92-be0e-4e14-a0bd-a935511c9591", "indicator--a1c79307-c4df-450d-83f1-44d228a4407d", "indicator--db7865ad-52f6-416a-bedf-489658e6a22d", "indicator--2bc0c93b-bb38-4d01-a06c-7df45022accb", "indicator--409746e5-c7d7-4129-942f-c275bc0b7905", "indicator--4e93211b-2754-4e14-a56a-3e75377f0153", "indicator--e0e48152-fdbe-4a47-9c37-f010db80646e", "indicator--ce18c609-3406-453c-a619-059364b4f35d", "indicator--558a2e86-fe80-4e76-b984-2b7a17cb39f7", "indicator--0b56fcf8-6099-4fd8-a23c-4ab7ad22edef", "indicator--e4334ff2-a3b9-479b-b107-41e17b3518d5", "relationship--87c74341-82bc-4496-9e3e-a3541b811e83", "relationship--05327e38-7cde-4b1e-8e35-4ccf43c7ce96", "relationship--3e9a9f47-34f5-4be4-aa1d-828fdacb217e", "relationship--6ed5d0f4-d4fd-4192-afbe-5eac180ba4f9", "relationship--918b90e8-b7f2-4d87-96bb-71b887a2edbf", "indicator--1e01a6f1-7ff5-4e6f-ab3b-ca01707ad561", "indicator--42f54fce-889b-48fa-a639-5bd65585b247", "indicator--408afc3d-6512-4b00-898d-6ad40f29b41e", "indicator--365f67ec-f427-4861-8322-f4b8a191626c", "indicator--2c8d0fd0-4df9-43d0-bf14-59628c2d76b6", "indicator--f74d23a2-496a-481f-bf5a-323b389fa001", "indicator--6f3d8ad1-27f4-4ee4-80ca-d86a3a1c0c02", "indicator--ce947c90-805f-4457-b190-eaf258cddf2a", "indicator--cef7daf2-1094-47c7-8edf-85b6baf7b149", "indicator--8a2050fa-5373-47c7-8e5d-c37c5520c8ed", "indicator--f39d3b37-3119-45c7-b7b5-2a41237932ca", "indicator--a9558b38-ead3-44c2-8322-1a94b0ec3ec3", "indicator--2049fc13-805b-4eed-aa0c-34830aecd4e0", "indicator--c0f01b49-57bc-496f-900c-1303fd1fd37d", "indicator--7334e6ca-ee6b-4d2d-aa55-b4828b97404b", "indicator--e45184c5-70fb-46c3-aac8-696f1e1d4c7c", "indicator--e8033723-f0ea-4e47-ad58-a2bc7bddbd22", "indicator--3f515e3d-ee70-421d-ae16-7779571f9fa9", "indicator--08a1bd55-daa7-4aa9-aff1-71f586aeccb9", "indicator--c305c2d0-d393-438a-af60-e4ea50059138", "indicator--ded3b134-0f97-46d6-b68d-0ba10565bd8f", "indicator--ea1c894b-25c3-4a4b-b69e-734b0da6dd11", "indicator--9c9c8cfe-9cce-4df4-baec-db17f6c0d7b6", "indicator--ea6b5f03-ec1e-4bea-a2cc-f1e74833ea83", "indicator--38eb58e1-65cb-437a-8e73-d6e2eb9a93e1", "indicator--b302e321-d92e-42c3-ae11-1edfcd10815c", "indicator--7d2f230d-471f-47b8-b32e-90cc52523edc", "indicator--e176b273-0558-485b-bf38-96520f3cb01b", "indicator--49837956-228d-46ab-a6dd-96e472dc3268", "indicator--7fdafbea-7258-4800-b107-32cdb1295f44", "indicator--002bc2bb-f8e2-4c6b-9f20-55842626e5fe", "indicator--11332c09-0f81-429a-8b05-09ec23e05485", "indicator--6a3b8aa5-06b9-40b1-913b-ae0686bb3b13", "indicator--dd687983-cd2c-4f78-a8c6-140ff3801a44", "indicator--462f85a7-b69f-4ca7-95d7-4c046253a84d", "indicator--a37553fc-6310-4439-b442-469372b12250", "indicator--58bb9abe-8620-4c98-9a24-07b5f7b35cc4", "indicator--676b5808-986b-4d85-9856-97db59d91d9d", "indicator--f16d62ee-abab-4307-bbc0-e6a163846135", "indicator--d813c93e-5c5a-4a4e-920a-3c285e1cecdb", "indicator--7183da72-c0e1-4bd0-a329-f8d46d51171a", "indicator--82eb781c-86e0-46cd-b10f-958ccbaa5aab", "indicator--eb387d53-d8e3-438a-b2ec-9bd4fce929e2", "indicator--b0832980-4f4f-4c42-a846-cd5a8e3b593c", "indicator--242e9c63-de87-4a9b-a086-44e8badc3814", "indicator--22868930-9285-43dc-b855-a689b32a15a7", "indicator--47680e97-d863-44c1-ba0b-18712324457c", "indicator--3ebd0a54-d8c5-455f-b583-d7d0b9dd7006", "indicator--4a35b351-d73f-4a7c-b82a-0022d305f917", "indicator--6f201763-4855-433a-a088-ee2f777f2210", "indicator--dbc4a511-fd20-4539-a15f-80c0c117e8b1", "indicator--ec7fbbf3-8450-4ed9-8e5f-80d8e4e96968", "indicator--2b3522cb-92ae-4729-939a-1281c9350e6e", "indicator--a24a7dbb-c732-48a4-a444-a9fecd5b1e88", "indicator--d7c4d27b-6b98-407f-9b4d-62f23371b60c", "indicator--3551b8a7-d745-4fb5-9fcc-aa5096709199", "indicator--7f9b7415-c2a4-47a5-93fc-29f8a638d3c1", "indicator--bbdb5fd2-ec68-4999-acdb-50da4a75d3c6", "indicator--ff8c8422-cb15-43ca-bdc9-ccb9edeebb79", "indicator--707c7432-a30b-4a80-b35c-9683acf1607d", "indicator--b6c979f2-6afe-471f-b816-b9c6d7b75c34", "indicator--d080a1df-526d-49b8-9bf9-34e384d13128", "indicator--ee8ea6b5-710b-4aa5-9da4-5b3cee4df011", "indicator--fca05a96-d1bf-4d1e-97f8-739115e7ee5a", "indicator--fc00ba5c-30f5-4837-aa18-c66e491e0d12", "indicator--66f539df-044e-4292-b056-8e8984f7c341", "indicator--f6d60069-974c-47c1-99f6-9e9531058bb3", "indicator--fe6650a2-7477-4537-8d0f-9cb03403f895", "indicator--f2053fa3-0f97-4b63-8ac1-f479ed1f125b", "indicator--44681d71-96eb-416c-bdb9-95956787c2b1", "indicator--59098a70-addf-492b-ac9c-ac73b6d6db08", "indicator--e4cd88c4-7d78-40b4-a30d-39750b8abbaf", "indicator--6c8a3d79-3695-438e-8125-a007c8aab34d", "indicator--750f4fd7-d24a-4c61-ac24-eda580264ce3", "indicator--d8d98b12-beb7-4dd1-b9f9-f3b9fa2eebc8", "indicator--398164de-44d4-45b4-be64-3622815d16ea", "indicator--d876fd12-e083-476b-9779-aed4206a0faf", "indicator--cb7a679f-0a09-4412-92b0-2e268591d318", "indicator--9605b8ac-463d-4069-9edd-981e57a9c770", "indicator--927be2c3-20c3-4f72-8330-17aade97be94", "indicator--f30b4fe7-4ca9-4912-9183-6d8521e4ec2b", "indicator--a7acbb32-c9a0-4b31-b1c2-55f18af83c36", "indicator--f9f91383-60a2-4917-9d80-b3e0657314e9", "indicator--0445b2ff-730c-4dd3-a94c-1725df087389", "indicator--adf1031e-af63-4e43-b2bb-49034ad5f4ad", "indicator--7bde0adf-9912-41d5-bd8d-694282fce5b9", "indicator--6f092e92-2c30-4491-8df6-d98aaf02f01b", "indicator--ddc56d2e-15da-4008-bbab-53abebbe712a", "indicator--6dae6280-ba83-42f6-aa2a-a4404452b41c", "indicator--918372e3-a1e4-4a11-a3b9-e3a93d30c5a2", "indicator--3ff01f9c-cd38-4116-a86f-52a8dbf3176f", "indicator--2727f60c-6a94-43a2-bbea-af02bb5be8ed", "indicator--e9b14e58-d964-4f49-8ba6-5fc68390a9a5", "indicator--0ab3a319-c6c6-4d8d-b21a-2152ad378db0", "indicator--0888b9c5-dd1f-451c-b917-4550022b3d96", "indicator--65a4c9c2-f8e9-44ff-ab3e-0bb21815f5e9", "indicator--c645e626-d0f6-4001-a64d-c4893e028fef", "indicator--727674a1-a627-4466-a92a-777b4ae59473", "indicator--2c564b38-929c-42a0-a51c-197d861f3a24", "indicator--40e58887-3269-4290-942b-845dc8b507ae", "indicator--49e8a4c0-efc7-4905-a90b-2c197b2a3559", "indicator--ffd6e49e-b27a-45d1-89d8-e9bd57993e8c", "indicator--8b6ed787-9f8e-4e64-8f7f-24d4fc2b624c", "indicator--43985d45-829b-4f78-b870-7f583b5f7445", "indicator--92c1266d-81f5-418b-a3ec-9f570c984855", "indicator--a7e96ef0-c58f-4403-87ae-f912534587d1", "indicator--a31f65b2-9cab-4a21-a2e0-0a2da10a1cdf", "indicator--ac723836-18c6-4b5f-a917-ba796b078bcb", "indicator--34efc5d0-be72-44a0-a3e6-80e691f4568f", "indicator--42b7ff45-49d5-454c-90a7-ca4b6e203b3e", "indicator--e8a4ce7c-1d68-45dd-a056-29824d9216b7", "indicator--f839ad30-d7fb-4950-83a0-b2749362c569", "indicator--de7126f4-fe45-49aa-8c09-a22bc7bab0a1", "indicator--4a508e12-a1aa-4a32-8107-a9c27fe3446d", "indicator--5541b92d-bb35-4faa-87a6-56da1808dc6b", "indicator--676e4531-3740-403d-846f-e09225830666", "indicator--50633c90-6783-49a2-bd58-7ad953f9aec1", "indicator--0c4ee50e-a9be-4e45-8b9a-d2201f421e86", "indicator--eda6bfc9-ed01-4524-8d9d-43cc3fb1d96c", "indicator--da6f5336-c919-40bf-9bbf-2fd368fb590e", "indicator--f35b585b-45c0-4ad7-ba00-99d3ac5897c8", "indicator--6b4ca6b2-ca10-4fec-bd18-694ff0cc333c", "indicator--c4227111-9e74-4a29-ba5d-8e43bc221795", "indicator--1e6b971c-0fb6-42db-88fa-436d08718ae1", "indicator--ff9f8e7d-01ef-4936-bc58-c709d967f8d7", "indicator--1d0af783-5070-4d73-9bb6-08e15b317255", "indicator--0d5e5601-542c-440e-90a2-ed2b6223f7d0", "indicator--bd9add92-1be5-4769-9bbf-ffacaae15322", "indicator--abb10c8d-cefc-4d8d-834a-af2a51f49287", "indicator--2f12c40b-4849-432a-8ce7-598b4a62d615", "indicator--70cf54c0-35a9-4e69-80ee-22caaaa3bf5a", "indicator--53284660-5b24-4ed9-9197-27880797ca25", "indicator--ec10881c-97ca-4610-a4db-3200494a0dbf", "indicator--a4ee5952-b89a-405d-93eb-7693dc604a4b", "indicator--76ef84bf-609d-4494-82b2-a8c38b9289be", "indicator--88424fe4-80d1-4ed4-96a9-e033f1e8e9d2", "indicator--5cf0f90d-aaf2-48e9-80ae-8dc246a3064a", "indicator--934c5807-ee4d-40d8-a179-71bdc5af488c", "indicator--a335d3f0-8897-43b5-8d94-2f27248eab50", "indicator--5877c841-8d8d-41ca-8d8e-3f2d0afea5f0", "indicator--7368cf35-4067-4e38-8b58-41f920e8cf98", "indicator--d1f15299-67cf-4b48-970f-cf8f44749c92", "indicator--01d7a5db-c834-460c-a67a-5e4d1cc5af2a", "indicator--1fb50c3f-6ec0-4e44-862a-39238f6d7e30", "indicator--820d4ce6-ef41-4ba9-94c2-49d67a12911c", "indicator--4c237eca-0a8e-417b-8a47-0ed5ef05d659", "indicator--506bf82c-ecd6-4955-9e2d-93e9884e7a2e", "indicator--8cd1f2e2-4b03-47cb-b278-7e720c0b7b9a", "indicator--27ef2532-a015-402d-95fb-6f3fae0d77e1", "indicator--072e3dbb-b782-4502-97f1-421cd8b8eca5", "indicator--0c67e5a3-b2e4-4cdc-9229-79d8d2f88b56", "indicator--cf30e6c4-8a41-4cc5-a206-853a73eb0b35", "indicator--059fca75-48cb-44ed-84cc-499ffd804417", "indicator--ecb622c3-1932-4f1f-b09f-fe877f73154a", "indicator--064502d9-c096-4405-a010-ec1e302b6c10", "indicator--8c7013fa-8e0c-43e3-899e-0ff8b508a283", "indicator--65ec203d-a4bd-4818-b46b-bfd9b3ccfc1a", "indicator--d6f1c5da-c0e4-4813-bb7d-107e62c1af44", "indicator--ce08f6e7-7d56-4af3-9ac4-4a087b55968b", "indicator--832914db-a4f4-4a5f-a138-f4909996d512", "indicator--a5071ca4-58a7-46f7-b50d-7a2e4e26b5f9", "indicator--3df8bfda-4f7b-40c0-81a0-b6ba87a27dbf", "indicator--e691e3c3-5723-4baa-bd89-93a343814820", "indicator--03d65f32-9062-4cf4-8fa9-58280385dd22", "indicator--e54867c5-0148-422b-aebc-7f9e93d2e2cc", "indicator--0e8eecf5-0fca-452c-bf17-eec309c02c6c", "indicator--da4d52b7-c8c9-4274-98cf-151dd13ac995", "indicator--2819fcae-6a96-4f1e-b999-f615e6485779", "indicator--ea0f1e0c-bff2-4c07-ac79-551706861c81", "indicator--15545494-38d1-4686-82f6-1bf6792eaa2b", "indicator--7e950811-b2cd-4266-8260-ff2b692f3d88", "indicator--da87c2b0-1726-4cba-9630-e5c071e20c22", "indicator--4e8bcf1e-f8a4-4f64-b7ee-9b7b2c106deb", "indicator--0ae1cd5b-6217-43a7-b5d8-a3d2fb14be41", "indicator--c9a7512b-3a2a-46ab-aa5f-86c37afc01c9", "indicator--c6a87b00-49b8-4a51-ae8b-e4d9e915d900", "indicator--71683bfa-e00b-4988-b5ca-5daefa560291", "indicator--e9adf551-53b3-4774-9e9e-ba8443fe404a", "indicator--0e68c61d-fd7f-4749-bb4c-d0fc408a8a26", "indicator--23e5b725-5be4-4820-9fca-5ba75356a38b", "indicator--71de27c2-dad0-40c5-b0c8-fb352aebc1e8", "indicator--155aaad5-fd63-42ec-8b2f-3a1bf571e598", "indicator--fed583d7-65a4-49ae-9ac6-51bb6e1f5ead", "indicator--94643ba9-1ca1-490d-884f-b14ace2ef2de", "indicator--117cf6fd-13d0-4251-bdd1-9e8f499c4601", "indicator--fb29f656-a448-434c-a56f-639a81b605d5", "indicator--0a0c97cd-e441-46b9-9cd6-8c697d689378", "indicator--ef3eede4-138e-480e-9157-56d9eca1f190", "indicator--1d393430-044b-47b3-b7fa-8c40f95e601a", "indicator--8a2c9ebb-1e87-40a6-af98-14c70a6c1846", "indicator--bcf45c37-9bb8-48b8-8e0e-c492c946f433", "indicator--ee43942e-ac14-44e0-a499-3485e3444aaa", "indicator--c3093b43-e2f4-49e5-a10f-7b33b6f3bf9b", "indicator--a783ee47-9add-4921-ae34-0b893f33e632", "indicator--530d1835-39e2-4854-b03e-92f58b69e43b", "indicator--bc81740f-8cb8-47b6-a2c4-d47cdf8e0843", "indicator--5d14b273-0b41-42b5-9722-aa9eabd3b59b", "indicator--9fb1624f-1ada-4bc3-8642-c10062eba863", "indicator--d4e12ea0-29e4-4f6c-ad69-4e8ed4384500", "indicator--2f33fe7b-cd4d-4b61-9d26-8756056c6dad", "indicator--a4e44423-9ea7-4e67-8f88-9ead7f4aabad", "indicator--08a3dda8-8497-4453-9352-eb18a3ecaa8b", "indicator--e5081fd8-1388-4c23-8459-a7f908bf8460", "indicator--acb090b4-b2b3-42d8-8886-de0f0b2bd5aa", "indicator--d770fea5-0e65-4fcf-9efd-54a5d6af0e3f", "indicator--07757988-f5e5-49b1-8a0f-17fe206dec4f", "indicator--bc44797b-5de1-49ad-8374-6544e4637bb2", "indicator--9115f9c6-4b09-4380-8c28-211060d30ebe", "indicator--36baf879-af50-4502-938b-1f6cc9f7d429", "indicator--0ef363e5-e664-4fea-99eb-29da75fcda79", "indicator--62a316c3-cfed-4349-975d-622f28305570", "indicator--f6d78263-b0d4-4d77-a90a-2f10d60a4acf", "indicator--bf4b427a-d606-47a1-a303-b1498bf1718a", "indicator--ec6f6d0c-d893-4fd5-9631-9a99984fd0fd", "indicator--ee668720-b503-45af-98c4-33c8eb6742dc", "indicator--5cf05a7b-b3c5-4d3f-b5d7-22bddc3b3061", "indicator--a5f8805f-830f-40f4-aa45-6be626ccb2de", "indicator--88f81a65-c603-4b60-ac00-3595a7eb436b", "indicator--78370a3d-a382-4604-9a4e-5cb053c0e450", "indicator--307d3132-d1e2-4349-bfe9-127c6278aee4", "indicator--b633fc3c-c170-4e8f-83bd-b9730058c3f7", "indicator--046472d9-fb39-49f5-b4bd-126f5f1fa36c", "indicator--086959c6-5f7e-422e-bc4f-cccc0fb5cd3f", "indicator--c79988f3-49ee-4cee-8025-2cf242606619", "indicator--c40a441b-d864-43ae-8d04-cf094ee8b7e5", "indicator--1893e85c-34a8-4562-bccd-ea422dc07885", "indicator--3f03158c-f3f5-4e61-b5f2-af16412bf0fb", "indicator--34d80216-3fe9-4075-9f61-07a139e1401b", "indicator--43b61439-50a0-4865-bda1-112729761a20", "indicator--7c67ff6e-6e5e-4c93-a8ed-1c7cacfc240c", "indicator--3149aa93-7b0c-4cb1-830f-10566b05e7b6", "indicator--f984aa00-31c1-4055-97bb-477dad6a7cd0", "indicator--fd4581bf-55a6-4791-955a-67be03a447ad", "indicator--53c6e9a2-b0c1-46a0-b443-3c123204c717", "indicator--b77ad6d9-4d7b-4f0a-8cf5-d2042599a39c", "indicator--6a9faf82-d8a5-4e61-92dd-5d384feac3d3", "indicator--f173929f-6d8a-4311-ab28-9edb5dc55a44", "indicator--4c4624a6-623e-46b4-b238-fdf8a5b86dae", "indicator--18b432f1-9a97-44de-b986-ef5de009fab7", "indicator--fd37a7c3-6c71-4142-9518-10adfe01e224", "indicator--2d064a57-fe92-42d9-81a5-055158f97427", "indicator--8c347885-3cff-4b80-bdc6-1e46dbd5dd39", "indicator--4c253b31-eabb-4108-8b9d-8bb7bcf94b98", "indicator--f1fd7b71-d8d4-4561-9422-68f6ff59db5e", "indicator--92f8f9e3-b123-4d89-81d4-ffdd4bc9cd7f", "indicator--3596cd3d-9538-407e-8dd4-1bb7c5dc37d6", "indicator--f2c81cdb-818d-4095-b6bd-12a8b862ae60", "indicator--5232b56a-2eec-41f8-b0c3-78a983960751", "indicator--71c9baf6-92b1-42d2-aedd-1baf58262dba", "indicator--ee0eddd8-58b1-4491-9a75-7a74e3f31c17", "indicator--c9c9b1af-79d4-41bb-b240-41ebd4fc15b4", "indicator--1602994c-784b-458a-b0b3-717e884251df", "indicator--840d441d-db2c-4bf5-bc03-c814d1622ebb", "indicator--023abdf9-ff1d-49d2-b808-c579ee281824", "indicator--f8683c5a-00cd-4efa-ada7-263ce370324b", "indicator--c2c4bd8d-01d4-4d37-916a-adb05b3f2280", "indicator--a349f89a-ce57-400a-8cd3-6ba1cf146b13", "indicator--142abbe0-708c-48cb-ae1a-50de8e0f9806", "indicator--24607cdd-4ca1-48f8-a6cb-5c16e76ec97a", "indicator--8ba2cae1-f71a-4646-9fe0-1bfcf70f10ae", "indicator--c56b6ca4-280b-4fd9-a994-43a76a0a1807", "indicator--d9a89a0a-a95e-4db8-bb34-b45ff1a3e9d1", "indicator--0b61d9b7-652e-424b-ab28-9b53df993da5", "indicator--e9b10b15-b77c-4456-b0f7-354038501580", "indicator--9c36f2b3-a143-4ad0-a4b4-55661c0d150d", "indicator--c9f800ef-e47c-425f-86c9-18047b385902", "indicator--0ceca47b-9b0f-44bd-acc7-dd3a22f9e459", "indicator--54584eba-eb11-4bb0-b7c5-345f53b8c724", "indicator--ebeffead-2084-401c-863a-bf877483c10f", "indicator--3d244833-4a37-403d-9eb7-80972eec207b", "indicator--42c208b7-60c4-4be4-8b0c-5a39ca78d2b1", "indicator--45f367af-7e49-4232-83f8-56dd959d5640", "indicator--576bcccf-ce46-4c4b-be8a-9c0f11d4eb6f", "indicator--32a431c1-812c-4c04-a57e-93f91c1edeea", "indicator--e1a72ae7-f708-4afb-ab31-c779c1821246", "indicator--e658ab20-158f-4e7e-82f3-79903cc07259", "indicator--85891acd-1556-4b3a-9d14-a46d441e3fc2", "indicator--cefc6d4b-5057-4068-bdc9-c45349ee0bff", "indicator--0657ff02-d6cf-4cd1-a0d7-5379ef66ea6f", "indicator--193bbac6-bdc4-4ea6-bfdf-9ba3024c91b4", "indicator--6e94d54f-a86a-4839-8932-cfd430c8d1d7", "indicator--b5060723-0259-4db5-9730-d2467bac1abb", "indicator--4d36aaec-9506-473e-b797-e3cb2470f020", "indicator--e41b6860-5b37-48de-a9ae-e160cf1fdc53", "indicator--0384e440-5af1-481b-b6cb-f6ec9c5b0e9b", "indicator--12fd7a09-2334-476d-acea-16ab693f3661", "indicator--5c92bb32-22c6-40ba-a828-1bc09a49d698", "indicator--7a136e83-05d8-4ff6-a600-eebaecc3cae1", "indicator--209ccf05-cd31-4400-a0d6-14f17655e2fe", "indicator--4b6b5352-67cd-4814-a009-aa4438aa2ac9", "indicator--84e0ae34-770a-443b-bf1c-81785e5670d7", "indicator--b2ca9b23-18e5-4b55-9118-c3346c4eb7cd", "indicator--584bb680-3425-4ee4-a51a-21e3a8dbc316", "indicator--ee238b0b-a4ae-4f3a-83dd-e8a3a307d384", "indicator--585344af-ad05-4cbf-bbf7-af0896b045e8", "indicator--f360d290-33bb-472d-a08d-3d0c7839938b", "indicator--a090f513-cb4b-4aae-8b1e-d8ed6c2e317c", "indicator--adaee53a-0f65-45ac-af15-dbbf676a42f4", "indicator--58548ebf-839a-418a-9f3e-693d1cf10daf", "indicator--cec7178f-0082-4d71-a547-ffb2137e26db", "indicator--6f43dc95-ac70-4a2f-8247-c025a76d340d", "indicator--03d45b5a-e5f1-4561-b5a3-a9795c865704", "indicator--c1c4460b-cac2-4d7d-bd9b-766b2b1ba269", "indicator--79f01b40-d32d-4993-8984-816c22724d25", "indicator--eb541c06-947f-44ea-a2fd-4ebf48e7f299", "indicator--acda592b-036a-43b2-a63e-3d727c5216c3", "indicator--e8bb8670-9999-48be-b70a-ae6d7e33e19e", "indicator--8cf175b6-a2c3-42f9-b579-75456b968f5f", "indicator--b4f6646a-ffbc-45e9-b510-7b32de07e705", "relationship--fa8b2157-0bcb-4359-8d1e-81857c5d794d", "relationship--552e5bd0-69d5-4436-a87b-d7e471fc6a8b", "relationship--555cf525-a0d9-44f2-848b-72af3683a50b", "relationship--7e90d300-2c18-48ee-b3d1-8a8e39cbd6a9", "relationship--a23a1ee9-c99d-4d24-a869-b23d45859728", "indicator--7313c148-ff28-4dba-bcac-1761804a069b", "relationship--1bfaa7e6-290c-4bae-8731-054f01c42078", "relationship--8b5b34e0-805b-47d3-833a-5be8e0f846a5", "relationship--a0b3f49d-2a4d-4d1f-8cbd-84b1d132b8e0", "relationship--49048c2e-5e1c-4dd4-a03a-1eb1ec4afece", "relationship--1fede1aa-a418-4157-a2b8-f1b0e79dd80e", "indicator--82ddc7a3-854e-43a6-a800-9fc8ce43fa8d", "indicator--9c192d49-1b81-4029-b587-162a2db8872e", "indicator--0cefaaed-b9a2-4b0f-88e3-8f9133a116d7", "indicator--b309555d-66b4-49cc-a63e-29be95aeabc4", "indicator--a112daa2-7e62-4c2e-8547-408be9f2e37c", "indicator--6a85fe2b-132f-44b4-859e-6d31498031d1", "indicator--d70a8015-a08b-4c62-bb9b-a1b43f7cfd8f", "indicator--5b3e782e-cc6b-489a-9be1-f5d9b8b2d230", "indicator--60d42fb7-477e-4610-88dd-bde620a91041", "indicator--cc34ab85-6bc9-472f-bba3-c3ada324f1b1", "indicator--1565187c-2928-425f-a071-d455392cd452", "indicator--7570457f-db89-4931-8f53-2eddc780902a", "indicator--7411d80d-f71e-4cfe-891f-edeca046cd12", "indicator--5cb55cba-4bc4-4fc3-bf70-dc1b1f75d39a", "indicator--af18f368-e792-41ca-9e7a-342d80de520a", "indicator--10fa4a1f-7d18-43fd-9b12-8f20c77f75ec", "indicator--01d73afb-4f0a-416c-aa32-73eaa6b55209", "indicator--6df3477b-9b5c-4ea4-aa2a-da9585e27d1f", "indicator--dd61d90b-2332-4459-a08b-f927679296c1", "indicator--f863c457-5cf7-4dea-ae71-5b9eba2d8cf6", "indicator--46e2ce4f-6474-4523-ae93-2fb1459b5e98", "relationship--a6c17d55-dc93-4db4-9585-0379725ddb9f", "relationship--7e175492-089c-4531-8155-705f181dac27", "indicator--23a5de6d-6aa5-40e4-b5ec-da96fb6e7702", "indicator--a2c9efb9-58e3-4cac-bd50-22a614185a95", "indicator--978a61ee-84c0-46c9-9562-9fbdb59ef14d", "indicator--94ac0218-68ad-4233-af2a-8fe22a8add27", "indicator--8b043613-3755-4d4f-9774-4d7f8ac3105c", "indicator--cc69e196-8124-4d34-803e-7c6b4d2b5aea", "indicator--0fc465c1-233f-475c-82d7-0ef33905d08c", "indicator--5e2008fa-f093-4e2d-a2ce-17d54a50b619", "indicator--c4b2bd19-5df7-4375-9ace-73e2bfa77820", "indicator--3fdc5309-62c9-4cb4-8d8d-59c81bb5002c", "indicator--84f7ba15-0f06-4efb-99aa-3ae3b861a780", "indicator--143dd9c6-e61b-49c8-8c67-9573a46fdbaa", "indicator--070c5e09-9256-4d3b-84da-ef0e5d5b5a86", "indicator--071fea1f-c210-4d76-8846-99ff5f5742a5", "indicator--45f05e14-575b-43a3-b06a-8503c8f60114", "indicator--bac573ce-0802-4181-8663-d8690541e534", "indicator--e78a617b-0cac-4f24-8b7f-dcf9631927e9", "indicator--c0ac398f-9a42-4010-bedf-a47cbb356a9a", "indicator--00530cf1-e6a2-4f56-9e45-03f0d85c10d7", "indicator--c71fb67d-b4d8-4f2e-8391-58f4337a2d26", "indicator--73b53513-b3aa-41aa-97fc-46e4e396ded5", "indicator--4b13bfdc-feff-48cd-9b49-fc8e4c6b77cf", "indicator--86faf7f9-e302-4036-aa00-c8b188b2847b", "indicator--3b8c4122-debc-4251-b19d-ecf4d0abe692", "indicator--4d99dbc5-e907-492a-8e0e-962daa5ba695", "indicator--b503e431-82bc-4459-a5b1-c32eec2980d8", "indicator--1a1f42e0-15c1-463d-8f38-b3ef2a376394", "indicator--c00bea10-a476-403e-a3df-2689987a2c8d", "indicator--3bd73d50-c929-4b81-abbf-05ded940ba42", "indicator--f6685539-e32c-4699-bb8f-227db1038d7b", "indicator--516e7ad4-c369-4d26-81df-7a28aa2132ee", "indicator--5145db60-c0d6-43f3-b656-e4eb760300e5", "indicator--485296a9-6026-4164-a31f-cb47a14f2062", "indicator--88bb99d0-755f-430c-87ba-e6e2d6d309ad", "indicator--75b17281-114e-49d1-98d7-23a336cb4d83", "indicator--5e3ba0cc-dea4-4ec0-9766-b4f17176c3cd", "indicator--08c7236c-0f28-47ee-8bda-c485c6da6a24", "indicator--94d4b42d-d549-491b-8d7b-10aa9819a75e", "indicator--65273466-5c3d-4772-97e1-06f49dccecb6", "indicator--712a20e7-fed2-4ff8-9812-3e9547509966", "indicator--d8049e37-1f92-4ea0-a2a9-3bb17843216d", "indicator--05cc884c-4e98-413c-97fe-cf2139884ecf", "indicator--f579774a-d10f-4f12-984f-90470f182769", "indicator--f127dd3a-fd0e-42a7-826a-d138482fc846", "indicator--4a52e151-691f-4acb-8857-fa6b3a8d6745", "indicator--eb6a1f7a-e7e7-4167-8036-b51f25860491", "indicator--6c8325af-2231-4df6-91ba-96974747f3be", "indicator--ef51bcbf-f067-48f3-975d-7e2b29bb39b1", "indicator--baf870fc-8742-4daf-9d74-481ac2388f49", "indicator--fdb090be-1eb6-4f28-a1ff-b0a69f333b00", "indicator--89f42668-f1f7-4065-b5f5-37dd11235b4a", "indicator--cdb6b774-7afb-45cb-9f5d-812459a208ba", "indicator--38faa046-c6f7-4190-ac82-dbb36a2eddeb", "indicator--95b78714-1e29-4e77-9268-92af4a8750ad", "indicator--699948bd-ec8d-4fda-981a-6a5741e18291", "indicator--3f92e80e-2ac9-4907-b13f-15df19537184", "indicator--9d02d9c2-9944-45cd-9876-12bdcdffc9bf", "indicator--8fdb6ca5-3d09-4a50-8b82-cd96d825b8a6", "indicator--9e30595b-f05d-4175-a248-41ee6a735778", "indicator--c173b6f0-b782-4457-af0a-d4fa743d8b07", "indicator--fb007be2-83c9-40b3-bd14-c0f024853584", "indicator--95a2ca2e-334f-4948-833c-fdb3783863ce", "indicator--8574f1fc-f2a4-4720-8194-2cf5a9a51e70", "indicator--e27e3105-8f0f-45e6-b052-e32645e67524", "indicator--f0b94681-5fe5-4f03-9be6-568751b657f8", "indicator--4513ae08-1d42-4dbb-a1c9-44e4d9ec7af0", "indicator--b3530a90-24f7-40da-8f56-2e0c2a772936", "indicator--883cd828-39a2-444f-8598-8c3704de109c", "indicator--8c0f6dd5-27bb-4380-a14d-b5b42556ef28", "indicator--959a2a4a-b295-45fe-a2e9-5eb2513f4f93", "indicator--82899192-f14c-4857-9ee9-33201896b2c5", "indicator--e1ea5d1d-5aa7-426e-93ac-7f31dd4fba90", "relationship--aba496a8-161b-4bbc-9e07-eaa5b933e44c", "relationship--1698b925-1010-4986-8122-ddb434b4f813", "relationship--d0932e93-3570-40cd-98da-0cd86840fc21", "indicator--de9ee9f4-d570-4a9d-8c52-e94326edafe8", "indicator--32571810-0b80-4ef5-bcd6-68aa105cbb25", "indicator--3168d521-a8c9-4ed6-9051-9a31a6973e90", "indicator--eed1d98a-fd77-42d1-ab0f-ab93d7ac6c42", "indicator--116e2e3c-92e7-4a3a-a238-3718f274097c", "indicator--ba076f3c-82ea-4998-a87c-8ca573e0d46e", "indicator--1c0f496a-fb12-4987-b25f-b7463056ccbe", "indicator--7edcbf32-c7a7-4139-b3bd-d790114101e4", "indicator--15bf4a20-b092-4ad8-b2aa-032416928392", "indicator--13bd4e8b-9c17-4e4b-849d-df16b8da75d5", "indicator--779ba2ac-de7f-45e8-8514-0802743d5cab", "indicator--e0e3b9f3-f81f-40b0-a796-8b2d61340dc8", "indicator--3cca3c35-c0e0-4a11-bdcc-189fc0cfb064", "indicator--cc3827c3-5954-4ad0-ab10-329c87997d93", "indicator--f0f58c14-4811-4ce8-ad88-aa247e5a5d18", "indicator--b2922543-da2b-4ceb-9877-36635b0b1b65", "indicator--438ade94-1e97-4312-9425-14b868e3f03b", "indicator--88365309-9e9c-4b30-b727-78f3cf671520", "indicator--fa12c560-f8d2-4dad-8fdb-a77c0751d9e8", "indicator--8a613123-2d86-4620-9f1b-0bc6fa82a55a", "indicator--18a531d1-7984-422a-baa6-2c86b6ba93a5", "indicator--253e4bf9-0c5a-46cd-8843-4464006d55ed", "indicator--4b7ac358-80cd-498b-8fe9-d2ad510b96ec", "indicator--35fd26b3-e234-4283-a408-f43d78de00da", "indicator--cec03530-9c19-461b-ab0a-8cef985a718f", "indicator--341f86a8-7dfd-4c36-9850-817f9e2dce1e", "indicator--00abc31f-96cb-414d-bf14-c4482844d51b", "indicator--728fdaba-4bf9-4fc4-b2d2-321b46807fc7", "indicator--50f99a89-600a-4a9b-838c-d9346bde0183", "indicator--d87c72e9-5997-46c1-85cb-ad5b1905987d", "indicator--bd9e3f75-5fc0-43fa-b4b3-aff149635d00", "indicator--dc5606da-bbc2-4cd4-98cb-e459c6f49efd", "indicator--97b9f9ed-cb87-4f1f-8ab4-c3fca9e7f402", "indicator--9a49fc3a-69e2-4295-9be7-ef82f1a1176b", "indicator--8d6852be-07f5-4cdc-a6ed-bdf572091d73", "indicator--e6025083-79a5-41cb-a787-a3edd62e9659", "indicator--92c3d4b9-734e-47e9-9f80-481c9c891855", "indicator--5cd0c81d-ecb3-41d6-b0a8-ce43b6341dd8", "indicator--abe6b920-73e0-4635-a2fe-fa427d87c280", "indicator--c2d29391-2cb9-4866-a239-d7bc21c82c15", "indicator--28ccd28b-6813-4b00-ab1c-96466e807682", "indicator--9d1fd0ac-2919-4438-a474-e9db3745e3ef", "indicator--f9f6c7c8-23b6-48a9-b773-e4fc241357a3", "indicator--90b9bf9b-f7e0-4ed5-8e81-611a985dc1a9", "indicator--c98f61bf-5007-4695-a06b-30b7dbd76c1d", "indicator--e588e0b7-68b5-41ed-a1e0-996a70d597b9", "indicator--24a9dba3-43d8-4d79-b29e-39815622da65", "indicator--6f5427a3-95b5-4071-a59d-e2f230a151eb", "indicator--3cd12c0b-62b5-425d-9bb6-ec7b3ab0693c", "indicator--fd1c85a0-b469-48ec-9855-44f0f45f12cd", "indicator--bf1900b0-934b-4fb9-b1bd-87f8959aded1", "indicator--2af2844c-5978-4a8d-958a-bd25458f29a3", "indicator--658e3d30-cb99-433c-b1e7-404005c6723f", "indicator--b97c5735-384b-4bde-a323-3b6fa9db4fea", "indicator--7d66fa45-4dcf-4733-a47b-a56b22922299", "indicator--4b265bbf-55ad-4d8e-bd19-21aec398c6c3", "indicator--a73b0d23-b826-4284-adc6-59c8b6fdf5db", "indicator--882b13b6-02e3-457e-93c2-7cfab00ebdde", "indicator--dacfd1da-96e5-4088-95f0-de82e2cce121", "indicator--5d16dbaa-977c-4f09-86af-b0ba948333c9", "indicator--0f40282d-2aeb-4a87-a390-15d4170756b1", "indicator--ccbab703-5208-42c8-82b7-b7f2b250a758", "indicator--3036cd61-d467-4145-bcd0-a8b72dcf7471", "indicator--b371f1a0-cc52-4b6e-853b-b9e248830c5c", "indicator--466eca68-6901-43fd-8726-8f0782f0f277", "indicator--6b6f3b4e-9bf4-4748-9440-9c77fbc1b96e", "indicator--d774c90a-ddf6-4cab-a2c3-2e2bef106dfd", "indicator--752ac5ba-f65e-4fa8-b417-35ea864ad219", "indicator--b975b64c-0f30-413d-a75f-6a2b4355a463", "indicator--944d2a14-904b-4748-ad99-82b5e70932e4", "indicator--f071f2a0-2b5f-4055-9efa-61d3d2778b39", "indicator--132086c4-908b-41d1-88ac-674ac53fd3cc", "indicator--33183c1b-14c3-416a-9f7a-6be5d3239bb0", "indicator--ff6211c0-36c4-4463-87cd-4891c8d3afb0", "indicator--270c03d8-211e-4bd6-99f3-b42f75466e05", "indicator--520f430f-7db3-41e2-9937-fced22c46d09", "indicator--22027ab3-1030-46a8-bb9a-71bb25c92762", "indicator--b63daf5e-8a28-4bc6-bf94-2d24f5a4d092", "indicator--3a6c4a1f-3c97-4618-ac7c-2a22b5e4b30d", "indicator--5e8b2163-7889-4114-9953-3701f4ed4381", "indicator--79404583-0ac3-4df3-ae0b-f3fc059cee3c", "indicator--c179cc12-e260-47bd-9da0-d0307b94db10", "indicator--8e42f0ee-7bde-4535-abd8-572b32d3c9b8", "indicator--d05ba064-4e68-49fc-acf2-a33cf5d008de", "indicator--2eb23da7-50e6-481a-aed0-483d9285a688", "indicator--a1d6a12e-dd00-4d1c-993a-1930b9728b98", "indicator--46fca769-9ac2-4ad5-be30-796d7bc388cc", "indicator--ae3201af-97e7-4eee-8fca-58226fc1914a", "indicator--ecd94e61-8c06-4ffd-80f1-9576bebe11da", "indicator--6b13bdae-084a-4887-8eea-316b20347776", "indicator--a026d51a-6a92-4692-9bc2-fd27025a83e9", "indicator--96d758c5-27c5-4992-a784-52a71c4e5b13", "indicator--c935fc39-e1ec-4a65-bd8c-0c1eaa2758a0", "indicator--c4dbb7aa-7b15-45f0-814d-180f99710afe", "indicator--77a80601-9c00-45ac-88cf-bcace3a4e991", "indicator--932d4305-5543-460a-90be-08cb3811d5ba", "indicator--24319215-4d41-45bf-bd62-04f970112ad0", "indicator--e8d6d8ac-9d70-4743-94fb-e7c6accee9c1", "indicator--2e971578-9546-4fde-8e08-b4f6156a8264", "indicator--779fca0b-5d3e-45f3-9cea-2aadd560506c", "indicator--773bb91d-148d-4ffe-ba3e-517668655e8c", "indicator--46542607-0ca7-4e29-9c63-09bcd933a13a", "indicator--126080b9-9e05-4203-a968-b44631fd0c4d", "indicator--ac74cceb-0f28-4632-a712-8e3de69bb75b", "indicator--83517df2-eb3c-4348-b3a7-30c6a2896371", "indicator--0af3781b-b6c4-4bdb-ac7c-cd9998b62b27", "indicator--fff88a3c-b1ab-49e9-82f8-c984a873d14e", "indicator--244f14f4-ef51-4114-976e-2095d1fdcf6e", "indicator--49278d27-c2c5-437d-8c9d-def9920665fd", "indicator--58ec15c3-a147-4d47-9461-b2120a4a7e7a", "indicator--cdffedfd-331c-4d1d-9b9e-5c257004c156", "indicator--e8c77c28-e4c0-49b4-bba9-8d3de5cce360", "indicator--77a0c12c-9479-4c95-b519-00c02e2f4a78", "indicator--f2e016af-143a-47f3-8a9b-1c222a4d79a4", "indicator--c57a7f13-326b-41eb-b2cf-9b8c200dd50a", "indicator--b8224cee-7fbc-4176-ad2e-2f345fe18f06", "indicator--7ce44d0c-fafc-4aeb-9a5d-ec40569ccbea", "indicator--89993209-6c13-40eb-91ce-ea3e192be6a4", "indicator--5330d4e9-58b1-4e53-a0b9-3b590e4d36b3", "indicator--25e9d6d7-15a3-4ab5-991e-4e09eb97712f", "indicator--8faccc96-3568-4972-8695-756ed3ee3d13", "indicator--c8f4b939-d858-42c1-8762-77bd77debc23", "indicator--9cb544d5-34b0-4c78-a8a5-708b7cbdee7a", "indicator--b98ac3db-d9f6-4080-8916-dbd0efbef426", "indicator--9fedd643-cf41-4d55-b1a5-620981a846c3", "indicator--30b9881f-d39e-4dbd-95e9-77b2541ab9f2", "indicator--5d0ed8c4-a18a-4ce2-9d93-c9de3bd41558", "indicator--6f5688a8-80fa-434d-83f3-e0134fe6ebdc", "indicator--70ef660e-3c41-42a1-bd4f-2e4fdee335fc", "indicator--d9c2de56-5f1b-472d-bc10-596987a99dcf", "indicator--e2dd8a7c-9c5d-40c2-8707-e8e306b15849", "indicator--8bcb617e-c91e-4e0d-bcb6-4818cff20092", "indicator--cbc1a206-dae0-4e0e-91b0-da0b2bcbe195", "indicator--b9a36c04-6f21-4f8b-b10c-8f7af22ef879", "indicator--3985fa3d-eef3-40a9-84ae-05d31e07216b", "indicator--fbfdb33b-df1c-4d16-a8c9-f4be27fdeef1", "indicator--c8e75764-ed15-4723-98ba-5c2e2e947681", "indicator--74a4e184-8c77-48bf-9184-001740bfcc58", "indicator--afe71cf9-7bbc-4c49-917d-9181fce27a9f", "indicator--b2b7c437-8b73-4c83-baab-2ff8f31a24ae", "indicator--1171d715-d41d-41b3-bd5c-fa2120ed2608", "indicator--c505bcdd-797f-409c-a33a-043d5a71ec4a", "indicator--2bc78208-efd1-4138-af19-e29f8fc7d9b0", "indicator--f8d01a58-105d-4c5b-b904-90bc24317a7c", "indicator--90b1ecbf-5d6a-4ed8-b04b-05fa729513aa", "indicator--0538f1c4-7ba9-44ac-8aff-2747ed774ef4", "indicator--ab73411e-235a-41a9-a08f-fb326729b1c3", "indicator--69c28f1e-6dce-4b02-b3d3-60af485e8bec", "indicator--ea683be1-3a8f-4f1d-a2f9-a9ae3874b887", "indicator--ddab99e6-10f6-4347-9192-7f011829f37c", "indicator--1aa73400-567b-41a4-b057-5b99b02986fb", "indicator--6eb6c6d3-ef60-4b39-b4c8-31923caea342", "indicator--7f99febb-8b40-448f-8be8-da8dec0040ca", "relationship--4f54798a-dad7-480e-a1ef-041977c2cecf", "relationship--07d6c754-9eea-4b21-8c57-c5fd68733f4e", "indicator--045c2c04-eb45-4f89-b184-242ca6d40499", "indicator--dc5b2551-abbd-4f39-8e03-a09b6fb608ea", "relationship--7cde43c6-76e5-41d3-8572-5dd8c4852350", "relationship--d3c2bb7e-ee5b-41c2-bc47-34b22680d1ab", "indicator--277a5440-e6e4-47d3-b312-84c683a0ba53", "indicator--44c9005b-340c-4e86-9b70-980ac0927caa", "indicator--2498c7c4-8d2e-4c9e-b6da-8d8cb29d2a62", "indicator--dea5445a-89d0-4efb-9db9-27b18860feb2", "indicator--c56404c5-430b-4b7f-a44a-1d6723a8e875", "indicator--7b8ee924-a65b-4810-8adf-a9d7e66b41cb", "indicator--9fcd7fba-e84c-4609-b823-cc41d3d85fbd", "indicator--a67f0b95-5a66-480b-83ab-becd57a3fd0d", "indicator--475bc9d5-5580-4260-af1e-378126c2ff35", "indicator--1ffa6bcb-a1bf-45f9-b590-2fd92e566a31", "indicator--b7f12f7a-d380-43a8-8962-7c96c0d1c75b", "indicator--5a21e47f-44de-434b-9959-27a6ac88fa42", "indicator--08baca71-ef22-49fc-ae73-a1091b6d9ce0", "indicator--2154b364-e502-4299-bf02-576905cc56d4", "indicator--e0b2f410-6e29-4bd4-9785-20db211e3d0c", "indicator--286494bf-1d57-474f-8572-0df400bbccb6", "indicator--26d00995-2401-47e4-8391-fdac34d36c82", "indicator--c7ff957c-cf55-469d-b27f-829f9a576a9b", "indicator--dbc0dd24-be87-4adc-b9f0-16335a3d34dd", "indicator--217be6d0-1905-487f-88d7-23d49499596f", "indicator--7d8a3457-89ea-49fc-9bb3-89428b2be741", "indicator--f998e869-1702-4a04-b436-6d87dd15bab8", "indicator--9b1eb71b-5316-463c-92bf-dab8c7c1bc4a", "indicator--47e9fe14-f6a3-4571-a979-8803830f9587", "indicator--67d69b93-a945-40d2-84b4-426e83a35b4a", "indicator--71cc8d2b-ef96-465a-917c-0f6ee0abeeef", "indicator--73672795-fefa-4c8f-b7c8-0c8475f05fd8", "indicator--59923efb-dc2e-4bb1-9794-bec02a7b67b4", "indicator--6bf83732-8313-4e1b-addf-a92371077cca", "indicator--7773f9fc-0c40-40dc-a773-5c8817386b38", "indicator--87660468-4300-4f69-b3e1-22cbad50d88d", "indicator--b7240924-625b-4912-a41e-079aa848228a", "indicator--d49db4e7-e0d5-4c44-848e-b06d7cbe080e", "indicator--4e4b5958-ae17-4c10-9fc8-7c4f292ce027", "indicator--fdfc6d11-f8e9-494c-9ceb-714ab42d0354", "indicator--c4b65eab-9d55-42f5-96cc-8449627e81d3", "indicator--41bd21ef-9b09-48d4-b8de-66a99352669d", "indicator--5a2316a8-3c91-4da6-a5c4-c479e9bc790e", "indicator--ea72efe5-5950-438c-bd70-3771bd5cf9c3", "indicator--321a67b9-6ce1-4fb5-b4f0-f90386af2829", "indicator--cc6e207d-3300-4db4-8c38-7cafd0f04042", "indicator--f02504db-df1f-4aeb-89fe-27f38e8c4a33", "indicator--36e8de8d-34c0-48c4-a3db-aa010cfe21e6", "indicator--f00f47f1-5d6b-47eb-a08a-fb28ee4a6cdb", "indicator--afa2f532-85bf-4f47-8d6c-0f33fc265fe6", "indicator--456b04c9-0204-4069-927f-245e850a5ed8", "indicator--6b5f091f-b2b2-4de1-9061-6372f70155c1", "indicator--ac3151cc-8070-4593-afe8-0e2e7c719e3b", "indicator--2221b1d7-5410-4fb5-b99b-a876a2074f0b", "indicator--958584fa-babd-45e0-9c5a-3da4e377bcab", "indicator--9a40919b-fe08-4596-b7df-44d4aa59fb7f", "indicator--8040508e-ba21-42c3-b5ec-8c7e9f8c6fcb", "indicator--64328c6c-d148-4b3e-beb3-27db7c95e355", "indicator--4fa59e54-1bba-4c20-9d6f-f11cc2dc8fc8", "indicator--18a5dced-56d4-4461-94b5-232a1094644d", "indicator--62d57a6c-058d-4729-a26f-65dd3d0c172f", "indicator--279051d3-6a0e-4245-ac58-726ce4398e4f", "indicator--ee027ec2-3296-4a45-821e-706857dffef1", "indicator--6581ecbc-31dd-41a7-900f-bf36f35cfd5f", "indicator--1475a8ad-0c48-4f49-9b1e-7d31fc4286b1", "indicator--84536afa-f220-4e86-b0a4-807b274fe8ee", "indicator--5e039e0d-0ba0-4784-a397-997e489a2721", "indicator--ccd33465-d97f-416d-9238-d18e8467e73c", "indicator--d261050f-e247-4cad-8240-9a0578f345c4", "indicator--6bfe04d8-ce7d-4859-95d2-0cc545f76009", "indicator--3cbb942d-2628-40de-92d5-0932abf7e24b", "indicator--a9eeb920-ce7b-4a57-a197-cdf291377bdb", "indicator--90297b04-cc06-42a8-9560-52284693046b", "indicator--9b114bfc-2c14-4bfa-ab67-724953a72950", "indicator--5ff968cd-bd5e-4361-842f-d9bbd65c2928", "indicator--d0f6247b-05fe-4aab-a563-2cf6d4964d2a", "indicator--e8beee1d-2093-4d48-ac7e-7f1412fbe593", "indicator--39ec13a4-f483-4d22-9143-f6579bbbeaef", "indicator--5cce525a-4d25-4644-a91c-43ead5387266", "indicator--dc3f6229-f717-4cf7-b9b5-ae0da372d41c", "indicator--fcbc6532-cacb-4a5f-bfc9-6c7787d6e6fb", "indicator--e1aa322d-c129-4fc7-bbb1-a08962c943a7", "indicator--7be0f160-abe7-493d-a638-de2f9910edd9", "indicator--cf0ced12-4a4b-41d1-bb99-8c484b54aeff", "indicator--86e89918-c653-4b7d-b562-2e2e9e8c984e", "indicator--3acc0a53-713e-4dfb-be52-81940fb69769", "indicator--3d3dcacf-07cd-44dd-b2ec-6810c49daf19", "indicator--1c39f2e1-3e7f-4f15-bdae-4bec4a6c5379", "indicator--2327d372-b3f7-4a00-bfd4-d34c5cc2040f", "indicator--793eaaa6-03bb-48b7-bf36-15ff27a2a9ef", "indicator--258b387b-1e78-47e4-b4fa-46d234ea291e", "indicator--2a14c893-de36-4f40-8509-313793444cf9", "indicator--a568895e-a774-413b-add5-5950cca423af", "indicator--8c02db9f-7944-40ab-8243-3c4cae7da650", "indicator--480b0f59-e9c3-43cf-97fa-004519166aba", "indicator--23620a0d-46c0-40f5-afcd-cee14198b0b8", "indicator--4bf2c08b-397b-4d97-af73-d672c7e1f48e", "indicator--8a246640-3a8a-4ff0-9300-3901327b4d97", "indicator--3850956b-f6a1-46c1-9602-051b163e8918", "indicator--c30ea221-3123-483c-882e-a73d791dea0d", "indicator--41f5ad04-27ec-47b8-b20f-6954348dd36a", "indicator--50543e8d-4619-4730-a227-b2fe0f7c465c", "indicator--88270556-57aa-4c07-a9b1-3794b74a3a23", "indicator--77f8e2ff-3b61-4886-bb0d-29112626aaf5", "indicator--7448d375-023b-4ad3-9bd0-e182a755de6f", "indicator--dae982f8-22a5-4997-8fe3-6e24b36563a5", "indicator--fa868ccc-8c7b-44ce-9618-0d1a68da3ffa", "indicator--076b0ded-ab36-4c5f-ab88-73970be6ee53", "indicator--e02bedc9-a204-443f-87b5-d9b4cf33ee87", "indicator--9c6793e6-0e19-4e24-9486-49ee1827a504", "indicator--54420774-b38e-49e4-b8f0-398b3a1b1693", "indicator--c5d72172-10ed-4f44-b27b-9fb3356b5390", "indicator--a0f6e79d-e32b-4440-84ed-ad815b3467a8", "indicator--82d8acc3-33c1-463d-a2de-81cc70a4fa85", "indicator--adb1275f-1dc8-432b-87e4-7befd1907edb", "indicator--ad1128cf-409a-4f5b-a75d-6ba5dbb4b0cb", "indicator--c2b633c2-4904-4202-9e90-246ab41f6085", "indicator--393365ac-cd27-459a-9c0c-58230cc78e53", "indicator--a535df69-e562-43dc-9fae-e4c2a603ae60", "indicator--eb6565d3-eeaf-4e93-8360-160945ac3bd3", "indicator--8edd3d3f-f914-4197-9e8d-bab297fd5215", "indicator--34774b4a-15c7-4d13-987d-4332dfdb79d3", "indicator--4ba30eac-6b63-4974-b5ae-e580db9f64bc", "indicator--cdb7972a-d482-4d9a-953a-2c51b3dea20d", "indicator--287766ed-7ce0-496d-8889-3c31fb2dd310", "indicator--7f74ccf3-3b8e-455d-8cac-0f61f0f21bc3", "indicator--3ef64c63-f340-4e32-87c2-973eace1285b", "indicator--c1806a26-54d4-46a0-8b88-66e2a24d43b9", "indicator--586e7c25-f42b-4578-a371-be28f77c6088", "indicator--64ee683f-e6d7-49eb-b878-78a996f7363d", "indicator--7887b53d-9a98-4426-9813-6686c68c17ce", "indicator--0eecd75d-dfed-499c-a02c-fdf9cc88b636", "indicator--44b5f55a-1e27-4534-87b9-01551f4ea535", "indicator--d54cd6d6-34fe-46bf-8bd5-d04cca9b172c", "indicator--732b812f-3876-43af-8eab-259a647e7d0a", "indicator--f07bd360-5a79-489e-808f-c77b25f13394", "indicator--ec2757bc-3701-46b5-bb42-d669720452d5", "indicator--4648610c-2ef7-4896-bfec-485d86eda650", "indicator--970416f7-5360-4118-80b6-41865a52a180", "indicator--4308671a-c2fa-4cb0-86cd-1d7a1210f3c8", "indicator--5a82a308-e6ab-43ea-a987-7d110a603c19", "indicator--8b9cfafb-97d5-4530-82f2-609234c2fede", "indicator--2d085cf2-9000-4d86-9815-659938fae094", "indicator--e6aefad1-6a19-4820-8e2a-d4956948861d", "indicator--935254b9-bd2a-4ca2-82ff-86de3186f975", "indicator--0030141a-9dfd-40e8-9579-ed78fbd15cc7", "indicator--545db6b8-f70b-4cab-b698-3f27cb5784ed", "indicator--bfb52fa9-967e-4d89-b405-7d75dc2d82df", "indicator--f8613238-7517-4a39-bce8-3e600092d3de", "indicator--c524e58f-614a-4fee-b724-6e3b90547f11", "indicator--9263d58b-2cfe-4537-8d84-38ac0e9d1b68", "indicator--9340b737-3774-4a3c-acd3-48aa4a472678", "indicator--1b043342-9fff-46b9-ab4a-70d3afdd4b0e", "indicator--1f88ff16-e1de-49b0-8a6b-863edd84f18a", "indicator--d73d9441-3c7b-4530-99f3-ed17db16c1c8", "indicator--2d686868-4dfb-4155-b489-206b3828cdad", "indicator--9c537d3b-f06f-4882-8fda-08d2f9e17d40", "indicator--0b46ba76-2686-4279-b5a0-cee12b742d18", "indicator--1b971a8a-0962-4b5e-a1fe-85082ce51821", "indicator--f89a1ff3-556c-4ce2-8159-ae07148fee8b", "indicator--e2b45282-ecb7-4007-ab04-480d1bf03b66", "indicator--c350a60e-7ee8-4c59-bc70-f013c9c0bc09", "indicator--d03528cb-c6b3-4216-aa99-dfbac69e0cca", "indicator--7fb755b2-f033-4aca-9e9a-ec57f6e0a07e", "indicator--b8f98417-1728-4bbe-890b-853fef7b9bca", "indicator--9b915c90-6092-4309-95b1-8491812a9e7c", "indicator--3100edba-ac5b-4447-8b06-fad7071dca5c", "indicator--c5ff2036-c439-46dd-acb4-3c18d589e7ee", "indicator--4e18670c-19b7-41b3-84d9-46df12667b46", "indicator--893bf704-e8c5-4636-a065-c10d4c516982", "indicator--216d3933-820d-4218-8f7b-d5a893cad308", "indicator--cc5887d0-ebb4-4923-885f-ec74f3a97f01", "relationship--41810c2d-f8ec-43ad-b558-3522ec66ff04", "relationship--ccbbea63-4550-4467-b624-ee9ee8d59c96", "relationship--a78519b2-0243-47ea-8a54-2c7b55bc5e76", "indicator--91e79b34-3cf0-4165-9568-89fcde7e75dd", "relationship--ee6bbb06-68cb-4b93-af78-0d3b1ac94762", "relationship--744eed6b-c4ee-49ae-b64f-02b6cdab2cc5", "relationship--ac3273df-ecaa-45e6-8ca0-11fc58a73d75", "relationship--6d2054e5-894b-45e0-b52c-c926f39b90bb", "indicator--048cca84-25cc-4364-908f-64e0f0e0b757", "indicator--ebd38567-9b54-4c55-b0e5-c1eec688a5b7", "indicator--3f275cc1-2f7b-4d98-8210-d022c71ae490", "indicator--244e338f-a89b-4123-9f45-7204eb5bce11", "indicator--869c5c10-5198-4c0e-a801-fd5cadc2da24", "indicator--6bb44fb8-24de-47b6-86c5-5cbae1d25774", "indicator--017dbb24-af93-4345-b144-d8d02e6833a0", "indicator--ef1874e3-d664-40e0-a3e7-21b559a380bd", "indicator--91036be3-dfc8-42ad-a3eb-d73be2964099", "indicator--842e3edf-40fe-4a1b-95f0-4ccb6f256227", "relationship--7f6423b6-241e-42e7-ad4d-8e9ca99812e0", "relationship--1290f56d-ccec-4b0f-85ef-fb8f2b922263", "relationship--ff17b8ad-b870-4720-b381-e6ce2dae84f1", "relationship--6736b37e-d975-4fc2-990c-8025759587f2", "relationship--54469b36-1e57-4808-b9bf-27882322af9a", "relationship--1ece81d9-5cba-4dcc-8a2f-73318fe54a40", "indicator--60d4b4de-3a47-4569-b274-d53026bacb30", "relationship--464ad3b3-1c53-4bd9-b022-a111d5633ea1", "relationship--e7c145c0-5ca0-4c46-9025-5fd8003871fa", "relationship--aa913deb-201b-45ae-be21-44f41071cb5b", "indicator--2d885b79-4e32-40e8-90da-c2c45098c049", "relationship--1b179337-e153-45e2-8073-e2af037d6138", "relationship--aeefda26-f79e-4c8c-8f6d-eb690f31f25d", "relationship--42bc7d3a-e536-4050-b623-b8e5fca1d374", "relationship--0b2486f2-6d31-40e9-aacb-2db52cde5846", "indicator--c646a606-4d7f-4cec-9143-12d6244db0e7", "indicator--ebcae3ab-bc95-4da5-b01b-b497c24d501a", "indicator--f75565d7-e1f5-4c31-b667-d6f2ebb3c65a", "indicator--98253902-3583-4b5c-8c44-87b40b8d005b", "indicator--ce532fcc-c143-4a1a-9d6e-45596893aee5", "indicator--0ce80e90-284f-47e6-b301-0a2b8e99f265", "indicator--504424ae-fc63-4a34-957e-26e326eb1bc4", "indicator--389861b4-35b4-4231-a74f-f35780ee21c7", "indicator--6d09d30d-8459-4ca2-95a5-045647adc636", "indicator--04475732-c0a9-4cb3-8c7b-157a68b7df01", "indicator--748c9255-7c04-464b-9f02-51de2e032412", "relationship--3437be1a-fffb-4ac6-b531-f19289cf5a42", "relationship--b1db7772-f5b4-4988-809d-cfd927431725", "relationship--c6da48ad-a809-4540-81cb-bf5f6dca614e", "relationship--46f94e2f-8105-4de7-b304-42c38a4aa23f", "indicator--5236e1d6-8627-4f98-9f7e-03bda3f9a205", "indicator--beb00493-9f4f-4ab7-b175-1cfa0df4f1dd", "relationship--4ff060b9-4721-4bb7-ade2-e7ae0dbdd9e1", "relationship--6c72efec-0175-4ea2-8d0b-183ce76794d9", "relationship--326ef009-d972-45a4-83ad-55e59390f0b9", "relationship--26044f8d-6993-4233-ac0e-787a81199055", "indicator--f8a548c8-966b-456e-b247-da6c7a56757b", "indicator--7cd436d4-b5e4-4e80-b02d-0519d07fe99a", "indicator--eacfbc10-0b05-4a4a-9e75-d731d3bf94ee", "indicator--f017a523-cd8f-4c9a-be9b-074a4584ba54", "indicator--69345aed-7fb8-456d-a6bb-17a0bd967993", "relationship--a4d1928e-0e79-4da6-aefa-642726171c3e", "relationship--5187405d-e312-49f9-9263-3e5a1b68f377", "relationship--2824b737-b8d8-4471-9116-1cd0dbdb6045", "relationship--21020780-f98c-4203-b4dc-44f18858c3dd", "indicator--3648ce2b-8a8d-469e-984e-72727b954b47", "relationship--d227ed66-76c2-4f29-a4b1-ce502525ce02", "relationship--3502b619-b256-4767-ac1e-007463156654", "relationship--b5de27fb-227e-4f1c-9871-4eda8de9974b", "relationship--19ecbfb8-1681-4150-b989-f5a467583ffc", "indicator--333f0e5d-8af4-4264-8f4c-967aea53fe62", "indicator--fae12888-a7f3-49c6-90ea-4e3ae47d56cf", "indicator--eb26b447-4711-4a82-8d75-71c42d451fb2", "indicator--6b8c5dce-1ed1-463a-98ac-7dfb7ba75a86", "indicator--11e24d18-c3e6-454b-80a9-1fcc3c5b9297", "indicator--45a8f887-1fec-45a1-a2b6-8f7002316254", "indicator--30f42e08-216c-4822-a50d-cfdca9e44f3a", "indicator--2de0a9d7-23e3-40d5-b08f-123c2132feeb", "indicator--6e9a77d5-b91b-417b-826d-6eae0fe10545", "indicator--3d14d3cd-950f-48a2-81f4-711a79ebeafa", "indicator--3db8cb11-cfc4-4d87-9a2f-2cadb2585867", "indicator--584b18a5-a78c-4c9d-8682-d1efa8f5da04", "indicator--421357fd-72a0-439f-98f2-ad67525362e2", "relationship--30ee9152-a291-49e2-83bc-5cdf275fd5c4", "relationship--93402526-5885-49bb-9fe5-37b4cb2edf1d", "relationship--6d76c0ee-e636-4e86-bb19-6fa429132510", "relationship--fc7ccb3e-c63f-4ce3-8e57-16ef3c5e73e6", "indicator--ee64c3f8-acfd-4ca6-9f90-b94bfb6796db", "relationship--f126e72f-e943-4589-b48e-7700812ba520", "relationship--6919d9c3-11af-4e08-a027-5dc525ed427d", "relationship--20f36650-c1ad-4595-a2d6-c78257fc7be3", "relationship--7463ec96-b2b2-49f0-9faa-4b56e94953c3", "indicator--199abe64-aa17-40d3-ad4a-cb90b0eca726", "indicator--f9dcddb7-ccd0-4136-870f-797addb4a9aa", "indicator--948318f7-52da-4915-8c4b-4d289d44fbcd", "indicator--73971b95-31a6-4181-835f-8b5236224068", "indicator--214e94a0-454f-4c4a-bbda-5e81ad1faac7", "indicator--6a67138e-bf4a-41fe-9f15-0f6de4f10fbc", "indicator--8d62bffc-41df-40ea-9c01-5c9a171db018", "indicator--93f0d5b7-481c-4fc4-a8aa-11484e68fad1", "indicator--4d8cd8d9-c2a2-4317-84e1-951726d69e1b", "indicator--9bfd815f-9574-4fe0-a18b-6b7369622afe", "indicator--c031f7d9-9a2a-45be-8d0a-d4b8c288b2f0", "indicator--23e20f63-73f3-436c-8af0-048ac8b752b2", "indicator--0ade4c3f-2fe8-4fa4-ae79-beb318e0cd13", "indicator--6e513ad7-7315-42d5-9423-6540d94d1102", "relationship--6d84b1eb-9731-4c37-b858-f2bb2e292b07", "relationship--0d6a741a-0227-4d2d-aa9a-76251061e427", "relationship--4e68df52-7755-4181-86f2-b92d69f7984d", "relationship--a6ae29b9-fb51-4684-af82-d8cf5e11a6e2", "relationship--3e72ee25-3fa1-4ac7-99c1-cc86d9fe2fda", "indicator--f1cc61c7-e45f-45bd-9868-b7956cda1218", "indicator--6f5bcfd3-5e5c-41aa-9f2e-951def3ab45f", "indicator--457d9081-aeae-4edf-a5c7-789198ac1920", "indicator--5cc8f9b5-1bc8-40a9-9e9d-912b70ed7dec", "indicator--258ec422-8a98-4838-b21b-92c801dc0d74", "indicator--4d607af2-8a13-446e-976d-c77179057745", "indicator--586d1e59-bad9-4cf7-a649-1ac5a2aa2de1", "relationship--8f5158b4-755f-4978-a03e-c274b2e04463", "relationship--aa1fa21f-550e-4cfa-85d5-ff8ac99fee36", "relationship--baf4e8ff-a037-4726-9199-549b1146cf69", "relationship--1b78c82e-a4b9-45be-bedc-87541c007a0d", "indicator--5b907087-6ecb-4ad4-92a6-e04ef522ad6f", "indicator--da2727b5-e9b2-4cbe-9b0f-9a54fb49cc1b", "indicator--abd03115-c792-4f6d-838f-faeccc82d677", "indicator--f7e3d176-16b0-4966-8b7e-f62ed2cebfdd", "indicator--8e4af88b-cb3d-42f3-96b1-2d99027bbad1", "indicator--f19c03df-7ba5-4bf9-b37d-e7ea9a26f818", "indicator--06f03f9d-b759-4ec7-b1ed-0108bd345492", "indicator--93a44013-d508-4fa8-981f-a601cbd0026c", "indicator--a104f5de-e7f0-420e-9001-fbf1f7578690", "indicator--22c32214-8f49-43cc-aa43-64826155a602", "indicator--800a6f75-612d-47b7-8673-ff791a416e66", "indicator--32af3c8d-db66-4969-b021-810fd5ad60ab", "indicator--6f7d45ba-2750-4d78-b49c-5fceb984726d", "indicator--b641977a-92a1-4794-ba7f-02092a387702", "indicator--18c7f799-b2f6-402b-82a2-3bb58d031763", "indicator--cdf968a0-ca69-46e5-8f2c-1fca3648abad", "indicator--c3a8459f-3f49-4141-acbd-f169cc413e60", "indicator--7220be16-4cbb-4bcc-baf7-e097992d8a0f", "indicator--53e579cc-8b4c-4fb4-b18e-e23fc400754a", "indicator--e3931040-8925-47e7-a3d2-a7f1d79385f6", "indicator--f68d59f8-9488-45c3-b328-7fa8317f57e8", "indicator--78775456-da11-4c50-92cc-06411f10c219", "indicator--4b05675f-b0ba-4dca-970f-fe1d821e9439", "indicator--8d1913b4-4653-4555-a9a8-ea633cbeb537", "indicator--bfb32d62-5ca3-4779-b7d2-06e9893b9c76", "indicator--f4b62c10-5f3d-4b61-93d8-aa3eae5bf6d6", "indicator--a150c40d-4cba-4bbf-a02f-11177342605e", "indicator--ba879b84-aa4e-4612-af7f-c11e29912a77", "indicator--1b80e0d3-1af6-4187-9903-41644a7dbdf1", "indicator--a099e51f-d240-465b-9945-415daac740a7", "indicator--6a5970d4-b834-4098-b0cb-75db0601db84", "indicator--87865f58-b97b-443b-8b76-f52b8a32209b", "indicator--adb1375d-1d99-4c90-8c0f-544693481832", "indicator--f1f27904-26f6-4690-a16a-591f34a2b1ec", "indicator--c26d287f-bde5-4aaa-b829-c94b2b00c58c", "indicator--3507c625-ad57-47e3-a5f3-2ecf227bea53", "indicator--12d77efa-c29f-460e-ba94-498f09e78cfc", "indicator--573d5e96-d6b4-4468-a802-17805dbecdb3", "indicator--bfe15b88-3740-4ff5-8464-1ddcc3180dab", "indicator--429bf55e-a8a9-4062-be35-bfbfcc7f4d12", "indicator--8c2649a4-be84-4cb4-95c1-e9549ec1bcbd", "indicator--985e3590-0323-419b-9769-a11d2a7b15f3", "indicator--c11f4b43-5c73-4f02-9c58-6f6440afc2cb", "indicator--41420d06-74ab-4402-ba99-c395382b259f", "indicator--48544fd8-c8b4-4ed4-92fd-f0d0f638c8e1", "indicator--49cfd67c-894b-4160-811c-a683dcfed72d", "indicator--2a6a3b3a-e953-42dc-8cfc-70264c6f8dbd", "indicator--859be43e-8a95-475b-876a-b6831e86d231", "indicator--2d868e2e-9216-401e-b9f2-056998e07c06", "indicator--1844c1c1-ffdf-4c5c-be0c-d2f9a9e53cfb", "indicator--ffbf8020-fc77-43a6-b1cf-b45819c17e6e", "indicator--58de0e81-c7a7-46fc-a100-abf71a946a68", "indicator--ee285ffe-42fe-4955-bec3-b12f4109355b", "indicator--d45fb188-dab8-4337-8a62-64d5a25d1c51", "indicator--d96a364c-23d4-4192-a500-5f15c7450cc6", "indicator--a4cba030-849a-4571-b509-a7cea2c54f03", "indicator--d67b17bf-9bef-4fd5-99ef-fed2e06757df", "indicator--4357bd45-162a-43a8-868e-89fb55c21671", "indicator--6933c9cd-38b4-4667-bc3d-a21c184972b1", "indicator--46293bd2-655b-4687-948b-14a7a3face21", "indicator--ebcb2000-1eb0-4cbc-a765-ccfda696d4dc", "indicator--854eded8-aeae-4030-b131-a4db5f6849bb", "indicator--5525cd02-5424-4fb9-8e00-dc7bea3e8e71", "indicator--7ff87e93-c218-4028-a06e-c4f9dd32da3c", "indicator--0c8b3778-5df7-4863-85ac-15787400199f", "indicator--041f2f48-08bb-4016-8b28-8abde45905f1", "indicator--69de5fff-da3c-4768-af07-f67c8eb6241e", "indicator--8d922942-9b3d-4870-8cc0-c13fad06ec67", "indicator--52e46203-90d6-4aa8-90cb-b93a8f93d599", "indicator--6289d7f0-2ba5-4213-9c2f-0339e330325d", "indicator--3b2cf61c-ed37-44ab-a68b-e577ba96de00", "indicator--b261e2e5-caaa-4c52-a68f-0b346c8da331", "indicator--87e0d55b-d336-4000-8ccc-5cfe929adcd2", "indicator--afb84fd0-20a4-4e09-b874-10bc7f3765e3", "indicator--7ad884b2-97c6-41ce-ad6b-4f4b6facb20b", "indicator--7464fcb3-6d9e-4e74-b758-fcb3225b564d", "indicator--581de3d6-729b-4254-988a-c89f8b9bba4d", "indicator--2e9ead63-504a-4daa-9a10-c1aca6e34147", "indicator--8f7b287e-010d-4da6-8cc0-0bd41c12217f", "indicator--5537ba12-5f9a-4846-8259-9b591f3dd46c", "indicator--aa503286-4652-464c-803e-e03954a12021", "indicator--dbb88caa-e8a3-4de7-ab5f-0d814c98a7c6", "indicator--9a8a9378-917f-4890-99a5-50ad6fbbd84b", "indicator--15a99710-3da3-4ec9-b2d6-fa8c75c98c0f", "indicator--34c57764-b7dd-4f4b-a82f-5522f6c5c91a", "indicator--a0df71b0-129f-47df-b4af-f213243ce354", "indicator--49846117-6b93-40d6-8642-be6fba551655", "indicator--79936b0d-3cb8-4cbf-80df-6dbec69b1f7b", "indicator--aac45760-cc61-4508-ba4a-37fdcad5d963", "indicator--752c6b00-5f7d-4cb8-ae02-907b25a78a3e", "indicator--0229e8ad-92ae-499a-94a9-d4ee740f12e0", "indicator--8bcce6b1-2fcb-4b3c-9128-515f8a54aacb", "indicator--e0ebe0b1-5838-42a3-a266-e8ca0829edcb", "indicator--873e9e93-ffa1-4dd9-83c8-77e7a209efe2", "indicator--cd8669da-9d88-47e7-bac0-75ebb9589578", "indicator--93f739ac-f6fc-45b5-a97c-c4364c531731", "indicator--72ea47ab-44aa-46e8-8404-6418c02547cd", "indicator--6a6c35ee-5895-4b68-9b95-c5270b98de39", "relationship--5d14ea2c-27bc-4bae-a124-14afaed0b798", "relationship--d62dd68f-78ce-42ff-95f2-8b6438ea261a", "relationship--65fb9df9-bdff-440d-866a-517707383c8f", "indicator--02abe708-6827-4269-bd3a-bda623c5b899", "indicator--d334eb46-5db3-47af-af7d-9e34eab736c2", "relationship--c96fa4a0-acfd-4f12-9418-98257f500571", "relationship--1d165fa6-b6a5-41ca-87c4-826b5b387013", "relationship--84249024-e699-4536-b83c-d8222f95d296", "indicator--1d584807-6528-40fd-b4be-28848c67b32b", "indicator--1bc52afb-21e9-4f35-bed9-8a6a8d607bbe", "indicator--8574cb74-82a9-4edb-ab19-5f529d725c6b", "indicator--2d56cf7a-b6f1-4136-abef-d858910e0ce2", "indicator--c9d3f085-2a4b-4440-9283-a7713956bd9c", "indicator--efe84bb0-51be-431a-ae75-4bd5093e259b", "indicator--730b04c7-7baf-4773-806f-0400583604b0", "indicator--79b48d21-069d-46dd-831d-056db06b2c5b", "indicator--8a0b6787-c663-4afc-94e0-2f5c6044bd7d", "indicator--ebc297d8-be8b-48ab-a9f1-7a8852ff9381", "indicator--cb297e6c-0e4e-4707-944c-c62b83c7bdb8", "indicator--af2bcb10-3954-4e2e-8120-5355a743a589", "indicator--ca5aec07-7098-4c52-814f-9baa4d544cd1", "indicator--b17752ad-9056-41b0-9339-ee609974d9c8", "indicator--b2b40b5a-9ed6-4cbf-9ea1-253d230d094c", "indicator--dc668467-8c7a-4cf1-b8ec-7a1b22c2698c", "indicator--86941e4d-8643-40d6-99d8-152246bc96c2", "indicator--eec2ecb4-640b-4580-be11-6f645d40cf96", "indicator--21ea0d27-6910-4d48-aa52-89704c24a4c4", "indicator--16ea797c-f270-493c-934f-afc3ef01c602", "indicator--4c3930d8-3812-4eac-abf0-4d319eb4667d", "indicator--f0d5715f-8ce2-4d78-b7a2-8559cc25f38d", "indicator--8aa4efd0-1dbc-4428-82e8-ce6ac0a04588", "indicator--a91396fe-63f3-4c47-b48b-8b2a7eb6af27", "indicator--e58d46ac-0216-4e58-b961-1c37753f68da", "indicator--4051a2ec-10ad-42b9-a038-1e211c7c2f53", "indicator--da2a7539-a83e-4d11-8945-3b215cad0964", "indicator--3f6a7844-b25f-4133-95aa-d3ff83f61cbf", "indicator--74185e05-78c2-4470-b08f-bbb030739e74", "indicator--9a8b7d8e-eee7-40d7-83d5-d9da6b9314d9", "indicator--49eab03e-3cb3-424f-9a1e-d5b546a60b5a", "indicator--dfa9881c-0caa-4f6e-beac-af86cad2edf6", "indicator--f240a360-19c7-4ec5-88fe-1994184f06c0", "indicator--3c6186ed-dcb5-4d41-80c4-0616a73c8645", "indicator--55bcb04b-9ad6-4be8-a064-0de87a496baa", "indicator--8e84c988-bfb6-4492-b467-359a13ccadb1", "indicator--6696d6b9-e749-4ca1-8ebb-e14dd54f7da8", "indicator--a712feda-6a5c-441a-969f-de60456bc44f", "indicator--f7ea74a0-d763-482c-a541-a6e5aaf8a3fe", "indicator--7da6f5a7-13d3-4b42-bf2b-097b9c6661e3", "indicator--0b8e0c72-caa6-4abc-8406-eea6d0904c28", "indicator--4c4dedc1-1bc7-408e-866e-5caaf35373cf", "indicator--f27e3cad-fd1b-4469-a050-7a87dec62910", "indicator--116011cd-034c-47b4-ace7-003656dcdbd2", "indicator--8fa30def-e592-43b1-a72d-517c1f6c461f", "indicator--bcc057e0-9361-4eda-bf78-4ff478757c78", "indicator--8e408b76-111a-449b-9ca2-874fdee59ed8", "indicator--68c4028d-2e04-417e-bdbf-b59f4bb9052d", "indicator--8107525b-a707-48b8-a7de-fe2976c13f42", "indicator--8cae83e2-0762-4059-9f20-82bf15280c11", "indicator--9637f460-0472-469c-8853-a7b2f63d74df", "indicator--89effa05-01f0-4b39-860a-9dcc16db43b7", "indicator--e13a943c-a4b9-4947-ad1d-791559d663f4", "indicator--73293b89-f669-4829-9f04-d65c31b5913b", "indicator--b1ca39c5-0c12-442c-adf9-d86806bca02a", "indicator--6eb2a238-1264-4f34-940e-13e28b1f8c6f", "indicator--ac3fa437-a606-4c8d-9ddf-a84f9a4b19ef", "indicator--c324a14f-78dc-46d1-82ed-e3c235069efd", "indicator--0b503ae3-9eeb-4a9d-9e3a-ad73145b6eab", "indicator--b41402d8-e97b-426c-aa57-ffba4a51122a", "indicator--62d46160-44b9-4f8f-8af0-4afb45efc462", "indicator--6d86f8a5-40c0-418e-a1fc-13f0f46f0f84", "indicator--928420cb-a083-49fd-a60c-ce210184a72d", "indicator--95ad5786-5496-44f7-abb5-35ff0b4c0add", "indicator--6b2d8cd9-840f-48ef-bec5-952a11e37d5d", "indicator--256ae901-a840-4469-93f1-9de3aebad298", "indicator--4608f50f-265a-4cc2-980f-a05706252877", "indicator--250a96a4-9f0f-4902-a951-c82bf4ae0b86", "indicator--31ce06b1-3035-49c7-bd1b-c0bed1727a5c", "indicator--b3a1bb3a-daad-46d9-aa45-59cd67f08bd0", "indicator--22ba194f-bbd2-4906-9caa-98789ae4521c", "indicator--33640018-c79a-41e1-8514-a3ab419a0ab6", "indicator--c0a35786-1c7e-404a-8949-2b964e79dc95", "indicator--67e112ad-45a2-40ba-a78c-42ba412b1b32", "indicator--84d9c8c5-ad48-4d8b-b6c9-82a5ebe62d7a", "indicator--cbaae222-3b45-4a5e-baec-3ecdbfeb5486", "indicator--182cdbf2-1f49-44c6-84a6-aca6d3be0b0c", "indicator--b72762b6-d5a4-4cdf-bcb8-54c455f45252", "indicator--0343c0fb-db90-44d8-82b7-c7377b207d19", "indicator--7972dc4b-ad89-433a-ab65-591b7040bb54", "indicator--f74d5039-6ed5-43c3-85f8-946715f6a048", "indicator--8c72e3fe-7216-4fbe-ad9b-12e89ec00f76", "indicator--01a9b2e5-6111-4602-b293-54ec23cadf74", "indicator--ef5762c3-9636-4885-95b2-043064755fa0", "indicator--53b212c5-dfe8-4858-a86d-09dbd8f9a1a2", "indicator--eba3b622-3e25-4b34-b736-a3851f10cfb7", "indicator--da23d414-b218-4d78-9c9d-a0bfcf0af35b", "indicator--962e9817-8987-4424-a643-e705c0297f63", "indicator--07b0e126-2112-44ca-976b-42674360510b", "indicator--23df030d-e8f6-4750-a963-27d9d9c3efc1", "indicator--0bcae0e9-bb1f-4ae0-9ca3-990aeef2f441", "indicator--c4f6caba-a250-4614-9f40-21e9444667c9", "indicator--f44201e8-876f-4ee6-b4e9-267a25acf4f0", "indicator--ccb70805-8e0b-4e2e-848b-adacb06f0912", "indicator--382b1880-b5ca-4b22-bb21-e876ffaef2dc", "indicator--0315c16b-fbc0-4b5f-b685-7b78f18ba58b", "indicator--38422dea-c8ee-4110-be72-89a441286891", "indicator--cb8a1e3b-cbc6-4d39-b956-8e0da16ad452", "indicator--ff6c6380-be9f-4c20-8c8e-a76ea5266d3e", "indicator--76f42510-78da-48a0-845a-29e1e7d783df", "indicator--9796972c-d691-43d3-9d95-b420096909ac", "indicator--a444dc62-aa3f-4eca-98be-493bfa23027a", "indicator--b2b8642f-f520-4707-835f-d4ea4b3987e5", "indicator--c472bd70-6ad2-43f5-8f09-d1c674534874", "indicator--22e52d1c-6f32-44e1-b0b7-414a8ad6a6f4", "indicator--fb7f4cff-0acf-4ea5-b35c-f1fe3763ee19", "indicator--44c31937-4b71-436c-9231-704264feb121", "indicator--927c26d9-b658-48f6-994c-deb8955f36d6", "indicator--1dc455aa-6fb0-4131-a25f-33feb8e1a034", "indicator--85bd01b3-cbc5-48a5-8719-7e63736e35fd", "indicator--92eb1cce-f568-41c2-9b43-2e4e5e31e8b3", "indicator--24ba9cd7-6107-4667-ab08-208d737bc1bb", "indicator--b8016650-ab68-4902-92c0-2a7ff9fedec1", "indicator--5e4f189d-2b3f-4d10-87d4-edc5c53e21ce", "indicator--5bce5fbc-6c17-403a-be1e-0972966bd54d", "indicator--5305c05e-aa4b-4a2d-9053-0cbc406c6869", "indicator--8d8ff8a4-706f-4f74-b01f-20be0e1b71ad", "indicator--51d576d2-41a8-4351-bb39-7a295a80e073", "indicator--82fad51a-5c90-404f-99e3-5f59dbe01385", "indicator--73281697-2e62-4ccc-a244-e00d18e52a4a", "indicator--20fba942-5935-4117-8857-2f04aa52d5e6", "indicator--73b7064b-1422-4032-961f-157e2bfec84a", "indicator--5be507e6-162b-4b94-9003-38f52063d3a7", "indicator--bc0efdf1-7704-4e1a-ab90-a13c3e210512", "indicator--36de3653-9b45-4535-9a94-2be722ef851f", "indicator--34922206-31cd-481a-bd8d-5739424321ce", "indicator--8f144a39-d3b7-4138-91ac-06972b94a393", "indicator--d53e601d-8d2d-4ff8-b191-c0ca895e7898", "indicator--6913dc9b-fe62-4651-b446-6569d32e60fc", "indicator--0604e6e3-ba0b-4e67-a0a0-834501cb941a", "indicator--119445fd-1db4-4843-a766-6dbbcab01269", "indicator--dd8f5d49-907b-4d4f-b1fd-3ae51644e643", "indicator--ac815ffc-8bbc-4b85-ae07-ba69b65751b3", "indicator--8f7ab863-8918-47ed-9a96-a3a40c96608f", "indicator--3748f0ab-9f04-465a-a2b0-3bee547c30d1", "indicator--5126da4b-8a54-450c-8702-a8488e9add42", "indicator--a8760dfe-4a34-4c52-a93a-64f19944968e", "indicator--e6e1607a-acf0-4e91-a1b4-b3556b6554c9", "indicator--1ac43e9a-8cca-46d9-8695-bf87eb103659", "indicator--2edbc0f9-1bbd-443e-b802-d1fcd672acfd", "indicator--53a6b401-8782-40a2-a91f-cd87aeec1b73", "indicator--e608e3f1-a0ab-4e2b-a3a1-511f5f905340", "indicator--5b8126d3-528c-47cd-9f74-2e72a49fb025", "indicator--99ae4744-65c0-41c5-bb9f-7e0155c7c734", "indicator--705906a7-9f60-483f-9e9d-e14ac3dd35c2", "indicator--2c0d7be6-c15e-4c36-8e44-5cef46d99ef7", "indicator--1b586dd2-257a-4796-9b0a-dc554ccd8aef", "indicator--0a412d74-df6c-45c6-8131-b1fa394f582f", "indicator--3a637239-6dff-48c0-abd3-3ad2d7eea978", "indicator--ad79c92f-e11d-4d96-a196-7cf3428d4165", "indicator--a34ecf2e-fabc-4af1-85cc-bddb085f2938", "indicator--b3854ac6-2e99-4dd3-ae94-f486cb4498f7", "indicator--af55b917-4d5a-4b75-97c1-a894c692aaa5", "indicator--f5fc7f4a-5ea2-40f9-b1fe-97640d6a4164", "indicator--2dcfd977-846a-42ce-9c9f-7bad388a3e5c", "indicator--4204fc5d-7936-44d9-ab8d-5f6b8a5e3c98", "indicator--0a5d0b1c-4750-4dc5-a4d9-d0e3ebf8456c", "indicator--60f6e5fe-eb53-4daf-8466-8e86c91be750", "indicator--18c1d8e5-3f1f-4a39-857d-ec72d869f16f", "indicator--2f11e0cf-af6a-4263-92d1-b19cdbed9d93", "indicator--395129fb-caa5-48fa-aae6-ee0d1cc7dde1", "indicator--9ebb478f-4f5c-4578-923f-ae4091365af7", "indicator--0d136f22-7b16-49d5-8b0c-22c9a0e08926", "indicator--7db78a78-551f-4344-a541-afae14732105", "indicator--0ff29204-3daf-4dd1-9d8d-67d6ee66f0c4", "indicator--47b1fa32-cc89-4194-9ca5-a4515d80ffa8", "indicator--a471ef6c-e716-498f-bd0a-21be4e544b5d", "indicator--73a1de43-871d-4309-a856-f8de042a97cb", "indicator--a1c4d72e-dd8e-4c87-a19e-4e35e7f03787", "indicator--10de39fe-8f04-496a-a8e0-56faf88a51b1", "indicator--e659b526-7896-4364-81be-08a0c82d7430", "indicator--7c60de2a-6a79-4003-86fe-ad34b3033b7d", "indicator--021dcef3-d529-4b16-8c4b-869ec4ad3c81", "indicator--0f5b25bc-4bf7-4155-a06e-f38e2d1b98bf", "indicator--ec622057-4f43-42ed-8b50-d7fe7990c0e5", "indicator--c1826ee6-b4e4-4702-8d2b-7efd6a605131", "indicator--65184352-c9c7-4dea-82d1-675491098c5d", "indicator--2e0a16cc-17dc-486e-b25b-3f70cdfd09f7", "indicator--4cad8164-a84a-4902-8694-2f3c566d157d", "indicator--45723dec-62d5-46f6-9c89-58028e9461ef", "indicator--abbed48e-6463-4317-85d6-da46e03d3789", "indicator--b0691f60-52c1-4316-a952-643d68dbf39e", "indicator--d74abe3c-0169-49ee-b0e9-848557c0513d", "indicator--7959c8d8-411b-4e4a-81ef-87ad0c4a6357", "indicator--3315034a-3d94-42b2-9c61-196939466582", "indicator--f2f88c90-d69d-4bdd-b586-0ed00fa74204", "indicator--f7dfea80-3d6d-4d2b-82a2-2f6c266d1a46", "indicator--c25a6c9b-4a70-4ea5-8f79-bead64813fca", "indicator--c7ecbbb5-5b2b-4701-9dc1-460f1ec9fbc6", "indicator--45bafa3d-8b5f-4913-a261-abb48fb9bdde", "indicator--cb32d59d-6179-4632-a854-9b816aec6350", "indicator--d890174b-9dab-4f14-b149-23fb3c1160dc", "indicator--996a841b-dffb-4845-b49f-8e2b6d086b8f", "indicator--49ddcd65-f18a-4ffe-8042-69e28f12cc23", "indicator--b61f429d-1447-4857-9755-b94484600793", "indicator--25f90a3d-db3d-4360-b7e6-43f6521ac47a", "indicator--eeeb8ce7-da63-45c7-9a7f-086d358f0ec5", "indicator--ff8efd63-63b5-4635-8cc4-0388555b4a6d", "indicator--cadbbd76-aef0-403b-aade-1825c540f34c", "indicator--7dc19830-eba9-4240-a770-f1e6d010e2ea", "indicator--fc9951b2-a217-45ca-91c6-a894939ce979", "indicator--a23f5e83-95d4-4d0e-b203-a423f07560dd", "indicator--de697308-12ef-47b4-bcc1-971dde3502f9", "indicator--96731c22-c823-4aa7-bd94-ac220540829b", "indicator--b11a5f78-2b52-4ed9-be06-22ba1cae2fd2", "indicator--f217df35-fb52-4760-9a93-e04b847e39e3", "indicator--089df095-f61c-4d38-8743-6f515b46f787", "indicator--b2de56f1-fd0d-425b-95af-64e7e0743973", "indicator--cca359bb-6820-4bab-987a-257dd9c4d3e9", "indicator--4e97319d-d0bc-42e9-8852-b0d6013c349e", "indicator--d4f8578f-9cab-408f-a362-993d28e15bd1", "indicator--173f4b9b-f70c-467e-b898-441b004717df", "indicator--19e9bc3b-da1e-4780-a5ef-dedfa440fd14", "indicator--da728650-2f5d-45f1-a5f5-7e38bfaf12fc", "indicator--bb380a05-e360-4794-a120-41d1ecfdfc7b", "indicator--4bf79094-8f28-4713-a4a8-c1b5f0ffc384", "indicator--8fb13760-d174-4d29-aed3-7eafc0a5f86c", "indicator--a0c2580e-f4e5-4fab-9e68-d31923aef90f", "indicator--7754b3b7-1b3c-484e-88f6-e308455a6686", "indicator--f2ce55ba-ad1e-4c10-ad6c-155ab7dc09df", "indicator--d798f023-ceb0-4d52-b387-42f5b87ef633", "indicator--5bafa55a-9366-4b33-b08a-5d92a924743a", "indicator--d954198c-b9bf-4014-9223-a0602b058c7c", "indicator--954a0e91-f4c0-411b-a6fa-11c0b725ebfb", "indicator--971fb4c5-b3b9-4211-b1ff-90cd10aca0b0", "indicator--0d5e81b3-e014-4b94-9017-7b123f4032c6", "indicator--5c5200d3-613f-4193-8a65-f04c0ffd1445", "indicator--6415d02b-776a-45c1-beb2-f835ae30be68", "indicator--77bee255-1b9f-4db9-a41c-9abfc22a9613", "indicator--05ab4a6e-b522-4a45-906e-f61910551ca5", "indicator--66dfc58a-cabd-490f-9754-376cc2085d9c", "indicator--0d59234c-b281-4e95-96da-c8b2b072efbd", "indicator--314d613d-e4d0-423d-ab31-cae01e5dd76f", "indicator--80abbca4-91ab-4efb-a51b-1bccfa812b1f", "indicator--6dd04f54-8567-472a-a1c6-4a26516b54d2", "indicator--2768e1e8-ad28-479e-96d5-22e7a8ac4fa7", "indicator--1decbee9-978a-4439-bd67-e2d4dc73b5fb", "indicator--2f2649a4-82a8-41e6-a43f-67aff617963b", "indicator--2f518f14-868f-44db-8a16-9f07adb570e9", "indicator--0bc8f041-7cfa-4654-837d-be21c9308756", "indicator--e4f5e71b-7008-4795-9ff1-bee4c0b85a06", "indicator--5d16c571-5967-4e2a-b3a0-8214fe07047a", "indicator--8a03891d-ef94-4cb0-95ed-734bdc92773e", "indicator--44599448-99c4-4a77-ab4c-a3a5e7f4c6b2", "indicator--a3a67e74-0c18-4ed9-a870-ca6cac68244c", "indicator--45f7b3a9-0278-4689-93ff-5c73025986c0", "indicator--14c63527-4816-4626-98fd-26351a30527f", "indicator--0b37b82c-b126-4538-bb26-65529bec82e0", "indicator--2728a285-1ab7-446c-a0eb-a91156658c40", "indicator--87f9f35a-e780-462b-8925-c35081db44d2", "indicator--7eab0b82-dc8a-4cf6-be57-0ea6bdfe1a71", "indicator--7195e003-fc6f-4d7c-909c-f561eef87bd3", "indicator--11317944-eceb-4043-8bd8-407465ab0336", "indicator--31632895-4362-47de-9703-6746ceb17434", "indicator--b5d5b927-aa6c-405f-88e3-563781fbdf69", "indicator--8a2ae47b-1b7c-4146-9558-76ed6712c51e", "indicator--599b0b26-c398-47a6-b733-a8f82af51c86", "indicator--a7bea538-56f3-4bf2-9633-ee0a1c844490", "indicator--455ee843-4e8b-4897-9a5c-def4fdaa929d", "indicator--eca9ec56-bc7e-485f-9206-c7b234a6c4e8", "indicator--4f2c5723-f200-40e1-aac0-3707fa2dd858", "indicator--bcc2ba9c-c20e-4db2-931e-2e807b2edc45", "indicator--deb12ce8-4e80-4efa-b6c5-6f828f08ddd0", "indicator--0de68aef-079b-4672-8176-2e1c36e337fd", "indicator--5034d1af-0cc9-472a-8ad5-2e697e52020b", "indicator--b3a7f380-8f5e-4f3b-8a60-3d3aa86b37af", "indicator--210e9b3b-cfcc-449d-9be8-bcd45b42a25f", "indicator--44a1ece5-7017-47d4-b107-acd081c205f5", "indicator--4ab063cf-3276-45be-a22e-d86bed326a8b", "indicator--fbf7ddaa-d76a-402f-a2e1-c0eef42826f2", "indicator--7362d59f-ed63-49df-9071-23c778d7d11d", "indicator--cc6f9592-9cdf-47c0-9ba2-f44b8b6d2a1c", "indicator--9d1cf60f-85a2-4c16-af39-fa1f4b6d1bd1", "indicator--17e2e7e3-b0fa-4963-9d78-f0111ec8167a", "indicator--d8f3764f-a5b2-446f-9d05-9371e37f9ffd", "indicator--e9dc5272-4671-46c4-b58f-c4e54002c0f1", "indicator--75f95e93-db92-4915-8964-e47d5e65d5f0", "indicator--61f2f383-9427-4747-800c-a7e5dbf5f508", "indicator--83327ab8-7267-4f91-b25c-017aa1c61543", "indicator--97b55993-3edb-4871-9709-a119b07f498d", "indicator--3df72de2-4cbe-4ae2-b873-0bc94640c146", "indicator--9c05d1a7-2dc9-40d9-b0e5-bd588b78f37f", "indicator--63bc6335-6605-4c51-8ba5-46a5bc671c8e", "indicator--389272a2-6d31-4c15-8c0d-2146abdcd2f7", "indicator--2cbcb5e4-97a8-4d1a-adc2-a568389b4e64", "indicator--1c7bce45-d7c9-40c0-95d5-1c6bdfcef136", "indicator--aa21267e-c099-44aa-99cb-3922d1886c79", "indicator--70e84522-3f78-4cae-bf83-6bcd81bb1b77", "indicator--e0b1ed7d-ee84-4829-a83e-56671f96e9f6", "indicator--43fa1818-d07e-463f-93ee-a96554f1c087", "indicator--6f9cd971-9a3c-4854-b89f-3ccc14a86bf2", "indicator--b630b469-9676-4481-a19d-07fa76234133", "indicator--05d97f71-436c-4aee-b71e-bf66f1c50301", "indicator--6aa7c5ff-0ce4-4e6f-b969-dded639f5f1e", "indicator--41581e27-43be-46ae-bb19-9e161ee56e0a", "indicator--aea55f3d-c4c3-480d-9c1a-c4cd1aae4f6c", "indicator--da5d4e4e-ec2e-405b-a43f-0078be9aff9c", "indicator--fbb746c8-11e4-456d-a75e-d70e2ce295fa", "indicator--289ae87d-ea86-4336-9266-1469a791ad9e", "indicator--5761bf09-ba58-4a1b-a000-33c8afe9f51d", "indicator--499d84b8-f3a0-4550-989c-97fc47484824", "indicator--9fadb147-0556-42d4-8f8d-47a3d00b7753", "indicator--e783da4b-cc71-48f0-b622-d4b0d220758b", "indicator--833a22bc-1068-455b-8bac-27938fe54c2a", "indicator--8d42c3b0-5420-4dd4-9ace-011eb518e4af", "indicator--2351034b-7b3e-4b5e-8491-102d3c2411c6", "indicator--bb4fae96-d640-4f1c-b60a-773691924eb4", "indicator--65e5e083-993a-4686-af94-9b2c3d32fbf9", "indicator--3043c3a8-ff4a-4230-a9b9-4b889919c125", "indicator--da96a744-3d33-493f-8888-f35a1d2bddb3", "indicator--1e246fc5-d30b-4ace-bd27-b1034c03fe69", "indicator--a9cef92f-f429-45a2-94ed-60c57977f17e", "indicator--43222f46-9c70-4ed9-8bc4-7d9deaea268e", "indicator--519b128f-32a3-4c22-852b-790619dac55e", "indicator--ac7456b3-780e-4dab-b491-f953e568bb03", "indicator--5399ca78-9f32-4e2b-a16b-d61a03247fdd", "indicator--ef9cb986-1a46-410d-9fc7-8d214d21043c", "indicator--928a6dd6-8375-4e4b-b711-2f29bbd25982", "indicator--315b420b-bf5a-4066-8aa9-ebe9c60796a3", "indicator--ab5fba6a-9df7-4e6c-a39a-306541f34cdb", "indicator--cfcbb7c4-ea65-429e-8521-74ef38bfa493", "indicator--cbd5ee02-8a31-45b1-b58b-26c7a8798378", "indicator--c141d744-9e17-4a4c-a4b5-fff08c5ba559", "indicator--63c97f83-da1f-4c50-ae98-b88a612e1cb7", "indicator--e2e7e45a-8c43-41a8-8b7d-995ed05904f4", "indicator--6c0659a4-c071-4580-b9eb-f5048b39de8e", "indicator--006c7b1d-c78e-4006-b44e-9dd9ab88bf2b", "indicator--268cea9b-d052-4e5e-a297-0add795a2735", "indicator--bb273581-5858-4c73-9931-9cb8ba6915a7", "indicator--83bd6dfe-481b-4aef-82cf-6492125fef19", "indicator--9d9c1ad1-baea-4624-8366-acf3a1f36d60", "indicator--526df72b-01d4-4455-a0c9-c5fa00dd35bb", "indicator--b0d1e72e-b923-4cdc-a92a-6bd941cfd4e6", "indicator--9368cb77-523c-4042-8f82-ad8d781177af", "indicator--02424cc9-00de-48c1-b21c-a7ef62b28bf6", "indicator--bb3893df-a35c-41c5-b0c2-57ddafd7d57d", "indicator--8e1288a8-8a5b-4bc1-81ed-42a3c0191168", "indicator--5318503f-5084-42f0-a012-e79a4e6017da", "indicator--07612897-e7e9-4094-b672-9a0acb1b3dd2", "indicator--6631c9ee-d594-45d8-b19e-2a036adc9a3e", "indicator--29039e55-9da9-4eea-9069-217f0aa7847a", "indicator--83df044b-f97c-4385-8662-5433b30bcdcb", "indicator--1bb740cb-26ec-4bb2-ae60-4f612e757995", "indicator--822ee9f5-7a16-4fdb-8f92-4adced7ebac7", "indicator--81559563-2398-41fe-9bb7-be158dd6f699", "indicator--aa05b2a3-b0f6-4e83-8057-cb3a90045147", "indicator--c50bfed5-ebb0-48f9-8c37-b92228e7a609", "indicator--4112db1d-414d-4fd9-832a-8a36dd170c15", "indicator--13c0482c-0f4c-4651-871b-4f43d4d9c24a", "indicator--1c6faaea-5f7b-4720-8aec-6b4738d9d76b", "indicator--70d9b8f3-6c6b-4d6a-9a17-ef8517a79226", "indicator--e1f9a707-6671-47ae-b629-09e73c2b2f7f", "indicator--12724877-c87f-4cca-bf57-8298e4c37d1e", "indicator--e4c682f7-871b-4ef4-b0cd-3dbcc0833564", "indicator--52084626-303e-4151-aa96-b7eddb5f8256", "indicator--7b0a91f8-a72d-4d52-afae-03f5a89e4857", "indicator--d5ab884d-dd4f-4a86-9900-6852ada79d35", "indicator--15a5b076-3f95-48d9-a6b2-4d01ebf0cc9a", "indicator--f79a6d1d-4b39-4189-be12-8733fa079343", "indicator--d0142851-03fd-4ec6-9ef1-4d4dbe837140", "indicator--14baedf4-e750-40d0-bc0c-72efc6aa7d54", "indicator--4a399862-5885-4e08-8c84-099b423ed4ba", "indicator--ecb762a1-805b-4a82-8971-6e21974cbf5e", "indicator--5e24f49a-f363-42b4-8a05-e4da8811eb1a", "indicator--ac907c7a-1a6f-4c56-8802-dbef64186aa5", "indicator--999cd79e-36af-44d6-96bd-0a8dab78965a", "indicator--181948bf-3dcb-4820-b026-4be7ed93cbb9", "indicator--a6497f76-fb62-470d-9059-8ac058046c7a", "indicator--1b1e211f-bc49-442a-97ad-943bd6ce295d", "indicator--325e44ac-c66f-4953-9b35-2a5b46c3a671", "indicator--f749b8bd-dd48-439f-bda8-90ae0fe2d7f2", "indicator--37f02aa6-518f-4b58-93c2-3f14949d3d9d", "indicator--87746d9a-a209-4e4a-99e4-e4f16a331ddf", "indicator--9fec25bd-9406-436d-88a9-121896b77127", "indicator--a258c4f3-c256-4097-97f7-f492e53b07cf", "indicator--4710a56e-cb31-460f-a21c-2582b44b57d0", "indicator--29c1ccc6-0414-4516-a81a-543f926bfadf", "indicator--04deee12-0630-4cdb-9920-3097f2389233", "indicator--bebf69d8-8a3d-466b-a047-11af06b3e117", "indicator--933b71f0-de99-4aa0-bbeb-621d85f8721f", "indicator--2edc2db9-ae34-4fc8-b51f-e3bea876ba60", "indicator--797dc880-373e-4d70-b521-c6968d60441b", "indicator--79894548-0d3f-46ce-896e-65e59b4577e6", "indicator--bae5e87d-bda0-40b1-8e54-25dd38f45b2e", "indicator--bff58fa8-37d8-423d-b6a4-3dbf0b1df4dc", "indicator--d41eb2b9-3a94-4043-8bd1-dfdcc0e8ce00", "indicator--b0773035-1c3b-48a4-aec8-195e622aac62", "indicator--cd79ace2-d937-42b3-9bd0-bc9aac1641a7", "indicator--622af699-3bf3-406c-a8ba-8694c88118d0", "indicator--335cdc13-3e41-4fd1-b715-fb802df5eadc", "indicator--e4a35987-f070-4195-afac-e054a49ddead", "indicator--32a85296-b185-4260-a9af-18f4c67b0723", "indicator--04a0be58-0b28-4c9f-8fa2-12cb6923f309", "indicator--d5dc86cf-0e22-4bf1-901c-b45700d70a84", "indicator--cc6c89cf-6394-471e-b182-e751fb6f2ca7", "indicator--0006e66a-3f57-4e77-a72e-5e497b743d14", "indicator--b800c588-3482-43dd-b2bb-050f2f84a858", "indicator--c7f01c50-fbc3-4f00-9d1d-52feda42d144", "indicator--de14b699-d572-4e26-b993-315bdce5c23d", "indicator--191cc364-7336-4f47-bc5a-4d00006c81fb", "indicator--5baf6e5c-63b4-4fae-ad3b-2c5ab93391d6", "indicator--5e77fff4-7734-42eb-ad2b-a5b577679dfc", "indicator--3999d052-79c8-4bfe-8ca6-3a178acaa48e", "indicator--2aae5fad-346c-4cfe-b819-45f308c327c0", "indicator--5a2da224-9fc0-446e-8e13-f727ef61638c", "indicator--c1bee49c-8755-45fd-b13e-74612dc8c308", "indicator--21b509df-de25-4290-aadc-150fbda6788a", "indicator--8e88959e-6e4f-48da-b3bf-ffae085f80e1", "indicator--e1c79a52-a385-480a-982a-9ec68e0e24a8", "indicator--9e4198a1-4c5e-4707-a487-2371fc5fe818", "indicator--510005cd-ee94-4bc0-9f0f-c6bf55c278ed", "indicator--58477131-f6e6-4752-ad52-544b24e395b5", "indicator--b5d514ab-db7a-4c26-97cf-689db9fadd29", "indicator--34e96b66-131d-48f6-bc59-6cea12409835", "indicator--1399066a-6d02-4e3e-8f6e-40e8055a2c57", "indicator--f0fbfd85-43d0-44b1-a89f-bed17ada58b2", "indicator--84b55cfd-e4d6-45fa-b555-fceb25b1e059", "indicator--4763d979-3233-43bb-ab4a-092d1ed56fc5", "indicator--72c8424d-3cc0-4129-b820-d28c9d34dda2", "indicator--20fb6c23-3212-442a-98ec-76f69347f904", "indicator--b8a4182e-4e6e-4408-8705-c129454f1549", "indicator--5a35a6ef-81ef-4477-89d6-60cf448d15fe", "indicator--bd6ca64f-68d1-4cb3-80c4-06f426c6ebf3", "indicator--fbe43c19-9ec2-48f4-9597-bf5d9662a91f", "indicator--91905411-b789-404c-9973-c83690890d47", "indicator--8927a536-4978-4a6a-b17e-17411596b750", "indicator--135451a8-e4d8-4418-9ded-81fed97850cb", "indicator--4261b2a9-efc7-4354-bce4-37bb64e8f4e6", "indicator--ae3a4747-66b8-4b4a-8d6d-1e65f8aabc03", "indicator--fb8e5d65-dfc7-4410-b577-2606d4a400ab", "indicator--822565ad-ce3d-4e77-9636-94b267b046f5", "indicator--f8390343-d254-4615-a443-4a2c9fc83fac", "indicator--159a51a1-c31d-4aaa-a823-c4982cf6400d", "indicator--6ce2fafa-1997-4eeb-b945-9f73d3811c89", "indicator--f48bcfd5-af79-406b-8f02-c2efa0c3b034", "indicator--70343aa4-ca8c-478e-accd-5a002725aec3", "indicator--ac4a3641-745a-4efc-9929-8e059fd01c9d", "indicator--87003e52-6534-4627-81b3-f6f0a542a9df", "indicator--a81823b2-a107-4876-beb3-6418d3cca4ed", "indicator--51595c6a-4fa0-4fe6-8b20-1633869f5dbe", "indicator--16e499d4-09cb-4201-9e2f-c2e284f36af2", "indicator--b3ff0043-3ad9-4e8a-a94a-ff6d13dd5b9f", "indicator--6da1ed00-97d0-468a-b98a-dff566abe2b6", "indicator--530872be-b9d4-4eda-b176-f5c0c1e6e959", "indicator--e4815f92-2bc4-44d7-bc62-3daf4f61fbf0", "indicator--8ff22946-992d-473e-b16e-2e559e94bebb", "indicator--657670f6-44c3-4a24-94cb-8574173f6b6d", "indicator--6c0bcb88-91c0-46ce-b365-f4cb5d091f0a", "indicator--cbcea1b3-4ca4-46f3-90b1-ca869185dcc7", "indicator--3cc0e3f6-f832-4888-a008-039e33111e1a", "indicator--c385daa4-68c6-435b-ab5b-45dead2bfa38", "indicator--5b8a847e-740d-421f-82a9-0fafe1fabf83", "indicator--0f6654fc-4ea5-4b6f-8f15-127b00369d3a", "indicator--c2bd0055-0026-4ae4-baa3-393be84efb8b", "indicator--75ff59f3-a58d-4c74-8741-82fea67d9049", "indicator--8200f76f-8de4-4ead-be55-fc93ba679989", "indicator--896de2f2-d297-4d00-aa7a-af44f9f2f49f", "indicator--f8be51f8-924e-4475-a275-05df1e4be000", "indicator--f837ad9f-7cc4-46ab-8ae9-dcfe7ee4fc53", "indicator--e27086c5-33dd-4545-8813-a5cd022fc407", "indicator--3cc41870-8dfa-4a32-82c6-ac8f3f0fb775", "indicator--9785f86e-eb31-4dd0-b0ef-3e0629053a4c", "indicator--b61315d0-f389-4380-ac90-b1a50249b24c", "indicator--da83a654-718d-42ba-8b91-c19aeb345ec8", "indicator--3f9cd9c7-66cc-4060-a74e-85ea461146e0", "indicator--44c0483d-53ea-4c0e-9844-de8a602dcf6d", "indicator--582bc147-7053-4b35-92a4-16c60ff4bfd6", "indicator--fd1c5f93-58d9-4b69-872a-0ed5831aa935", "indicator--12a121be-b84e-4f0f-9028-e27eca71d46c", "indicator--0577cbaf-89a1-4781-a731-bf929de562f5", "indicator--1ffcb32d-26d2-4a32-9955-6154d1febfc1", "indicator--e8ca6c7b-f180-4ff1-82a2-b6f8eefb6cd6", "indicator--12c95c21-81ba-4201-8a07-d1f2e583cd17", "indicator--fd8fbd87-6061-468c-b5f0-37aa37de26f2", "indicator--c55bf6ec-83b2-4320-9785-c440c247f8fb", "indicator--d87ff29f-4bca-472e-92d7-a7c1eb07907f", "indicator--597f4f53-bef4-4a82-aa58-e7b869858aaf", "indicator--8d1c4614-7374-4da5-87e3-17156b52cbb6", "indicator--e42382a3-afed-4811-a7ff-339a8a6b78e1", "indicator--39aecc4a-5012-4540-b5de-5bc4a9ecc608", "indicator--40f01280-30ba-4c3d-9f05-9844af12d27e", "indicator--a8c0acd4-9037-417e-86c6-2cbdb7c0bfa3", "indicator--f05fc85e-10ec-449e-8f97-83aa7de8b2f5", "indicator--6fe83e7e-5cf6-4191-aeb0-5ccf97af1e8a", "indicator--98ee99e5-88e1-4290-bec3-e8904b474bbd", "indicator--9c2f4f82-32bf-426c-bc9c-5d89344b3105", "indicator--f0b04e08-962a-483d-abe1-f4f0f31f36e2", "indicator--5838e695-1212-46fa-af0a-d8d4b08938ab", "indicator--fa4ab368-7fb6-44c5-8cff-c05812cccb74", "indicator--6371d9c6-8a58-414b-9daf-b08e6f923b20", "indicator--1eadfcae-1e8b-419c-b077-28ead2d49161", "indicator--f5c1fb26-9fc0-4e9c-99ef-d470a18b6955", "indicator--5d641622-230d-4148-a06f-b530cfc530dc", "indicator--f174a46a-d787-4651-b665-45070357c352", "indicator--aa60e6e3-120c-4543-9ea7-6736d0f4b823", "indicator--df4397e5-60d8-4002-bef8-1493878d6040", "indicator--6528e916-1a72-4cbc-b5aa-909c0f15acf6", "indicator--74480a19-ce36-4c57-a2d4-c236ba7cadb1", "indicator--9351bb29-6a4d-4618-86bf-70a14ae057a0", "indicator--7ec39775-bee7-4f7a-8447-37e5bc1a846a", "indicator--ac1dd712-b566-4f3d-bdbd-f785168ff7f4", "indicator--cf948266-edae-4366-84f3-4c7f9bd20988", "indicator--51ace58d-ce16-4b8e-8907-dff694d664de", "indicator--b2dd88e4-310f-41cf-a2f7-509b0e7eb2ae", "indicator--fac161dd-9b6a-4db2-823e-63cec6c7e624", "indicator--a91dcf56-b20e-4244-b9e1-1453ec2f7876", "indicator--40e9bbb1-330a-49da-960f-0342a9d47137", "indicator--ad8510e7-a698-43c2-afc0-7ffa7a137a7c", "indicator--f75d29ae-0a86-468f-bf93-e19b9fa1a4da", "indicator--8d3d38a4-a7d6-48c0-8ae3-8e9f149f23d1", "indicator--4753ef06-e0c2-479b-b24a-8eeb15cf69fb", "indicator--60db7825-383b-4b40-8ced-62cc4f51eb14", "indicator--6914d973-67a6-4b29-b2dc-b56a43ce36d1", "indicator--0831fa95-6efc-49e2-a914-7b214629e039", "indicator--1d82fd44-c74d-46dc-b673-0b901154526e", "indicator--338a3e81-8924-4a9f-92c2-f5583a49c866", "indicator--56f86ecc-ec1c-4fee-83e4-1dcd565dcaa5", "indicator--cecbb19a-e325-4737-8d1f-ef1d9f139726", "indicator--26561f09-2b04-4e0e-b3cf-a10e0d6dbe28", "indicator--0c93127c-4522-4b82-a24f-ffb7ccd5c9e5", "indicator--4e19c38f-81ba-4c54-aa39-bb7d83e433ec", "indicator--17421dd9-c01c-41bb-a12b-c031c4c1d596", "indicator--5232f1a5-43a3-4e3e-a0cd-3f5b7bbfa070", "indicator--19e44c7c-f955-4042-b357-2ec84748b561", "indicator--ddb2ffc4-10fe-4b8d-b4d5-c378e748d4be", "indicator--2261edd2-7404-4162-94a1-d160638e5db9", "indicator--ebc3f190-24b5-473c-886f-1b45a44fde79", "indicator--faef4169-feb7-4f49-9a15-1142c6387f1e", "indicator--90a9aa2f-a1e5-4c50-873e-6c5232b6c307", "indicator--d72f17b3-46fe-418d-b763-b5425dc49414", "indicator--459f37c2-6508-4a0b-b124-c95980ec087e", "indicator--b73b8c67-cd03-4f7b-b569-e0555a0c11c1", "indicator--16aba732-7e3d-4290-bb1b-e2fdd2874bca", "indicator--13419ff8-f76f-4756-a21e-3299ea8bdf99", "indicator--55ade7b4-61e5-4f6d-97e3-3110dc25568b", "indicator--185bca29-5a68-46c5-be25-b93464455188", "indicator--4f44b921-8155-47ad-a3f2-39c267131626", "indicator--7efefc1d-51e1-4941-a39e-86eef5a72a96", "indicator--e315f222-b9e8-490f-9ae0-23fcf663eae3", "indicator--6e955b89-e233-4f62-9328-ab2e53ae4479", "indicator--b07e95d6-3bf4-47ff-8de2-e704e30a7765", "indicator--0f8badfc-7e0c-462c-ad58-ddfa497435a8", "indicator--512d4184-d42f-4f0d-9208-499694886441", "indicator--4fe41dcc-5b54-40db-aacc-8773b7705f3a", "indicator--bef7f463-38f3-40a7-af6d-09c6fe8f0876", "indicator--6191d827-6c57-4029-be30-51e8af4bcc54", "indicator--a9cc350a-6362-404a-91c0-4575c2daaba8", "indicator--d8abaed1-d5d7-455e-9f98-2bc9832764ce", "indicator--ee83eb7a-72b8-4255-a7aa-c085dd6ef857", "indicator--8f3063e2-4d14-44b2-bd0c-0c9e6eb60394", "indicator--2813b098-386b-44e2-a365-88d001301cf6", "indicator--2920a763-a0b8-437a-84f7-d93eadd587f1", "indicator--e95d58c8-abd7-46ce-b92e-c39dac27d13f", "indicator--86b4e88f-0cca-4946-b229-106fb4c9abf8", "indicator--e82603d5-ea4c-4e29-8f9e-79791c982757", "indicator--629a1a1b-10c5-47f8-814a-6d985260aa56", "indicator--0c14b402-7aca-4624-a8e0-4bd45d4f1070", "indicator--062eaa19-17f1-44a9-b30f-0fbb63ef719b", "indicator--edfe1b21-8fca-4ae0-a6bb-ca6de65b73b8", "indicator--07806352-96f1-470c-b159-20c21db8ac06", "indicator--e52c8510-8782-41dc-ac1c-3be501b04f58", "indicator--733e8e52-e59c-4772-88a2-bdd05fe51883", "indicator--dad3c7bb-251d-44c2-93f4-64d0a365f430", "indicator--7499e113-aac4-42ec-bc44-afbb574bacdb", "indicator--e0570ce2-df9a-403b-a474-2b8b5a91ac78", "indicator--a5aa8c81-2429-41e8-9758-29e5086d4eeb", "indicator--3793bf75-22ee-4de6-87b5-8fc7dfda8ee5", "indicator--f677a767-04e9-444c-8b19-610c2beee2ab", "indicator--3d056823-d386-4b64-a5d4-eeef665738eb", "indicator--2dfdb2e7-dab4-4a8d-950d-16836e4429a7", "relationship--806a4122-fb62-4fcf-84f2-1c1e278f2c01", "relationship--5051a96c-53a9-43a7-8836-f700cbd565c0", "relationship--7767674e-4d6a-42a6-8115-9d451dde1563", "indicator--38e2ad06-b585-49c5-a11a-d53cd9e7aee0", "indicator--c1594b4f-e1bb-4153-af0b-f5a1381db180", "indicator--88aa5cac-4b0e-4622-bf7a-ce38e43e18e4", "indicator--2957c6f4-bef9-4339-921e-ca8c8a4101c3", "indicator--81f54e1c-fefa-4677-bdcc-4d71dfc9a4e2", "indicator--c98eede7-586e-4e5d-9695-d7f277bbe9e5", "indicator--3b2d5868-6cc1-4405-8587-05afaf9d0e22", "indicator--499182d6-e992-49d1-beb0-e8285886b667", "indicator--eef04bff-8301-4a0a-83ae-b8cbc9d88e50", "indicator--ad0750e0-bf27-4437-8a65-7c2a04e73265", "indicator--32f88764-a4ef-4785-b72e-75f375125c03", "indicator--33973773-1129-454a-aac5-5a85f05441f3", "indicator--b1d0fe17-3942-4e23-ba7d-5b98af6f7521", "indicator--0cc0d56d-ab84-436b-b7b3-b269a92f8d1c", "indicator--5e854c41-5c20-4441-b53f-411670762b2e", "indicator--43fe00db-4a1f-4aa8-950a-2e432b9560da", "indicator--481cf1df-b8cd-4ebd-9e31-28b0ee550005", "indicator--7bc746f1-773a-4089-9d25-68ed32976e1f", "indicator--3c030cb2-168e-4acc-bef1-4912c2d4fe10", "indicator--3b703f5d-c018-4cc7-b689-97b54aa7c6c8", "indicator--b28fea42-f7a4-40a6-8579-952bc1710394", "indicator--388e4841-9a4f-4c5f-9cc4-57a0935f84e8", "indicator--ecb6ad71-5f59-4e1e-bf06-10403fb8c1bc", "indicator--30d028c3-66e9-493f-8a29-240c81059c0c", "indicator--3741501d-b657-4373-b1cc-cdb46563d4d2", "indicator--a5bcfdc2-ca2e-4d8d-a6da-6340b1d50182", "indicator--a393d8a1-e6a5-473e-9b16-0ed5bf0e0ea0", "indicator--e1e989ff-2509-43af-a7ab-799bf95a0eef", "indicator--05b711d7-2adf-4b32-8a39-069c8b640bcd", "indicator--7ad66c61-78a7-4825-afe8-0692f09d61b3", "indicator--f1d1ad47-cb88-4aee-98eb-b01365f7c67d", "indicator--2dee48c5-4cc4-48f4-a505-61583616f535", "indicator--13b26194-c952-40df-8179-23fca2fdccc1", "indicator--4cc9a0b1-8c0f-4b51-8aa2-89f0589354ff", "indicator--83caa8d6-3e28-4737-b5c5-87aa98b6f97b", "indicator--21f2caff-c027-4401-99f6-45b79a0c7ca7", "indicator--9cf16081-c818-4319-9f2d-0980859ec3ae", "indicator--df1843fc-3faa-47af-8666-e7a36a8130e3", "indicator--37798401-4e23-46e7-b107-f2b8120b562f", "indicator--7df9dcf2-a7de-4c16-8c72-ecdd902ffccf", "indicator--d669434d-1a51-4243-b536-d8f2af2f0e56", "indicator--8caf86c9-d714-4870-bcf3-d3b7ab66e527", "indicator--218b86f0-4d64-4d68-9636-ae099686ad59", "indicator--33dbfe88-d1c1-4c7b-8a8a-21d4ebcd5b09", "indicator--a2b7109b-0eb8-4254-8365-fb0b5e650cda", "indicator--0e04c21e-0be5-49a9-ae39-ff4f6cd4eb79", "indicator--16e2dfc7-cce8-4bef-a267-27652c1acdc7", "indicator--136c78e3-6646-428d-b514-87742e602677", "indicator--4b1edea7-0a59-4128-86ea-01ce9369515e", "indicator--80725c39-2338-4d82-b3f4-c92641315335", "indicator--16cd237b-c6ec-4062-9834-b6f1e9478ad1", "indicator--f830141a-44f9-4a6a-bb67-b9e81ee45f88", "indicator--a7584b4d-a934-4706-a83b-f69bdfd1170f", "indicator--4a3d756d-3ec7-4834-8f6f-c9e75a6b22f4", "indicator--7d2b3104-dc28-4c52-8ec1-a6e57c4473f3", "indicator--116791c4-4134-4998-b984-bd2c06570b8a", "indicator--6073b126-0aad-4f64-92b6-5941507f9e63", "indicator--cd87aa80-0efd-4aff-9b3b-c3081a04883f", "indicator--6fc97f2e-efa8-4f86-a8e1-2889a4b098e5", "indicator--75a7111c-96d5-416f-ad30-6c905da92565", "indicator--ac26cc6b-f4ca-47f8-9af5-61c553d79499", "indicator--d6b990f8-a41e-45a3-ba0e-f3a5931b12ce", "indicator--3cbfcbb0-642e-4819-ba07-19c82b992f85", "indicator--37398a77-ecc0-4789-8421-18d6fe1c499f", "indicator--e77a8bf2-92fe-4cf5-84d5-4bd1848bd6f3", "indicator--1e979936-c17d-41e6-89ce-ae2bcf057c50", "indicator--e25daf3e-d9e9-437d-b98e-c9cf36879e7a", "indicator--cb7336e5-790e-48b6-8670-3b4d9b9992fa", "indicator--de2bcbee-f59c-48cf-a823-6fc98228cd26", "indicator--a56f9e51-b2ec-4a3e-bb6e-b22add428f50", "indicator--e28beaee-ffbc-4260-a701-b121b7545eae", "indicator--6b0310f9-ea3e-450d-a396-f9274e8a6919", "indicator--66061237-511b-4d29-82cb-b431573403a3", "indicator--dea44679-f74a-4f31-87b4-be57a43d0be7", "indicator--3a8c593b-0e0e-40f2-b25b-4e9aa6d7af6f", "indicator--19708315-bed3-45d9-8667-eb58104ec106", "indicator--bad5f2de-9cea-4f7e-b5c9-5bd9767378b5", "indicator--9aa1db1a-d1e5-4aaf-a755-cecce3e0afae", "indicator--6f078944-c644-4439-8d67-0090c0590e00", "indicator--f123694b-16a2-4970-9d56-765ce64f49fa", "indicator--b6ff436d-61d3-4172-b9b1-5843e23b9ad5", "indicator--0fd9d774-f43f-4772-a5c2-68519a5246d6", "indicator--921a99cd-ee8b-42c7-9cb8-0a519bc5b0aa", "indicator--84f9e5aa-5b84-4493-b83d-9ae694e6a979", "indicator--52238856-bc30-4f81-9c23-272c440d0a34", "indicator--06be7f91-c624-45e8-88e3-34ff7702f392", "indicator--31d2b83d-9a53-4311-8f24-4fe5df9bcf00", "indicator--86ca826c-b5e7-4a6a-aa7d-94802b5c6b62", "indicator--20ca360a-3845-4645-ae2d-602d11c0c120", "indicator--72976923-975d-4b2c-9af8-3bca4dea7711", "indicator--d9f6e77a-a038-438c-b918-9b733464d237", "indicator--0e477f37-7ea2-487a-9cc3-d46bd00c804b", "indicator--08eb63c3-79b6-4c74-812c-49e21c3ff1f8", "indicator--b917521a-43da-45b1-bce0-36d9933e5c21", "indicator--6b2648cd-25fb-4155-9237-56fb520bc1dc", "indicator--1246c623-fb50-4306-9650-016ac316c1ea", "indicator--6458d762-279b-49df-81f2-be33c6dcd13d", "indicator--0c8303bc-b4a9-4115-a30b-617840b41c60", "indicator--004d0bf3-dcee-4cc8-b160-2ea00e04d501", "indicator--5be54f84-541b-43d8-8ecc-ae41fd5940e2", "indicator--d8198bbb-f99b-440c-8057-e1d9ac91e024", "indicator--2aa5f96b-9a60-4322-bd66-5e2a8fdbff56", "indicator--d7820aa3-c157-4038-9c58-b17ed783ba38", "indicator--a0d079c0-ee2d-4047-9029-257986ea3cba", "indicator--640db3fe-7ae0-4bcd-a922-51ed2ad22259", "indicator--e2efd5ad-859d-4d34-bb52-807e14f3c7b2", "indicator--5eb0df9a-70b2-41cb-b99d-e5a077f2f24c", "indicator--08409af0-37ec-48d5-b30f-dd10673504be", "indicator--0296ace8-0686-40f5-8f92-25afc8cbb808", "indicator--e2693faa-3094-463a-b262-4624d0ce1502", "indicator--6926e1fc-7640-47a0-bd4d-2fe565b3459f", "indicator--62051eb8-b51f-424d-b6a2-fc576c0cb9e9", "indicator--496f30db-8180-4857-a0a9-0d6f109f3a6f", "indicator--4f4e08f8-8b7d-4891-b057-ac2f65d6a038", "indicator--9c217d65-c4dc-491b-ad5e-b4692ad415d6", "indicator--7d2f0522-6493-46bc-a837-a15fd6e1e088", "indicator--3455d549-dc5e-44fb-ab5b-df788da4357c", "indicator--0677f817-255e-401b-b6ea-e5eb52222b27", "indicator--ec29722f-a62f-42c8-8f70-e0f2d828c8d2", "indicator--70118585-11a1-4cba-a451-c3294af1bf91", "indicator--afd3053a-3559-48e8-97a3-b85654d069a0", "indicator--36bff559-30c0-4a05-9749-7244e34bb27e", "indicator--2a399ab0-5003-47ed-954c-2fdbdc70b397", "indicator--d6daa18b-a340-4440-b183-5b7ccacf99a2", "indicator--fffe950c-1caf-4669-8ef5-510a4a225f37", "indicator--51c5be0a-d0a8-415b-bd35-b13736b0e9a1", "indicator--02b56002-ec04-4e7b-bf3b-3818ead3796e", "indicator--bfb25749-7846-409b-a54e-65b35e2351e0", "indicator--b67bbd75-f053-491e-ad47-ef40b0d636a9", "indicator--dd2d4166-3c12-4897-8631-cbf76fc0ba33", "indicator--a9f80f61-af5a-45f1-a87f-4f2e5a9a8cf9", "indicator--af4c98ae-7886-43c6-8c75-6d812c5c29a3", "indicator--02aa25ee-d862-4bac-bfe0-3e3bfd3bfcfa", "indicator--3e23ceec-d8fc-4315-8f64-2289c7d08d8f", "indicator--ad775b3b-eb62-48e4-b53f-caa3115c0a6c", "indicator--6e6848ac-c52b-47d6-b137-223df8b19011", "indicator--688f1ab5-2693-4c47-934a-8c90850505b2", "indicator--81a3b78a-d879-45c9-8dd9-1ed9b091b9fa", "indicator--b9bfd8af-8723-4f10-a927-5ae248bf51eb", "indicator--cc0ad63c-7dd4-4104-a800-570f276ced7f", "indicator--908046ef-0f06-47c5-aa8b-9435391dff9a", "indicator--4dab57d3-2d56-49a1-9f62-4959b0936f18", "indicator--e03cacd6-eb79-40a2-95d9-4791bccf198a", "indicator--1664c223-42bb-4667-904c-ee9e6dc7ff2e", "indicator--9fade3a9-d799-461a-8a37-47ced8cc5ca1", "indicator--ca0ac09d-1b1c-4b4c-82ff-9780475035fc", "indicator--02220d88-efc5-43f1-8ae1-3de73c22b9c9", "indicator--dec7f9e3-c6db-453c-8316-1b1aa2ebaef3", "indicator--3c257bfb-a8c5-4cfb-9ff4-6c60c6a242ac", "indicator--43f75653-2cea-4064-a757-1ad7e3546653", "indicator--a320f29b-ed99-4f21-bafd-2d84dfc83117", "indicator--92be13bd-ca34-4958-8aa9-a452c2181272", "indicator--a54c3b75-6a1e-4c3d-9976-9b277941ab5c", "indicator--48e99faa-934a-4c86-b8fd-ac60ff6004fb", "indicator--e9bf8439-dff9-48ab-9193-2309bd3d2d99", "indicator--e27ad449-9f48-4b9e-97a0-9e90a7d2c5e5", "indicator--0895ddc7-8229-4743-af6f-a37ae57283d8", "indicator--a0b8427b-d234-4c04-8b68-65d5db03d4bb", "indicator--aeabb6ba-4d02-4ffa-a99c-4b5921c534ff", "indicator--85c2e241-cc36-4eb5-89f4-db6cde555ed1", "indicator--43b9f6de-9147-428a-b163-b9348f40d8c2", "indicator--f2681781-1d8d-4553-b7f5-afe41ec33cb7", "indicator--ff70e3b9-e312-4d77-9608-8c86e022046e", "indicator--a5a86a63-2bec-4c73-9817-2dc202df9858", "indicator--0c9dc951-6bb0-4399-a659-b926960af3a9", "indicator--d8380d64-8235-4e54-ac62-98be641437d8", "indicator--8cf8055e-f54c-47f0-8364-a3a40e897983", "indicator--faa5d30f-5604-40d5-a850-b4fc5e2a49e6", "indicator--aa53dc61-0a9d-4f1c-b8c0-6e26d2ceade3", "indicator--98eea281-9de7-4b7a-a803-36974f3ea673", "indicator--e9be5354-b8a8-4cb0-9fae-9ae88b85222c", "indicator--6de9be28-6d54-4a5e-9512-097b17234764", "indicator--845e4310-6ddb-4c2f-a182-760500c6f066", "indicator--17e80449-5129-448c-81eb-7af275214f9f", "indicator--c5ab88d7-2ee4-4118-aed1-e098f1c20902", "indicator--86c9b706-ad7a-4978-a1e9-60d33681700b", "indicator--8ec87281-66f1-4956-be04-33cf15c5bfd6", "indicator--ef7788b7-1cab-4571-83a4-2e8fe0d5bb6e", "indicator--528e21e6-791b-41c5-9190-5fd4232a30a0", "indicator--5f6daa92-f907-468c-816d-5fca0359eb34", "indicator--4dd8de69-ddc7-41cd-9ca3-3502419359a7", "indicator--8e6cc6b4-1cf4-4ee1-926b-c29a4476cc28", "indicator--32c279dd-d225-4b7b-90d7-a547fcb4cf34", "indicator--0a2c0fae-8dbf-45ef-bcb4-e835b5e75bc0", "indicator--c34c27b6-233b-4ae8-9258-0b879877ff2b", "indicator--ef29621e-abb3-4951-a56f-0094f1431d82", "indicator--2f0cba89-2662-4044-862f-31bfbb1c8eb7", "indicator--5dc091c1-abea-42b5-a42b-0fdfe28505b2", "indicator--f32a43ec-d6d1-4659-8b4e-561ddb3de82a", "indicator--3d670ee2-da0a-493e-9753-7ca8edb3af4d", "indicator--eb117ecf-3c0f-435b-87dc-fc335d4c41ca", "indicator--5f306e40-738d-44dd-9e27-56b6ab6d4b0d", "indicator--e89c8317-8b91-4f4d-910b-800f2f866cfa", "indicator--7a53f77d-f551-4e35-9ae5-c0c142fb401e", "indicator--f8f0db25-2380-4793-a952-c7e2b6f55620", "indicator--a16d88aa-a313-4629-85e7-783cd69ef91a", "indicator--e5fd5659-b3b0-4712-9c1d-1ca2480cb90c", "indicator--7606abc8-77df-4d1a-b631-504d23f24cb4", "indicator--7112151f-6027-4faf-a54b-7cc547d2cd9b", "indicator--cd37f663-8d20-443d-99c9-3cc7e3e2d54f", "indicator--c2d493ce-7866-47cb-8549-c5320d03ad3d", "indicator--17b03aed-bd08-4794-900c-25ddc7c58fa4", "indicator--9f9a9c64-0de6-48a4-b3f2-5b5c5dee76c9", "indicator--45bfb6c7-a5f9-4982-a486-ef68f5614cff", "indicator--ffc017c2-a971-429c-bed2-6c38da2d45b4", "indicator--891f90f6-79b4-406a-af7e-5e617c4898ce", "indicator--c22348b6-27c4-4be3-a79a-ccc7320dc8b0", "indicator--6ece6311-de8c-4be8-80bb-d3ded37979d3", "indicator--c69855e3-3b43-4ddb-bc11-e7bbb8b761b9", "indicator--f3973373-5bb9-4cb5-9fab-cff156621ecc", "indicator--ed341860-f9d5-4ea8-a3cb-1f4034eeff04", "indicator--14e915c7-4a24-4df1-9033-b9d6af230c87", "indicator--b7effbd8-d3ab-4945-87c9-5486a961a4f4", "indicator--5fbd167e-483b-41bc-a5da-c5852dc280d9", "indicator--d21db068-c59e-47bf-b144-c01f2ee78245", "indicator--adc10e20-8497-440d-8b4b-f4d7e8a52658", "indicator--231e53d5-d394-4cb1-965a-8fb7fcdb2acb", "indicator--434930eb-6700-4dfb-8bb3-782440f6189d", "indicator--f8ac1428-4959-4e6d-a7ae-750220c8a77d", "indicator--569daee7-e92d-40d7-b4d9-c0216757fb70", "indicator--05eb46c9-dbc3-455b-aefd-161d445cf1f0", "indicator--b4f36edf-e55e-4606-b034-8b5b287d3337", "indicator--5c87e244-2eb1-42f6-a39d-adab120fc519", "indicator--9d902187-29a5-4d49-895b-a8f36ad1ea7f", "indicator--7d1362d1-a10a-472f-99e9-2b35f8175b5e", "indicator--e0daf616-64de-43a2-a614-342b03374974", "indicator--ad7f84e2-be3e-4cfb-a4c3-f6eb7e39b2e8", "indicator--fc611121-99d2-4c33-a2bc-370929342652", "indicator--9efdc84f-3e1e-4878-a93f-e51cfa436294", "indicator--87b010b1-86d0-4cfc-8ce9-7d5ddba6dd76", "indicator--b32ba915-3dd5-4491-a1a5-f947f4cee98b", "indicator--6a9f9cc9-8064-4091-af66-d5a7277c8f2f", "indicator--261a260d-79a2-4586-bc8a-1e1adc2539de", "indicator--237c62a9-e152-42a0-8089-fa0b0f911ab1", "indicator--dfccb0b7-f4ea-417c-bf4a-3aa134058637", "indicator--3cee863a-0e79-45df-8507-846cebbd004e", "indicator--ab8d2a7c-8b84-4e32-9626-0c427dbf6f98", "indicator--4ad0b008-f5ba-4e2f-a297-67a6676534ab", "indicator--8e12005a-f7d2-4272-b578-8c25240be089", "indicator--b80f60af-a31a-4623-90fc-b3a9a05255f7", "indicator--5c70e489-5c6f-44f8-b7a5-8943a20d8072", "indicator--7b7be1a6-3472-40a6-a344-9354edba69f4", "indicator--68a7afbd-2fbc-492c-bb94-97bede5344d5", "indicator--39159711-2322-4f4e-90c6-f60f6bfecf8c", "indicator--8b64f098-2d55-4964-8577-71b62fd24570", "indicator--0e964673-6d13-4b72-b68d-5ee2ccb5ff94", "indicator--683f026a-32e2-4879-b2db-a68f5d5ea211", "indicator--14e9d3d0-19ab-4d77-a12a-064afa61a797", "indicator--5a214e36-f3a2-4d3f-924b-7eae6ea82f61", "indicator--c9e9d354-60a3-45ed-a1ef-13a9ee877e28", "indicator--c8f61924-478b-4ae3-9527-982670f4bcbb", "indicator--fa99db71-51ae-406b-9f03-e7f72993564c", "indicator--740df643-2d47-4152-8357-dea02ad7a8a9", "indicator--41c8eeb8-4542-47be-9492-c26605d99dc5", "indicator--df87ba79-0eec-4881-8f84-a32cc1ab5ef7", "indicator--26f3b4fa-9199-41c0-a158-eef44d5e050b", "indicator--f456133d-5f5d-4f0b-807f-ec6e5cbd94cf", "indicator--af1fb868-2f1e-400e-82de-8d27f5bc4fac", "indicator--2fc88c21-9362-4670-93e1-7957d7fb093b", "indicator--f21e9af2-127b-42f1-a85a-7fcf500f3f87", "indicator--39b2c2b7-e6ff-4871-9166-22302e30ce3b", "indicator--37e017b3-11ae-44c2-92b9-60c8608e8e46", "indicator--b698ea67-228c-42db-874d-d52c40d9f4e1", "indicator--21240a98-d5d5-44a0-b1b7-fba494778c55", "indicator--a3b7d862-c542-4ede-b40c-0072ee9894fd", "indicator--2f561f6d-333f-4a8c-8644-309835a13eef", "indicator--fb2f3c61-67eb-4f86-a5e9-74326f5f639c", "indicator--27ea69bf-5218-455e-9096-76aac405e01d", "indicator--c3de48d0-c9a4-4bc3-9d42-f593c6b255c9", "indicator--c63b7cb4-a84a-4dbd-8a3e-126e3a2cf199", "indicator--d8600a32-139e-4ca2-9b7f-a718ff9b0378", "indicator--1c5d4a65-55f3-4205-9e88-cbe12bc23c75", "indicator--7a864503-5c4a-488a-8ee4-dcf60ce8e96f", "indicator--3e6fd044-045c-4207-a591-4f8fbe0ef13e", "indicator--1a9c708d-82d7-4949-b554-7a45ecd6ddf3", "indicator--f90ffd65-089b-40e1-a4d5-67a6295777ba", "indicator--cb034412-1fa4-46f7-acb7-10e31ce2c9e6", "indicator--cdace6d3-f826-4390-86f4-cc9e9c9565b1", "indicator--fb6211fc-7c4d-4533-927f-e2f0237a755b", "indicator--b4bee038-39ee-4267-a327-11e2b5f9d14f", "indicator--9c06d87c-ab79-4236-98aa-3c83a79adcfc", "indicator--642391b0-c1ae-4478-ab74-5d8e0dffb62f", "indicator--71c15aa7-3033-4e4c-838e-03e4c2c06063", "indicator--89e563d3-38c1-42c7-b3cd-39969a730a44", "indicator--6b216954-a53f-44b5-8fb6-4f7466b492bc", "indicator--6891d9d0-d9ec-400f-829a-5a0adf84992d", "indicator--fd49d66b-76f1-412c-befc-e8fe8a649972", "indicator--60cfc801-e1a4-4f18-9774-62d6b7037ca4", "indicator--cd59331f-22d5-417d-92af-f95c6e09b8fd", "indicator--d0c00538-c28f-43cb-94b6-01c171a5d997", "indicator--640495fc-9489-4449-ae42-d84f650a90fd", "indicator--b5faf5e3-5ae6-4f9a-a388-95fb414310c9", "indicator--1a027e64-a86d-4fc7-b491-9d3263cdeaed", "indicator--b4477d96-a704-48a0-b30e-c77d32c41490", "indicator--a596c80b-a556-41bf-a0a0-53be2cc4709e", "indicator--10b75fb0-88e4-4b34-9f5e-e22355eef802", "indicator--af804b3b-437a-4ee0-a98e-58e9aad032d3", "indicator--f4fb33c8-8856-4c3b-802f-ddac82ed6c24", "indicator--1335ec44-5ffa-4caa-94e2-bd3a523ec632", "indicator--6056f96c-fda4-466e-9342-d89cefd3ab66", "indicator--a7169fd6-89e8-488f-8d32-1c8cfadb0bb2", "indicator--5b3c4d58-6a70-41dd-86d0-ecf8b9eae2fe", "indicator--ea879c04-2ad6-4feb-aa76-fd964e48b7e5", "indicator--0226c734-e753-47c0-b65d-103ce09ee525", "indicator--52b9cab3-4e9a-4ce6-9376-54920e110a79", "indicator--6203e311-67dd-45e3-8753-2ceeeb78c6d2", "indicator--df2f8250-bbbc-49a3-991b-2cc8bef540eb", "indicator--487f2ed6-7049-4f8c-8f74-9d949d640d75", "indicator--85e2776f-232c-4ea0-b47c-6c31f526494b", "indicator--0125da4b-bef4-45f1-a029-7baa4b16d551", "indicator--cbf3c8e9-6ddc-4541-bd2f-015fd838438a", "indicator--fb183c0a-ada1-46b8-8b5a-56edde3d01cd", "indicator--44366bb1-d285-4d0b-bf17-5ea3c9cba0d9", "indicator--257dc3b1-e6ef-4984-83ea-f794f5114701", "indicator--e72e6fe4-c99e-4047-b2da-566a7c1d7933", "indicator--413205fc-4e3d-452b-8b3b-8a2d6096764a", "indicator--7e165d9b-6462-4ba3-8487-1657dba54d8f", "indicator--32cf3764-4f92-456f-92bd-16727843a881", "indicator--fa32d61d-3916-4965-ba47-eafb4d1ab861", "indicator--45a80bb2-6641-41c1-8d78-f0e7af19427b", "indicator--23009412-0bff-44d1-8043-940ada93b249", "indicator--4d2114da-d86f-45cf-99b6-8cc3aab0b307", "indicator--b7f6ca2f-c91c-4e7b-b8e8-75c617474db0", "indicator--44707e1f-b893-452e-b75e-0623a07e5648", "indicator--44d11e4a-a499-4f3d-8402-1272e41d1b19", "indicator--30fb9a68-a795-4eb4-b26b-fa911beb95de", "indicator--c7c22547-16f7-4ff6-970d-5119c36560c7", "indicator--03eaa27a-139c-4158-9009-e6f049ce5904", "indicator--e6659404-0ec7-46ea-b942-59cd8dc9bf58", "indicator--d3cc1d3d-047e-43e6-8b37-4dc381484a18", "indicator--683cd011-7c15-41b3-a65e-7aa3885f4694", "indicator--06e32b01-db05-403d-bd6d-426d91fc0b54", "indicator--4c4eb9ed-55e6-49e9-82b8-9875239c3647", "indicator--cae0672f-7530-4f7d-85b6-114e6f6b15d3", "indicator--0815a09e-694e-439c-85da-60ed9c5ab342", "indicator--251bae3a-95b1-44c6-a8a3-e2839ac2fe1d", "indicator--267de943-8bf6-4b62-ada2-fe8ec3af3806", "indicator--560924fd-6580-4990-ad76-3dc4af7094f1", "indicator--ac2ca215-cc98-4f48-ab0f-b7c6030e5222", "indicator--d87182f8-be1b-4f73-b9b4-eadc43122a39", "indicator--a4f621d0-6a1f-41fa-9497-da883b29c2fe", "indicator--11ccae52-992a-44a5-afb5-f3aa524e008a", "indicator--04a1337e-e8bd-49ea-95b5-41e7feac3ac5", "indicator--5e0626a2-6ecc-4911-90d2-f639c7f13bfb", "indicator--5c0644d2-dac2-4c2e-a67b-cdc17c375239", "indicator--8bd4c9ea-8a9f-46ba-b146-1dd1d395b2a2", "indicator--489021d0-f52c-445e-b74f-e5a8c802dfb1", "indicator--a6fa8a36-a6a4-4aba-8fb9-760f7911296e", "indicator--6ff78187-8e34-40a4-bd89-05ed5bc54948", "indicator--9516beab-cdcf-478b-871f-76732d5def30", "indicator--2bbaae83-aa64-4083-b351-9ef723900334", "indicator--7525d46f-caa4-477d-bbb5-f8c680eb45be", "indicator--bd75224d-5915-472e-a1cb-d22ef218c6c5", "indicator--8ff64c51-20e3-4221-bbcd-2b91fc5f8b07", "indicator--dab18acb-0356-485a-9145-76d46e05cbb3", "indicator--c5db833b-1b4d-4b93-add7-d0afb95476f1", "indicator--8ad566ee-f52d-4ed6-bb31-1079b4879dc7", "indicator--ddc089d1-f222-4e18-8a12-4d837966b58a", "indicator--1282e538-c75e-49f2-8322-448fc9984dd9", "indicator--12dbf2cd-039f-4be5-a5fb-8c104dc559db", "indicator--b6d63b13-6ede-4456-82b0-430e9b8e7a48", "indicator--7a1a6dc7-4637-45dc-aca5-5d2838e271ec", "indicator--b2d2287e-a971-476c-a182-e3dbfa923400", "indicator--57c89283-e112-411a-a61d-a88179863e23", "indicator--c638022a-a10d-4d6c-8b93-2e0392585d08", "indicator--8a80fe37-e11c-4330-a33d-efec19e8ab7c", "indicator--c87afdbb-8a03-4f8a-8beb-ba9f63a1cefd", "indicator--f3f4899f-9b08-49ed-baef-d04970be1fd5", "indicator--bd302ef7-944a-4cb4-8122-3832b6d0f06e", "indicator--b6ace096-8a9a-441d-af8b-04897f312cb1", "indicator--4ba2b019-0778-44cc-a623-7710ce6d2f14", "indicator--2a04f0b4-c24e-4990-9ddd-0390995a68e0", "indicator--73daa612-db96-49c4-a2ac-a56c0fd2e199", "indicator--2c1de354-d6ec-491f-85e1-d1e221e6365f", "indicator--b883b018-68af-4ff7-a71c-d79c9a64503c", "indicator--4cdc8636-31eb-4c54-afff-73e947e771bc", "indicator--ba0a639e-1a18-4f86-8e4b-328727454fd8", "indicator--2a1d1fac-b839-4c0c-9523-cff2899d67fd", "indicator--31a2fdec-7c34-49bf-b10c-8bd346e06864", "indicator--fce58990-436a-4231-b71c-59c8d3a6ce98", "indicator--b4a36d72-5e7e-42e0-be5b-08f0f3851922", "indicator--fb8a9321-0d97-49ca-ae89-f5dce6160aed", "indicator--157a842b-48b0-463c-b60e-04f02a83fa26", "indicator--64d421ba-e1a1-4b9a-b277-8720d3b1052f", "indicator--3f20e7ff-7229-49d1-83f1-bcc1e2d7fea4", "indicator--695b079f-599e-4a63-85e9-de05c3d3ffa9", "indicator--97c8e6f2-c712-47a4-b8c6-0811a43ffce8", "indicator--d9974f81-2994-4891-b575-cf28feb22966", "indicator--d91633fd-ffb5-4c2a-9f76-fbb5f470b642", "indicator--4c4e6cbb-c3bc-46cf-b2f6-5207b4b828e3", "indicator--82852612-f803-4bc9-8f87-3d11683589df", "indicator--8537a2d5-2b52-4a8c-ab1e-5eee313ddcce", "indicator--cf28376e-784d-48d5-a261-ddf53468dce0", "indicator--fad95a86-b57c-4f58-87ff-f062c41e0177", "indicator--572d7fb3-0616-4882-a419-d1a02d7e8b43", "indicator--65eae95e-70e3-4c84-88d4-bc1c008e2091", "indicator--40bfffef-e375-469b-8c9c-bd244de2da85", "indicator--c3a8cc2e-6a2e-4c54-84ca-106eeef8a783", "indicator--e3523a21-8afe-4509-ab1b-590806a60b27", "indicator--8fbdf289-07ad-46e3-8c03-1236ce93c1de", "indicator--49a299d8-8b2a-48ff-be8d-4ca75785838b", "indicator--81db1e1b-e70b-4023-8c0d-89f590cd5442", "indicator--de1dcfce-882a-4cc8-a7e0-add762bb51b0", "indicator--a37ceffc-c105-4e04-8c16-6484bab76b80", "indicator--2c6e5ccf-d62c-46e3-91c3-e4fa9c019673", "indicator--0e185886-f1c4-4c5d-bff5-e52fd1d1eabf", "indicator--fca8c9ac-a6e1-4626-88dc-ffbafc8b8588", "indicator--f8a0db7e-e4dd-4a96-9b68-be8fe647594b", "indicator--dd96f0a7-b6d4-459d-a1ed-fa0c40f24b84", "indicator--ce8f4fe7-0f14-4e8a-ba65-89473c1e9bb5", "indicator--2e2a54d3-8f00-4f33-97cc-50ae1acdd7c8", "indicator--88ce597d-b4a4-4997-ab71-78f87646ffe0", "indicator--c1db5666-8048-49b7-98e8-d219db80407c", "indicator--4e02f218-6312-4fec-87ae-a41b5d8fa8f7", "indicator--6eb1f39a-68b0-44bb-b577-ea58beaea670", "indicator--b0746200-ae37-443e-bfd0-bf54ebfe2810", "indicator--e7df40c0-6552-4fbd-a408-8ee7e9b98ea0", "indicator--64f3cc35-efaa-4646-82ff-58e5d35b330b", "indicator--6ddcb7b1-fb09-4996-9fd5-88da0cf5af4d", "indicator--e3062662-3296-49b4-ac4c-ec4f70eb18da", "indicator--225e7de9-d96b-4c9d-a065-3d7c6d112b54", "indicator--3e4eebf4-f63a-47a0-8193-6add07da500d", "indicator--61641d40-51d4-4446-9c4c-65c1f3740b8c", "indicator--b79083ac-41b7-47d5-b5b3-b43ca52b18f5", "indicator--aa4c5224-868b-42ea-94c3-a1d5ebfcca8d", "indicator--d916e79f-c645-4cce-9b8f-7d74223f3e8e", "indicator--8a1fbfb7-0346-4822-8502-386378955fb7", "indicator--e15abcc0-d218-4f4c-8f6b-40d9e2be4d6d", "indicator--632933d6-b543-401b-b520-75684170370b", "indicator--418a37a2-cdd5-429d-894d-53b80cce2e7b", "indicator--3f5cfdf8-4ffe-445b-b624-41a21f6a4fc0", "indicator--b204af5a-7ce8-464d-9e1e-7e651d9141cd", "indicator--36c4c287-88fe-48e7-a6c3-fe2becbbabbe", "indicator--2a9fa7f5-b244-43cb-8c39-4933b08808d3", "indicator--9ca241f3-dbeb-44e2-a67e-89cc1becf9ae", "indicator--79b8cb0f-8a48-45a5-bb6e-9dcaaed3511c", "indicator--4595058a-e25e-4dfc-ad8a-e467a69a1839", "indicator--a1a3bcdc-99bd-47ba-98bf-8e9ce99721dc", "indicator--086a058f-34cf-41a3-8140-491854a5139b", "indicator--514358d7-2555-433b-a3ac-21a49980305a", "indicator--ddbefe18-f8a4-47f8-87a6-fc32a9a529e1", "indicator--f09a1bdb-2b96-4d7c-a4f4-abc4c25294a4", "indicator--dd8101d0-e3e3-4c27-825d-924caeb7d6f5", "indicator--bb7d8d21-3156-484a-bcc5-83ca22c294d0", "indicator--760a6ce8-f11f-4c47-b97c-09b4aa0b5d74", "indicator--049e4d24-3a09-4468-87c3-fbb0fe103b3a", "indicator--f3d6157c-1698-4ef2-aee1-56107e90ed5a", "indicator--d341ea38-5052-4ec2-8a43-22b62e988264", "indicator--abb3f932-e06d-45f7-8981-a7b1caaa270f", "indicator--400f7a30-9079-43ed-a4af-4453c5cf1975", "indicator--e6064211-fb0c-4e75-b74b-2d0c7ae62378", "indicator--653eafc2-bb50-4e64-aed6-cdb748d89749", "indicator--2973692b-1353-4b5b-be20-b827e961fb6a", "indicator--910f33ed-c72c-42f2-bec6-1c7c8cad8f24", "indicator--b6737ee5-af61-4036-a666-3e2276c40b4a", "indicator--fb59a686-00cb-4ec7-855d-09ddb8879f59", "indicator--0546c7e7-c6e6-430e-987e-551f46de45fe", "indicator--19674bd8-3161-4a16-b10f-36aeea35f457", "indicator--986c4823-141d-45c0-888d-ed610b6fc728", "indicator--bb572c05-f8e9-4c43-9b54-b78875870d20", "indicator--f1b4842b-aad7-44fb-9c9d-fb15f5640c15", "indicator--e271b3f9-a18c-4e86-812b-66ed6b8ddb42", "indicator--b3f070a4-7af3-4b0b-a5fc-cc9589bc22ee", "indicator--a7f9ed75-e943-46b6-93e4-ef5b228b2524", "indicator--4c542edf-9fe0-4e62-a4ff-39333fa52367", "indicator--fee0e526-a1c1-43bf-8a28-5e82f5f25b17", "indicator--973a09be-094d-4a05-9b45-a0b047413485", "indicator--8e95fb22-8b71-43f0-aa7e-4261ecea6c2d", "indicator--65782281-7353-4f9c-b064-9c9513d24479", "indicator--e94cd0f3-67d1-43f2-94a9-6aa02e8e5218", "indicator--5a1a2ac9-e0d5-497d-ac4b-9a9d045b7735", "indicator--10f92199-bf67-4211-a7e0-d98f96211afd", "indicator--97c5b7eb-9a20-4330-b5ee-2465281b88c4", "indicator--b566a0bd-dba7-478e-826c-76452ed03ce5", "indicator--d1c8aaea-b2f0-4852-837d-d416d91eb1e1", "indicator--372f518d-d11f-4c1c-9d02-fe972779df00", "indicator--ef3166f3-0447-453d-b34e-1885fc86002f", "indicator--15311491-048f-45ed-b1c7-561fa4a1e428", "indicator--859a51a9-6dab-4265-81d1-8e68cfc149f5", "indicator--a924920f-33c0-4b96-90df-581d86fc1449", "indicator--375228d4-14f4-4472-b084-eae89db74e69", "indicator--b7b267a8-40b0-4274-9aad-122e171fa672", "indicator--eb8bba52-c3f9-4bb2-8789-d9714b0f933e", "indicator--1d4c4765-fc13-4a90-99bc-48504f650cfd", "indicator--a8da4436-c07d-4152-a786-4c1ee5f39f1d", "indicator--dc1ec2c1-8a49-4d45-aa08-bf18d639b76c", "indicator--e384eca5-5996-4a6d-8996-9cb8c58a73c1", "indicator--c644ebd7-a97f-449d-8015-d1fe7de6a752", "indicator--c32e3802-2b83-4a52-993e-0c99510af916", "indicator--2e7acb13-d31c-41f5-a991-285801b3e188", "indicator--a2bc72f1-d508-473f-b5d0-960880cc85ae", "indicator--1bd5b3e5-68d2-4081-aad6-c435c5d07d09", "indicator--9a17515e-d93d-49c6-ac87-823cceabc7eb", "indicator--ed7abd11-1f3f-489a-aee7-d5265ed9109e", "indicator--7a6a25e1-0200-485d-bd76-d73ce046636f", "indicator--ac0d5314-f3bc-43dd-80c3-f5f61d4c096b", "indicator--8eeace92-4172-480e-9df6-eefbe16f28be", "indicator--8c187e09-5892-4c43-a8bc-2da450b06412", "indicator--f1ea3909-01d6-4e05-a4b5-e0e71b76b1f3", "indicator--5797087b-bb01-4ca4-9f9c-b64dfda5ffb4", "indicator--e28d0957-a91e-479f-b9ef-1b7a1e01afb2", "indicator--81e77c0b-4995-4901-a411-23f76687be4f", "indicator--d928b715-9d90-4a2d-8da8-4f9568af3947", "indicator--6ee5e610-71ac-4e04-8098-88a065a8f565", "indicator--02dc551f-78d3-48c3-a172-23068a322b3c", "indicator--e2abff94-281c-412f-a390-b04c27f6e11b", "indicator--109b8599-c0c0-4d32-8006-9e42147f16dc", "indicator--8a2722f6-e9f8-414a-828e-a291d6b8d41e", "indicator--54f2031c-65fb-4cd4-ba2a-42de32d28aaf", "indicator--1219a2bc-2a4f-4a42-9d74-96d2fbc91500", "indicator--2c93c989-a00a-4f9c-b950-2de345ec3dda", "indicator--283132cc-3874-4a71-92a3-dcc5176977d2", "indicator--a32af1e7-718a-4b69-ae06-d03ae3bfc6cd", "indicator--5d61df49-c54f-4c6f-a6f6-23ad053c76cf", "indicator--2743c130-db82-47ad-9de3-6dcb9dcb4b7f", "indicator--7a4d7cfc-0f0f-4fd7-898f-c8b86a7ab4fd", "indicator--e98811fb-1752-4f6a-8a37-869aefeb3f81", "indicator--3daaafc1-33ee-4520-b151-c547da524951", "indicator--bc6e63d3-2c7a-426c-b9e5-82e2630438ec", "indicator--bdb24bc7-e3a2-4b46-ab26-834886d2700e", "indicator--d359db74-d5f2-4a03-a4fe-0be46761a470", "indicator--61694416-21a0-4451-b3d3-4995e583a0bd", "indicator--79594aed-19ec-495b-a026-32b9d9b636d3", "indicator--bfa2a0c5-98f1-4bea-b898-539a9626f0dc", "indicator--ed03f517-7eeb-4042-97cf-d3e850d3631b", "indicator--f01444f3-7d8b-4548-bf1c-c1e58a530af5", "indicator--d4519a91-75a1-41e0-a931-c2011edcbc45", "indicator--392c91fd-c549-467c-b034-2f39c9a76afb", "indicator--3d56b63c-7cf7-443e-94f1-cbb38d415d4a", "indicator--5285b9cd-7f62-4d6d-af4c-cd737e821e7e", "indicator--e8075a17-0e68-4b80-8b2e-d3741797fb1b", "indicator--9515f548-5eb3-46b1-b9c2-9bd75e64339c", "indicator--1b1e4b2c-e3e5-4f53-8f2a-d450c2618755", "indicator--1bcf9a89-0f68-4877-8a22-ac709ee8b992", "indicator--f7fd90b9-95de-4831-9a81-d41f3e1caaab", "indicator--d8a18ebb-f5d5-4fa9-99e7-146dbbc68ae8", "indicator--bc5df065-fecd-45f0-9dae-f5f9081c81c0", "indicator--8c52ae3a-361c-4ab0-90d6-9f9c52e354e8", "indicator--fcd16712-eb24-4298-8699-2d05a7431e75", "indicator--b4177e97-5b73-414e-a993-bc9909a7de68", "indicator--30857613-1aed-4f27-b3bd-4f89b45dd698", "indicator--084cc3b2-09ed-4378-8ff8-c01ab83a7380", "indicator--050a99ac-469f-456a-a8f7-a235f8979579", "indicator--23318b37-6144-486b-b2bd-569398d1c02a", "indicator--035624b6-d388-456a-9562-1426b133f2c4", "indicator--886181a3-cd1f-438c-b682-7b972b3cd1a3", "indicator--f9f37aa1-799a-4e13-9ceb-b323806c2a72", "indicator--556dc15d-9e84-4348-bbd7-3fab120e2680", "indicator--f3f5577c-3d5f-409e-ad22-148e31e62470", "indicator--1cde9a30-98ba-420f-86b6-262ff690f5e8", "indicator--a96dfa6d-2e1f-4e1b-b878-b67a7d541c6d", "indicator--af4a7505-96ff-41ff-b328-3f71aeab5a0e", "indicator--1d07b347-9516-4e02-ba5c-5bb04f325678", "indicator--95036f14-b738-42e1-92ef-819edf014c50", "indicator--9c374509-db48-4eb1-8cf6-4cc96c420b6a", "indicator--5a7ed7ac-4fb4-4ea4-89be-1537b521d324", "indicator--dfb32f00-edfe-4f03-bfb6-c75cecdae466", "indicator--9d726a39-6e9b-4b06-8696-d00bda306536", "indicator--6d6833fb-8b6a-448a-a1b0-cfc0ebbf2a95", "indicator--2b9166be-caf9-48c7-8e4e-c9854e7f3043", "indicator--fbb7e5fe-f895-4496-b65b-898369c7a6df", "indicator--cf042b44-0205-4bec-a4e0-9b34ec5d7023", "indicator--c9e49743-aba1-491b-b348-ba382948b3e2", "indicator--958250b2-a551-4971-9549-5d3dff54af6b", "indicator--9f71a98e-dbc9-48a8-8d3e-3306ba7bf269", "indicator--2117738b-86c0-435c-9593-1e16eb9bf369", "indicator--686b860f-fff5-466f-9909-28ba6e5fc24a", "indicator--95c49210-8365-412b-b3c7-deb5498d92bb", "indicator--11340075-fe3b-4099-b0a9-eb843b52256c", "indicator--2c283c9b-2e5b-41ec-b8b7-944e726a97b3", "indicator--0cc5ceea-7c1b-4370-8efe-168f27b05196", "indicator--3f63d7cf-32ed-4549-b3cb-a1d003782af2", "indicator--60058e39-5d4d-4876-b5b7-22638c6d68dc", "indicator--698a1db5-1113-4480-8150-43ff8dc441fc", "indicator--a3cf3172-9eda-43b4-b3ca-6db426786218", "indicator--520dd47d-ca0c-4d89-9874-a257ea046d9c", "indicator--6c4615ac-424b-4dfb-8ca5-50d4d08c7b02", "indicator--cb447eba-7628-48ff-bb79-69a2b520a951", "indicator--9cf56e6e-89a5-4330-af00-f423e97c32ec", "indicator--54c4259c-ce18-4773-8d9b-bc0cc78ebe24", "indicator--912868de-d9ec-4961-b883-965b2643634d", "indicator--dae22322-275f-4064-a18e-f3989170df39", "indicator--e3e4b3e3-e17d-4fbb-a4ec-6b55188a3163", "indicator--d705bb7e-d824-4374-aa16-b9d343999499", "indicator--fae9bb21-9f2e-4ac1-a777-1799240e1245", "indicator--51d951d0-57e3-45cf-a579-54ebccde1777", "indicator--b0f91461-147d-4262-9d5c-4094d6d42bf4", "indicator--11227ece-df03-4891-851b-86b85366731b", "indicator--0b4505cc-820e-40b1-b1d3-5855074d7ebe", "indicator--7f8a029a-abdd-409f-ba6e-4ecd1f7579b7", "indicator--2ba5be3e-ba02-48e9-9f10-813fa6cbbff7", "indicator--7d46a64b-42d6-49d9-9682-2ea2fda086c9", "indicator--a8b0f475-70de-46f9-937e-3f8cc3a924b5", "indicator--3d7b0e66-e250-4ba4-a7d6-f304b10b5b32", "indicator--e8a51239-e50b-4395-ae88-6aeccde2a90e", "indicator--c0b2ec4d-b05e-4023-9c70-9dca1c699b2b", "indicator--589afdc2-e540-4d66-bff7-6722283f6bd8", "indicator--c9535dd0-520c-4f03-9cd3-a3174db9fcba", "indicator--77cd94ef-4435-4693-a971-5025f629309b", "indicator--009e1269-00c8-4512-967f-c801331321e9", "indicator--159e1fc0-b751-4b2e-ac18-02a17801d705", "indicator--0c63bbcc-0f88-481f-ba40-023167ea83e1", "indicator--ce350594-2b97-48a4-a37a-4f75ca761663", "indicator--6279b87a-10a6-4a8d-9ed9-92159313bc85", "indicator--b7a58b4b-e3d4-4575-81e3-748fc81cbbfc", "indicator--0cd6f5a8-a4c7-4218-85de-a547eb9f9892", "indicator--6167c303-318b-4d10-b8cc-bdfa290b4ce8", "indicator--fe385cbd-e832-4efc-9928-b91c62996c2f", "indicator--78ceb88f-afbc-46e2-93f7-736e084e5006", "indicator--c9611cdd-9e82-4f9c-9443-44cc7d3e6fa3", "indicator--a76f80b4-0a5c-4481-ac9b-f18df9f39740", "indicator--a3ae9987-fe20-4ffc-b220-26d7265f14ce", "indicator--0eac9232-2f4a-4b2e-9034-0adff2656639", "indicator--03b51cf3-e65a-4178-95ec-98114acd4485", "indicator--096a8e38-fd11-43c8-a069-b545f4a67087", "indicator--9aa28f18-985f-4e35-b618-d09f8ba16bf6", "indicator--9881407e-01b1-4126-9d69-9bdc1292b9e3", "indicator--f927fed4-726d-4e1b-9363-d65e73f0cc3b", "indicator--3be2cb24-92a1-4c89-97be-45fcc6963043", "indicator--cadf3639-9635-4053-b27b-2cae7b3e64e8", "indicator--e8aac949-5b80-4204-aac8-a6f9351cf88b", "indicator--b5efccde-c5e6-4598-8c75-c5e05922a6e9", "indicator--c3bb4753-b002-4a2a-9c18-4bcf030341c6", "indicator--3d31b177-8d48-4538-ad9f-eb8db78a5f3a", "indicator--b3ffbe9d-da0b-4d37-b60f-feeac01bdce1", "indicator--1264d78e-4d9a-492f-8c10-c4cb151018e1", "indicator--0c67f0be-f618-4114-bae0-939a37677d07", "indicator--76e18635-9a71-4ced-b026-0f200870059e", "indicator--1ef5d831-4047-4ecb-9cf7-283296234f68", "indicator--9fa40fee-5fe5-491a-8b3e-6315b53c8c46", "indicator--2ff64e16-67cd-4512-85b2-a926cfda2a7f", "indicator--adaba242-0f45-4e7f-a00a-79a217daea41", "indicator--89727053-05e3-48d0-a4b0-d0b7e0ce33de", "indicator--a9cf6267-4286-417a-ae6d-3fa8f3560109", "indicator--5bca3e02-817b-46ff-be2e-1083ddf9aea3", "indicator--de709138-00c0-4d1b-875f-b960d125951b", "indicator--933b9e06-721a-42f3-a207-e0f19b2c67f0", "indicator--3ff1878c-0d27-4290-bd3b-ec5e0b82c067", "indicator--5cc0a5c1-04b6-4284-92ab-3077e8d5bf3e", "indicator--8d398747-79f1-4011-bd7c-aba3396ca51f", "indicator--ee4ef276-81c6-42a8-b8ed-ea6728bda7c6", "indicator--93610677-d53f-4a59-88c0-cdb67b233880", "indicator--3b26ae51-dded-4dc8-954d-33e96a0109e8", "indicator--d9b83471-47df-4887-b8a8-11537ca2a634", "indicator--73a43cce-916f-4cd5-a187-2900d357a752", "indicator--b5644cc9-cce7-4540-94c2-d60e211a28ce", "indicator--84d28528-7ab6-43d1-b2ef-01a0d7ea70aa", "indicator--316416b6-2cfd-47be-8d05-bab5623c3fb0", "indicator--c9826c05-39be-4621-8c1a-92ba1223e0f5", "indicator--5d163683-a020-40c8-a4d5-cbfa5148e008", "indicator--9fe698ac-af3a-4220-8e32-b7c06512d15f", "indicator--882ff57a-4d98-47c4-86ae-1770ba9a386f", "indicator--b194d26e-d4d7-44b4-b826-166d4f9d5577", "indicator--42bbc4d6-6b11-4145-b664-0811fba83876", "indicator--591bf154-443b-471a-a740-37b8bf7d44e4", "indicator--4b98eeb2-748a-4de2-89a0-d501add484c3", "indicator--1775e7b3-4e88-435a-bbd8-322da6e2945e", "indicator--ee9c61fd-cb11-4a6c-b16f-626729875b24", "indicator--e2c17361-ab5b-4915-b3c6-cc186955f037", "indicator--0905671e-2134-4394-953a-511c8b8b95dd", "indicator--c5fcc77d-d58b-4572-a526-4418908efbae", "indicator--0cb753a0-3adb-4083-b044-95e4b88f6d0c", "indicator--a53ebaa0-80ea-4cbe-8f6c-2519ff8c907e", "indicator--62b13958-1e73-4034-8eae-0d6d79a07aac", "indicator--d915d9ba-2444-4765-9914-01487a640598", "indicator--f799008d-15c4-4972-8a80-937fe708ffb3", "indicator--523e823b-70dc-4d39-960d-289357d39753", "indicator--960fe824-12de-4dbd-91c8-5a0e0e753976", "indicator--3451b324-83f8-4869-bcb7-4280123187e0", "indicator--f0abfbb7-48bf-4147-ac9f-a64ca3218e54", "indicator--9190e598-ff27-48b1-b6a7-9bb3a5a47f6b", "indicator--9ed1b97f-a173-428b-9367-a99605d422cf", "indicator--909857d2-1c6f-4aae-b389-6792458789cd", "indicator--725a8c5a-854f-49d4-8e53-2ed8deb1c513", "indicator--513d540a-a106-4405-8ae8-30a087fbba0c", "indicator--886ee570-ce8a-43c5-a493-fe0c9617b663", "indicator--f6838c1e-fc52-47eb-b788-d927d69b4f06", "indicator--2d259247-3c0d-4e8e-ae6b-e976ccbde8bd", "indicator--36a4e96d-296f-4fa3-8fcc-b038ef960e2b", "indicator--9d111d2e-8e04-4d7e-8ddc-d02a41d12366", "indicator--81beec57-23b7-442f-90c5-d15809b9e19b", "indicator--52d35420-417a-483b-b30a-477304dbd24e", "indicator--8e3175db-8762-4b56-b766-03b0264f7c73", "indicator--bdb0586f-c8cd-4884-8031-9d9d30ee61c1", "indicator--5bef9cd4-0196-4665-9d23-5c0d5b5263ea", "indicator--e0fe573c-33c8-4a85-98de-004580e66ab6", "indicator--221eeb96-bdab-408f-8218-638dd06de3fb", "indicator--d4267c8a-a5bb-4a51-8dce-463bc8ac2ebd", "indicator--924afb4f-bb3a-4b14-a4bf-19ab40bd0d7d", "indicator--a0d34271-e2b1-4b09-8da7-061da3c5a28f", "indicator--41641702-7c43-44f4-863c-943455e7fbdf", "indicator--5c8b50ff-8403-4037-a914-838ccef778e1", "indicator--adb8fa3b-95ed-45e0-ab30-24ec9ef649ff", "indicator--ed36918c-90b4-4609-b617-bc5b339e6ce4", "indicator--d217eb7b-0815-4699-9c54-03d648888653", "indicator--190b691e-cafa-477d-9cb4-5fdd93697646", "indicator--3ecfac39-6ddf-4582-b90e-0d499dec09a8", "indicator--0e73014f-ffc0-426b-87ec-620b69cbfa2b", "indicator--ecdf614b-9ae9-47d2-8e04-73cbb1f91a73", "indicator--ca8f098f-91f7-4d41-a3ef-40abf3e68e28", "indicator--d195a010-1c6c-476a-99ff-b1c7b9b42c05", "indicator--dd56d3ef-a2f1-4bbe-812e-e0fa9933d863", "indicator--38255da3-8ddf-4b19-8a69-ee0e6360857f", "indicator--78451190-70f6-42f3-8cca-a02095e52c96", "indicator--2a0fc950-e86f-49b3-bada-ccd01aafc943", "indicator--0825b1ab-1f87-4999-a797-d4724e5996a5", "indicator--6cb43fa4-b4ab-4fb5-8455-fcae7bf84b7a", "indicator--e21d5444-397a-4af7-a09f-e25d186e6222", "indicator--652deea3-a6b4-4309-af58-7519a78de91f", "indicator--766a76e2-18e4-491b-9a25-98ac14184092", "indicator--cad1f5c1-141b-49c9-a3b7-4d3498e695bc", "indicator--67a970c1-5d1e-4412-ae23-6c1e5e6c826f", "indicator--5589b501-0d8c-491a-b5a2-069c85f490b2", "indicator--ee90e96f-b0ad-42e8-ade5-232c60baf105", "indicator--374d62a3-6f31-4255-8945-9bd99a651bac", "indicator--a97e57c0-aab1-45a4-81c8-dac2f388f4fc", "indicator--e7e4dd2a-8321-494e-b655-418d7b460234", "indicator--b8bf3b24-7468-4acb-9911-f8cc3c83f0ac", "indicator--17e58354-3a46-4168-91f0-89a1ca4d05a1", "indicator--16225ac5-a309-4ad6-87fe-f258a3b6a950", "indicator--91cf8248-63f8-4ff9-afdd-e678bc0d6cef", "indicator--68caa48d-d89c-4db0-9004-936ab8b8e590", "indicator--042e5369-97d1-4f96-8040-90ef84544b0e", "indicator--6a595d6d-d306-482c-a282-4080ffd35e60", "indicator--5d7de5fe-7dd3-4fb7-b855-b8a7fe760881", "indicator--f30690e8-f58e-4b9a-8e0f-e6cc8666e799", "indicator--9f03fb5c-be34-4c5f-9238-64ec735006e8", "indicator--f1a7d913-a383-490b-861b-93a77138c3d1", "indicator--bf81a40e-3f81-4581-acd8-29ba51920da1", "indicator--852df384-f143-4d48-9dbf-2b9139418b97", "indicator--ab54c169-d214-41c7-a0d8-2f830506ac02", "indicator--3572134e-3ca9-4ed9-a71b-fdac0de7e90a", "indicator--38353ac7-5dd1-40ee-9305-9422be4be477", "indicator--2660333c-065a-4f82-9052-c1ce3932083c", "indicator--695542f6-192a-4a19-a8d0-e0a5eb24706d", "indicator--d2d2ecf8-a99f-4005-8ac8-a5cdd2adee60", "indicator--294242ad-64a3-4b63-8384-446543882e61", "indicator--12ceb315-a5d3-45d4-9421-d79778d77762", "indicator--3552073a-1344-42f6-a18a-e4f76106c459", "indicator--9ef786e6-bcf0-46ad-a43a-37fce8504207", "indicator--331b2115-1d55-46c9-9f22-7c45022da910", "indicator--4709f62d-f0a0-4e41-9bfb-6a9e9adf9e56", "indicator--d90d658d-179d-4995-b43a-ad11ae1bd252", "indicator--ba7183ad-8442-4b70-bce7-90a44a8280d9", "indicator--6029a880-f7cc-4a74-8775-2d14a9032f39", "indicator--91d9b9e8-017e-495d-acd0-ea289fcb9635", "indicator--e8d8a39e-67b8-47dc-affc-028243680e32", "indicator--ac824a9b-0004-4879-b368-f6ae850a5a92", "indicator--89721c11-82f4-4b4e-b3ff-b8554de48636", "indicator--02f2ebde-3d59-417f-96db-434b4a73fe15", "indicator--d0b621e7-e68d-4c73-b161-5fae49b77a42", "indicator--66622255-c300-4777-819f-fb09a32602d1", "indicator--4e65de7d-cd36-488f-92f9-d6e0e4480ee3", "indicator--4485044e-e500-48e0-894a-a04ae73174cb", "indicator--1e76955a-b8ae-4f52-874e-cb193843fb45", "indicator--5b3c6f33-c544-4921-963a-b0987c823d21", "indicator--29fa14db-9fe8-4a68-a7d2-60c9430dc42d", "indicator--c7c09f07-c26a-4bfa-9218-fac496d3e303", "indicator--eb7fdc7e-4156-42c5-8e35-ad4231eb88be", "indicator--307424c9-41d5-48d1-bd37-28aeba22c4d6", "indicator--73a0d4b1-3a59-4a85-b961-8403dd514dd3", "indicator--458b1152-5154-49d0-9e65-4f1cfe6a5e4f", "indicator--f9a5bc97-1d69-43e6-a9e2-e2b2043d91f5", "indicator--19c35b12-9037-4aac-a613-a227b967462a", "indicator--2254ef8a-ee72-4b58-9ca6-77464531a0e1", "indicator--e1438ecb-6175-491f-aa21-3c2ce665a3b9", "indicator--ea1b1ba6-23ee-4058-ac9f-f0dc816b31f8", "indicator--51181cd1-12e1-4180-86b0-6c4aca64107e", "indicator--c006b073-be39-43b3-8167-9b478512711b", "indicator--0dfc4087-b888-4f73-95b1-06c0b0d4e4b6", "indicator--13c871dc-f99b-41a4-9bea-e37446690dd1", "indicator--9503a515-a761-4eab-8b25-244abdeda539", "indicator--2b5883d7-e013-4376-97d7-c8a17a30f274", "indicator--7fe1b807-9fcb-448d-bedd-67af0ac39feb", "indicator--85505829-fb92-4642-88b5-181f31ad0605", "indicator--0128fbdd-cf92-49f8-b21c-34290c56b279", "indicator--a68e9b3f-bd86-4ff3-b6cb-1c2ac858700a", "indicator--95cb7254-6a52-41bd-b376-ab40ed7aa6a6", "indicator--35eab078-2304-427a-a5d2-3c9e282c59bd", "indicator--08006fca-4396-401b-b040-26a0653324d7", "indicator--6d12af0f-2047-48d8-9bdc-23132f8fbcd6", "indicator--43d035af-6c35-4510-accb-d76f66e93568", "indicator--1fb12c2a-317e-4a79-b26b-eb7f50361e7c", "indicator--5728eb55-2a8e-40ad-83cd-d139413a015a", "indicator--03f64b76-bfe9-4d9b-8bd1-f9b9a3d06e54", "indicator--ebe7dd9f-8ded-4892-9b0f-f194f40a0a4c", "indicator--75a9cf7c-0d4e-4002-b14e-23f6b1b2f693", "indicator--7bbca840-4ee4-48e8-9211-04bcec7b34a6", "indicator--063f6e07-fd1f-46c3-afcd-b7a2b99ec0f3", "indicator--9fe2f0fa-751b-4f64-b4e9-7cf4787cf119", "indicator--5a2994a0-063c-4a24-a7a3-f866bff2b074", "indicator--0d7ac342-750b-4f5b-8aeb-2abf597f2946", "indicator--ade45333-cc5f-43d7-b99d-464e2ffdbe3f", "indicator--ecc9ff4f-13bd-4254-8e69-ce8f7f4ce82d", "indicator--7bbb3fe9-b3b0-4b90-8702-06e26ba58092", "indicator--7a9b8610-8909-4796-8598-f391344f1a1d", "indicator--59ed33af-ab67-41bf-a548-19cf6cc12c4d", "indicator--6d5ff251-b479-4a36-84b3-b9e9eac4d665", "indicator--3c3f2944-0540-4a04-afab-a7849303ab0e", "indicator--3daf3743-162d-466b-a866-54af6fa45337", "indicator--bfbb5346-0e8e-4175-9f16-507c32a23f63", "indicator--4dd1c2a9-dae6-4f56-81ba-e2a8bc422f90", "indicator--8b25b7d5-aa5a-4520-842c-851933bc8195", "indicator--bc3fcff2-acbe-42e3-90e1-24e142cf9ff9", "indicator--95d31829-ff26-434e-8144-3b42d43d86b8", "indicator--38533b6f-7ac6-4028-b806-ff6e94961bc8", "indicator--ac0d237d-8ca6-44f9-b25c-baacb7393eb7", "indicator--29087e27-8f01-43f8-b5fe-96f09eac57a9", "indicator--d931283f-1ca7-4dee-b769-cd872e56601f", "indicator--8d5b64a6-c2e8-4e8d-83e9-a64fec68e7ad", "indicator--df47e364-c0f0-45fe-8cab-66510416fc8f", "indicator--29b9bca9-e3a1-4a7c-b7a5-4d8426eeca1c", "indicator--8ef8826b-0660-459e-8a86-1188cd3ee4ab", "indicator--c514c454-07bf-45ee-8279-e6673ad85e52", "indicator--e61e4de0-6145-481f-8f2c-2a255be9e859", "indicator--0b5cfee9-5405-401f-a532-e9556b489870", "indicator--bc58fd9f-f1f7-472a-a63f-261fec2698ab", "indicator--140ca0b6-a9d5-4e47-9ee6-e3cb03545b11", "indicator--d80804c8-4a0b-4ca6-8198-e847c98c169c", "indicator--e1af2137-3166-4519-bdf5-382c0a67231f", "indicator--1e0a10f2-21bf-43d9-ad6d-da52c4d2392c", "indicator--e853a93a-7112-4e6d-aa91-e995e97f75ac", "indicator--a004f31d-2188-4d4c-9a07-4c2d6f90f970", "indicator--2ff7695a-1ade-47b2-a9da-86ce02851747", "indicator--2aa8bdba-162c-43c1-8c65-3f5f2ac5b7ec", "indicator--1f344aa6-77c2-4753-8bcf-b4db10bb59b6", "indicator--3d8a5130-ef33-4466-9f44-616758d992ee", "indicator--b872737a-888d-4174-a479-09bb57743f2c", "indicator--90bcabbe-86a8-462a-ac31-b2c382756de1", "indicator--2756b506-ea25-46c2-9c08-8bbd060151eb", "indicator--78eacc58-72b3-404f-95cf-e7f3cf745a2a", "indicator--e59f3a7f-ef2d-4202-a8cb-be67b81f5eeb", "indicator--443adb44-4a96-4e09-a299-5297fff53de9", "indicator--851c8872-460e-44a8-92b1-dda94f394344", "indicator--640715c6-4b7d-4491-8bcd-77272eb8ceed", "indicator--c576fe2b-1c55-41f3-8479-d53c03d95ee2", "indicator--1736f095-73a8-4194-872a-c47e98d4c1e4", "indicator--c477f672-fa03-4e97-b386-029f3bd802dc", "indicator--8c9d116d-22e6-49ae-97e7-e06c7f070070", "indicator--56247829-69de-4242-b6be-f40cf8ba0277", "indicator--a637c5a1-a011-49f2-ba5d-f2a031646d10", "indicator--03a03a9a-7f7f-4539-8c7d-3f8e436d9833", "indicator--c6adebde-c829-4989-9823-020a7d81a454", "indicator--7767c77b-86a2-467e-baba-b28d089e2730", "indicator--b31f93ff-eb5d-453f-8022-4f808484566e", "indicator--5ca029e4-c27e-4444-8452-e57ad315a968", "indicator--d4212b88-054e-41e9-8d66-38b2e016b1f7", "indicator--3b749835-6d4e-4f16-a250-a93aae2676db", "indicator--ba17382c-d689-4c3c-a2ae-323a297efcc1", "indicator--e968746c-3f38-41a8-a758-e00fc4279fc3", "indicator--815cd59e-fd8b-4bcf-a2c0-617670b1bc3d", "indicator--059716d9-e150-4007-9bb6-8470ef2873d8", "indicator--256d147f-c607-42fb-8013-06e5d7ddbc7a", "indicator--86d7e7c7-1f99-49d2-a64e-2e7984957713", "indicator--3b055427-7a70-4381-a464-dfdb37fd0760", "indicator--b7bb1d2f-3580-4b63-9b54-99263ec6bf6e", "indicator--50863752-1d5a-4e23-a8c3-fd1743a109e5", "indicator--f0e17b27-d2a7-4561-a638-583bf302a42a", "indicator--90051ad7-569d-4667-936e-787e18b12e8a", "indicator--1fbf0299-bece-4eec-b8a3-454db3f280fe", "indicator--3466a8e0-4dab-4965-b6cf-1a8d46ded6f5", "indicator--038066cb-56ee-4db5-bad8-e6863a6890a6", "indicator--df50c2a0-a884-4eca-9e92-0d34dea6a33d", "indicator--4e9cd39b-ee65-4211-9b1c-93e33555579a", "indicator--e21b8901-05c2-45fe-8a59-245585893cdb", "indicator--8dc5a97a-1b06-4cf3-9922-39208a1b72d1", "indicator--5bb44a90-8893-473e-ba2c-5632fcf68e5a", "indicator--9e93efaa-a43b-4c49-9291-02f765b1e332", "indicator--7c8c67bc-5e47-4fb0-8e70-062a39cb3cb7", "indicator--0c902b39-8249-4b09-9e84-0495d1106f98", "indicator--89e9bd2b-0ce7-4d04-bb43-0f22ddef7580", "indicator--fa48a49a-bd4a-4d0d-8d9f-65e152bc9937", "indicator--2544fcce-4178-4b22-b7cf-89894c75b4b0", "indicator--f17b25e1-1be3-4b26-b373-bf365895085d", "indicator--4cab13f5-c112-4cf3-a013-0a9eaf66451b", "indicator--63b25d77-23bd-43da-879e-2c3a429605b6", "indicator--b3138fcc-a3f5-45ec-8aff-84ea5dcd9605", "indicator--55a5446e-17ad-4bff-ba9a-642d029ad02b", "indicator--a89e3f6e-83e0-4823-a1e7-a39ca8cf9463", "indicator--cfe65a35-3248-4499-a19c-bf506d6aff17", "indicator--d626dd9a-6ff3-4dc7-b96b-01164939a35e", "indicator--7316b373-0d79-4810-82a1-4b6d2ae082d2", "indicator--95610f9c-b001-40ac-9975-a98b532cdbe5", "indicator--30eecefb-52df-4352-a8ea-bd0cbbaa7cbc", "indicator--ab836128-dd61-400c-a4d3-bde30d64e82b", "indicator--eb7b0919-271e-4683-81e6-16e09d3a5450", "indicator--33609177-80b3-49bb-aa9b-14105db99f5a", "indicator--4e8641eb-4123-472c-8e07-232f51078c60", "indicator--e1ff2be0-783f-416f-9c2e-dba941ae46a5", "indicator--a9b01bb2-c288-4bd3-a481-27c7adb90838", "indicator--debbffe1-9418-41c6-8991-9bf2f14bb51a", "indicator--a2dbbcdc-a22f-49d8-bc44-5829816415df", "indicator--a7c09aba-7327-4996-98db-5cd40cc467c4", "indicator--59a31190-80fb-4a7b-a4c1-4ac51d184ee2", "indicator--f25548b8-f141-4521-b6a4-4b1a831e5bc3", "indicator--964dd139-f395-443f-881b-fb832c3e0a96", "indicator--d002231d-09e2-4d06-93ef-f2f5c3b6e30c", "indicator--ad0da7a8-7c79-4e5a-b07c-e8e783132d49", "indicator--736d9a48-9e3e-4db4-91db-439441938378", "indicator--fd26839f-0ff8-476d-905e-d945fd604e90", "indicator--c0d99278-e421-4fd7-b158-f18597bae620", "indicator--d9c31867-d9a0-4e24-85b8-fc3944c7be47", "indicator--5b1805d5-45d4-4abd-ace0-c48198956750", "indicator--77e9d0aa-7ed6-4303-9498-96afafdaa947", "indicator--3f35ab2e-a6ea-4104-9509-081d935c1c83", "indicator--2c5b3ac2-ab68-4ad4-bd7c-28128d439cca", "indicator--5a206d01-670b-44c9-b60e-2820017ba396", "indicator--7eae3819-a532-4c15-8fbf-69b0682756f7", "indicator--f23781a9-bc4d-4143-8d7c-a4d9cdbcb782", "indicator--1dcaa5d1-6f4b-4024-aaae-5169e04ab4d9", "indicator--e3d59f6c-47e0-407e-bcc5-6f543363f616", "indicator--3156fa4b-da8f-4ec8-ae41-5b36d1ba5c1d", "indicator--d391dd12-7661-402b-afde-8ec9764a5534", "indicator--30030956-38c0-44ae-b98a-e783945174de", "indicator--3d8f73de-0b68-422f-9060-05815cc2453c", "indicator--1b4d72b3-4be2-4c30-8df9-d610e7a1ce63", "indicator--6d85cf19-8156-48aa-a7f1-fde6ef74aaaf", "indicator--47c83cdc-81fd-46bc-bfce-b0d38bf01c2d", "indicator--ef6b58a4-5d36-4560-bb78-d59688b7625b", "indicator--78d654fe-6c74-4057-9ab1-0bca511d5602", "indicator--8a8c26a0-e744-4303-978b-7846d38b465e", "indicator--872b3414-1fbd-4309-ab7f-f9a46c4cbbbc", "indicator--e9cfaa3f-52b9-4eed-92fe-d6290a9c0f52", "indicator--b974bf5d-f109-4462-8e50-36fadba7143f", "indicator--ef53eb4b-ccbd-41bb-8f12-0258fa549e70", "indicator--42ab35a6-4541-4d95-9995-0f00eedf20c1", "indicator--04bd1d25-0614-4733-ae4f-0b441a5534a1", "indicator--0970599a-7be5-419f-a80f-03706513b96b", "indicator--f3af4e6a-b31b-4a26-9d38-c75c5e20b703", "indicator--b7319262-580d-4f9e-93c7-924b8706ecda", "indicator--8598a9ff-cd20-4920-9eb8-6bfcc4b37147", "indicator--ea11d978-bcad-4c49-ba1f-abbfe6a65c27", "indicator--c5eb5a9f-09de-47d2-b337-886e788b8ebf", "indicator--5feba939-0043-4070-a1cb-d1d02ee812a1", "indicator--32dba316-845b-4d47-ae7f-802495fe28fc", "indicator--048eff08-fb3f-4910-aa51-922ad580e28e", "indicator--0dc1975f-64a3-4ae3-bc1c-2e23c284c80e", "indicator--9a81c226-d8ea-4a02-ae68-3035ed050aad", "indicator--88860b11-35d4-47cb-b21e-46176d1d7e7e", "indicator--6f6f136f-789a-47bb-ada5-92c8a7ac49a9", "indicator--67d85f0e-5329-487f-b502-f416da3c110d", "indicator--01059411-f5b6-41ab-acbb-52176c0f3305", "indicator--61644467-9bc0-44a2-92ee-52dfb40d73d2", "indicator--2b57ddfc-6b39-4943-a23e-8b003ec6ffc2", "indicator--555e40a0-3484-453c-b083-9b21fdf21f95", "indicator--d8e48620-3ecc-4e0c-8e0d-1f2dea878bcf", "indicator--423a3e6b-ad8d-40f3-be58-45f29afc4684", "indicator--b6863132-fac6-445b-8e43-f63dc2941bb1", "indicator--1bd8b0ad-db39-4d12-8ff7-a9da991145e6", "indicator--38d18712-fafb-4249-b5db-83f938ffe9f4", "indicator--ee2b2d8a-94fc-411d-95ef-20cdf75285f1", "indicator--f61f5cce-2c17-4a68-bbd9-661a5ef5c7ef", "indicator--fc2688e8-81f5-4acb-9272-6f95f6b48951", "indicator--d3005587-7bdd-4353-980a-c48b05959b5f", "indicator--2882505e-dc03-44f6-9bc5-5aa163b245e8", "indicator--f9d7fd1b-de21-4963-ab14-2e050fd58d20", "indicator--42825304-3737-41df-8c6b-34a15e6a091c", "indicator--adacf4ad-0a71-4ecd-afdf-e16dcc0335ca", "indicator--99e3047e-3b4a-44b8-8bf9-363a3eeb176d", "indicator--89c02f4d-2c95-4f8c-8883-0faffa5046ad", "indicator--4d6a1e58-46c2-4b2d-8b27-080a9006a2b3", "indicator--dc7f0898-8258-421c-a422-5b393ffcb9c0", "indicator--c398b208-5119-4c4d-afa6-51b4cf4b60a7", "indicator--3a5f8c64-f2bf-49cd-82a8-5a5a02ab6c35", "indicator--f757e00b-b48f-4486-a04e-92b856d1cc85", "indicator--5700f1ef-5250-4fe6-8469-6c237b87daa9", "indicator--e4cf6928-18a1-4c2a-97b7-e9fb6875043e", "indicator--e4c577ff-2ad4-4dd7-8229-b976f618d82b", "indicator--f567be78-5de5-4441-aefb-48b089baf82c", "indicator--b54618b2-150b-47eb-b4ea-6f4dbd5d50b0", "indicator--b2e429c8-d108-4e22-b65a-16d451b563d6", "indicator--2f21e270-8041-4081-84d1-372b56a87cd6", "indicator--032360a5-83d7-4827-9583-a07bb61b9a9d", "indicator--299b535a-406f-49dc-bfd8-f1e60f75c5e5", "indicator--216946f1-039e-4bf2-8004-2e96bb1a4f2f", "indicator--e2b7a153-e7ab-4765-a52c-e4b4e3af46ff", "indicator--63a2d35c-2c6a-4ace-a943-2c949b4e7d59", "indicator--0e564fdc-9798-45db-92e4-a645f25e505b", "indicator--ecf0590a-2d04-44fd-a19c-4fb998f2bc33", "indicator--d516e841-1f5c-4018-996c-530496a3a388", "indicator--ea3f064b-0258-4894-b8b9-cdcd7b06fd3b", "indicator--0b4ef0ac-c63d-4255-bad8-1812c7860053", "indicator--cdd71318-9cbd-4c96-9d9b-109349c3a350", "indicator--9f1846ac-fd00-4e98-a1f4-096f53b0f445", "indicator--a7134d95-9eef-4b77-a90b-c7b5fda0d082", "indicator--78348829-2324-4a97-bc99-dd576de96b44", "indicator--e2bc1daa-5e39-4518-8ce0-0ef0b8be16c7", "indicator--7ac87e90-2732-4e8d-8671-2c4d19a63b67", "indicator--8d5e9c88-642c-4a77-9d6f-4460871790a1", "indicator--3207a852-3ac6-421d-8ee1-aa3e814d6a1b", "indicator--90bd61a9-78b3-42c9-a510-f88ee685d2c9", "indicator--13dae6e3-426c-4b10-a72b-768b187024e5", "indicator--74d3083f-ca9c-434f-b1a4-e10c800ea6cb", "indicator--d8183d41-eb9b-415f-bcb6-21ceebd919bf", "indicator--a865f346-7402-49c4-b725-c5374075a68c", "indicator--2c34e77c-98c2-4009-905f-dea7a1f6db42", "indicator--0cfa75e4-b17e-4c44-815b-cc750f763a59", "indicator--71881fdb-f949-47c4-b752-d3a512880e22", "indicator--21272280-9791-48be-98fb-0d9ff9180c0c", "indicator--08ac4dda-5cc0-452c-bff5-66f321f45559", "indicator--8d9be96d-f795-45da-a385-0e1f7e5e16d1", "indicator--669d15ff-f7c7-403f-9430-34a65a3ca286", "indicator--f3cd4ac3-5678-46f6-8e37-97ca91bd5e96", "indicator--3074d8d6-7713-474a-bc85-02e0e4d05799", "indicator--810337ea-8dd4-43a8-aeb1-85115912c861", "indicator--f16414e6-6ef8-4196-9918-4ae02c210a9c", "indicator--b0305eea-e644-4445-9872-17794c74b8c1", "indicator--cb516c9a-ab55-4d36-b1fe-8a945a422942", "indicator--dfec71c8-ff49-4000-a026-26b92c23aca5", "indicator--8ac70d71-6c1d-4ae2-8b63-bc4e5c88bb7e", "indicator--68acd10e-b3c9-4613-b73c-01dad5632d57", "indicator--10822254-88d9-48a1-bc6f-d297e612fe05", "indicator--2795c4dd-ee0b-4803-80aa-14af0ca736ea", "indicator--2c89fcb0-0e09-4769-ae7c-a8ad663a0ae4", "indicator--1f280244-50e9-4045-9838-b23e8d75ea53", "indicator--1a8ca0a3-528b-4f35-8497-36d64dd400ce", "indicator--fc6f7d26-ad88-45f5-80dc-3fc3ea20b80b", "indicator--79916ade-825c-435c-bfa6-10b49519d5e4", "indicator--22859ce2-d7dd-4778-bb20-9391d38b0f5d", "indicator--62b7f2d2-a408-418f-a7eb-c7e61405ec98", "indicator--fe386ad0-877e-428f-82b0-2eaea545c3f3", "indicator--87c06551-cc7b-4ebe-9b1d-7d8ce453dbbb", "indicator--f5f82702-2ebf-4d0c-b026-7874d2776b59", "indicator--7784ec60-adad-40a2-9738-cfb2c90005e2", "indicator--14266acd-4669-4c27-a991-527bc6a73983", "indicator--9f440524-36f6-4854-a89f-5f6a228a2efd", "indicator--cc590634-8ba4-4232-95e1-143cd48c4150", "indicator--b3e2942a-ddb7-48c2-8341-679f4efae53a", "indicator--745e2ca6-3d33-43d8-87ce-94bcc03afea4", "indicator--25e7397d-c20b-4ed0-b0ea-9e596543461a", "indicator--faf56783-cc32-46d4-acf6-7c3120d312c7", "indicator--521a003b-3283-447f-9a5a-27921ba4dc66", "indicator--4d82c527-3fa9-4abe-bbc7-c2cd9cf55beb", "indicator--61f8e5eb-dbfe-4998-a64f-c8a61bb3fc29", "indicator--bd921493-abbe-4ae0-98cd-ba1e9b897da2", "indicator--d7e25702-5de8-45e2-b75d-0abdf62f0cd1", "indicator--afbc392c-f3e2-490d-b4d3-ebb4d8f48f10", "indicator--21295f7c-d057-46c3-88a4-b01af6d0369a", "indicator--fc7f9457-f5eb-4783-9ce2-62459e3be75e", "indicator--56ebd7b0-b704-4bd7-bd2b-d27ab4b58b1e", "indicator--bd72226a-e962-4f31-8d9e-8567a81b5c9b", "indicator--8ff64af2-19f5-4204-9069-5164287227ed", "indicator--dc3dc687-dff3-4d61-82ff-332137fdd4b8", "indicator--b9766796-3233-4578-91cd-6e03c152724d", "indicator--343ed985-c3f6-4490-bd95-cf8312461cd6", "indicator--70734888-e67f-46bb-95e9-2698d8119cb6", "indicator--65def553-59ce-44ca-8b68-a946a9c22342", "indicator--adfbe4a9-21b2-4bed-95ba-32cc57e356e5", "indicator--d7dee73b-1d42-4b0d-9831-c9eafded6a09", "indicator--d937b064-deb8-4b6c-ad4f-93b734968abe", "indicator--b2688d11-4c03-4d0b-84dc-5d43a3ba28da", "indicator--6a902782-dedb-4e0b-8544-f5f0ded4d756", "indicator--86fe55b3-4afe-4322-a21f-12cd1d7d6b97", "indicator--3a065d82-3cc7-4321-9a02-902826b6ade3", "indicator--7ad006da-68e8-4021-9f59-3215d52067fa", "indicator--52326ce6-66c2-4695-9b83-fb14f3c47091", "indicator--90186067-8ce0-4558-8e8b-01a4ab2bfde9", "indicator--7dd69c50-1685-4665-9f3a-6090e745f38f", "indicator--9fe105a2-158f-4591-ac2c-a256b2276ea7", "indicator--f330587a-8501-49f4-8d14-405a4bd6ebea", "indicator--bd16f840-5d07-44c1-90a0-02a042255bf4", "indicator--3090417b-43ef-445d-8f7f-82e43ea8f4cf", "indicator--efe14235-d897-4d32-b5e2-2f040ec83ab3", "indicator--8aa1f3eb-afc6-4bed-8b33-97322caf5cdf", "indicator--3c5b2fcb-8600-4dd4-add6-a70e3139150c", "indicator--cdaf8d30-1a3e-469b-8587-993d2d1beeb1", "indicator--f6c0aa2f-2559-4829-84f8-f4b14bf37684", "indicator--326b7a04-1688-4098-84f1-4660f73a7946", "indicator--b76def4a-1811-4b1d-935a-6f81764946a4", "indicator--27fa4f46-aed1-4813-9e4f-8ade4921a8be", "indicator--4ff307b9-d9ca-40c3-a24e-11f56be8b601", "indicator--4793646b-7cb0-46c7-9273-59b65eb8c71b", "indicator--c5566b75-1b41-4e14-a017-ce4cfd601e5e", "indicator--f3ab93c0-31e3-46e9-92f7-6d7f6662df01", "indicator--62a58897-ff2f-4ed4-a698-5e5ed8d39da9", "indicator--ca260b62-f12e-4a8c-97ed-873f06e8f331", "indicator--6a540a84-ce14-4da6-ad6d-f9c2f2a4afda", "indicator--3c6992e8-7be3-4c61-9d47-aaded04a93e9", "indicator--34769043-2004-4fe3-9ff5-c96ff9a066c4", "indicator--ae9aad2c-66a6-4ef2-8d7d-1faf634c742d", "indicator--abb2636e-0e2c-4783-810b-16e24621e121", "indicator--4cc88dca-303a-4429-b6ce-755066949e07", "indicator--735e8e8d-e6f2-4dd7-a6e3-8e35ef78d2e1", "indicator--91d98f6f-f2e9-4806-8753-94419d924dc4", "indicator--abb61999-0653-4dfe-952f-6918cabd8767", "indicator--adbde2c0-7825-48c0-9881-7c71efad2724", "indicator--5571c943-39b4-4976-a899-769a071f1c7f", "indicator--0a5fd714-4f39-4b65-933a-d2ba5f490154", "indicator--1bf04854-83b7-4264-b76c-4f78a3a552c6", "indicator--778a0721-3ace-498e-8698-00344f7314ec", "indicator--81d356ad-d266-43b0-b9c1-62020f5c890b", "indicator--64fd7a13-994b-4086-afa3-61159973f0de", "indicator--27fab337-509f-4063-9155-722ddf496d8b", "indicator--f89964ff-1c6c-4d8e-9bdd-b95c048c93de", "indicator--cf5496ae-1bf3-40a3-8e3f-c56e04572046", "indicator--1b3f8413-3563-4f3a-a001-98a70cabcea3", "indicator--d562a52c-b0a5-455b-96e4-d63417754667", "indicator--0bd4e616-f472-46df-814c-0d0e0d54805f", "indicator--7b51fe22-182e-4f5f-a6cf-b97da0d3d823", "indicator--138eb1b0-5b74-4ddf-83b9-b4943b09e49f", "indicator--dff4f2c8-b36c-4c58-a449-d2f20872b680", "indicator--85e31546-71f7-402c-b5e9-7746af054e81", "indicator--e9a8984e-a626-41b9-b268-475c84274128", "indicator--b70b0713-bf0c-4b0c-a27a-d3c5af759c2c", "indicator--d955ce5a-1294-46ae-b4da-834e597d4490", "indicator--b6e4e829-4538-4598-8912-8b7a54e28dd4", "indicator--ff19aa36-a164-4b20-b0b4-924b884ab065", "indicator--ad6c313d-9f98-45e2-9db5-daddc82c7f92", "indicator--e5fdb000-1ec5-4f91-aaef-79d2de0232bd", "indicator--419962a8-92bf-4f72-a0a0-476df5c2c4bf", "indicator--30202737-17c1-42ce-8955-f97501449187", "indicator--71db6d4d-e277-44fb-90b4-c1837ec2747e", "indicator--8bc5e1c9-9ed1-4303-b2d6-189f0531aa00", "indicator--8635bb68-0493-449c-9813-46dbc8007d36", "indicator--1e684a4c-f87d-4ba3-b621-9719fcdca28f", "indicator--d5478c09-32c8-40ad-8fb2-5bbd3937b1b6", "indicator--a931f691-ed6d-4039-98be-54913c6ca176", "indicator--432d4471-6c9c-40c6-96c8-0fd430ee0e3e", "indicator--43a7f26c-87e3-4c8b-b5dd-f0fefddf9400", "indicator--a759a79d-269e-4900-801a-1ea26802e4df", "indicator--0ddfa846-4785-4247-b4c4-493bc070504b", "indicator--1e493f54-c8aa-4020-a068-651a851b8cf2", "indicator--f2bb205c-917b-4f08-a26c-98e1d77a2007", "indicator--932a027e-5d40-44ac-8412-afc5e1382c75", "indicator--68722043-0ba3-4101-9f55-66feb23d36e0", "indicator--2691756f-468c-445e-8f7e-34a799d5e50a", "indicator--d4e4357b-abab-4abd-a1c2-83de5a6af790", "indicator--a5865b6e-5cbf-4dae-8413-86bddd0b6cc0", "indicator--2cf6e3f1-6c00-4b52-8f3b-3fb907dbc1fd", "indicator--6b47148a-cc35-49fd-aedb-a323a2dfb552", "indicator--a7819199-6c19-4437-b07a-a22aaf858961", "indicator--cafbad49-f561-4fed-9add-3f5237bc4237", "indicator--6807045f-bb61-4546-9d32-e659f73f49e7", "indicator--80f610a4-3114-4560-b1e9-6f2e6f0d01bb", "indicator--e60acc6e-9357-4dfa-9f32-9476ecf830e2", "indicator--1d54aa53-0acd-421d-a79e-0b7dc5a2d463", "indicator--4d479bbf-5961-40bf-84b3-92e2074c10bb", "indicator--6c8bf1cf-cfe2-48c2-a66f-bc5703cb9116", "indicator--a4692678-3da8-424a-ab71-caad04683beb", "indicator--da50cd72-cdb0-4bf0-87c4-9e26c0729e4a", "indicator--a4c87bc9-d06d-49f2-b9ac-29d88edaba65", "indicator--83bbbee0-d1fc-434b-9f08-1ab693ad26cf", "indicator--bbcd6a15-03fe-4c1d-8842-4060e962907a", "indicator--6b82d698-a0cf-4e46-9183-f76dfe82d957", "indicator--5cc5b0ce-1f7c-4a0a-85e7-0f1bfd7244de", "indicator--60c41726-c0c5-4d3d-9795-696445444f4f", "indicator--81eb4d2e-ca5b-4cba-aa73-4ee7528beac4", "indicator--4ecc3f50-8a86-41a7-b617-37234159dddc", "indicator--c43d1eaf-a972-4d1a-b510-2bf0639be40d", "indicator--01617ab4-2998-4dee-b27d-0fde605b5f4d", "indicator--779da1ee-f951-4bc9-8a1f-e385cdf3b5dd", "indicator--bdd5a630-d80d-4bfd-8ced-52cdb85eca64", "indicator--8bc8b6ac-2aa4-4c4e-8e3c-244e0eedfe4e", "indicator--a9ca7c12-06d2-493c-b243-72ef77876820", "indicator--7ecba8e5-1eff-4434-a822-0722ffbf4f4d", "indicator--b28f5f98-8c59-4acb-858c-2f0584305ead", "indicator--8d774168-7a03-450a-a78e-4e659feacf45", "indicator--e6efa4e1-7a57-49b1-83f8-78f528c7b524", "indicator--509c6da4-e802-49c4-8d6f-74e8031b114f", "indicator--c33c18aa-0558-48b8-8799-436398f9c1c7", "indicator--862ea553-6a1e-4aab-9282-4dcda26e80d1", "indicator--0a0f7413-9d0a-433f-8e2e-dfe446abc0cc", "indicator--7d04f31f-f903-4196-8cfc-914da788693d", "indicator--77c0a618-1648-4d4a-9599-3047d590ca05", "indicator--d27dfe24-467b-42f1-9101-f002d9c02de7", "indicator--e55056ec-fee2-407f-b5ae-cb90b15e3112", "indicator--11e581e3-cf47-4307-9809-6c840ed53e7e", "indicator--23e47015-3e12-468e-9a1f-42a1875843a0", "indicator--62ca933e-ea6f-4fe3-b528-97ba0898a9b1", "indicator--121d73aa-572d-4c97-aa1a-1dfd402dc4bf", "indicator--c842f28d-b7ae-401c-9f4e-b604cce2b453", "indicator--80a9b98e-0fb3-4749-929e-1112639fe484", "indicator--026d8c87-edc4-4626-91c0-1644ab9e56ce", "indicator--111c8a36-8823-4d53-984d-e4264b758a92", "indicator--2eca53d8-787a-4731-ad0c-07e12e174fe1", "indicator--2b205b37-7065-4e28-bced-9dfdc0b4863d", "indicator--5cfba1e6-a2cc-49b7-985c-7c750596429d", "indicator--6388a14a-d22f-4976-9bf6-5d0d668c7310", "indicator--e07a4413-9d4c-4f01-b4e0-ef6edc86e377", "indicator--dee635f3-27f3-4bf6-bb3f-78a641a3bd74", "indicator--8dce783b-1272-4230-bad6-0a5af94bb5ce", "indicator--7b5bc735-eee8-4510-b1fa-f896eab12879", "indicator--ac72cc20-875a-43b2-8fd8-c3be45ac558e", "indicator--7e5bc96a-c655-4eaf-a08c-69e52e138afc", "indicator--15d58e69-0e4a-410c-8e47-41889a8db867", "indicator--3185eea0-ffd1-4e35-a57e-f18e6713f263", "indicator--11f0c797-e91e-4ea2-8934-cf87818ef52b", "indicator--fd24f4f2-4b13-4930-bb5f-3257e70c896a", "indicator--19395c7c-6a74-4730-ad14-1913454589d9", "indicator--5c204ce8-d71f-4e4b-8181-37fd1e8fe7f2", "indicator--fdc88cd0-58af-4d66-af00-544068f65a00", "indicator--817ef3fa-9a01-4668-a332-82ff32300cb9", "indicator--a4e82afc-1165-45fc-85bc-746ae99bb4cd", "indicator--ac49f5bd-dd0e-4e47-a6bc-2d22d4dfe825", "indicator--0348aaae-0d89-42fe-be80-d3033df4a12e", "indicator--53aacf32-2c5c-4032-9928-853c0fa7533c", "indicator--308b4fba-947e-4972-9e82-515224cd83ce", "indicator--ab25427a-338b-40e4-9aa4-eda9823bed0b", "indicator--a38928c5-9f2b-4575-923a-ea99ec42d474", "indicator--601342f7-fd5b-4d35-9c54-50b5e443ae78", "indicator--6aa01625-97f6-4013-b946-00637ed7afba", "indicator--e7970849-fa81-482c-aa8b-2999eea2abee", "indicator--bb8edc74-434f-4a03-b9b8-89d842fd6550", "indicator--d5a02717-44b6-40c7-94f8-679cb81a5c2d", "indicator--c97096b2-91c5-4640-82c1-dbdd5c67d832", "indicator--46d5f1c4-9ed5-46b5-92cd-74336b481b78", "indicator--55e9f317-64d3-4028-a51b-58bed57beacf", "indicator--00433bef-c6b1-4270-93b7-624fb9e01beb", "indicator--aa136ddf-27d3-46c4-a6a0-c9a7046069b9", "indicator--1b573065-7862-4786-b2a0-8ea8eb94acc1", "indicator--c933e157-6fd2-44d8-95d6-1ec5167b63ad", "indicator--d4d5df42-5ac5-4609-9a83-8889c43df054", "indicator--31832b28-8235-43ee-af2d-fc64ce8c27ad", "indicator--84327172-ac68-4918-be32-acfe449dc453", "indicator--30b6dc95-77cd-4fed-ae45-ca106d835531", "indicator--c0f8b59c-1cb2-4af5-a709-85abddff01a5", "indicator--6e7ae507-1f77-49e7-b209-4bded1421036", "indicator--b0fe5206-768a-405b-a0e3-1745cddb18b6", "indicator--c7efb7ab-7679-43af-a05b-79a6c040d229", "indicator--e6b78057-3fb5-4169-905c-b456f9dc06d8", "indicator--164f31f7-9b14-45e4-99a0-e4a6b1119594", "indicator--99ec048d-5193-4fb7-b1cb-ad5c44eb6b11", "indicator--47d546fd-d283-46cf-ab1f-50ca75324f33", "indicator--c264351a-a85f-442a-b0c0-9f1dbb0f8401", "indicator--c53cd633-f99f-450b-b9aa-e161ef1feeeb", "indicator--cc3ba4ca-fdc0-4fe1-89fc-817dde61ad3d", "indicator--526557e4-dc81-431d-98e6-c2d2e0644ee5", "indicator--f63d1541-374f-4341-ab83-57ba1297dbec", "indicator--8902dee7-9bb9-4b48-a09f-b4a3e67cbcec", "indicator--df1af038-145f-4b57-afa6-5e3ba1a04bd8", "indicator--5706d326-b032-412a-95f4-49b01b2f5c3e", "indicator--de596938-c459-40e1-93a1-b3d054a24265", "indicator--2964418a-f947-4ac4-a920-77d79c4454e7", "indicator--32b7a82d-b486-4fe9-af59-dcd6d4293f8a", "indicator--119141f1-ebbe-4498-8d1d-a4a61d515a1f", "indicator--feed9064-b39d-4db2-bafd-c046c1a6ad9f", "indicator--b5a9831c-d300-47f4-9e4f-7d5920398e15", "indicator--d0ed1f39-a1d9-4e12-853c-8955cdb8322a", "indicator--e80e2a92-e8c4-4cf2-8808-bb433cea6baf", "indicator--1e2c7291-474a-4ea9-b7dd-a9a695123ee9", "indicator--87a1b26c-8335-4891-b658-c2c1b6304714", "indicator--5d96a097-c07e-4bf8-b29b-8b0961895fc5", "indicator--385c632d-9a3a-402a-bd8e-da400e07000b", "indicator--5ddca0ef-6f45-46ca-9cb4-dec11a6ba560", "indicator--8f526837-2cfe-4468-a5f4-5a599fa174f6", "indicator--1f2f5836-df9d-4691-9e23-0338ffd0fd54", "indicator--7e26f1a9-6035-45eb-b8a9-75959a14468e", "indicator--1eb010d0-582c-4f51-92ba-67c11528587a", "indicator--d18a64d0-d26e-4296-a9a9-88b7bae0f1dc", "indicator--2c2184e0-1e66-4d5f-b0b5-d4b051af4f3e", "indicator--2ac56cde-696b-45b4-8592-f419b8ec8e05", "indicator--5cbbb7b5-54bf-483f-a7ec-64ae7f21a72d", "indicator--d5ce703e-0869-4d99-9ea6-daa696679c66", "indicator--835e301b-2a6d-491f-b4bb-28d80960abc8", "indicator--e9a0a063-e1ec-4fda-b494-c4650491e1f7", "indicator--ece56437-5d2b-4606-aa4a-af612b9894ab", "indicator--e3aba7e2-de79-40e7-9a37-78ddf3db4d5e", "indicator--a14fd326-be01-4e74-9cfb-1aaeff8c7c3a", "indicator--80d3dbb2-0fbb-44b8-b23f-44ed485a2087", "indicator--f5a1b63e-e091-4116-901d-640c2013abcb", "indicator--66b2279a-27c2-46ce-851b-28cbd2bcb603", "indicator--0460bb8f-1876-41ff-a13b-d9bb87d5c1f6", "indicator--b8159d78-f9b7-413e-a67c-e4f95e542daf", "indicator--2fc828f1-ff88-4ee1-834e-2bda5671c689", "indicator--7f90aee3-78fb-4b51-bd7b-e8313b1b625d", "indicator--3120318b-11b3-4b34-ab2a-dfeb59c8919c", "indicator--5ac6878f-9276-4182-afb1-8445db0452bb", "indicator--cf928022-fe5f-4d45-aa7e-424d18d50a76", "indicator--ff951b2e-b528-4879-a025-7dd17b695bb0", "indicator--228bf312-11b3-4e4a-a53b-c527628c90f7", "indicator--ee319e75-266e-4cf8-8e8b-dda69f449b83", "indicator--eab67ad5-a879-4f4f-863d-c6c238dc4179", "indicator--9636334d-30e3-48b4-b9d4-0b176cbc3db3", "indicator--c21ac4ef-4dcd-4c28-ace7-2a53868a6134", "indicator--e6570afc-27e6-4ee4-baea-54df3a7419f6", "indicator--ec77ed31-379c-4498-95bb-5b083ce7325a", "indicator--5b178021-7ab4-4782-9a78-1b2d38f55ba2", "indicator--bd6ddb27-0756-4c06-bf11-f2bb01e4f016", "indicator--fc90ede8-091e-4859-afe1-8ee5bb6b0758", "indicator--bce81676-8d9f-4351-97aa-f2e20562f0f6", "indicator--b8acdddd-b333-4493-8ea8-d45431098b02", "indicator--ad5f09f0-d5ad-4c98-a811-ec9f6edbd39c", "indicator--c446a8bc-eca8-4818-840f-16dc40db665a", "indicator--07d956c4-99ad-435c-9cac-889cde4cb877", "indicator--ed6175f5-0a74-4286-a974-d5f79bbc93aa", "indicator--1cd82bcd-5636-4a09-a867-3ad62b2ea945", "indicator--87b76be3-20b3-4ace-9138-ad59c34d76f6", "indicator--3c56110c-c1b4-4b9c-8a50-69b9b72f4d3e", "indicator--1765a8e9-82b5-4f7b-9ed6-3207d2a86fec", "indicator--d9e9772b-6801-4ebe-87fb-ae8de2b49819", "indicator--49e7d120-cbee-42ba-ab42-d1f280a4ce1a", "indicator--7e7add3e-5771-4c5c-b255-b1ef89996016", "indicator--07ebb116-26fb-4fda-ae4e-06c413d524f8", "indicator--28933d92-bf0c-4617-86b6-4e0a3ffd3f3c", "indicator--3969925f-9229-474a-8479-8f35e296cc2e", "indicator--e48f34d9-9bf7-4aa7-98e9-20fa13d6ca16", "indicator--3cf7e507-906a-4644-826d-0b1f03b7ec98", "indicator--22d76af1-f53b-48ae-b43b-98734d56044f", "indicator--61a1ca86-bd2b-4980-af1c-6c7e3b317c9e", "indicator--21eb0557-fb26-4513-bde2-eacbb98c1046", "indicator--03c7b598-c295-4e26-8cf9-4f038997ddfe", "indicator--325bfc33-8259-447e-b0f5-be1dd8356756", "indicator--ca470e98-dd24-436c-b119-11e7fa61e612", "indicator--30f1dbc0-4551-4723-9eeb-c4ba1277496a", "indicator--8f618160-6bfb-4ee1-b5e6-29848ff4ba82", "indicator--cab32ffc-d4ff-4b02-8f13-1b37d6287e08", "indicator--b86e9d08-ac4e-4d25-aa85-94e98725fc5e", "indicator--497298b9-b100-4f39-987f-8c23803aac5d", "indicator--c8db3f1f-ced7-409c-ac02-c21cf8e7ca3b", "indicator--d2fa02a9-1eb0-4cac-984f-334046b6edcf", "indicator--f0d4a22f-d2a2-4c62-9d4c-fd6f60f893e9", "indicator--c943cf90-d23d-43d6-be89-12dea7680473", "indicator--d4d8600b-4308-49f9-9eef-be9a4b567e4d", "indicator--d59ffe3d-d766-4530-a716-28826e2323d1", "indicator--2cb86982-6cef-47a1-9a26-1ed539b78d60", "indicator--462e579b-9686-47d4-8680-4a29bb30ad5a", "indicator--ed78ecf8-6dd6-4f1a-a774-cd23d0a41223", "indicator--7928a2c8-9612-4f49-a109-6431d70ee2a0", "indicator--eb38bd8e-dbf8-4561-8c7f-c848d0e318f2", "indicator--d6869326-0204-4fbc-b327-ff0d4f5fe297", "indicator--50a391aa-3dcf-4747-a66d-b8972c255e35", "indicator--25f23f3f-a11c-473f-8ebd-1b1804db5208", "indicator--81a49e35-96f7-44a3-b7e8-eeec87d9b2f4", "indicator--fcc6601f-f337-4de7-b5de-8bc920885796", "indicator--094c7600-837c-4afa-b03c-dd9130f6a8d2", "indicator--7261bd7a-096d-4845-8aaf-843c52c6972b", "indicator--9156f455-7857-4d04-8e8a-350076699d4d", "indicator--af5e6cc1-83a0-4568-a02e-1d22ceab1b96", "indicator--6c51c33c-b7d8-4e10-a9a2-53a700ba7013", "indicator--ee309bb8-b2d0-4654-ab20-e1e192f5e291", "indicator--a63a4c86-01c0-46b3-adee-f0b543b9d509", "indicator--a05dea09-8150-4656-82a9-70379c44193d", "indicator--a7498ab1-2ec2-43ca-ae7e-79cad347bb1e", "indicator--3ab4106e-51ed-4a14-8e4b-74770813562d", "indicator--9169ca0b-dac4-4a76-87fc-fecf2785ac43", "indicator--676a006f-73e9-475b-b351-8f46fbcfa498", "indicator--58404133-c73c-400f-a581-7b828a269130", "indicator--57481be3-5805-4289-bc4f-63bfc719321f", "indicator--444ddb50-ee6d-4159-a6f9-2d4297f2b4c2", "indicator--8f4c6352-e4bc-4c9b-b658-9e7a76deb4fc", "indicator--a9b85c74-d468-4e1e-8489-1874e79713bc", "indicator--2ee5a6e3-eb84-4583-b475-5c2284a82e79", "indicator--0ff38d71-3379-4a2a-9bb4-f1b33a6eb951", "indicator--bdd77c19-5e4b-4c13-8eb7-1d2f73706c73", "indicator--fd58f579-810f-4bfb-8992-80566b2cb429", "indicator--a19226a0-814d-44b7-b7e4-660840017e4e", "indicator--ad949995-923f-4e00-86c6-9f2b4a3a0bec", "indicator--a58e1e02-503e-473e-b410-f075136efd60", "indicator--ec861bea-4c76-49bd-90be-fa62e82121ea", "indicator--79cb5784-8b96-45fd-825e-b3a39d100d15", "indicator--8dcbcd57-9ea8-4eb3-82c6-2cbf6540e338", "indicator--fbb7e78b-1ef2-4973-aff1-1c6fbb81d164", "indicator--836b6a79-5673-40e5-8af4-e042978bc9b2", "indicator--962d6b3e-b01f-43b4-8c3b-f7b337f653f3", "indicator--7f4c754d-f743-4ef1-91e2-e3ed7635277c", "indicator--506c0a9b-702f-409f-8024-7a0822bf10b4", "indicator--bbcafeba-2df6-429b-9460-481ad551551a", "indicator--66dc4a04-4275-466f-a271-5601f32b8dc1", "indicator--020552b1-9e9c-4d7c-b27d-b12ef4c9ccd5", "indicator--ab2b1f01-1757-47a8-ba15-e2bae08b1106", "indicator--dc78b077-e387-4dc7-84b4-3986d87b7c54", "indicator--d41e973b-4c28-4c7c-9a00-a812e742d0de", "indicator--50f7ac6c-adfe-42c3-9cea-93533b6761a3", "indicator--d5adfd13-e499-4ab9-9d78-13fdf7bd4bb9", "indicator--edc4c571-2b6d-431d-b90f-d18073bc0e54", "indicator--bd6af59a-e107-486c-a4ce-d078f08f27d7", "indicator--4924bc4b-1287-4e74-a59b-51586f70a385", "indicator--84a35fd1-a930-48ab-a255-cd7b2a741d51", "indicator--0beea302-8316-4177-aa47-c1a9b8bd9bf9", "indicator--473e9203-ae1b-4a92-b690-871c881f3235", "indicator--9a4837c6-0fe9-4fe4-897d-642b0614e748", "indicator--63e3c068-76de-45c0-ab82-63d25810efaa", "indicator--67a9a036-6a82-44a1-a42a-fc59f7645c40", "indicator--354f3ac0-edcb-4262-a296-fbfd832ffec6", "indicator--610cf520-7e48-492c-9524-8a2e40ff20ca", "indicator--4e45bbf5-7410-4e27-965a-f157ef6a09e7", "indicator--82d50eb0-9001-4250-85ad-61ed984cc573", "indicator--671e51ec-c172-4c22-9a61-79db0de9c57b", "indicator--320cf347-8004-4eb0-9cbe-ac9253a52793", "indicator--f3d74855-d96d-4515-8d55-e3c7b7e9a989", "indicator--b39da00d-3ed5-43e2-8621-1a4769cc0a80", "indicator--abf8958d-73f7-4e11-b135-3d528379644d", "indicator--20f8d5db-caa0-4dfe-a609-c18820722482", "indicator--1b3ba9af-390c-49a0-911e-06b8e09ad1f1", "indicator--1213662f-543d-49a5-8ad5-8a3d2a4fab2f", "indicator--a6966349-8151-46f0-8218-dfbb62797a15", "indicator--1b231c27-2621-4ccc-a9d2-7b6497805f6b", "indicator--c9a46198-11a3-47e3-8902-7de41d3111f6", "indicator--3f9b2574-6a45-48e8-844d-b924330f093b", "indicator--2a8c1b74-21ed-43a6-a37f-ec662291c808", "indicator--4be562a0-62d1-4ee3-b604-aa8ae7b28b65", "indicator--874f9f39-268d-40e0-86a7-c309b012e305", "indicator--4c9bcefa-97c7-46cb-ad74-8bcaf5233a78", "indicator--bdb6ec95-0db2-4ce0-9e7f-66ef7c9fbe03", "indicator--8f7ab7a2-9452-4f0d-8a4b-bce8d3cdc419", "indicator--80a28ee5-82da-475f-b63e-11d5923af7fc", "indicator--953c2667-4bf2-4935-b08d-38bf8ac4714f", "indicator--128383e7-3b85-488d-b91b-66b755eea8d9", "indicator--c6f2fc7b-ed82-41d8-8a21-b5a44ccef173", "indicator--628ac4ce-1e63-4809-a1f7-cb758997807e", "indicator--60989f6e-6e1f-4230-b541-8884d580ca3f", "indicator--f168e5d6-a14e-48e4-bb44-727114240d23", "indicator--6c9cf16a-74d3-4827-a4ad-e731a2f4abce", "indicator--5817531d-82b3-4dc3-a208-fb06ce437456", "indicator--080ab8ea-379c-4f34-b751-f758b69fa1be", "indicator--4b23d3e1-3c52-433f-8ee7-8ee2fecc9b5b", "indicator--45ec0c46-89a4-4645-b3cb-cb4357a0f4fc", "indicator--df33458c-d448-4f94-ab1b-002bc6dade30", "indicator--c9f499cf-91bd-4578-8de3-f6e5119dc693", "indicator--64dd0226-51ec-43ec-aa40-04743e84e57f", "indicator--a3089f91-6bdd-43b0-be71-4c791d514f2a", "indicator--24ef2e88-a8df-4ecd-931a-74218234608f", "indicator--647dd7fc-2ab8-451d-a420-00598c85b5f8", "indicator--e3553f6d-1cac-4ce6-893e-c580952e3f6d", "indicator--0f3bd6cd-1d08-4191-b18c-970bcdeb9dfa", "indicator--5d67ec5a-12a2-4885-950e-68f355841fbe", "indicator--72da9f1d-6276-4e27-b724-4e20b23a795d", "indicator--3adb24b3-f350-400b-b208-fc87e60ad74f", "indicator--53b6e693-431c-41f3-8521-401ce85c68de", "indicator--2d5171ce-b3b5-4ff6-bb6b-f65462c9a090", "indicator--0d3d21ed-4352-400a-bbaf-82dbc3175ea5", "indicator--18f97899-78eb-4e2c-b3b3-ab6c678c303e", "indicator--0afd7303-3a31-4aaf-9409-7dfb83441e18", "indicator--24d58531-9a43-441e-9fb9-debdb4911a5f", "indicator--8ec9bb88-d042-4f25-b440-0a3e8994b75a", "indicator--028349a2-eacc-43ae-afca-c63b6360ebbe", "indicator--539b9eff-51c5-4570-a643-5c08c453c84c", "indicator--8bc9e7ee-b639-4a88-b3ef-a0bbcab2c49f", "indicator--6478d4f7-255a-49b2-9e8a-0f784ff49e2a", "indicator--732d1380-38df-4b49-b53d-fbacd0415a72", "indicator--48d93e8f-d06f-4b71-9996-7d70e044d2df", "indicator--5d07335b-943f-484d-9878-009ea2c37c35", "indicator--69f014f4-33cd-4c75-9562-e1fbd7ec8866", "indicator--c575c0af-3be0-4d04-9312-528783374c9e", "indicator--603455a9-b25b-43b5-85a2-e294ec407aa5", "indicator--dd2c7cf2-312d-4548-b66b-1e620c1f3b3f", "indicator--34970164-5db2-4b25-84a9-bb3cd078c55b", "indicator--66d8228f-c487-46c1-a1e5-e3dbec219db7", "indicator--de90a547-4599-46c1-835d-aeff852606b6", "indicator--1b594515-70cb-4b2c-845f-caa6539d2b5b", "indicator--ed811382-4204-42f2-a6ef-8eb38f87a2ce", "indicator--5a42cf3c-e356-4840-8cfa-08b313a1cb42", "indicator--339ba53e-886b-413c-ae57-28eea24e522b", "indicator--a7f2485a-7206-426d-a998-ce0300927068", "indicator--8f6b7d6f-b158-45da-b68d-bb347251ac73", "indicator--6b55171e-3648-44ec-b788-593eb7944c43", "indicator--606bd957-5b73-44eb-8e02-352d0b985e8a", "indicator--fdefd8c0-42f4-4a33-9897-33d54e995729", "indicator--07eeb703-d1c9-4bcf-8e33-f68b7c23dc29", "indicator--4f919714-c5ab-4c0e-aec3-9275d631a0ca", "indicator--089f3e24-9643-422a-b26a-60643d72c9fc", "indicator--ee4f85e6-5faa-451a-9874-a85f486c816a", "indicator--f63c76eb-1a31-4222-a591-5b8673c06616", "indicator--4c64d14a-e973-4960-9dd4-fdc1ea314c56", "indicator--1be236bf-1130-4bb4-9c86-fd0c350d1016", "indicator--a28f578e-a74e-41c0-bceb-63aa8d1bdf13", "indicator--7e087d17-502d-448f-992c-15e385a85417", "indicator--8ff6c0ce-4d44-4b8a-b04e-0cee9a14470b", "indicator--7e79d7da-1d3a-4694-a2fa-38cb4e714554", "indicator--1fd767ed-4cc9-4efe-b91b-6290660ed939", "indicator--6fbc431a-58ee-450a-8e86-2e5fbad8b30e", "indicator--4587faae-c1b9-49eb-9466-eca97847f844", "indicator--3647486d-be2d-4d9f-a4f4-87fa5ec9a222", "indicator--fe3db272-855e-4cc8-a834-ff96129c7a0e", "indicator--aaaac7fa-80f7-4d97-96c5-989657ac187b", "indicator--3084e8fc-7de4-4d67-868c-4019bf69fc56", "indicator--1c924a0a-8eeb-4b53-bf61-a36b0912b54c", "indicator--4315bd2c-a5a1-4dcf-91d2-6d22bb7c06b0", "indicator--4d8f391c-3a07-44fb-8b37-e5b4ca196b98", "indicator--06bdf62e-2ece-48e0-96ca-1af6b44e0142", "indicator--43b120d8-2497-4412-9af9-3ccd1f1f13a5", "indicator--a3994292-7644-4006-9cdf-3bdbb9a28c09", "indicator--540dba92-01c9-4c2c-b50b-f55ceb778721", "indicator--5e614e1e-bd55-435d-af5c-582db06fe0bd", "indicator--d0bff47b-80e0-416f-8d35-48bcc5e99b52", "indicator--220e1cbe-802e-4e73-9259-42a602ddbe93", "indicator--c2efb94c-5594-416a-b7f9-ac40641f02bc", "indicator--70bdab22-7c6a-498e-87ba-e18797287870", "indicator--6f50223c-f1e5-4f2f-adb2-0202fba10a13", "indicator--ea672e65-8e18-4577-b41f-eea283beb943", "indicator--4972e067-baed-456e-9b29-461d825fa0bb", "indicator--44c70176-1b51-48da-b170-34750abecca4", "indicator--c9782ae7-d3d4-4e58-a1c9-e4588a7a8525", "indicator--d04943bd-b97c-46a9-b6df-3f642473e73a", "indicator--549711b0-1aba-496a-ae36-8e2d717d56bd", "indicator--0509537f-327f-42da-a7f0-8faf2bd9c361", "indicator--008a6442-3b57-492e-a60c-52019c6de9ee", "indicator--e4c29ffe-d35b-4406-ab51-dc1286912e1b", "indicator--3c7db25f-bf6d-40ed-a8a2-36908c03aa86", "indicator--4f021824-215f-4c8e-b88c-4d71852762e2", "indicator--ff6589ee-0615-48be-ab30-707911eeb5e0", "indicator--1c912ff5-7ea9-41c9-9473-ee5c4f23bd66", "indicator--bdcb4614-5aab-4ccc-9a2c-8f255dd503d5", "indicator--9e2c8caf-e9da-43cd-aef5-3a3feedad5e8", "indicator--9e3a2bd6-a7a8-4dc9-8369-1503bfcf888c", "indicator--e2584455-6dfe-411a-b28a-650b616c1e1a", "indicator--2f060b3f-07e7-46de-aa0b-e6c50ebe1a07", "indicator--cf17f07d-1883-46a6-8d69-df1a24aab6eb", "indicator--078cb17e-8ad3-4c84-8c8f-90ec25df6c1b", "indicator--dcff506c-3d55-4f20-ad42-8f95e91f7948", "indicator--fb872335-33ee-4365-953f-8f27adbf5741", "indicator--b386204f-ae15-4c98-9b9a-1e15466255de", "indicator--32bd6043-21db-4cb3-8edb-09d1a1e5f480", "indicator--ab66dc59-16f3-4936-a70b-d494a519e066", "indicator--64ead483-59db-4a46-a47b-b310790bebc1", "indicator--464ccf11-22d9-49a2-a227-edb1685e9128", "indicator--b44aab7a-5471-4ced-a0a8-74ca10d4f13b", "indicator--d5df0e45-c813-4316-99c0-f2ffd469833c", "indicator--55f19c58-2be7-48af-ac53-24fa02e3b324", "indicator--8f665223-cf42-4ed4-a130-4c02a6f851f9", "indicator--7c06ae3f-c8d9-4cc2-a3ad-288c5da7e44c", "indicator--94ffe177-8d18-4762-a01c-c08ae05ef96b", "indicator--93240da6-74bf-46de-8c36-b043a1213ea0", "indicator--2102f091-0b55-4a1c-a09b-8d517d9d5fe3", "indicator--0a70b658-376c-451f-a247-dafd44dcad2f", "indicator--b3190aac-0de2-419a-8368-8c95a1f8657e", "indicator--a3101781-e485-4552-ba93-86c569bd987c", "indicator--76c79786-51cb-4e87-af9d-43ff5ef9d220", "indicator--ea0654c7-f75d-4b2a-8d51-0cef3d5972ef", "indicator--52405ea8-41ab-405f-9099-8a7ee7721ff1", "indicator--3200b2da-9333-4fe9-8a14-8d7edca94b53", "indicator--72511796-307c-44de-b3fa-7d72925f3bd1", "indicator--052b34bd-404b-4b74-93bb-835540b603de", "indicator--a0192fdd-db02-4e44-b741-90cb230658ec", "indicator--b5b34b73-7bc5-4072-8560-ace3ef97ef97", "indicator--6b3de36e-144c-401b-8e78-937a3cef59f8", "indicator--8cd0f76f-ba04-4df2-8057-124b8a92266c", "indicator--90aab629-72d7-4884-a600-ee447602003c", "indicator--a624b10b-c4ec-4868-ae8e-ea60249bd6f6", "indicator--e516ae44-25ee-49be-9f97-314f5aff46ae", "indicator--f5c8ce18-c3d8-4539-8284-32a7eb79810d", "indicator--fb1b0dd5-82c3-4d6e-bdb3-1cc0b4228aa8", "indicator--b107ca3a-8d2b-49eb-a2ed-150ed50c1867", "indicator--0d3088f6-781d-415f-91d8-e89511a23e2f", "indicator--19be938e-e360-459c-83ec-acbc1124aa14", "indicator--098913dd-a24d-4c26-86f5-f4ea3ff20625", "indicator--4b2524b1-2557-4f3f-899a-7c34ba9cca33", "indicator--a3616bf2-5361-4a57-96b4-10bd711c14bc", "indicator--b00b5a77-d2c6-487b-8fe6-873fd298d217", "indicator--9fb96ca6-27b6-4275-890d-a5510b66622c", "indicator--3f2d3790-1634-47bb-a3ba-2ed08492dc54", "indicator--0c1b3ee4-872b-4d1b-9fcd-c953c9a876d6", "indicator--6b282fb2-bce0-4a02-ae28-35e951bbde23", "indicator--6fd98b5a-defc-4982-a147-664e4e976e4d", "indicator--f30c2b52-865d-4aa9-a08e-16aee406588e", "indicator--00ea48b4-c710-4a7d-b894-448a8e03f661", "indicator--9bf6c1ef-682c-471e-8503-840bf5fb9791", "indicator--94c5e5df-96c3-41a5-ad6b-019eb3abbc71", "indicator--38de9474-b97e-4f8d-a332-243e96a69e78", "indicator--5fdb97c7-e282-44f6-ac19-91a95c22f3b9", "indicator--8e29cfd1-99df-40db-bfc3-97633cc83430", "indicator--d263f45b-af1f-4589-94f8-e67d8f1839a0", "indicator--18f2811b-4c58-46e0-a9e0-859496f7eb78", "indicator--545c7bce-c49e-4553-bd9b-606a150bffd7", "indicator--363a80eb-a64e-429d-8d05-96852eb74ce0", "indicator--372399d2-bc70-4170-9207-fb5003b903c2", "indicator--065d13d1-291d-42a4-92a6-352f3a560592", "indicator--790c8082-2e9e-43c2-a826-d4eda0082bc6", "indicator--ecbf2aae-e0d6-4a08-9d63-cc64ec610c5c", "indicator--c4f1bf0d-c5ef-428e-82b9-dda3e984ecca", "indicator--86efecdb-0e06-4eef-9fdb-7fc0488d0dc4", "indicator--6df13762-da20-4fbe-a668-4429af5eb2ad", "indicator--f6fd0540-c96f-481e-9d33-82ad13690984", "indicator--6556675c-bedc-47c0-886d-0c4bcf9f427e", "indicator--a3f7ef1d-9829-4419-b1f2-2acdae0dabaf", "indicator--f0335ce8-a719-452c-bc12-916ac89b3cc0", "indicator--796d17d1-f78b-4fc8-a114-c12df268c750", "indicator--1146a684-cc4c-41a5-9dcc-4f88d4f36b02", "indicator--eb189741-d76b-4737-b487-e8913d7bc855", "indicator--144d1ea8-4508-478a-8877-94c05ab09a81", "indicator--85355c74-3c95-43f7-925f-556e0bd7a3eb", "indicator--9a25e655-995a-4003-8c96-a22217ad0718", "indicator--89c0d3b6-359f-40b9-b304-57120fd2809c", "indicator--dd6c33ca-288b-463b-8fa9-487ef83421a3", "indicator--5ceb59f4-0442-4da9-a0a1-e5d7a3937a33", "indicator--cb5e1fce-e5b0-4e78-98e0-c122dd446423", "indicator--2a438d1b-bff7-44d8-abaa-cab5105ceb51", "indicator--77b13a4c-b0e3-4d07-84b5-71bff4741b87", "indicator--61980a22-4ef6-4926-a8c4-7a16d12f528f", "indicator--798dccbe-0efd-42af-a347-8c34a5b39865", "indicator--8e964ae8-f207-49ed-aa26-4cb5bfbb3e90", "indicator--eb8d75f0-54e3-4951-adc9-745f1ec0dc61", "indicator--5a8b563e-8589-48fc-bcc4-64809fbbb5f5", "indicator--3e732945-e695-4a44-b9fe-e039d0f7d59d", "indicator--fd2eca8a-997f-41b3-ab10-1837edc5a020", "indicator--02203de9-2026-440e-83b3-661faec89cb1", "indicator--b03ef49d-24b1-44ca-b20e-c43d94a06456", "indicator--683def78-0e1c-497c-affd-ce848fcd53d4", "indicator--702bec35-0e87-40a7-86c0-b0de69f11f43", "indicator--2ac3dba9-ff43-47f1-8fe2-0453103e826f", "indicator--024d0ba5-a7a6-4e6d-8282-36f6a0bc6903", "indicator--0ba1039a-199c-4758-ab8e-d90b061452c5", "indicator--d2969d30-0115-4995-8a2c-e0af7cb0e5e6", "indicator--cfcddc18-6f1e-44bc-b633-00a970f0bd1d", "indicator--61548313-c1ef-4132-aa8f-f1061dab1987", "indicator--8dfd5f5a-198e-4906-a31c-dc0104b9e3b8", "indicator--56ec96e8-54db-4994-acc7-da09add0884b", "indicator--247578aa-da10-43d8-8324-724e8ab2b5e4", "indicator--292e6933-207f-40c0-b441-e8fca1f6fd6e", "indicator--c2ea2086-4ebc-4b55-a164-ff722840fe5a", "indicator--8074fb6a-f4c4-4bde-aae3-9b02e7ad83bb", "indicator--946ee691-4c9f-4b11-acdd-afb4da2e429c", "indicator--9156a8da-0620-436c-9f6a-f9081aa280e8", "indicator--5a4eefcc-6aa9-4864-b191-5cc75d141845", "indicator--e2ba5008-c459-4b9b-b19c-4f5ed0c696c9", "indicator--7eae20a2-7fd7-4fb1-a9b3-672ba8da0c32", "indicator--54a24b1d-9aac-4b4c-aa0f-d04fc0a24edf", "indicator--da896eb9-bda0-40e8-8962-bdda0a898b37", "indicator--b39b908d-ea91-4d9e-a652-ff9874caf8ca", "indicator--a2f4afbd-843f-4f87-ab75-1053aeb615d4", "indicator--f54bc8c4-74ec-4423-b482-51af1c299f68", "indicator--98ec8171-d1b5-4f84-88b5-4f70884bace4", "indicator--97968b04-8519-428f-a760-471ef05e445b", "indicator--505001d1-6e67-491d-9f4d-d1cc0aac7273", "indicator--a29b4cf4-8fd2-4c4e-a77a-e466cd2b980d", "indicator--288f4983-cbd9-4957-852b-3b702c762fbf", "indicator--466ced00-d50c-438e-96f3-e7595745f618", "indicator--f64910d1-e159-4ee8-9f17-7b6596690d35", "indicator--c89ed0b9-a16b-484b-a4c6-5a2bc5c47fb9", "indicator--3f37cec5-a01c-4158-a733-45b1c6c18245", "indicator--b50fb3fb-c1f0-44c6-bc3c-018f0157c190", "indicator--6cce8a5c-ff8b-496a-b0fd-85efe42946a5", "indicator--a96fd93d-4a13-4002-93b2-fe11b6fab1fe", "indicator--0e2e7409-3914-463f-8617-99f8b24a41f1", "indicator--184b9046-c2a3-4258-bbac-8898ce6f5d1b", "indicator--cab401ef-cf9e-4de1-9668-c8372cb66154", "relationship--10597a0a-7f26-4ced-9b3e-3be41665c604", "relationship--ee124df1-04e5-45d5-b9c6-a1b59b793b24", "indicator--a497ee9a-0844-46de-a44e-57bab29ce3c4", "indicator--ffee34e1-4f5a-4307-a9d3-800d6fa605ba", "indicator--49eab7bb-3993-40c1-af93-166230ce5bac", "indicator--2dee7c31-aef8-4578-84ed-3865cac67218", "indicator--736ac921-75b8-4399-92e1-dc48bf000fad", "indicator--fe356f60-f143-4a65-a044-4d3f5b731c22", "indicator--1059d6ae-8476-4909-948e-3d1cfc2d607f", "indicator--35c3b8b2-b1aa-42f1-a701-195a0f737fd8", "indicator--66e4673d-847e-4eb2-b94e-8a3d99613a22", "indicator--1c0a9670-db66-4daf-9cef-950c672d00a8", "indicator--d373fe93-78f7-4dd6-b9c7-98466d929124", "indicator--1b400cc6-ea07-4b8f-a646-877f949da5f1", "indicator--68ba1f80-5a80-4d29-b397-1c0febe078f5", "indicator--1e47ada6-d285-4ed1-8536-fd7daf15fa18", "indicator--d5124468-1103-443c-86b4-839ba28fa07e", "indicator--5cb93650-4379-4fdf-b64c-0d61f37d1026", "indicator--8f4bb2d2-ac50-4255-adc2-384fe84d2798", "indicator--fea960ba-ce95-4335-8279-04bf33d505a7", "indicator--3999a84d-e204-4f92-a33a-7c5e5fdcc9cf", "indicator--e37dda72-1303-4a65-bab7-bad22be50ee7", "indicator--d02eadcb-5308-4e4d-8f88-dca21e0416d5", "indicator--101509fd-0d4c-4d9e-8ee1-b5ec764e48ff", "indicator--174eb86c-915f-4aa7-a475-c32334987bc8", "indicator--67b1d187-8687-4dbe-9369-f0738f73a5d5", "indicator--0761955c-4c06-44c2-9050-8e21427f0d16", "indicator--a1830132-949e-4147-aef4-6210ae1e64ac", "indicator--bd270510-81b7-45e9-b43a-45d259e739e4", "indicator--59acff3f-2605-449c-8445-e1485e4c525b", "indicator--8d8133b9-ca28-4346-bb79-258abca8ca43", "indicator--229bec62-9f16-4caf-ad2d-80d72d7e11d8", "indicator--ad62089d-46ae-4b19-a489-b7f681282f03", "indicator--8d84d942-6a66-460e-a99c-d98c818b29a4", "indicator--c51c9d25-441d-4493-b890-11e14445c624", "indicator--159e704e-02b2-4b44-93ca-4491ce57fa53", "indicator--1a2a43f9-3dc1-4a17-981c-9c4f49ff6651", "indicator--4e526529-c66b-468a-9677-87e69839ca53", "indicator--6cda3bd5-1cd8-4d93-8be5-823eeb3e5d21", "indicator--9c40b65f-ea3a-4b0d-96a8-c09caa2e2b46", "indicator--5cbed4ac-1004-4dbc-b2f9-f2c129cbaf75", "indicator--4bbb0447-870c-4a2b-bf16-d73ccd0f30f9", "indicator--90998d43-539b-49ae-aa0c-d6b1969539cd", "indicator--e5bcd253-6878-4497-bee4-e74c55f13a46", "indicator--30840f26-a677-4e52-aaac-40ba05a06b7a", "indicator--b578414d-8479-4224-bb3e-89f8f6528ee4", "indicator--54799897-6897-41fc-a95a-d06a1ea1296c", "indicator--31fba481-85a2-4290-9881-e7f4efa32b18", "indicator--88e99c2e-7719-4e39-b561-5b0fe708bc4f", "indicator--df465e51-d521-4635-8c82-aedf37f3cf92", "indicator--62f90dc6-2e3f-407a-8620-18429b72d8c3", "indicator--42b72e0d-c39b-42e6-a32a-3e5b9c5f6126", "indicator--6ba8b115-0e96-4c6f-9e3b-19f36c651b5a", "indicator--79db6a55-7b27-4420-97bb-f5f5b955888c", "indicator--fbafb3aa-238c-47f0-b169-ef43bb129f13", "indicator--787fe203-09ae-420f-914c-775de27e26f2", "indicator--b634e64f-2b3c-42cc-966a-0e339274d425", "indicator--0b59fed4-1a2d-420b-bc87-f6fd478064f8", "indicator--122375a0-9c8a-45eb-a59b-85c5dfee3468", "indicator--1d867cb8-580b-4237-b17a-a33e6f6c4450", "indicator--95ee75ed-ad16-468f-a20f-b6c2d727345a", "indicator--dc88ec32-aa81-4243-875f-588c652fad05", "indicator--b5a81853-a580-488c-84c8-629acdc550b8", "indicator--a8a5eb90-3cc3-4fe0-a819-bbc257e0e3c5", "indicator--a07b63a1-4b69-47b1-8405-bc559cdc0cac", "indicator--ac1a1f3b-b49f-4264-9026-5207a58fe11a", "indicator--a1776327-bfce-4d13-aeb4-b695bc1a8c09", "indicator--1bf7da60-2018-457b-b89e-93143f66e0f4", "indicator--1c3c567a-ee50-418c-967e-d1eb6703021e", "indicator--c0936761-ad91-4a42-8cf4-c25334ee4398", "indicator--35863d4d-1ea7-4742-a825-a592457adf53", "indicator--2519605e-06e1-4b10-ac4c-6596cf2b8280", "indicator--bca6038f-327b-4d71-a259-d9a3bf3a9c72", "indicator--1ed898af-eaee-4b18-87b6-34790922edcb", "indicator--a45172c4-f16e-4f97-9f90-9d81c1123879", "indicator--ce7a57f5-a593-437f-ae5b-02711ed5a85f", "indicator--bbfd7134-4d65-45c0-8cf1-6bcb0f066af5", "indicator--f0d68041-ea9e-41ea-97b2-059fd6cf1e9c", "indicator--36d1b142-f4e7-4690-ad28-b3a15bde5ef7", "indicator--ce011036-1e63-480b-8b52-90e6355c9900", "indicator--bf9e0106-b10f-44dd-86f6-c9b39d71c3bc", "indicator--5399d423-4cd3-4ffc-9343-242faf9fbfc9", "indicator--efa709f2-1f77-48e5-ac8f-662f324e1e99", "indicator--d080b3d2-bd82-4810-85a8-891300f4d271", "indicator--14d92078-4d0e-4401-9699-f1c7244d8a78", "indicator--f923a29a-2d0e-4dad-b2a2-2e74cc80fffb", "indicator--ad9280a9-712a-461e-8b26-d434dccb5374", "indicator--e16791ed-682f-4e0a-bc0c-54db8cd356a8", "indicator--dccc9a7a-cbd3-48b7-a776-8fa676c7204b", "indicator--fd1e438f-b689-4504-ba36-fe71d246ba7b", "indicator--d7df35b9-3ea6-410e-8911-8682d39ad136", "indicator--43b77249-3f8c-4a91-bc73-ebf134ba5064", "indicator--189b50e1-a584-4e37-8b14-fe30d693be73", "indicator--e70c35df-b69b-419a-add9-c20cef1d999a", "indicator--6c103143-4de7-4ed3-8fce-3224891769fa", "indicator--43dfa6ae-b84e-450c-836c-8767eed47a27", "indicator--ae6cbdde-d682-49ab-9033-60fba3fee186", "indicator--2f63bbfb-2d08-4356-a15b-e40f6d20c93e", "indicator--d00fbf92-b8ed-43f0-9c09-25e6fde67b8d", "indicator--b25fffe4-99a6-4b71-be8e-c8863a52f133", "indicator--7eba6819-dd37-4be3-b73c-1605460fa1b4", "indicator--1c591483-2cc4-49cf-b815-38fc3fc9abfc", "indicator--805659a1-20c9-4c0b-881c-dd9b4c4e23e9", "indicator--993fb017-e1a5-4a49-9fb4-021169a888dd", "indicator--b6df66b5-6693-4eff-8007-493e10807cec", "indicator--78dff342-9bc2-4a18-8414-019492423eca", "indicator--4b4d12d9-e314-4ec7-8edf-1b1570379e81", "indicator--e4a4c95c-67ea-404a-b9cb-357840cd14c4", "indicator--4e1af1de-3cc7-4111-96a0-6415e3a6f3d5", "indicator--e834d6e6-1613-4598-8826-9f51375fe046", "indicator--b53ca4f6-05c2-4b55-a424-19c5897c206e", "indicator--ce0a373b-472d-4430-adf5-a5e5357ac64e", "indicator--47cfc0d0-a563-49bf-9f56-8c7a9b6601a6", "indicator--2e594e0b-8c78-4acf-a21d-c06f26e3a501", "indicator--746ecc24-e648-4966-a8e0-21a871d375d9", "indicator--e3b375db-4928-4040-8d3d-9f3fe655f8a4", "indicator--6206cffa-363a-4025-899a-f1c655ba4c9e", "indicator--8d7451b1-c99b-4ac6-bdee-e5b509cd2674", "indicator--5ba8dc53-203a-4ddb-aa2a-d4000513ff8f", "indicator--7f24d751-b648-41ac-849b-21ce6bddb4cf", "indicator--6bdefcfe-f933-4887-b83f-5dddb38d13e5", "indicator--a8092fca-9773-4a9a-8881-ef6ae9ff0917", "indicator--a1fbdec2-7212-420a-8808-115f1bd74f66", "indicator--3f14518d-8f23-48a4-9bb2-3417f2dc213a", "indicator--237c6a21-8d05-41ba-8912-8f2c7ec2db65", "indicator--2d102c55-214a-49fb-bcfa-6244fc97b39e", "indicator--2b660ee5-c012-457e-9ae0-1afa5609a044", "indicator--527f8c31-0859-4d45-9112-85db4847f752", "indicator--ba6f3e87-d416-4d98-8f66-0ebaf444508e", "indicator--6c8e7567-e709-4dbf-a829-a791e05b341b", "indicator--852a4d57-a44a-4f45-bec2-cea770fd43d8", "indicator--b1904993-1685-481f-9b5f-5a6ae5b3a641", "indicator--893dbb63-c4a7-4835-a850-8d28b8fbed98", "indicator--8e6dfe53-52c6-4d79-99b1-c30f31cea8f8", "indicator--e1cb2f89-0376-4a13-9550-3da5d7dfc766", "indicator--d209d7cc-b850-4768-a2cc-47581d9cb9ba", "indicator--a2a0ef58-2603-4d99-9a4e-ef739f277056", "indicator--165b3a87-3816-45f4-ba54-76ca41e54c22", "indicator--527cc4f1-624d-475f-87ab-5797b2e5a432", "indicator--6a7d2f45-84f3-4c31-90e6-f290fd7711a6", "indicator--bd77bd8e-111a-40d8-904e-cd96bc459350", "indicator--acb5b1d9-409d-491e-b726-231f30b02ae3", "indicator--90d73aeb-11e0-4243-ad60-02e2fcc2ce7c", "indicator--be9727ed-4fbb-4ee3-9896-d85b415004fb", "indicator--4d861bec-67bc-4c01-8806-57ec3a09c8ba", "indicator--67de4a40-4fea-483b-813d-9bacb075c183", "indicator--1c768afe-ecaa-424e-8636-de17cd80e5ed", "indicator--2e625d23-eb1d-4a8c-83c3-076323c76049", "indicator--48b23d8b-8e2e-483a-8d54-25d8c67a9821", "indicator--04ff7809-6f90-461e-a9fa-3e954418339c", "indicator--a832ec78-8825-467c-90ea-9fe8bbc12e9a", "indicator--e6fe2d4f-09c7-401f-953e-ad26eee5e852", "indicator--43c77580-fc55-4f90-9714-4ad3de520e8d", "indicator--decae894-9880-41e8-ba91-ac98020c0250", "indicator--0dbdbe0d-92dc-4828-93f7-a6c8daa53832", "indicator--30756508-777a-4a21-bcd2-358d72ac78eb", "indicator--60021045-12fa-49b3-a73b-8d17cd33efa3", "indicator--3f565ab6-1c99-40e1-a6b4-57126b87d904", "indicator--31838525-e018-4286-af6c-57f07466ec5b", "indicator--9d38de0d-6762-4865-9dbb-6c332d96f3e0", "indicator--53291afb-1449-4b16-a6b5-680b6426dfaa", "indicator--0680e803-3696-4c5b-9ed3-c6c463d3639f", "indicator--40829529-522e-4ad9-a032-700fb392452d", "indicator--d959ad84-56e1-4fb4-9aec-8759867a3778", "indicator--212ec99b-f9f9-4fa6-a8ef-5231a625c2c9", "indicator--04ea17ad-21a1-4517-8697-3bab146ef661", "indicator--5fcbe86c-4f2f-4dea-8dd9-6e32dffe1e78", "indicator--8cacf188-4e77-4720-bfe3-150966fc03b7", "indicator--ea1d415b-2d7a-4ce8-84b5-d1f0b9bca794", "indicator--58e57ef6-6bf8-462e-b17d-00046d459cb8", "indicator--ab06ed54-906b-4411-ad02-d0d8b87f9ddd", "indicator--b3865cff-85f9-4521-9987-7ec53881ed9f", "indicator--5b748d50-9f97-4b1a-89d5-e758c8618978", "indicator--0bccbd79-8576-4a15-b797-534e04182bfa", "indicator--0ad8bfbe-7915-462a-b180-7e9bdd941589", "indicator--fe17eb45-de53-42c3-98e1-9f9db5ce9e0a", "indicator--e150d6b5-45f8-44aa-89a5-ac9bf4b84a17", "indicator--016031b6-8860-403b-94aa-9901798afdc3", "indicator--e23d91dc-9957-42da-b5e8-3872fd9a540f", "indicator--0d0b5240-6125-4d39-b582-bb16c9cc2fa6", "indicator--30b4ee4b-0103-4e4c-a1a2-44de82d31659", "indicator--ef27f003-1a00-4ce5-a150-c8d86b5f2955", "indicator--e7f35591-be46-433c-bbf5-b1791fe1f0dd", "indicator--767bb5cd-a18c-4768-8f77-e19d4cc7ee67", "indicator--5921d002-3956-4306-8939-79301aa5539d", "indicator--da3cc644-f2a0-4fcd-a195-fd1f615cc54b", "indicator--43a2f803-faa9-4c4f-841c-ee9b0c4712c3", "indicator--6baf7f37-d0ec-4878-8245-ae6f03b16008", "indicator--e9d24266-8190-47f9-87ac-b3d60ca4e750", "indicator--683bd312-6168-44f8-afe9-157a2785db1c", "indicator--944cd21a-637d-48c5-aa07-c7a3a52006a5", "indicator--fe368cc6-966d-4f1a-8ea9-f17e3f5ce81f", "indicator--2c19d705-7387-4cd0-a151-be102d689e23", "indicator--893b1355-ffde-4268-89f8-889de24ca8dd", "indicator--70dc18fe-9fb3-46db-9fba-63f916314a8a", "indicator--79469458-e66b-4c14-8923-fc758ffd974b", "indicator--7a149168-9a33-46d1-915e-b32a9072f8a9", "indicator--2d7376a1-5d79-422d-83e8-e1f63e7ea4f8", "indicator--eb945c9a-5c34-458e-8c9f-f9fb7f66a408", "indicator--b6c52d42-2494-4257-85fe-8685054f0d15", "indicator--ddf3de3d-f66a-4cf5-a672-777e8844e1d8", "indicator--a43a1d76-1a5c-45bd-ba39-777e08b27968", "indicator--ad9fae85-f74f-4716-a7d7-856fd739fb99", "indicator--41185548-62a3-421e-8792-70001328a871", "indicator--19a353c5-1fd0-4183-b3f1-a8daa0842bc3", "indicator--922a9a7a-3524-4549-9eae-d63b4557dab5", "indicator--36b05fd4-2f88-4247-a8ef-6224691e3f21", "indicator--f30fece6-73fe-49b8-a010-bcd112c8b66a", "indicator--2d570088-7fd2-47a2-b4c1-0d3c508d2223", "indicator--37e7b30f-091d-494d-a8ca-b6c9ebbe9c90", "indicator--a1ee35af-89c9-4c24-a9a4-032fe49dd907", "indicator--68762c74-8e92-4a7d-bed4-588f10ec1b8d", "indicator--53696cd3-2005-4b1f-8b30-e0b732833245", "indicator--216462be-9ffe-4c36-9259-a8f140abafa5", "indicator--42f712f8-6ce2-4452-b537-a1d850ab5afe", "indicator--1cdf4e98-391b-4afb-85ad-24994003c2a0", "indicator--2af78ae3-8ab0-43c3-b1a6-475c84215f7e", "indicator--fab48be2-2a90-4123-938d-2e0c85845981", "indicator--2e915f59-6e52-4b91-a54f-2e439f98036d", "indicator--f8a5dc42-fe4d-4cae-b510-8328b6ca3edf", "indicator--1fef1ac9-65f0-4169-8544-a41b9fbc7278", "indicator--7c69c22a-07f4-4513-850b-4b2843f21ef4", "indicator--3e171d68-3542-46f0-a87f-a5680f2a0ce6", "indicator--236faca0-3a14-4322-8eb9-0deec2b63a7a", "indicator--e22d7d2c-a83f-4dc0-9af7-e76b94a194b4", "indicator--ca6cc811-cd06-44d4-9f98-cb0206276693", "indicator--dd3db15e-bd38-4765-bd23-cd650237e3fd", "indicator--9eff7aaa-e1e6-4034-a399-70dcb4356f99", "indicator--c2ef330e-b2fa-452a-8df7-051eee34f8d3", "indicator--a13fbfa3-e4ca-48f1-adc9-696f57bf17b7", "indicator--0288b2cd-43f4-49e3-8ec4-e799f8651832", "indicator--6dd8906e-4e1c-4e08-9a22-50d95c607e94", "indicator--e48b5745-5dbc-4a70-a9eb-57d6c1ed2aa0", "indicator--347baff0-41be-433e-a088-99d73631d69f", "indicator--64ff782d-50f5-46a6-95bd-507f448b938a", "indicator--c4a99522-4ca1-4601-bf75-7c4a6c76d0ac", "indicator--b18c8db6-e967-4ae7-a44a-f76109266036", "indicator--f392b9f5-0b28-4b82-9234-d7234c6f216e", "indicator--2316fbd7-e497-44aa-80e3-c64d9ac138a2", "indicator--51ac57cd-bc7d-4244-bb5e-7508cf0d9f3d", "indicator--30ec022f-b341-4bdb-88e7-e746dee6ab7a", "indicator--b5db8d6e-c323-4275-b0dd-03272bfcabf1", "indicator--dfbc1dd6-b1fe-46a2-b1fb-01f368a5ad7e", "indicator--0943e09c-98cf-44b7-a941-fe952bad139c", "indicator--8fb9ba85-aa5b-4e1e-a091-8ac28e1c5018", "indicator--5eb6baa5-3a22-444d-9e6b-589d1e784025", "indicator--5acb0c64-349a-492e-94b3-17fe63bc833f", "indicator--9f8edcbe-6c1a-4e41-a05b-b90d0dfdcd27", "indicator--3d1ed251-72a9-4626-9e8d-d10a80fffa60", "indicator--94211bf0-7d25-48f7-a257-cd15603a3242", "indicator--a4d87034-8abd-438d-8e74-4599bfe783b5", "indicator--26c7c9f2-cfab-4c30-8773-ecd8050b22e5", "indicator--830e92da-f846-48f4-854c-4622626b3233", "indicator--d9d4af10-9155-4123-938e-6832afad0883", "indicator--47113179-a76f-4373-9ab1-f1c6261f8f4a", "indicator--a6bd1cb1-fc4a-4abe-92b3-ce1b2e7f0797", "indicator--47b95330-cfb9-43d3-b9eb-7c8c5f2ea0be", "indicator--c379c16a-b164-4ae4-aa34-3c1aff956d79", "indicator--f3e54f97-07b2-480b-bb98-f2ea72ea2d94", "indicator--5825dd1f-6485-4621-bed5-75d2ef5d8efd", "indicator--9cb298ff-a3b4-4b3b-a599-428d84670b01", "indicator--a46fe231-da34-4d7b-b136-0489135a6eca", "indicator--0bbc219e-4879-4527-a406-96b94f8f4bd5", "indicator--c69281aa-01f1-461e-bd92-9757627ddd5e", "indicator--473fcf85-aa21-42a2-9f55-ea271c29c7bf", "indicator--bf934b36-2915-49f4-8c4a-91ada7f07149", "indicator--b3cb9903-7808-4844-b125-fe3c27a5e56b", "indicator--01decd18-d436-4227-a617-8c9b16b0324f", "indicator--a471b41e-cd26-4de2-b233-c655c7575e1f", "indicator--baf1c320-b996-46ca-8ec6-3fb023811e18", "indicator--ee6d6f82-630a-4567-ac1c-92e540a6830e", "indicator--7449eaa2-7ca5-4850-b47d-79f2ca78b322", "indicator--b3f478b2-26e5-4fea-94cc-7fd0372af77d", "indicator--1492f00a-18e1-4969-bb3f-5f4f4a328715", "indicator--e6fa158a-5a96-4a45-b928-eeedb940b1a4", "indicator--ffd5b01b-2046-4075-a9b5-25a5489bd3d9", "indicator--c532df78-7871-438e-b616-ef895b6fdccc", "indicator--d52f23cd-b395-4dc0-8e10-74a54fc572b5", "indicator--cfc36db5-5a95-47ec-9c5c-c029c02c32ca", "indicator--0e4cde24-b88e-41e1-a58f-5433634e55b7", "indicator--25c4fec1-6aa7-4950-bffb-2ed2428537e9", "indicator--7829c9f9-958f-4f41-adc8-1c87b5852688", "indicator--46be25d3-63e3-434b-baa4-0a8771ead7b2", "indicator--7f1fcc34-c5b3-4ce1-b447-47dab64a8d8f", "indicator--485f0c4a-12e9-4bb7-81e6-b9deb6b398c1", "indicator--157e8496-e945-4f5b-b2a2-9138b9f7f425", "indicator--2d06be94-2455-474a-9755-0d1ae2c84da9", "indicator--06529dc0-2060-45f4-a8df-b5cf98052df4", "indicator--897d2225-bb86-4568-964b-8eed809920da", "indicator--a33879e9-3a1c-49dc-8450-5dd1011293f1", "indicator--9c71edf5-6fb4-43a9-b877-26e524139ccf", "indicator--bd20d5f0-0e10-4261-988d-0a60f2832dec", "indicator--56d14838-f962-4228-8c1b-cd27cb0bda9d", "indicator--34328036-9bb0-4ccc-8306-12583c6ea0b5", "indicator--3b2d94fb-88b1-43a1-ade9-bf4ff830418f", "indicator--cf7821ac-a510-4fdf-95a3-64737f67826e", "indicator--204c3e84-0737-4142-8ee2-84584d4b41a7", "indicator--cb725f60-f296-4d1e-82f5-cbf0d50d1e50", "indicator--9a231531-ed2f-4aa0-807b-a7e728fc9367", "indicator--cb4c30e6-cd44-44cb-b936-1167a013844a", "indicator--3c314bf3-f6ce-4e7a-a743-c23ef70ee27f", "indicator--59acd0fb-eae8-4d4d-b52c-24328341d4c9", "indicator--02e81737-2aa1-42e2-ae86-e252369910d0", "indicator--58a69f59-f538-43fc-b3a3-3f5896087585", "indicator--41059715-371e-4025-a4b3-a38c89d992f5", "indicator--9d65da95-303e-4527-b43b-830632868ed8", "indicator--8525ee81-f7ff-4a1c-9205-1296f37998c3", "indicator--137633c8-7c16-47d0-82f9-ddf36566d668", "indicator--ef8108b9-ec34-4cdd-922f-4f63274589d1", "indicator--f817c2a4-430b-4c6f-98e6-c12230b42202", "indicator--5a4f7721-7670-4d4e-84be-7162670778da", "indicator--3568aaef-85af-49ec-82b0-298af475ce6e", "indicator--7465a61f-8541-433b-963e-6cc9d08f54e0", "indicator--74a0eb1d-00ee-4817-a92c-38b782beb782", "indicator--b4c9d0f7-af6d-4f82-8c82-498d123ce96a", "indicator--7cd3d536-0bc3-447c-8163-8ff5a5eab8e0", "indicator--65e9ab1a-24ee-477b-aded-cebcd619a2e0", "indicator--dd9da1bc-b0ca-4fb2-abc4-2d852b1ad11b", "indicator--2466967a-f863-4e85-8464-2b2b634ab87b", "indicator--bf9fba2a-523e-4d7a-a11e-b4831a92b396", "indicator--3ab71176-8261-42f7-b0a2-2c02f5dbd8d7", "indicator--cf8fc9b8-1ef0-4015-9d84-1536bf3bc9af", "indicator--1869e9b0-d0af-466c-a85b-93952c90d3d5", "indicator--41b907bb-5bce-4845-af7d-50d7f2debb24", "indicator--22f58aee-e14a-4a0d-946a-3b99899e6ffb", "indicator--84abaa48-92fe-40de-9604-fec53f78e470", "indicator--02c31167-a0c8-4b9e-95cb-60578d1660b9", "indicator--3839b3e5-e129-4146-af0b-c0b27785ad59", "indicator--2fc5a1c9-695b-4722-a855-5525d28676b4", "indicator--3f4d7d09-bdac-41c8-a778-81b2d1bb3465", "indicator--1fd47dd1-a463-45dc-bc59-5a815e7cf914", "indicator--798f44cf-846d-4e6c-b2f4-6bbe6e7e530b", "indicator--7dd86c88-c5d9-421d-9a79-2c01778b0245", "indicator--f619bf51-f741-4ada-8b22-6c3244e2dcbe", "indicator--2fa2ea90-64b4-4edf-a097-05791562a58b", "indicator--d7ec82d2-90f3-4205-b439-3b17aa2b335e", "indicator--fc0bce11-2745-4bf6-bfeb-b6ac38d9fb6f", "indicator--9cbee27c-aab9-4bc5-9b7e-f53705c921b6", "indicator--5e30a0bf-0e52-4727-ab95-8fa07b2db584", "indicator--59520bc6-4f56-49d8-bfb5-73763c2c5b91", "indicator--6125a7ef-bd2c-4911-95f2-4dfcbe96fba7", "indicator--3ce018e3-e36e-4c99-8aac-188d57925dee", "indicator--231a7f31-1144-4a2a-858d-154bccce3ac6", "indicator--09b078b4-04b8-4022-a04f-41ed4d3f4bfc", "indicator--76de0492-8f0b-4061-bdb0-15f5a997691e", "indicator--e4a66e9d-31ae-4e00-854c-5fb26dd57935", "indicator--f4c15326-f2d9-441f-8af6-e0e458c40809", "indicator--ac32054d-c349-4ae8-9f39-189d054092bd", "indicator--9df5d7bb-63d7-4e2f-ac85-61a19bd86785", "indicator--b2a3fbd8-bccd-4e5f-8c02-abe30e20aa7b", "indicator--847a8aa5-91d0-4022-a789-8a089ca96306", "indicator--7eec6734-0ddc-469b-9ff1-6183af4d305f", "indicator--eadd9125-44bf-4035-af8b-2a5642dba869", "indicator--e6e4a1cb-e3be-4bb7-9bfa-3208cfc6101c", "indicator--842bda5d-9851-49c4-845d-952333c0dd90", "indicator--696f490b-4d30-49d3-9a28-9d02167c1534", "indicator--4cdd7389-27f0-4516-92f1-c58ff60f57b2", "indicator--9f0b30f8-57aa-462e-b6d9-b385c07ce108", "indicator--9d8c26aa-c6b7-468b-baa4-d70837f7ba5d", "indicator--8fb74b18-507d-4dfe-8dba-0f1790202ea1", "indicator--703292cb-8666-477b-8027-220e23247b60", "indicator--c13fb576-5415-4251-8299-0d25a23d3098", "indicator--4c64f9c4-5cda-4fd3-913c-f4f1af292a58", "indicator--9feed688-e1ac-4a13-8c7d-ff3ac3069c09", "indicator--8739a979-c439-489e-9fa2-6abda43b8379", "indicator--ca394a24-9d8b-403d-93ea-bd778b37d1e5", "indicator--fa4345a4-cfed-4f2f-9506-8c5a0bc6e9af", "indicator--ae736225-7868-421e-a064-a98e29a20fea", "indicator--63ca302e-35fc-462d-a64a-05f3d578f1ee", "indicator--e3199f65-1838-4211-9afe-3396070e1dbe", "indicator--ce28089b-8d8e-4482-abc8-bc1543ef8286", "indicator--39314b97-616a-45fb-8e0e-29398fde52bf", "indicator--86c9fd0e-0e96-4dae-a78d-8f747f0c08d9", "indicator--58e7b37d-4860-44aa-ad89-47e5c71fb6ca", "indicator--77cd0348-b473-4f92-a912-2ff390f15097", "indicator--f3802643-6322-4211-9733-32ed2ff57162", "indicator--9e75ee97-1d28-4445-b651-f4cb991bd095", "indicator--6261bbea-07fc-46f9-8d3b-ac7e65364c46", "indicator--436b70b7-e00b-4367-badd-2c2cf70a8223", "indicator--2b0543c6-6a2c-4192-8fe3-64a39e6d17e3", "indicator--a0351473-7780-466a-956f-d91a3cf7a09c", "indicator--b00d85ee-9a8d-4f0a-901c-14abdc3b7258", "indicator--3d2ccab5-935c-4b42-b66e-b0b88a89e927", "indicator--51be4aa5-ddde-4fd7-92a6-cec5e4f52178", "indicator--22700396-1348-4d4b-93cb-7d108288c11a", "indicator--25aebbe2-a391-492d-8053-8738eda02164", "indicator--21effb18-857b-4883-ae26-ecbd122b2100", "indicator--0fd81cc1-bb17-4e6d-a9a2-adccb09a7367", "indicator--2e615589-28d1-4560-836d-17691dce69b9", "indicator--2d314b0c-6c1a-498c-9eab-7cb45fd5ab0b", "indicator--3b305f96-0997-4eea-9c30-067efc2c91cf", "indicator--c3f752e7-6b39-40a6-8554-212deebfc72a", "indicator--dc454d8a-ca3c-41a0-920f-44bd97145972", "indicator--2d8ca110-4ac3-4d77-baac-6150b7baa205", "indicator--a3e3631b-1457-423e-8452-e65fbe0118be", "indicator--020b7448-db16-4a13-8efe-45311ae74aec", "indicator--1ec897c1-e812-444b-a337-b94f783c175a", "indicator--d84e2ab6-f3e7-4551-b6a9-11f31a06acc7", "indicator--3815eaa4-9e7b-4119-aa84-5f2f9ec5e55c", "indicator--4c89383c-3d3c-4a45-8b24-ea6daf5e2d9e", "indicator--8a5c3fe6-9b69-40f5-b2cb-5fa9854dadc0", "indicator--092030f4-f128-4952-af0b-327d8d56afa7", "indicator--3a672212-5799-4765-87f6-a1b4634e2483", "indicator--f995ef4d-62e5-41ba-8917-f9148db12eed", "indicator--cdca1d96-cab4-4bd6-b6b6-1d2110e5f0af", "indicator--7479f1ee-8419-457d-80be-3d8140588a97", "indicator--95110f92-050d-4a66-9482-199b350219db", "indicator--3aa71e7d-2ade-4e70-8b74-3a6c767f6a3e", "indicator--5b6fd459-93cb-4c92-88f2-7925bed0233b", "indicator--b7167c72-4469-4e64-b44d-7415049f0ce7", "indicator--7c4b4dab-0b9c-4a94-ba73-368cc1ddee8f", "indicator--256fbc4b-011b-401d-9494-ecda570f95f8", "indicator--d265e8f3-f94d-4ecc-8325-5d8012b016fc", "indicator--231fa397-f7b2-4703-a134-53421214504b", "indicator--fb6374cc-2f8b-4891-b9ba-da7d354d035c", "indicator--9eb042f6-8bfb-4c65-9d25-5c8c67451903", "indicator--94c5f5bc-0c62-423d-90e5-171c5091bc08", "indicator--45bdab4b-c873-4a04-b8ab-9a590d955612", "indicator--2e873ae0-c016-42d1-b5ad-7542f4fb31c0", "indicator--0ddfe6f0-ed79-45b1-8d1d-ada7ace9c04a", "indicator--23a97496-655a-4fdc-8220-97dfc2ad8bdf", "indicator--360e5cf3-ff01-4c0f-a7ff-117e94d4f5b8", "indicator--a8edac6b-52fc-4220-b3de-57ae9be86f42", "indicator--425e8c24-0e6c-4913-8491-3e5a23f64572", "indicator--63aa93b9-9ba2-4e26-b8c8-0624ed07c436", "indicator--283ac535-b916-4960-9ade-bff257ebd09f", "indicator--689ef6ec-f2bd-4ec6-8b7c-9cf6abf81d44", "indicator--ce58d2ea-d6bd-4506-b677-bd32f37b5cca", "indicator--5e081a3c-a947-4b87-8949-29477ed74c4a", "indicator--a049b6e4-e99e-426d-a5bc-14eb61f2aee0", "indicator--10c3e961-84c6-4f85-bf8f-fad1dac79215", "indicator--e609c359-54d3-4884-aef1-3aa608c3583f", "indicator--caac00c9-54fd-4a3e-a77d-e1a188c47533", "indicator--38c9a21b-cc81-42cb-a2d0-80c79cf01aa6", "indicator--5514ac3d-c7fc-4713-a98e-74d89f12ffa5", "indicator--65f450c1-7023-4697-81d7-772e501791bb", "indicator--ae1b1996-7af7-439a-b01b-561b672e1c05", "indicator--150fcc59-bacf-4db7-be27-725f3b56ee8a", "indicator--7ee91154-2384-4796-a546-3d529acf20c0", "indicator--5d044bd3-1d1a-438c-bb78-188ee381d517", "indicator--d5344dbf-4f2a-45d7-b961-06e6fdf46ea6", "indicator--68d77e5f-743b-4f55-bee6-0d720390cf43", "indicator--75a51c35-dec7-415f-94a2-ecedab62dc05", "indicator--f99bddb7-d51b-4bb8-a9fd-3a7b37346d7d", "indicator--7676e25e-4d51-4cb2-9777-de61ab0fc7f1", "indicator--8c125083-dd1e-4199-bcb8-e2e59103de0c", "indicator--017c1438-5ec7-4944-b82a-1d85696bdc30", "indicator--6aaf26fb-a12a-46f4-a0c0-b6d91c085340", "indicator--459e4bff-b909-4b67-9aa0-581d19700b54", "indicator--510456d0-3e69-4e5e-bedc-ce42ee545b80", "indicator--52f69fe8-e5f5-4027-92b4-88aa6049aa8c", "indicator--7e604f89-b137-4ea4-9a70-b38745c7a8ae", "indicator--166a1598-0ac4-4081-b6fc-8d1065a3dea2", "indicator--fe5fa47c-f8d3-4f10-a74e-c0345d8166e9", "indicator--f6e55b2e-385e-4e20-aedd-380788259bea", "indicator--19ed04ed-1331-40c5-a991-ed3126889758", "indicator--c07f0af0-5c1d-404c-98f3-11093b8833ea", "indicator--cbe1f9ee-b3a7-4183-bb7c-9136400e4b72", "indicator--88b562d7-0149-4971-b7dc-5bc23bbd5e4e", "indicator--6ac20b80-52c3-4eef-96ff-aea92a9234aa", "indicator--7ac57924-9c65-403d-912d-a3028909b218", "indicator--eb328d37-c138-4866-891f-43c57afccaef", "indicator--04a87151-e3f3-4a49-8114-7279f5a8600c", "indicator--387bbcee-e97c-4bbc-95c4-c672805f1079", "indicator--33bad04e-fe92-457a-ad87-8363bd9788c0", "indicator--2684e06f-d8af-472e-8ad1-3d3e8e40943a", "indicator--f33aa267-f455-439e-8b99-e0368217f744", "indicator--cf9f5373-881f-4181-b721-bf83c1db57c6", "indicator--c757b7fc-62cf-48a2-b6e0-3075ac9144e5", "indicator--5dde745d-c9a4-411e-89ee-09f8f35cd43e", "indicator--48f17cf6-88b8-45a2-82b8-e168f0fdfc76", "indicator--2b6ebcf9-2255-42dc-8333-b799ad5b7268", "indicator--563955a8-cb0b-42f3-bb81-2943c11fab64", "indicator--d20395a8-a209-4926-9de0-1c75cb01c3d7", "indicator--1f59487e-ab86-47dc-b8bd-79a4de848b96", "indicator--04d12d4c-66c4-429f-940a-732e236924aa", "indicator--e24c8799-d758-4bec-9d4b-1005f6d65425", "indicator--c77c1731-2014-416a-abec-22f2c8eacfd4", "indicator--08f8e706-07a7-4e30-9dc8-987e1a6a1e58", "indicator--9108b3b3-132e-4651-a6fe-d6c3b7c1c954", "indicator--532921f9-ecd6-43bd-85ae-5c5f83250e7f", "indicator--1268b56f-9eff-4f95-b485-4ce8efd5ba56", "indicator--d839557d-0313-46cd-ad37-d3e7979c7aca", "indicator--cb27e5d8-4991-40b3-aa4e-ecb7e05fc2ee", "indicator--9c21e1ef-7af4-49ff-a3a4-7a58f44a7b9f", "indicator--3b8ec888-1cc5-4efe-be6f-7faaad71dd03", "indicator--b63cc66f-95c0-4ff9-aef0-c719593c7f6b", "indicator--71e166ae-add2-4fa8-b89a-bc8500eca30d", "indicator--251e6b58-287e-435d-a3b7-cc5305e050f0", "indicator--41666e3e-ad62-4403-9e90-a7dc68997603", "indicator--b5914786-3118-4cf3-9260-70e29d1b0596", "indicator--6b2f3c70-7672-4c36-83b9-4880fee503c6", "indicator--463d772b-e456-4c86-bb30-fbfff066bd5a", "indicator--6b6b0911-d35a-4727-ba17-88aa7233e32a", "indicator--f1688f79-3776-4a9e-8873-b9de226a2b5c", "indicator--263210a1-bd85-4740-8016-70717a534151", "indicator--1a47f994-c907-4a18-bad9-cc2f4e6d584b", "indicator--8119ce38-b91d-4e04-b975-61c8ef209861", "indicator--7d7658d9-68bf-49fa-b7f8-cfa190652ffb", "indicator--a90693d2-05f6-4384-86d4-77a7bf3c132e", "indicator--73781a95-fe8a-437f-8e5e-9f0594716198", "indicator--dc7a93e1-47b6-4f48-a907-e840c8d70d9b", "indicator--069092f0-c879-4b33-9182-f69d1d52dcd2", "indicator--af96fd9f-243a-4b8b-83d7-eb76275aafa1", "indicator--9304eb40-1222-472b-9540-b6a57f567d0d", "indicator--ae2dde4f-8eef-4108-a958-7f6aa4b94478", "indicator--1cbd67c3-dd45-4085-b612-492da64bd9bd", "indicator--bbeb6235-3125-4fa0-be67-0c2c76f53edc", "indicator--2005c6de-0dcb-4cf6-85e1-78de297ce09c", "indicator--11a19fe5-192b-47ac-9300-518a3c7ca6b0", "indicator--b3cf7576-83cd-453a-86a7-a826e6e46562", "indicator--69103d2f-6859-4d8d-a401-e392871332bf", "indicator--9e0322e3-f770-4379-9701-6b5456748ba4", "indicator--d840905f-dba0-470c-9f33-a5417c46615a", "indicator--017cfb0a-46f7-416e-bd67-eebcf85a8ef3", "indicator--ad413088-a6dc-4729-9beb-1703d96c86d6", "indicator--fd724853-5c41-4441-8abe-a03b90423bf1", "indicator--91fb52e7-a849-4002-9756-dc1b9d4038bb", "indicator--84ce8863-1124-4bbf-a553-8ef6f281fa0e", "indicator--a8978c04-4dad-4027-904f-d74b3537f02f", "indicator--c4d21113-2b36-4129-b525-b5c36a5ee045", "indicator--0791ad3f-70ed-473c-a564-9e60c443a21b", "indicator--6e26db6f-4d3f-41eb-9dcd-3f3e5c1d5c97", "indicator--847586ee-2939-4e34-9e52-d688aa92847e", "indicator--9646414f-039e-4000-9d4a-6f09f5362a55", "indicator--f5218f8d-0c25-471d-8af9-4b6ffafe5448", "indicator--1989e5e9-cbd7-4f48-a652-70b21473b76d", "indicator--daad91f4-4911-4a5d-8f92-4bd87a6c37f2", "indicator--6062d8c0-cba6-45cf-9b52-3b81a9af37a8", "indicator--57a3b449-5703-4093-a513-f480e03248ae", "indicator--801a14d4-76e3-4ed0-8f91-4890dc50f5a7", "indicator--2d3dc8d7-9701-435e-881c-0cae68305e70", "indicator--20412b92-e0e8-41dd-a00f-415af7a8f40a", "indicator--c7f2f91e-8ed5-427f-a6ad-cbd752298ce8", "indicator--c1ea4e18-8506-48f3-93a3-361c67f6d972", "indicator--9a759107-0637-4d64-9141-dd68cc8d4001", "indicator--29b1be88-c30a-432c-89d7-c2ad44a6f32d", "indicator--df1a9670-0cd3-402c-ac0f-ca07e43a8854", "indicator--1856e356-919d-49f1-beda-9359a1575390", "indicator--1866d9d5-bbe8-4706-93b4-adb84229dc73", "indicator--181b5dc9-4c32-4d83-a9e5-008911b505b6", "indicator--53f2f10a-3fd7-433e-b83a-c0e247e852cc", "indicator--bbbd8b84-ff32-4454-89ee-b5cc7ad9c459", "indicator--c24d66f1-6dc4-4ea7-bd69-b248929ca160", "indicator--c231cb92-3597-4854-a015-4755e2b76560", "indicator--19696a96-4ede-40ec-b6e9-f139065db623", "indicator--077a9e44-97f9-4fe6-b02d-10c768236638", "indicator--08f00ef3-e453-4a4f-abed-48699b2e25c7", "indicator--4c1bc563-6af1-438c-a8a3-e949f0ff9b45", "indicator--8bc5317c-8899-4d77-9af8-de669fa14c11", "indicator--b3a29964-a5fd-4fcc-8119-41ee1b0517d8", "indicator--a3996f81-785c-4345-befd-b36bc40c7288", "indicator--4043a803-49ff-4991-ac1d-7d3a825b7266", "indicator--c682a5f5-f523-4c53-8a76-9ab9c8f8fe7e", "indicator--28d19eb9-375d-42e4-86d1-b61787b6b520", "indicator--f3d081db-778d-4a14-8692-9994a06e0bda", "indicator--94dea1ac-d44e-4cd5-841b-5b8fdd89312e", "indicator--c2fe5d13-9b96-439c-8ae7-648a56521fe8", "indicator--ac83e955-c45a-40b9-921f-b33107c3155e", "indicator--80eeab45-c57b-4c60-9ee8-5d388e2d95ec", "indicator--37c4e28e-8e18-4855-8eb9-3f46d9c308b3", "indicator--e688c044-4578-41b7-9d9c-b8fb1f68f06b", "indicator--a5209c29-e2a9-45cd-975f-6664feb452f1", "indicator--9b7ffbad-d610-43c3-85db-65c5fd516b4a", "indicator--c794b38d-f11a-440a-b447-bc5401f988d8", "indicator--8baf71a0-2afe-4b6e-a201-4294b61998dd", "indicator--0b8e10df-3fa9-4c2f-b392-29f2ef987960", "indicator--245f3e81-e677-430f-9c5f-08e7d1447883", "indicator--9e93263c-4c90-4edd-84c8-7bbd404dbe1f", "indicator--678e9f59-3217-461e-8c1f-2c685b78136d", "indicator--c2579b56-88a7-4889-987a-15db19f7bdc3", "indicator--ee831a14-82b8-4a27-9f4c-58adec8670d5", "indicator--eeefefa1-d790-4b63-8b9d-0546bea9bd4e", "indicator--8b078285-9a78-4679-99cd-096b9ff3ff87", "indicator--2372b09e-2aec-48b4-aadf-a3a025b3fb76", "indicator--e7e402a1-b4de-4447-a7fd-a7a4428ac9df", "indicator--c7ffd544-a905-473c-b39f-3f4b60018745", "indicator--bce840eb-e14f-4173-be6e-ce01c182b2a3", "indicator--2bce7fd8-6650-4879-a29a-3dddfd77da8e", "indicator--95490fb9-065b-4a61-9d96-6a744ccd368b", "indicator--820b09eb-5eb1-45e4-93aa-9596b0e0588e", "indicator--35385068-f925-4d73-bc63-0e8eee4b1a93", "indicator--426515ab-f8d5-4fd9-8352-10b868b13f41", "indicator--99e3a80a-cd02-4787-8d21-f07d57351a73", "indicator--0f579d2b-f991-4ddc-9231-9222ab542d13", "indicator--f5713ab1-cb00-4a3f-a3c8-df648dfc8d86", "indicator--bb7311ba-85b0-4d35-8580-79e790231587", "indicator--7f088006-ccf7-4b58-8d50-5e375cf49a88", "indicator--79b23a6c-a679-4531-931f-305936f6715b", "indicator--03941141-2e1c-4cbc-9e17-3c32af4f55e7", "indicator--7d0145ad-854a-470a-9042-2dc54b80d7f0", "indicator--ea639b67-bab6-47ff-8e03-13b4dad62606", "indicator--53021972-f6c9-4bf7-95c0-7e47b4239f78", "indicator--c7c9e2ac-c12f-4167-b6fc-a0b4e03730c0", "indicator--d10689f8-cce1-4dc5-949e-d696b9e4d845", "indicator--21625617-9dde-4070-890b-0fa4a8d07da9", "indicator--7174f23f-de92-43e9-8122-6bd67242b12d", "indicator--58298849-2c2a-4e8b-943d-0808da129c55", "indicator--2a007a69-14bc-4b7a-843b-bfc9df1540fa", "indicator--c278584d-aece-4e1f-bfc8-4f4bebe021c4", "indicator--e7d21b95-7cea-482c-926d-f5c0afc879e7", "indicator--3ed9b20f-eff8-4582-a17c-98632fed5df5", "indicator--e62323ef-a398-4a0d-94fd-59f0b1973718", "indicator--eb9fa6c5-0e1c-401f-a508-999e733cc437", "indicator--becfc914-454a-4a2d-a03a-055bf14bdde0", "indicator--22ed3881-6239-4d71-8994-26fa86cb6fc7", "indicator--9246d693-86d2-4f7b-8c33-746f7202303a", "indicator--30aa71ab-8036-4725-993f-884e53005727", "indicator--b659e287-739a-4027-ae42-062712b8f826", "indicator--a6cdbabf-ee4d-499e-ada7-650fd9e6045e", "indicator--07f4d46f-8a58-41a1-90d7-8a8122da91a9", "indicator--a29ba551-5bf5-4963-9dd8-15726dab089a", "indicator--08ce8c51-926c-40a0-9dbd-29fb95607f24", "indicator--2b2619e3-2eb3-4201-9add-a1346d528761", "indicator--9c2a1197-8f78-4872-8fe9-df729bbbb89e", "indicator--9f2ff31e-0f5b-4ea7-9bd9-8d909bd495bb", "indicator--3d0d798e-77c3-4135-9747-f04ee5e36acf", "indicator--ed190e74-b5ea-45ee-8605-ffc1691648dc", "indicator--62ef707a-cd22-41d3-bf85-ea7ae54cb224", "indicator--0040e70b-3d3a-497a-b707-8373c962d20c", "indicator--1bd9ecd0-5c08-453b-a306-0e8a5f417b8e", "indicator--15b9664d-eb87-4533-8dd4-3e118df22453", "indicator--73db61d3-acfb-4637-bd1f-5768d5da2fb6", "indicator--b5ec81c9-b2d5-45b0-9168-e41b2dccdf66", "indicator--6bc2670d-2bc0-440e-963c-08feca3b8204", "indicator--1afa8d77-9c55-4d02-844d-8351d94e10de", "indicator--e3925e8d-e59d-4354-8cdb-400e7f5227c2", "indicator--a96e72eb-d85e-40b7-8947-41113f22e8e1", "indicator--5288740e-2b4b-4ee0-b00b-8c171f71be18", "indicator--8ef164ca-e3d7-4351-b4af-2326f0e40258", "indicator--14d09587-23dc-4b40-9b1c-91ec2e7f2913", "indicator--d820f2e1-fb20-46e8-a083-f3497683a366", "indicator--b5776fb4-145d-45e2-9665-5a3c62baa063", "indicator--17ce490b-ed57-416a-98d8-823cbe58505d", "indicator--0d139533-261c-45e5-ae07-78d6608320d7", "indicator--ca490aeb-6990-46dd-8eb4-653cff0db0e9", "indicator--1a6954ab-df4b-449c-a1c8-e17ed750537d", "indicator--482bc7f9-301b-4f85-87dd-fc1aec698705", "indicator--b0800a0b-6cdd-482a-a082-58de5e3fe86e", "indicator--8b672710-577c-4c96-a0a3-1ea1cf7bb407", "indicator--7ce21921-28ff-4456-b3a9-08024b3d09db", "indicator--c9a39afa-809c-483e-86da-8cd1d3900f56", "indicator--39ff44c0-0bc1-4407-94c0-c90265b32acd", "indicator--d655bd3f-a1a7-438c-8616-94387396d6ef", "indicator--2a044274-447f-4a2e-9e05-1ee188a10ded", "indicator--acc7af5e-08cf-4dce-b8a5-dbcadde3ebee", "indicator--552ebb1c-77c4-45a1-bbf9-258ccfbbc4b3", "indicator--76949d20-495c-4c80-b961-88bcc11d8c8a", "indicator--0978a78a-1fb1-4110-9771-f64ddddddfa8", "indicator--86f6e82f-ca92-4c12-b1cc-80e6618e79eb", "indicator--c4ad6615-2654-48cb-ab54-e26d64bf9ad7", "indicator--3ce74ff1-f7dc-4316-99d4-bd9c899d12a9", "indicator--415ac38f-14f3-4c77-8ff9-9ffaeed5ceef", "indicator--f05206b2-2a6b-4589-b966-dbc5d5242f3b", "indicator--0cc29819-ee40-4ba0-a5e6-d9f31a01c333", "indicator--bdfd6647-ee90-4684-8c15-1fa649fb4f7f", "indicator--1e762a0a-84b9-4b3d-9642-5712c5f26e26", "indicator--ad255c1f-0ab9-492a-9588-82113231f018", "indicator--033b3101-813a-4c6a-8f8b-4cfe7f091e7a", "indicator--48e8a9d1-8064-4900-9910-4c58bbf036fd", "indicator--bd3cda46-27ec-4ad1-94c9-f203dfebcd18", "indicator--d4182a51-e0a2-42f9-abc7-719d14779009", "indicator--c367c87c-7e67-49c6-a7b5-f04d2df3adda", "indicator--5d95d5bd-5eee-4ac1-82e8-5b49c2685511", "indicator--cd95a955-00f4-480a-88b9-dab541d3b35e", "indicator--13dcd3db-4aae-40bc-8729-64b3b59b3ad7", "indicator--35003958-4446-4c64-afe0-4b8f23b30997", "indicator--29a8c124-130e-4447-a40a-1334f798d82b", "indicator--9c4af761-0909-4091-ade5-95d204b36d09", "indicator--aa463221-c24c-42ad-89cc-e4e44e023263", "indicator--a2a992d0-149f-4fde-9a5d-c9ddb39d5fa5", "indicator--4643507d-c00d-4db5-b101-ef0698a7533b", "indicator--1fd41bde-022e-4f81-9ba1-349ca15a990d", "indicator--67fff19c-1ee5-4ea4-864f-cffa736f8439", "indicator--fdf66d4e-71a2-4524-a4d9-e884a80e861c", "indicator--f9a99e03-589d-46a8-972d-1f9d4c0acc97", "indicator--0ac54d43-8c93-4d98-95f8-4d6342a0ca6f", "indicator--4e27d9b1-6294-4cdf-8a31-73ced55ac9c4", "indicator--291dea09-d152-4bab-b2cf-da48fc0378c8", "indicator--c9625137-f020-4ee0-8368-0cbc542c3bf6", "indicator--dbd117ef-49bf-4797-b572-62b277182717", "indicator--60a34498-6255-4c41-8f5d-0355859035f6", "indicator--44e3ba7c-e6d4-4818-a834-c1aee40838ce", "indicator--2e9b381a-28db-4667-8385-5c446e6d75d9", "indicator--9b1f6414-3a3a-46c3-84fe-ae8da6ab0b96", "indicator--1fc34e33-9dbc-40da-a201-659d92eb2efd", "indicator--5f7972c3-30ea-4f9d-b5a5-73b13eae390d", "indicator--fb2ed4a6-a198-4816-b6d1-e91a27b61575", "indicator--f2c8dd56-025e-497b-85f3-6ac07ccefc4c", "indicator--d1089e74-b475-4af2-ad54-37cd3cbf43d8", "indicator--919de92e-1010-4e27-9e3f-ca85123e97e3", "indicator--623723db-b8fa-4499-855d-93dfe39f192f", "indicator--1538619b-7d3e-4188-9848-f0ff7708277a", "indicator--4be9a385-a7fc-4da4-8add-c60fb96eb9c8", "indicator--1da75052-e76c-428a-a1a5-5ea4c33ba7e8", "indicator--17e01401-98e5-4cd0-ae39-1f7f0041cba5", "indicator--a84ba7cb-e87b-494e-ba99-e57a2aebf4cb", "indicator--a5482823-5c70-4a06-9950-57c44451d0ba", "indicator--5182d7a6-7ff3-4ca6-b9bf-d8030dac206f", "indicator--14b559dc-bf45-4266-8c76-a88d57a42bde", "indicator--dc7ed61c-5e86-41b0-ba30-f6e0aee3d9c5", "indicator--049048e6-5818-4ea3-bb83-2d2953ab37e8", "indicator--e04f7660-cd66-421b-bbbd-86fadd078ff9", "indicator--fe8073d4-e15d-4e26-81d1-b991d5691725", "indicator--d8361d7f-4562-4f6f-bdd5-191f601bdc0c", "indicator--1a4ded38-9f04-44c7-a445-df770156ebea", "indicator--6e5f6d35-f5eb-4b06-89bb-e6927ce21bca", "indicator--f16ff94b-278b-41b2-97f8-091a8211478f", "indicator--78ab36e4-9387-4350-84b3-35fa67624405", "indicator--e4fe11cf-565c-4f24-805a-1c8f8fe92731", "indicator--ada912e2-d8fe-4ff0-ac02-12fe12c1ef72", "indicator--ec642081-57a3-41c0-aec3-339d4bbc0edc", "indicator--a742d4f2-060f-44c1-a1c4-036820850876", "indicator--60389108-6210-469b-9cbd-aa11d9f483c5", "indicator--85f95f42-29fb-44d9-8dd3-549eebbb8b36", "indicator--8ff1b711-2670-497e-8301-e1db3d62cee2", "indicator--ecb55a90-d43e-41f3-9a21-c2a43e2c1900", "indicator--23078955-7ef8-4863-9596-75619d7cdd29", "indicator--17c4011b-dda0-4442-b369-26c59978cb2b", "indicator--036bf50b-e09a-4cf5-93c8-36a17ba759e0", "indicator--21ee0b7b-f0d8-4fe7-a513-a1ed076c9fc9", "indicator--240bbfd7-dfd5-4f05-803e-23fc8930c6e0", "indicator--c3edf048-2fa7-441c-9b50-eb43f294d5b9", "indicator--e8f1ab10-96a0-41be-a84c-687047438cb1", "indicator--1d260dec-9ed7-4eb2-9aca-bffa848a0ca9", "indicator--42f42567-a39b-41b7-a100-4c1f38f389f3", "indicator--8fdec4a1-8658-4855-9854-91e2779283ad", "indicator--c5e2affc-04a3-423f-9dc4-05aaaf347be1", "indicator--af345985-4ed4-4c3b-a3f8-1d9aa31cd1cd", "indicator--001cd0b0-b3f2-45ee-abe1-e50ef76e82f4", "indicator--7e1fff2a-1c9a-46ce-9bcd-93504db74b25", "indicator--1fa11b55-f1f2-408b-8cd4-01ccc3875475", "indicator--30a5d289-5009-4efa-b195-0dca40abd73a", "indicator--aa827e2f-26d6-4622-8767-312e8e7485c4", "indicator--c303c498-19d9-409d-ac1c-18f950b5cd64", "indicator--6e3e3064-bc2d-454c-ba02-15dd5602a5de", "indicator--b1a1dfbd-fb07-4f03-a24c-dd7891b51048", "indicator--32282098-b9a2-45a6-bd6a-40a1e9925669", "indicator--bbcae3af-a9f0-4a04-8c83-2f39692afa25", "indicator--40b7439e-6136-42d0-ab84-544b6e8317e5", "indicator--5e88a478-209e-4c69-8476-792bdbb4256e", "indicator--103e9dd9-3b1d-482e-b06c-756531b3a279", "indicator--7f023a50-5065-45d7-9e11-ee63d900d199", "indicator--5bf425c5-489c-4b87-b797-8fde96ced699", "indicator--96dc4781-27ce-4832-9adb-eddf9dd152ee", "indicator--5e406134-249d-4156-912e-59b2fe0508a6", "indicator--9c629551-9e4b-4c42-b1cb-c54e07e0df45", "indicator--4eb62a6b-7bb2-4729-a920-e7ea8d7b21ba", "indicator--7aefe0f5-6265-48ee-9bf7-522c7503ccc2", "indicator--46ee5ec4-908e-4a6d-bd57-6b48e38ddee7", "indicator--0d427a95-cb8f-4fb1-b8ed-a2780904364e", "indicator--1733d092-27c0-4db2-a149-93b524c81cb0", "indicator--28df9c8f-503e-40ba-8554-4af86a5ac4fb", "indicator--bd686211-45d0-4ae5-91ed-c82885295306", "indicator--2bc67ba2-92b7-4218-8ed8-118a0df1ebe9", "indicator--74138382-9ea9-4583-a77d-94dccbec4ed1", "indicator--ff2e71d7-0ea8-4f92-8c78-b99a0b0712c1", "indicator--1093df23-94ad-4a17-a15e-786aa4cc3087", "indicator--86f8e90b-10fb-4047-afff-f59b47d4fde8", "indicator--eb59094f-2897-4979-9738-deeab014df87", "indicator--b4a9d5a2-0c88-42c3-b872-f5e920f0a7ed", "indicator--a4a1c738-8d2e-408e-bc97-b49dbd46ca9a", "indicator--49a5c216-afde-448f-a577-c2e32d287e4e", "indicator--c7327196-cfa4-4367-995b-ed5c9dcb1188", "indicator--c84e7a18-7bcc-4732-b6e5-25c8b51eee4e", "indicator--7b016a4c-08cf-406c-a49d-bfe501426932", "indicator--c60d0877-4ba1-45d1-aa9f-4cf143468b62", "indicator--e34f98db-edaa-4ec9-b140-3b616d3f9fc6", "indicator--4ebec6d1-ddaf-46cd-8fdc-d27de6d6fc0e", "indicator--48f4aff1-3668-48ab-ba56-e6ba31ef0935", "indicator--9e0f1825-1dd9-4d65-8433-c5766829bb9c", "indicator--6e523619-4b90-4a52-b747-2c00aace89a4", "indicator--805cc6c9-d36a-4bbe-ac95-798ffd5c8825", "indicator--5b577123-0ac9-4726-914a-3ca34e6e3d17", "indicator--d3a33c53-fc26-4b21-83b7-a84ff678cb5d", "indicator--024a2afd-8d3a-48af-b836-c6e44c37cedc", "indicator--4f1f19e7-e894-4499-a92e-7d5f79a63fe5", "indicator--837e4115-2abd-4ffe-bc97-070cb66db2c1", "indicator--289cf369-ecc4-454c-9019-a29f83d2198f", "indicator--5f5aa50d-2aad-4732-b1a8-8c0905e26f9b", "indicator--4dab5071-4d91-42a2-a6b3-adebaf450c4e", "indicator--2a6c6b7b-b1a6-49e7-850d-8d20ac7a37da", "indicator--13709c01-fd06-4930-89e3-2ca7807c2278", "indicator--9ff9cded-047b-45d7-a07d-c69cb62bf746", "indicator--61f55f60-df2b-4138-90b2-d50a3dcbd85e", "indicator--bad45bce-db5c-433b-b5a9-4bc7c4822d72", "indicator--16fe0533-49b7-49da-b04c-19bd799f5878", "indicator--1dde07c0-c052-49ca-8a71-79f89e350104", "indicator--06c39ee7-e75e-4614-b4e1-a542d2495fbe", "indicator--467f1e76-2545-48a9-9614-8d2b65bc2109", "indicator--4dbded93-1474-4273-8e5a-eb253f205cfc", "indicator--f8d92afd-3fd6-40e5-8de6-0f4a023f0f78", "indicator--5c552a47-ed9f-4f5d-82e3-57420cfdedbc", "indicator--13201e3f-2c2e-4544-8da1-f0741c6198cf", "indicator--b135dc78-d677-4c34-9816-5aa74421fdaa", "indicator--57340d2a-317d-43c2-92ec-2a68926a8e3c", "indicator--f89ca658-2ca5-4c23-824a-3324caee1297", "indicator--d1b45240-3f34-4422-913d-18b3b3e8d31b", "indicator--0b379c75-4e0f-4180-84e7-ab5f34a6c106", "indicator--86fc9360-efa3-4ad0-a32d-29a68ec3f8ef", "indicator--0bf33e98-32b7-478f-b5e8-66998ef6daf9", "indicator--bb0ac33d-7ccc-40f2-bfb1-9d2a3084345a", "indicator--2ac6d63b-b600-4be2-9165-31a5c301e8a0", "indicator--1630983e-eb8d-4b26-ae6a-9778eaae026e", "indicator--1ffbe030-e7e4-48ac-99f4-bff872530eeb", "indicator--4016f244-52ee-4e64-9949-614527b7a8af", "indicator--9fbc674e-407e-4bd3-919f-1d7b2f2fc92d", "indicator--46ace0bc-4273-46e3-8227-c5c43c39f1b1", "indicator--a02dd292-f29f-4bae-a2c0-7af354c7ecbd", "indicator--a6e51aaa-e795-4cf0-a408-20b6c67e0cdd", "indicator--e7dbc367-cde2-43e2-8504-107bb66fa1d8", "indicator--d60dfedb-669d-4088-8286-2ad45a3923a4", "indicator--71f4bee7-9e5a-46bf-b066-2b11a419fb9d", "indicator--98aa0c12-6c46-47f3-b73d-4a414eb070c0", "indicator--36aa6bbb-63ee-4bcb-ad2e-3c756f478608", "indicator--8df25545-b572-4697-8840-d6a6e364ae56", "indicator--ebe92714-6861-4669-9c76-fa6a33d6056d", "indicator--a6bb4789-db2e-47d9-9eb1-4b79d674dff4", "indicator--6cd577bd-6aed-4272-bf53-1daa72e35360", "indicator--67318ffb-881d-4959-a8eb-3317d7b79d52", "indicator--78d86fd4-670b-4295-bbe4-38f8275875ee", "indicator--f08d2a7a-561e-4d86-9e39-ccf87b83c5be", "indicator--dc9a145e-47a1-4a10-aa81-336437cad25e", "indicator--7e348013-f5c6-468a-a669-e947b392dba6", "indicator--1c9bb58f-b978-43b9-8908-f5cda20141a4", "indicator--d4a239df-6da4-4ac9-bb6e-088ea2360d5d", "indicator--99bed3ec-975a-4a47-9b07-b2739ab44228", "indicator--29e11b5c-e51c-4d11-b47b-02cfcc0ba15e", "indicator--c9546622-084c-48fd-be35-84637d4a2b98", "indicator--117e958a-1a26-489d-b267-e09ad529b89c", "indicator--a5f0118e-8317-4df6-8c31-2e498408a35c", "indicator--bea84e18-2f15-4279-b649-40ef40c23763", "indicator--817ba413-d732-4610-a7ee-7f21c5da29c2", "indicator--537d9c3b-870f-424c-b4e4-834944bae6a8", "indicator--e305d691-6f5f-46d7-8a61-9f28d6b59a68", "indicator--edff30e9-eb79-46b1-96a1-4448ba2c875d", "indicator--81b88475-4500-4367-ba3a-d07510ac0b31", "indicator--bd372949-9f38-4f16-aad0-90661d3a7caa", "indicator--df9598af-fa73-4498-ad53-cf388ba91ae8", "indicator--4206d6e8-c7d5-4303-baed-03d2e4379835", "indicator--7f03788d-17e1-428c-a2c5-fe52cd9fff23", "indicator--28bd5b1b-3bf2-44ec-acd0-101e00a3d437", "indicator--6fb0366b-e1ce-45a3-86b9-8a5686f8d09c", "indicator--c357c2e9-0cc3-467d-a72e-54e4ce5ecc04", "indicator--b336b63f-74c4-4634-b1c1-3492c7464238", "indicator--42e2ff4d-c169-41eb-a51a-cfdb28abbd57", "indicator--6239e538-20b5-411e-85ed-73067635ddb4", "indicator--35071207-966b-4fed-8500-aca8dd826d4f", "indicator--130edfbe-744d-4d50-954a-3ca5036e5f21", "indicator--18ae8244-5da2-4cd9-9e89-4888836c01c7", "indicator--f2adac0d-b3a1-4d3d-a64c-06d323882776", "indicator--d57b2057-9dc1-41e8-8a0a-35bdc3a667ef", "indicator--86de5f4b-710a-4ec4-932b-cb995ff0c979", "indicator--a9ab69e1-7744-4a33-8895-ccdc13f7de28", "indicator--9c42a04b-594f-46ba-ad1b-c7a38ea27ba4", "indicator--bb24dfae-6bed-46b8-8b60-47b5ec9f2d55", "indicator--93469083-4312-41eb-ac5b-59530280f61e", "indicator--78b9b612-e0ee-42e8-b7a7-ec4967adc607", "indicator--0438ff84-e8b2-4c76-8d3c-6244978d2381", "indicator--85465401-9ba7-4e80-b461-891f04a47fd2", "indicator--c442463c-a907-456a-82d0-0c1ad5e8c94d", "indicator--2938d53f-9ed7-4cbe-99d7-e46738fff1a2", "indicator--71a1fa1a-b2d9-49cd-bea8-8efc4068db60", "indicator--40018744-1f6f-47f2-a418-70e0e5112bcb", "indicator--904a05b4-1db7-44d0-b822-c856fe85ffdb", "indicator--e05470b2-7f72-437e-8174-b627df2a4201", "indicator--fff2e0c3-2ba9-4525-bd4b-7aa4835f45b6", "indicator--a4c355c3-7271-4749-8536-8ab1828c3e2c", "indicator--a6b27687-045d-48e9-aa7b-0917ca47003d", "indicator--de47c0dc-2660-48ef-97e4-f61cdefcf871", "indicator--a663ec01-5d74-462f-93f5-6439efaca09a", "indicator--528da811-4f20-40d1-adbd-818c96d89391", "indicator--dd24494c-ae74-4f6a-a7b7-dfe0cd56eefe", "indicator--1df1f55f-fb3a-4753-af78-a85e7300b893", "indicator--13876123-d518-4127-ae26-f1a40565efbf", "indicator--8e0928f5-6d42-4f12-9411-0eb5c0778847", "indicator--ad07ed44-eb69-4a27-b563-6b213a61e476", "indicator--8ee2db90-e1ba-4bf1-95ec-01f4122da8e2", "indicator--ab6bfa3f-3c67-42d9-984c-d5758ca6813d", "indicator--d1333c0c-7ffc-481c-bff7-af775259feb5", "indicator--a95aea40-1f7e-41d2-888d-40f233d40d1f", "indicator--79172b2e-2741-4792-a62e-d8b34cf4cbfa", "indicator--08db7af5-9c9d-4e94-b954-0f981989d47a", "indicator--5b255c04-beeb-4f28-946e-6b5b2777710b", "indicator--3e0b59ec-fcec-49ab-be83-d53b3427ec7f", "indicator--d559e9a2-ef20-41bf-ab6e-bf867e956c09", "indicator--a9b7f992-491f-4888-bc87-7226cbccfe0e", "indicator--2243a69f-6c1e-46f2-9d30-8b78c79d83d6", "indicator--9f90df36-26c4-45d0-b4ce-a09b43f069b3", "indicator--b28d92bb-a0fd-4816-9565-fbe9ea8c2c36", "indicator--2adbb4f0-41f2-4360-9244-c0ceeaebbca9", "indicator--c4969069-078b-479b-96d4-ef5d84264c8a", "indicator--55d4e158-d39f-4da2-99ff-ae6706bf901b", "indicator--a09703c4-d2ad-48c4-9bce-07ec82b25bf9", "indicator--c7628e79-b7f9-421c-8de1-d1cd9fd8c861", "indicator--6b845728-3319-4353-841c-852dfa3029e7", "indicator--a141d6a7-a415-4bc4-aaa4-9bb0ae875ffa", "indicator--8b2fb2ec-88db-417b-930d-2c55bd70da0c", "indicator--a9fdd0fa-4e5d-40db-93ea-071edfbe37de", "indicator--21dc5c68-cd71-4af9-a9bf-d009b5d7a5e1", "indicator--8a1144fe-8132-4781-a53a-bb33c6c9cba3", "indicator--f2157919-f57e-4489-8276-deedc359fd9d", "indicator--145b6c23-4aeb-480b-8352-1381868b731c", "indicator--3aaf2fd3-3952-48a7-9d02-75fa76977dcf", "indicator--3047464c-01fb-4412-b5fe-a2a7d63664a9", "indicator--4480fc96-0884-4d7b-a7e6-d4380e37197b", "indicator--f07a8a40-1276-4d00-a6ef-e3ddb5fe4280", "indicator--1da3e34e-c5ef-4d5d-9d70-bf28f96ba0a4", "indicator--c66520c4-1d68-4f6b-85ee-3a5e7b10db8a", "indicator--68eee9e8-5dd4-4204-bf66-657651bdaacc", "indicator--7f4ecf3a-352e-4e19-8d5a-9e63d858afde", "indicator--a9d8afea-2d7d-4af6-a18f-ab4187b992d8", "indicator--8afaf22e-cd6f-4d58-b456-5c7eb9159fb3", "indicator--4cb27976-5caf-4367-b42c-2540a1dfa560", "indicator--9007abdc-db7b-4a7c-a14c-641c9326afe4", "indicator--b8301da0-b040-4943-b476-989d4ffa0b26", "indicator--0758eb4e-5f08-44f0-add1-084934934699", "indicator--e285746e-95a2-426c-b692-16b7736c115d", "indicator--c85cc48a-afec-4d91-8b96-b28db6b95401", "indicator--fcfb052b-4323-4da4-9f83-401e67abcf4c", "indicator--75048d43-56bf-421b-9151-96d7d8804c93", "indicator--809c7d48-90e2-4492-9269-fc013272eb94", "indicator--355e0dbc-534a-4d1e-9359-bb2a98cd7761", "indicator--0d9afaeb-e631-4831-bc49-5a6a048816b8", "indicator--d067f9cf-9dcb-4633-8e71-488eea537191", "indicator--6d1517e3-9abb-4703-8f08-f44bef0afdbd", "indicator--b7db05f9-4a7d-4157-be76-242f039ae7a4", "indicator--2b64ce80-81bc-4f67-8935-b2d27d8aed8b", "indicator--68954da9-753f-4368-8969-c745316709ae", "indicator--59888deb-cf7a-4dae-b145-f4741ee88c92", "indicator--e322abb6-461d-4b7a-86ec-fca5f134c0ab", "indicator--3cf753d5-398b-48cc-8783-8ff13afa43f8", "indicator--e5be04f3-8a33-4554-989c-c49bfc2c97f9", "indicator--fe0f87a4-ac8a-4498-aacb-40b92b23275d", "indicator--b6ce8888-8faf-4e5b-b447-a6b099f25c47", "indicator--2a56b96d-28db-42cd-afa5-80c276e10879", "indicator--f0e99b41-8d50-45b2-b162-34786c9b8579", "indicator--f3075676-b66a-4198-b63b-2450972a4831", "indicator--2be6adea-764d-4d75-b756-7850742e7cc7", "indicator--323ba86b-dcce-4ff9-8b7d-aba179758d77", "indicator--d2e2b366-a607-4d9a-a9c9-affea37af41c", "indicator--d637ee27-0958-48dc-9c4d-90a2448fd429", "indicator--9c4ad050-32d7-4128-924e-2dd4d0795d0d", "indicator--342ec31a-409f-4461-aaa5-daf3e43f4cc6", "indicator--d1bb8169-e5e0-42ce-b4ae-9c257cd4354a", "indicator--7733a85f-8784-4cfd-8e3d-753dca2caba8", "indicator--05b56e62-4311-43e1-a860-41cde9d487e2", "indicator--27c88187-eef0-487b-bdaa-9c2c9ed286eb", "indicator--ab76ead5-3346-41a9-92ca-0f86a3f3f013", "indicator--90396bc3-dffe-4fb4-a022-14d1ff57f889", "indicator--03652ec9-8395-4498-ba39-1b51594ce282", "indicator--13f84409-c3bf-4720-8bc8-bf45d401ac35", "indicator--d6112990-3f6e-4f19-9ed9-724acca6de2c", "indicator--35b49ed7-4be3-4f89-a88b-85ba3ed0307d", "indicator--76b25c97-8d4f-4e63-b3de-871a16d31525", "indicator--91284317-a867-4c6d-b695-15b602abfccb", "indicator--09c55364-a600-4249-9e7b-4a36095a3729", "indicator--4c88f073-c467-4363-b220-21ca27b8e16e", "indicator--c38455d4-6ca0-4bda-a1f6-3573bbce0210", "indicator--9b769e5f-804e-4be2-9cf0-91137bc972b1", "indicator--876ad76b-fa12-47eb-bb3a-8a51c5f85b91", "indicator--189c3975-a87c-44bd-bcbf-d85d696868f6", "indicator--83b0b4cc-f64d-4ba7-8873-cc8cf4a63e8a", "indicator--8f6bfd29-f584-4cf1-8283-b662e7cb592c", "indicator--380d6cbb-bdc9-4bd3-bce8-ccd7004d2e87", "indicator--bf3a11ca-33cf-478e-9c36-36c6f3d9ad3c", "indicator--b0515775-87c9-4100-b4aa-856086baa388", "indicator--7684b431-211e-440a-adfb-2f6807a7fe55", "indicator--1699dada-e4be-4b37-863f-b2d4c951fd8a", "indicator--5a2e4c82-d939-4606-98c1-2269823fd5e1", "indicator--167b6666-b5e0-414f-a27d-c860fd9bda27", "indicator--a565bb63-3ab0-40d1-9275-56112b6230b5", "indicator--eefa4f52-ed13-4692-a19d-37b32eaa055d", "indicator--68b54ba4-6702-435c-900d-e0d6ab1cd4b4", "indicator--fde45937-5599-4f27-9074-9959fced4d40", "indicator--40e77fdc-2ea1-4936-b475-5c900979c0f1", "indicator--501e560b-ff90-4285-8510-1c3ace58fc6b", "indicator--f58bdbbe-28e0-46ca-93d5-7d2e8f0c0890", "indicator--590cd5eb-9add-496c-8866-6358d637a949", "indicator--3fe61109-ee43-418c-93d6-056889356e7e", "indicator--7c7f7425-ca4d-40f0-9820-d85e28fbaa99", "indicator--a9d9d1b6-6e2a-46a6-a606-b6a8250527ec", "indicator--8dd86714-a066-4a68-86a7-502f60103771", "indicator--0f24cd02-2a34-4a98-9a9a-5087aa8cad52", "indicator--b960fc8e-32f8-4f43-9ec9-6d23aaca8bd3", "indicator--aa77400d-68c4-4054-a7dc-d76c3020f32a", "indicator--8a402762-972c-490c-bf90-5c85315bd394", "indicator--355f8460-12a9-4135-b67d-091b2bf8dfb6", "indicator--b631df5b-0e8c-4aaa-a788-978f40ed9a83", "indicator--16e59588-f1e3-4c51-9ff3-4bc2f345739f", "indicator--5970821e-1a20-490a-8738-a948be3aa5a4", "indicator--ebab6757-207b-43d2-9d95-8f4be7e15358", "indicator--4ffaba62-75c2-4659-b526-69fe606b8717", "indicator--4fbb7d73-942c-4cc3-bc3b-e6adc15d6e86", "indicator--d1ad493d-b5a3-4c77-97db-69eca65df644", "indicator--3116a911-2dac-49de-bcdb-6ac10ddb36c2", "indicator--1ff411ea-84d8-4d82-8d2e-9e0745636fcc", "indicator--c9c2017d-d599-4f98-b64e-601c5ba57033", "indicator--d1baff73-03f4-4f79-bbf6-d7ddf6089c4e", "indicator--8edd22e1-24a8-480e-beb8-762be42a19c2", "indicator--08dbfc69-fae1-4e7c-9601-f4608f4d0e43", "indicator--b501479f-c54b-4ad6-8c48-6ed5f2eaf564", "indicator--f4030031-5f61-44a7-b85c-7066f39de54a", "indicator--ef0c17ac-ad9c-4b51-a853-6f2f81b8a8e0", "indicator--d4e4a95b-3e41-4b88-bdf5-6fdc77f32799", "indicator--e8ebb5ea-78e8-4129-8a2b-d97121d76543", "indicator--ab9e6d75-5fa5-465f-baf2-c4d3e6365fe5", "indicator--69d1108f-1cc5-441c-8e3d-8dc57b677db3", "indicator--5d7f46db-e0cf-4f64-b2d1-5983c31c8922", "indicator--f9f97508-22ec-4290-9cd5-96ca53a9807e", "indicator--f2a5c43f-f572-404d-b5d3-316c4f05f5a4", "indicator--f5b507ec-5f94-411e-8752-73c08c74d4b3", "indicator--9bbb8e95-68ca-478c-bd4e-129132f34cd3", "indicator--0de84769-6a4d-462e-ba62-728aa70adff8", "indicator--4e442167-1f2c-480c-b9ab-4348fee39a72", "indicator--f0681a68-62d2-4c6f-be67-c9d629ad3fcd", "indicator--4df008e9-9c9d-4351-8187-21c2ca681c88", "indicator--e58e0987-ca2b-4262-b886-31bcb7e5ab5d", "indicator--dd7cb6c7-9d91-4b16-b2fb-d67c5105adeb", "indicator--78d71f15-477a-4022-9419-c1b2666fc806", "indicator--837e10a5-3556-416f-8471-8ccd89effd5f", "indicator--03ece201-5023-4cae-bc16-bb0a0a1f559d", "indicator--f862a4a3-283f-404a-939d-2c74896c5956", "indicator--91d069c8-7525-408c-a0b6-e9a60e75b3f2", "indicator--d1e0ca3f-c7ff-47a2-99b1-75d43cde26e8", "indicator--1372bffb-6222-476c-b109-4425a636a1b7", "indicator--c3c5cc9b-0272-4b31-b213-25636e279239", "indicator--75f6c218-a33a-4c3e-afbe-a58f1049438a", "indicator--4b290be1-446a-4677-b8fe-0a6688efa01f", "indicator--fc5a465e-11e9-47e5-953d-5913ecd2cfd1", "indicator--ce9e5962-6632-42e7-be91-00a5324127ce", "indicator--762bff87-20f6-445b-b747-dbaddb4a2bbf", "indicator--200838e2-58a5-415b-ae2c-2871b479460c", "indicator--2bd866bc-f26c-4b54-8f4b-5bb1781383ab", "indicator--66df0f30-8d4f-4ce2-862e-3f804522df68", "indicator--f463c345-37d2-4056-a3cb-776a78c3fdab", "indicator--e4d10cc5-eec6-4950-8736-be6a02507053", "indicator--67032cbc-492c-4cbd-af2a-53793c58aea0", "indicator--3c902046-6c10-4913-997e-481c42f77570", "indicator--8ef1536c-0230-4c8d-a6ab-7e35eedd2ef3", "indicator--40c28ee3-36ac-433e-a43c-150113a69008", "indicator--39c46b47-32d1-4af2-8f42-82d6031819f3", "indicator--e265d788-e371-4975-82a0-0f2ccf669dfd", "indicator--47866ce7-006d-469f-8fef-1ccc09fd3aa8", "indicator--7e8872b1-cd70-4bfd-9980-57a6186a5b81", "indicator--507e286d-0444-48f1-a59d-aa0e5bc0e623", "indicator--42b0a69f-a536-4809-941a-df5d7e4b8c15", "indicator--f8efd2a8-6f00-47c9-abe0-0203ba6d4b44", "indicator--e241537d-459b-47ce-bffa-65e85cacb94c", "indicator--3c86445e-d66e-42aa-b31c-098abe9f0fb7", "indicator--adff7750-6441-408e-b61c-75838699735a", "indicator--7f9b2eb0-5b77-4db2-a447-2b7e48bb11d1", "indicator--6fad047a-1c8b-403f-976b-cdf295d06a57", "indicator--b1eefafc-ed9e-4bad-909b-bb0b639cadb3", "indicator--2e7699ec-3f4c-4809-8933-8beecad1af93", "indicator--e723597c-6ae1-4555-811b-0302a72d5c12", "indicator--6251a2dc-86c8-42fb-97c1-5b44e2ba1ef8", "indicator--f14b0150-9e14-4687-847c-e3ae77a16bc0", "indicator--0baa7533-df5d-4feb-a1a1-5cf4da114619", "indicator--0c38a641-91b3-4a22-92ef-876c6e38f8d1", "indicator--c681f6dd-92dd-4813-9bb9-d5302c6f6207", "indicator--cd834416-ddd4-4a22-b2bf-377b7635bcf8", "indicator--75d4fdd6-bd2d-4612-b6a7-9cbfad5d3f52", "indicator--fa5ef401-ffbd-4c2d-be2d-5cab9f8a932e", "indicator--4782f191-4024-41ac-80f9-ec1fa78809d7", "indicator--3a407f13-b48e-4c5d-ae93-34c8a6899cdb", "indicator--1243d24c-8ecb-436f-8e0e-09906f21bac1", "indicator--b5a9f2f6-3a0c-45d8-ad06-4ae2bee98464", "indicator--06623794-5c4a-4c9d-b243-524d82ef1701", "indicator--09210e24-f947-437c-aa8d-acb9b40bc832", "indicator--bba99a87-952c-4e5d-bfeb-07e563d7f2fa", "indicator--6f7f7e8d-6433-47be-86cd-d9d2218f993f", "indicator--b0f8e1e4-c5e1-4121-a0a3-bce2dc4efb7f", "indicator--1c7a6224-d7b9-49de-8dc2-fdf3d2916a4b", "indicator--72b89a78-bb7c-4dbf-aec0-6fd2e68fa352", "indicator--9abe24d5-963f-4e75-8e78-11a270e7345b", "indicator--1377dba5-515d-4457-9db6-0bdf4e0a3b30", "indicator--5bdca734-a282-49f4-a7b5-b97275e8bafa", "indicator--53a8f210-9005-4982-afe2-49332352d417", "indicator--4ea524b4-7fb6-4790-9147-9e4cf091066b", "indicator--794ebf93-3adf-45e5-bd56-581d0b6d5faa", "indicator--4f95da09-0565-47ce-9995-7e977d40ea67", "indicator--e7d7057d-64f5-441e-8297-14c4bcd0edc9", "indicator--be365fe6-af19-47a6-9115-edb511370484", "indicator--4ae1f52b-ba99-4e44-8ad3-e1f6661b6541", "indicator--36b6d2f3-7fc0-4af1-9699-e284c5cfe342", "indicator--22168a45-2390-418d-9325-7c759eff7d53", "indicator--e222b975-9b64-44f7-8eb3-f97e12cd016e", "indicator--8fa7313d-effc-4f58-b623-11e72cce644b", "indicator--96727a8d-abbb-4c05-97c9-4381278db6ee", "indicator--7ace1b12-91c4-4024-87d5-a1b6d81e221f", "indicator--ac1ae11c-5972-4ed0-8305-32207f6924f9", "indicator--39f11e75-9eb5-41d2-9b4b-beb79e788d60", "indicator--e9436ee5-96d9-4602-a86a-a1d7b1b364d6", "indicator--af8824c9-932c-4414-a774-b5998b40903c", "indicator--e750d167-5b64-4a25-8072-7eb75516d8d5", "indicator--96745bec-91cd-4ddd-b982-e047216e3f07", "indicator--f39d8a29-2e6f-47ce-a236-07f59b02bbc1", "indicator--ef5d6a41-108b-4c6b-8546-2694e12147f2", "indicator--b72c620f-9128-4253-bb85-d53e3d139beb", "indicator--feb78c17-0d6d-4990-a4c7-355c2d2a042f", "indicator--5d5f4120-694e-4acd-be09-1ab361733c17", "indicator--5f274d70-7746-4291-a57a-c783c73f4c4f", "indicator--93df5a4b-fe01-4884-b13e-ef468779bc77", "indicator--b62f1ec1-c93b-4dd9-b325-6fcb7e984d49", "indicator--ee9ca179-3a36-4dbd-8156-422f885e5a24", "indicator--ddb04183-9eaf-44c5-a9f5-9c01a3cc3eb7", "indicator--6e07c361-70b5-4fce-bd41-f6a61844fbb5", "indicator--7b17baa3-a921-4971-8b1c-83d4eb0a01fd", "indicator--ebec1526-af82-4fc0-84c8-cad46a74f8bc", "indicator--32dc4465-fd9a-4dd7-ae45-568affadd366", "indicator--dae3dbcc-2e84-48f6-b1b0-8acb7b850973", "indicator--9565d675-a416-46e0-80fa-f26cb51f7755", "indicator--67b2c0ab-5832-4553-b387-db451c21e60f", "indicator--6355f43c-5f35-4c7d-bce1-bb91c51f8c38", "indicator--7c88b7f2-be0a-4ced-ac29-602389ea5d1c", "indicator--75d995c0-0661-44df-880d-ace3b3a0b2ad", "indicator--a4e0ad68-8da9-4ada-a0a5-4e8fbe8914b9", "indicator--045281ec-0d3e-44bc-8ada-77f5f8c9c7a5", "indicator--7aa97df8-864d-4e89-8cce-39cb9f450828", "indicator--22398aa3-65d5-4efb-8346-b5006d9c0f4c", "indicator--0f9e83c5-1b5b-4323-a50a-c5fd6c9f7dcb", "indicator--e79d460e-61dc-4c5e-8a09-b1f09c39bfcb", "indicator--e5da250f-de7f-46ce-99d9-d75db213838a", "indicator--0ec003d5-513b-4e85-80e2-73db391fc30e", "indicator--fe69a2d0-3303-4c62-8fcd-e0073fe8aafd", "indicator--1a149e6f-32ac-4bca-bfbf-5ef9d899452b", "indicator--af21763a-3bc8-4da3-8fa4-b8861cab0b70", "indicator--20a30ac4-374d-48c1-8cf6-4d2169df1aef", "indicator--0954cb7d-5e01-4ae3-8075-73eefb05d814", "indicator--c62b75ed-0c34-4890-a5f2-67dbcfbf80a1", "indicator--f9f4c54b-fcd2-4b19-842f-8ceb8621f8f2", "indicator--26fb2fcb-8eec-4fe8-b444-370f0ab151a8", "indicator--de019747-7c5e-4f17-8ebf-44fcaf123b9b", "indicator--2330bca6-27b9-4165-a7ed-2e2add515342", "indicator--de056911-e26e-498e-94ee-b427bc2f09b5", "indicator--b3d1ac9e-31d3-4233-909b-5d5d21b9dad9", "indicator--268c5080-c61b-48f2-bb78-59c469ec652b", "indicator--c882ef30-d389-4334-8569-7e8208694d24", "indicator--3452b3c6-583d-4a8b-b963-46da94378381", "indicator--675c6bed-4cdb-464f-bfc9-292be5bcf3ba", "indicator--8746c5eb-a744-485e-85a6-4f02ddc4cf01", "indicator--e354cb8d-22e4-4aab-b283-c81d9a82c55d", "indicator--5480a1e0-ac17-438e-938e-4d33c306ff73", "indicator--dfd5787d-a86c-4bf6-8da7-d98362776015", "indicator--29ad599d-bf22-4f64-aec0-512c238cb655", "indicator--7786dbc9-3401-41da-9bd0-e07feaecae1e", "indicator--652ef07c-1bfb-422b-8fce-929263f8d56e", "indicator--09c88c1b-6d5b-45c6-a790-bea935079b3f", "indicator--e5792502-81aa-4e1f-876f-d6551370888e", "indicator--3e9dbf29-112c-4067-9439-0fa70de871b7", "indicator--baa0302d-8f27-424a-95a5-3dffc9389284", "indicator--d78e0884-5df5-4d82-89cb-6b0bb190cd57", "indicator--822bd9b8-447c-4138-86ef-d1ccd437753b", "indicator--56c4cbf4-2ef7-486e-b562-09843a76e249", "indicator--943fbc9b-5637-44d4-99dd-b278f75ba5e7", "indicator--44818810-473f-4a91-b26a-33665a035bfe", "indicator--c1064edb-d80e-4137-8e5b-aa45cd1edb91", "indicator--2ff5ede9-d747-4022-a030-660eb8c13867", "indicator--8181aece-f5a2-4da3-b013-36d558b9af42", "indicator--8c9c678e-87bc-4a76-847d-e8c691457fde", "indicator--7a69fc2c-1eab-4bcc-9d37-eddfc81aa156", "indicator--ced54a9a-1cd7-4c8c-bd9a-0a64c9a9f2fc", "indicator--1bf17956-8935-466e-af1b-e99e51afcb19", "indicator--c5236140-258f-441f-9924-03a337f45799", "indicator--13f07bd7-e622-40aa-8d48-9f42b72835d5", "indicator--09b3d357-541d-464a-bcfd-756f5f94ff87", "indicator--fed61872-ab02-455d-8866-198b781d9084", "indicator--ea60e0ae-389b-49b8-8126-b3cb3749b148", "indicator--187151f9-36a3-4222-b182-9587398c3b10", "indicator--9bbd4d17-9426-4269-b086-ba6cd620dcf1", "indicator--a745ea44-77e0-43e9-bf04-617173cd7071", "indicator--5729db8b-ee02-452e-a180-192fb4a3b84d", "indicator--a8e4d8c8-6342-44f0-8a9f-20372bdacda5", "indicator--6f8d81ef-c920-4cb4-8c51-04ef9cd4f690", "indicator--30516d7e-70b1-4646-b829-f8a29184c698", "indicator--d22f57a3-2e34-4714-912e-65a7f13a5bf9", "indicator--7cd8dd05-a1aa-4827-854a-51af29debba6", "indicator--3ad5db86-4ec7-49c1-9000-7a6dbf26daf6", "indicator--e1bb811d-7518-480d-aa7d-89e5b5ecd056", "indicator--cedbbda0-1827-4ce8-9d91-1a48a953e512", "indicator--07f976a2-63da-4466-ac5a-a61f5a3ca717", "indicator--37e1f96c-1ecf-48d0-b864-ce8e9823edcd", "indicator--208cc699-936d-41d4-ae82-08434713b0dd", "indicator--926113c5-c7aa-4aee-a8b6-9bda9ed1cc48", "indicator--c60ca8d0-cfb4-40f3-a8d8-0f21e3f371eb", "indicator--24cef2c3-6861-4442-96de-9dfd2b97abe8", "indicator--7c206856-ccc0-4eb0-b1bb-878312812a59", "indicator--1958abaf-cb73-4e99-b1c6-e3bda50a834c", "indicator--21913f2a-53a6-40a6-9926-d61c9f708869", "indicator--d2f20ac9-b362-4d8b-a29c-56f087d8da5c", "indicator--5b7bd71b-359a-4c7c-94d2-cd1e81d28686", "indicator--2e902cdc-baed-49f8-b1e2-f4bbb04c30b4", "indicator--7630f4d9-059e-4e67-ad56-c134d32cb690", "indicator--c02cf873-1a9b-4a10-9828-9f204c077a99", "indicator--e56c83d0-6350-41fa-9bad-20cf647547ba", "indicator--06852828-c158-4d35-9b61-658265dd3395", "indicator--2ab9389c-2ee6-4b8e-b857-dfe42b16f718", "indicator--3dcf831b-56fd-46c2-8431-2fd2096e4daf", "indicator--08aa8d3d-2d1c-42e0-8fd8-e4d1a92889f5", "indicator--19bb7712-9993-4363-a317-f25f9dbd3846", "indicator--66fa0d46-1fd0-48ce-8e3d-30c175c2a2c5", "indicator--0e7444fa-dcf9-42c7-80ff-3a1ce5634868", "indicator--1a741e0b-c120-4d21-a4d8-5fa109e51568", "indicator--4577e426-0fd0-42a8-9673-5c6440cd1bd8", "indicator--8b9e6ca9-0149-466d-aa71-71129c51d0cd", "indicator--b48c0c2c-8daa-431f-b056-4d854b9ffaaa", "indicator--94cd73b6-7c24-4a88-b1a9-399ef4577df9", "indicator--bfa1c504-6263-46f4-b782-c6bb16003272", "indicator--4dfc5016-4737-4026-9b2c-8a3f2dc1ddd6", "indicator--dbcb239c-5ecf-4121-bc41-0db3e622e70a", "indicator--32575712-dfe0-4b60-ae51-a41e90e7ad7e", "indicator--38020ec7-e268-42be-a297-9e007dd6fa97", "indicator--57cdfcfb-9ea2-4306-bb25-1e8807b3a9d9", "indicator--5b023b8c-19d5-4521-a16e-27571b1e4a64", "indicator--68d7ad93-c307-4470-8380-2adaa99e12ed", "indicator--4c5919cf-529c-462a-8023-d11319f7199d", "indicator--fe1b3e93-bc64-4ec7-9799-44d4dd4d39bb", "indicator--5049d486-557b-4447-9a09-97c8ffc7e34e", "indicator--ed42f1cd-28fc-47cf-9d66-7ea9644a267d", "indicator--ccdb9406-062a-45dd-a539-9e695731b17f", "indicator--48dd0c48-b81a-4bbf-8f2b-c53875577393", "indicator--c49ebd03-068e-474c-87ff-6ed5f4914eb9", "indicator--961e66cf-03b6-4d43-9b81-c6f1839ae9e6", "indicator--cf9a912e-c868-4396-87a1-2bd893b64fd0", "indicator--30b20f89-21aa-4f0d-a3c0-48122cd85580", "indicator--15b4b9e5-0ed0-4b94-a36a-e0a55f4d60b6", "indicator--27757529-05cb-4853-b51d-ba5991573551", "indicator--7e265146-fc88-4f71-aed8-757648261280", "indicator--0486ea0d-1ab1-48e7-be27-f771e7508a9c", "indicator--913b7cc9-31e4-4ae3-a727-8d093a9c1711", "indicator--266e71bc-6e09-4778-ac8d-f54a3590eadd", "indicator--b1e66906-8590-4869-a6c0-1bc37ea3933b", "indicator--982584e1-38dd-46f6-80b6-37c97c54fd34", "indicator--053e1f32-829a-477b-be1a-82815660a49d", "indicator--606d8f88-73c1-43c8-8fb5-bc3745faae4d", "indicator--f60edf1e-fc23-4a3f-b0a0-db82a537c97f", "indicator--6ea5dad9-5a8a-4351-ac0e-bc924b6a8493", "indicator--d9cfabcc-6257-4fcd-9281-bfc18c2fbe78", "indicator--ca2a9702-4a7a-4315-ba5d-628977fc1f35", "indicator--f0ef5bcc-964f-4b57-9a77-7e5c398426d3", "indicator--aad318af-285d-4b81-a48a-0e3c30ede2c8", "indicator--9bdded72-b59e-4beb-8cc6-1107eba933b4", "indicator--76cd1c24-7e3b-406b-b875-fa56d6e63311", "indicator--423cdb5f-da91-4e2e-83a8-77a5dac3e5eb", "indicator--d1f1ce1c-9a51-495f-a434-26f555c17d29", "indicator--42e99934-972a-4782-9a00-030de1c189c4", "indicator--37677710-b6ee-4630-ad1b-ccdf3eec5707", "indicator--847760ae-d197-4f2f-8bb2-0f27f9256c59", "indicator--7fdca8d7-e9e4-42bf-9b09-a8cd72b9171e", "indicator--2d210420-7289-4a30-aeae-ee90dac6c18a", "indicator--c0d9f2dc-2f7f-476a-9c3d-f8732a151e96", "indicator--98264b2b-c343-4c9a-a4de-a857854b069e", "indicator--22146966-5337-43b1-930d-606042d3c77e", "indicator--191b3338-446c-4808-b8f1-a607496844cb", "indicator--8d530d78-e576-4b5d-a7ec-b78cf904ab6d", "indicator--d5a31353-184b-4bd7-9943-b847df4ce44c", "indicator--491f6603-2d47-4cb5-890c-528f81487d53", "indicator--ec9c3b97-cb4c-4009-b464-256a74098797", "indicator--3bb48bac-fcca-416a-89f8-2d0ccc7bf61e", "indicator--4af8136c-29fc-4367-a056-1eea32056821", "indicator--9007ba15-d284-4764-80b9-cd7d612d2808", "indicator--f4d29acd-231c-4175-a7ac-edd805e5bc8b", "indicator--ddf3d217-c1a4-48a5-b779-060214e612ba", "indicator--0cd65178-1276-40af-92be-32667dd36bf6", "indicator--e7dfe564-3a03-4e3a-ab55-280fbf16cd4c", "indicator--5c9669ec-b470-43ff-b773-7094c550f9fa", "indicator--0b5a63fb-a173-4bca-b3cd-7fae41546292", "indicator--549db56e-94e5-4172-b4d8-8a1a91a4bdcf", "indicator--6fba0b4a-baae-44ff-8dc9-ce75cb8e7a1b", "indicator--485c0b4e-88a1-48fb-bd35-a21dd0f5bd92", "indicator--9802a012-f5fa-41ea-b049-72c3499bc481", "indicator--21cbf335-61cf-4cc6-8611-4c2140ab7eb2", "indicator--b419c665-8d32-4566-9de3-fb4a459999a8", "indicator--e4389b83-c614-4737-b6ab-ac870a303304", "indicator--76f2484a-3182-4a1e-8094-01ec397a92fc", "indicator--afb895ec-7b24-4eed-8a83-b4ae55643e72", "indicator--619b16c5-df29-46ae-8d9c-589707428ae8", "indicator--56083253-d480-4489-8bf5-77de64dd8ded", "indicator--b35dd376-b265-41aa-b53e-a8b2de32cb84", "indicator--dcd3988a-1ed0-474c-b57c-fc7fdafe553b", "indicator--f103beff-7ef5-4b7f-95b7-2959d8613205", "indicator--e3c6b99f-5ea5-4fe8-86ef-fbaa0ec7279e", "indicator--2b41501a-7af3-4f4f-8ab7-f8728571b2b6", "indicator--49744e8b-6240-4921-99e5-e93e278022a6", "indicator--6126433f-162b-43d4-b8de-bb6b04818692", "indicator--0f26a62f-159c-49c4-b29f-f7f4a6f3be1c", "indicator--15e29d0e-e506-4b5a-a9d7-f06fd702949a", "indicator--118ad1dc-fdc1-49fd-8658-dd98a12eba95", "indicator--ceaf99cc-3577-43d6-bdad-c3006244550e", "indicator--8040b74e-4cf3-4f7a-92d9-2e3683309205", "indicator--c332fc3a-9e55-45f1-977e-9ffef69fc7a1", "indicator--edfbd0b6-78ea-44f8-b220-004ce0a76d66", "indicator--75ed7c05-ed9f-404e-88d9-4888be1b97eb", "indicator--c7a366b8-b608-49ee-8ebb-3b8339e9839b", "indicator--58c41945-18a2-4db8-b91e-cc0a38caec0b", "indicator--083fff62-6d44-4c33-b391-513d329a5359", "indicator--f60998de-8044-4f1f-b50c-673ab2a801d8", "indicator--7f1ac6d8-42b2-4d21-9deb-f9e9011f5253", "indicator--14bbbe68-a9fa-4098-92ba-cb9fdd2f54f3", "indicator--d5cdcd23-2175-4170-aad9-e1689295fcc8", "indicator--052a6193-aabd-4d76-b3a5-b7f435591445", "indicator--fe810c3d-1caa-46af-9b77-e918563c4d36", "indicator--8de5a49c-8c06-4265-9638-3ae2a74e37ed", "indicator--77718610-1acf-4dab-a2ce-6103d9140c56", "indicator--4159d1b0-4d83-40b5-94e1-ddc2834f77ba", "indicator--8043665f-fefc-43c2-acec-22ce4fe0f5c6", "indicator--9ce2cf37-c48c-4ffc-b230-8592f044f48f", "indicator--cd49b7ba-0e80-4f7f-8868-3221c7dc295c", "indicator--c7e44bdb-9b51-46fc-a9bf-10f5092c5b03", "indicator--543c56b3-e3b4-4829-a65b-7000a0c3bbda", "indicator--ac516a44-fcf2-44a4-91ec-9e6c83542e00", "indicator--930362b9-70a4-4eb0-b834-2ed8c49b4237", "indicator--d0966168-4a3f-4458-94dc-38b186413540", "indicator--d93d2e7c-3421-4755-be66-966468410584", "indicator--dc5b9ef0-fde9-4d40-8b7c-a816c489d346", "indicator--0863596a-9e8e-41fb-b9c5-4d30f704d909", "indicator--b1ea2611-abe2-4c96-b475-a973106ae233", "indicator--850af05f-3835-4a06-ac01-6704c5c296ee", "indicator--d008437b-edf6-471f-9766-bc3de0e285d7", "indicator--067fabb8-1870-40f9-ae2e-2ea73559be28", "indicator--9b4afe8f-f58f-48f0-9035-a0cb7e6d8a70", "indicator--933716e5-233e-445c-9d18-e697c4cf32fb", "indicator--2db88938-77e2-4c3d-a3a1-42330395313f", "indicator--b4cbd52c-9149-4cea-a6e9-f0dd58c4b916", "indicator--aa7bd346-b4ad-48c0-8770-fab02327eb18", "indicator--e3e48220-3eed-4790-8973-8b7d83a658ca", "indicator--10d8b306-39dc-4831-b2d2-bd823263b942", "indicator--2caa0f7b-a17c-4d05-9f58-7b465cd854a0", "indicator--9cab2bfd-c141-46d4-a1df-fe8ab5fdecc4", "indicator--4100d8f5-effc-4767-a759-2083aa185d30", "indicator--68a7cc76-3f21-474e-874d-e529d5d06aee", "indicator--e7c99c91-9c11-4d8c-a872-35ce050276ae", "indicator--95189725-c154-4a86-8323-1a66d3e4dd01", "indicator--e6cb44bf-4aae-4c3a-bcaf-3ca194d6e12f", "indicator--f82acfa9-a0d0-4691-a660-e8177bdb130d", "indicator--3c758644-3b9f-4b07-b9e5-256aa5e60cdc", "indicator--0c679ead-3c5d-470c-a265-ec3587d6365c", "indicator--ba08d9e0-f5d0-4e5f-a973-87177eb4adee", "indicator--e7c2ceb9-d604-441a-91c0-c9fadf800959", "indicator--862821ba-b6a8-4285-b11c-783cb66c2acc", "indicator--814d8c0d-3bfb-40db-a454-45792365462a", "indicator--8ba26f66-e74b-48fe-b254-768e01d973a6", "indicator--37f31e49-7de5-46b0-8914-e63c7cf8897e", "indicator--d4a6a121-0eab-477b-a333-ccd9f5bca539", "indicator--f2568316-dbcd-4e54-aedc-dbef1972083c", "indicator--c91cee37-a132-48b9-b982-f5d235a4256a", "indicator--58eb2f89-9f99-42c1-8643-069f39057e7c", "indicator--82fe44b2-aaf5-480a-9b93-da1fd74b79d2", "indicator--69c47be2-44da-4cb9-bb55-1fb8cc7f5a13", "indicator--b31c1039-e6f0-47bc-af21-0fcdfd3494ab", "indicator--31700500-b2cc-4bca-b2e1-82c1a170a081", "indicator--38b64e1c-4745-4a0b-8943-995ee568490e", "indicator--14d1e670-9daf-41b2-b1b2-b10b4e4ab5e2", "indicator--c7a004fd-58a4-460e-9f87-0e0c6b40ad20", "indicator--15f48eae-0ae4-45e0-9df1-d8011d865661", "indicator--5900038a-801f-4833-acc8-61865ffa1c67", "indicator--69a5d2f2-bdbe-4a5b-9673-9fd6b4f3cb11", "indicator--33fdbf83-4a6f-4c8b-b8fd-b8dde5f61483", "indicator--86a42363-088e-418c-bfcc-c22e2c5730ea", "indicator--c4259c79-c356-48a5-b7db-9a0a0f3f8da9", "indicator--8473c16e-9ce4-4ba7-b02a-983fe910ac26", "indicator--e8c8f961-3c36-4fd3-92f0-6a2e889cc72c", "indicator--096c699a-d97a-47c9-a23c-826568c224e9", "indicator--f8dfa90c-5a81-484a-8dce-12fed39ed0a6", "indicator--d1a4f71f-6717-4954-afb2-1ddad6ee7d59", "indicator--a0b107cd-d307-46b1-aa3d-17394eb3f16e", "indicator--ba6173d2-bcdb-449a-a408-110e6f455815", "indicator--e12834c6-17ed-43ea-8ab7-9828b14f4924", "indicator--bcce339e-0703-4fd5-a62d-d150439897b1", "indicator--66389f9b-fb96-4098-9d96-e3cfd40980f2", "indicator--d5455894-5179-4c6e-aaa4-e574415fd8b1", "indicator--c999dd59-c8f5-43e5-8bda-7aeb1d7a5b66", "indicator--a322ae2c-8b60-4ace-baff-cab9514351bc", "indicator--bb04347c-0fef-40c5-b9e4-df4a1a8ad0f6", "indicator--2e541f4d-f631-4808-933d-2c82a963a327", "indicator--e4c0fa45-4fcd-496c-863a-4b841380e42e", "indicator--1f4dfab5-288c-44bd-9982-9cadc9fa56bb", "indicator--bd85ffd7-ba2d-4466-9d0f-814976817dea", "indicator--48168118-2ef0-4302-8bb2-ddaa21dae971", "indicator--5a3be18d-81d4-452c-a0f3-57eb4e920874", "indicator--d190a6fb-db2e-48d8-992c-2450f968792a", "indicator--d3b96d3f-a0f0-472c-b0be-7967cca0db32", "indicator--7af683d6-b2ad-418c-a440-a62093b33009", "indicator--1e19ab5c-b44d-4ca3-9151-3ab9cb4384b1", "indicator--3c5192dc-34eb-4ebd-8861-ba67e5bff09d", "indicator--44152c8d-976d-4414-a592-5b635b5f6436", "indicator--72334534-0eb9-46d1-9722-341a4c60b644", "indicator--f5824dbc-ff07-46cd-9c08-6d61512ceb49", "indicator--ef540c5c-38db-4c0e-a497-be76c2803de4", "indicator--7fd70c79-9654-46ba-9f70-a190d4061d86", "indicator--5ef571cc-8daf-4cc9-9333-2289e649da43", "indicator--7d34d50d-549b-4071-9352-391f16e70c39", "indicator--2e06b489-0806-4b11-815a-00d3567cc7d7", "indicator--112a76a1-0e99-4c73-9f01-8b092ca9aab3", "indicator--f2030951-7b14-450d-880e-6f0dfded1924", "indicator--8bca2cf8-7eb9-4be7-8fdb-da4ab353e738", "indicator--ede5eb63-94c9-4904-a099-859b1cf1c87b", "indicator--be7332c2-a904-4479-9c66-ba810f4ccb29", "indicator--a8a1773e-2e75-4cf5-918c-cea0fcfc2b9f", "indicator--33870522-2569-4433-ba65-046244a26dcf", "indicator--3db5f76d-8adc-4390-ba83-f9b3bda92451", "indicator--fbda9d62-557c-4f97-ae97-49940133a6fd", "indicator--ecf91322-5153-4272-81e7-b5362157d5fb", "indicator--720caba3-2151-442e-b5c5-3db612377c06", "indicator--9978c6de-1257-48a6-a0e9-e7bbea3129f3", "indicator--108e98f2-69cc-4ea9-b7a1-36e1ee9c7ba1", "indicator--20c7a6f6-22ee-4582-9431-de8192adf6d0", "indicator--aa804799-50db-4044-8039-771e4f038a99", "indicator--17adbd9e-afbf-4f46-b1a0-362f491f7c40", "indicator--8f688c66-68e0-4711-9c60-2b05f57123e0", "indicator--17fedaa4-2485-423b-8cdf-23837c40d4e2", "indicator--0733b997-3a2e-49eb-8dd0-e75d6c78e7ca", "indicator--7c62b8bb-8d50-4cfe-9f75-89926e9b134b", "indicator--dfbcb479-7285-4efa-829a-2edbcc9bb6a4", "indicator--02c9b946-4f9b-4f5c-839f-89b9099e85c6", "indicator--cbb8f14e-7fca-4fec-b6a3-8c0aced050e3", "indicator--6519984e-f18f-4d64-b63c-a42c851e4ba5", "indicator--0ead6999-284d-45ca-bbca-3dc4eb560835", "indicator--54c6a630-cbbc-4dae-8808-901e993decbb", "indicator--2fdf50fa-0e93-45ab-881e-f5d4d672f67b", "indicator--89d102d0-0e86-45b7-98ee-5fc322b80fcc", "indicator--3567e637-8326-4ae2-9833-e1b921f5db3c", "indicator--05b4ea89-ab4f-4afa-b88b-ca02a4b5e7e4", "indicator--854fc7c2-2bdd-4238-8284-f29f81e8c580", "indicator--bae75bc2-52be-4ced-aa1e-bf0222c77e87", "indicator--384fd846-da8a-4825-b41b-4b289387e58c", "indicator--79eefdba-c9e2-46fc-b28c-f5acbced049c", "indicator--03f8228f-df5b-477a-8aba-989cf1d5693e", "indicator--94c69857-6ff8-41ff-8bd6-60478ba5a5eb", "indicator--5b355cad-4a68-4920-9192-184214106f82", "indicator--d25bef53-3c33-4cb9-b949-8f34e07eef87", "indicator--46a94c47-0df7-4c86-a3ed-d58ca3149ad8", "indicator--da292d12-41a6-4400-8def-e45029e8298b", "indicator--43691631-d75d-4992-9386-d57a26fcb4bb", "indicator--9e11f1f0-d799-4f6d-98a6-41a8639bedd5", "indicator--d488161d-ea84-4175-ae88-1647cb087fa6", "indicator--5f1a773d-7250-4c81-97a4-83ed359aa692", "indicator--79fd6e46-1e72-4305-aaf2-f95fd10854a5", "indicator--c1561ba2-ede2-4629-8974-721b992b039d", "indicator--d312c345-6e16-4729-a6fc-0b03dd2d07a4", "indicator--2e75da52-57d9-48a1-a71f-631f183cdd91", "indicator--2efef715-0d8b-4792-b7e1-8bbec30b93b7", "indicator--5b18bca4-1f90-41aa-b621-a717398d4a21", "indicator--26742a1c-b599-475f-b8ab-daa2ef367604", "indicator--41ec7c79-6639-4020-af3a-b8d701a54ef0", "indicator--f6e60ca2-ce8a-49e9-9887-b640c5d26d16", "indicator--13015a47-e751-443f-af79-6bef18710bc2", "indicator--03046443-4726-4020-8211-61df0abfbc13", "indicator--4c8231b6-63f9-4ad1-8f22-c33e46a83e87", "indicator--7d304a84-7750-4d7a-9d58-bbae759a8c42", "indicator--3d6f9441-64c4-4413-9ccf-9f7c84f4ae04", "indicator--222c3193-ccd6-48c3-b362-372b0bc570e1", "indicator--55a8435f-b581-403f-bd68-3b75cb7f70d2", "indicator--656f14a2-d297-42bc-9321-cbe975f6bccb", "indicator--4e198098-7049-4b5a-9025-7ad4fdf33e29", "indicator--856c17d4-2ecc-4639-b0eb-23dca1cd198f", "indicator--566cad37-56c3-4359-b176-1ed89e45c4e0", "indicator--e6b9286b-c229-4297-984b-2c3790dc09f0", "indicator--8d8bd406-955f-4784-b1cd-5e2dc3681676", "indicator--5e398740-0910-4b4f-8cd0-67d91460fa4f", "indicator--11e93708-368f-4fce-9aba-8f249f131947", "indicator--578b66a8-208d-4294-84be-bc71a75439fb", "indicator--e908365f-146a-402f-9096-028fc51b74b7", "indicator--1a4ed9f9-8d1d-4622-b75d-7c950648fcd2", "indicator--e1f78117-4063-43b2-9b29-85a1b5609664", "indicator--7c405e26-8247-480a-97f6-7170d7190cd5", "indicator--cfc63dbe-51fb-4018-8a4b-a1f2efb050d0", "indicator--b042117d-1cbc-4c0c-bd16-06c87a2d9360", "indicator--c56baaed-935e-465c-a0d7-7840442be73b", "indicator--b8441b5b-0d87-4df7-ba04-21a58d420260", "indicator--d4aacdde-4872-49bb-9167-7c9112e3b3a0", "indicator--5adbaefc-14bf-4102-8be6-c61fa01490af", "indicator--c18ebc0b-ac10-4043-8275-50a1b2a1704a", "indicator--0bcedb74-8139-4898-af12-8cfbe2ed45a7", "indicator--1b1bea98-40c6-49a0-8f16-15978075dcdd", "indicator--fb90a6b8-f338-4e26-85b9-e5afc6bd5dc7", "indicator--da0895af-351d-4ff7-aacf-090a1c2b63b1", "indicator--5bdcbf70-d15e-4911-b602-bd1774ee343e", "indicator--8c08a15c-d392-49ff-8aae-186aa28cd6d8", "indicator--3f5c0a85-8fe6-4f79-ac72-7e8734ec7dbf", "indicator--df62be99-5338-472c-85f1-a34bd0a80dae", "indicator--089b6a79-ad31-4c3d-bc14-c51f8db0f1d4", "indicator--a0285fbe-0733-4566-9ce3-9ddf16367f95", "indicator--2de94279-bf2f-435f-863d-8d31fa462efa", "indicator--54d955aa-8b76-43d0-830e-a853f0357216", "indicator--64df7011-bd92-45b0-b95b-38f0ca5e3e86", "indicator--ac5a7c5f-1e10-40ad-9a9d-ce194f5f7496", "indicator--8ba986f3-bfdb-414b-bdbf-c4703a1e0e17", "indicator--fd4ae7c6-332d-4b7c-b6d8-09d1845a098b", "indicator--ce04d341-d2c4-4061-993a-954e989b7ac3", "indicator--7fae8e25-5765-463c-b89f-618f234de7f6", "indicator--27586265-3008-402b-948d-661f28711034", "indicator--ee495f49-5ec0-4f97-b65a-628067e2cb04", "indicator--01d65efc-8409-4f49-afa1-565bfca54fb7", "indicator--b7fc776a-d764-4827-a6c2-b6eec952d150", "indicator--54989137-c5f3-4970-a5ca-80bd429f2907", "indicator--c8e66b69-ebc2-414f-8285-9c40e0614119", "indicator--016cdee6-c882-417c-8ae2-2b1dc03615d5", "indicator--b15b6ca9-dd6e-4b7e-90b5-dfccd8af0b6c", "indicator--441700eb-06e5-43f8-ae9a-017f4b5247d3", "indicator--3da26fac-fffc-4c4c-938c-e28372a2496e", "indicator--18166e0c-9f0f-410a-b1aa-c28d2980fdb7", "indicator--199d7a8a-57f0-468a-8f8e-17505b849bf4", "indicator--7e52b4ba-3019-48f7-a465-a046a09a1a58", "indicator--252d1e4f-1534-4efd-b80a-c2ab74b20972", "indicator--e9ab3ccf-daee-49b1-be22-24b7b6f6b19b", "indicator--8d8bb4ad-893b-4a61-9ed7-e8c1d3223e3a", "indicator--c8a29155-950b-4226-9601-48321e840f64", "indicator--86336847-491c-4100-b85a-052e8ea69bcc", "indicator--a5551898-3625-4107-9513-16f71a7cca7a", "indicator--3a6ef24d-f1d8-43a2-8887-ced0a8735560", "indicator--889ad89a-3ade-4321-9133-5f8174a56413", "indicator--32674a97-c662-469d-a45c-2dd1eba4d8a7", "indicator--9f7d9566-599b-443e-906a-6c5a81a57b25", "indicator--1c724d98-1439-4417-bb22-035d500d3cdc", "indicator--7c290db8-efc1-4151-8404-066e18eed176", "indicator--b2ca8fb3-5c6d-4d1f-94dc-f12a27273a5c", "indicator--3077c2d0-4627-4787-99e1-72552f13ea9b", "indicator--c308944e-b896-43c8-aa4d-2682c72df710", "indicator--a6ba5c2f-9acd-40a6-b92a-02288e3e18fd", "indicator--7c482891-763e-43e4-b7c4-5307e2a63cf2", "indicator--8d148443-abef-4d2e-9366-9136f56b4452", "indicator--b19c3e6e-3cc0-414c-951f-f980ed419861", "indicator--6d51552a-1769-4c2e-8304-5f355de075f9", "indicator--6111f435-aa98-48df-921d-cd7351dae8ef", "indicator--f4980427-783b-4b62-b1ae-7487c1de7ca7", "indicator--bc29e17a-f39a-4cc7-be5e-0cabf8f3cba9", "indicator--d593c40c-0cad-4948-bd5e-ec6375eae54e", "indicator--591dfa09-02d7-4b36-af72-0fc7bf09a6d4", "indicator--fa8cb189-0a16-4895-9e48-dbd5149ae412", "indicator--9f46e442-6a39-40d2-b353-b78fa28b4c7a", "indicator--93ec599a-a506-45f0-b60c-025245a884ca", "indicator--8e421302-8f8c-4a06-be58-4049a778cd00", "indicator--698ff0fe-4503-4b22-a830-127a8fdd2b4d", "indicator--89752205-03bc-4db9-a5a1-2e130c3e6279", "indicator--db6af78c-7053-43b1-a3bc-f56278e75ced", "indicator--97f3e255-801c-4c75-b1ca-a3fc0a481b1f", "indicator--b53234d6-261f-404f-a903-feb933e9fcef", "indicator--588351bf-0c6f-4df3-930a-0cb53a817540", "indicator--f1bf787d-8ebe-43a8-803e-f4b1d5b0d338", "indicator--ce48776b-8b64-4403-aa7c-4659974881b3", "indicator--2aa027aa-9b15-4fdb-b014-5a87d410a17f", "indicator--1678fa94-05d0-49c6-a69b-9b0ae0121125", "indicator--36032aea-145e-4801-97a1-41b996d43ce5", "indicator--c90af3d0-45d2-4f80-9277-1d0e628db474", "indicator--74c0ec56-8409-4978-92f3-a79df6374ddc", "indicator--ba729c70-c962-48b8-8b81-b27f5740d71e", "indicator--7c5690e8-bf02-4eed-b1ac-833c2ea20bbd", "indicator--fd1d7d4a-a421-44f5-b703-1acd8989db16", "indicator--118d36e3-8f27-44d4-b209-776e3f365df2", "indicator--54296da6-2ad6-4fee-ac8c-aa248f7b35c5", "indicator--cae177c8-776c-465c-a54d-12bec3691641", "indicator--907e82e5-c122-4908-a461-309ab7f0c2ff", "indicator--d3cf095e-afc5-443f-a1ce-2815dd101a53", "indicator--760138c4-7927-4bc4-94a5-81316b21307f", "indicator--bae80d9c-6e95-4602-b165-aec3da61f23b", "indicator--0b8f26c8-bd12-4dfb-8cac-b18077aa28ac", "indicator--a3949a9b-37aa-409f-95cb-9f05a2582a2b", "indicator--82d3efd9-d18f-489a-8bce-0488dcf2279c", "indicator--d3d3eceb-cacb-481c-aaa9-8c7546718e53", "indicator--ecb1f600-b967-47e3-b07e-f4b618ec2fae", "indicator--31a6cfbe-2039-4a11-b52a-9c6f3084d142", "indicator--df4417fd-8141-4cef-a4b0-b804ff309e06", "indicator--cac2830b-c48d-45a0-ab15-834b0b43a549", "indicator--5b5f63cd-17dc-4d36-965f-eab77dc5db8d", "indicator--32927faa-d14c-42f9-8e99-42bf8ab6e8f0", "indicator--3fefa32a-63fc-434c-a97e-b6c5a4ce1450", "indicator--a5343291-3fda-4f39-9549-9b1fee7106db", "indicator--b189e125-1328-49e0-b95f-d8b2f63d74f3", "indicator--388b3c05-84f6-4e66-b18c-9a802c1584c8", "indicator--8f5a7d09-3567-44c4-9ca0-fc8c13c3bc1f", "indicator--3c3882c0-11af-4513-ad63-e90dceb80366", "indicator--7cc1082d-eaab-4904-a932-6766cd4909d0", "indicator--4624a6a8-1c31-4830-ae75-a81fbe330c17", "indicator--a0ead707-1933-4d38-ab38-68d7d8ab1858", "indicator--d07489c5-d18c-454e-a469-1806ea231937", "indicator--58deeb06-02d5-4750-a6ff-3fcd5191eb70", "indicator--4c5fac85-ebbe-4be2-a2cd-864c8c993c00", "indicator--e6454d1d-503c-4534-9c73-483c910e980e", "indicator--c81e10e3-9e89-45b9-8d56-cb7b6ce9f206", "indicator--ea183055-0690-43f8-ba6a-08f803c848d7", "indicator--3b650e91-7753-4188-95b8-ebd4fbd0d24f", "indicator--eb885dff-8da7-44b7-98b7-f8a2bc77b818", "indicator--10cfdb43-84b7-484c-89ad-7dbcd3bad28b", "indicator--79ad3b43-da78-4749-a044-540b6884fe0d", "indicator--87a3ffe8-3072-40fb-939e-3ce989fcadb7", "indicator--a9e5c85b-5825-4453-b070-37a24f0aba7e", "indicator--dab4354d-aaf2-4099-a460-1d6a08c11e2b", "indicator--e038eead-4ab7-4c68-b4d2-80bd2c4bda10", "indicator--e85439ee-6864-4051-bc2f-9ace02bb0875", "indicator--900ed7fa-cec3-4005-9835-af0dac3bbed6", "indicator--dcca5a23-11e4-4fb6-a470-68fc05a3a043", "indicator--ffa1165b-a4e0-4a24-993f-674f1160ae66", "indicator--4e035a13-d656-4c1f-ada1-2ec383a49ae3", "indicator--9ed392f4-c7b5-4444-8948-814888db82b8", "indicator--63e4efec-c413-4b32-9d67-8ca7c1b6a0ba", "indicator--58de79ad-742f-43d9-b909-60cae88ec352", "indicator--71176f58-5982-4901-b8b5-1d477ba1bf84", "indicator--3e118a71-11ba-4194-871a-7638c2433258", "indicator--212ccef1-e2a1-4d0c-b767-5ed125eed289", "indicator--4da8d102-a1d4-4a35-9a32-803ec7a99923", "indicator--9af5f629-e586-4ff9-8611-4ac5e3ca6abf", "indicator--a184a95a-0674-4aa6-ba81-2d92c78c9a31", "indicator--3d6ec217-aea1-44a3-b3ea-968780ff1daa", "indicator--f24a877d-9ca3-4a72-9945-1bc2ed69c369", "indicator--c6ca8bb1-6899-440f-abb4-a1f34ff45bdf", "indicator--3f3a56d0-b483-438d-8d82-abb726756d68", "indicator--2d52a218-e72a-4b45-a835-741f979ffb8e", "indicator--82be3b6b-f28a-4853-955c-020cd59cc99a", "indicator--0e792337-1032-442a-863c-2dff313c56e9", "indicator--598371f5-9883-493a-8b6b-5de136f630a3", "indicator--c63b735a-4187-48b7-8400-f3e5eecaf233", "indicator--f29fb7bd-c442-402e-9730-caa7b1f5922c", "indicator--b782731e-cc8d-48f8-9728-f3bfcba137f9", "indicator--09f7eeb4-47ce-4624-b433-71e0ed109324", "indicator--313d7c2b-d12a-4add-adc3-bb755e44a7c8", "indicator--c6f273b8-0a41-4f88-868d-8bb500abb935", "indicator--1ca4b88e-9e2e-4a7f-adf9-c806192bdeef", "indicator--6b63c7a7-805f-464c-bd80-18b0664ef092", "indicator--c6cc2938-68a0-40db-bb56-f6db537fd613", "indicator--60a8f71d-f195-4b7b-9387-ad7b5a161096", "indicator--3a3dedf1-0b65-4341-9d2a-537eed79f52f", "indicator--1594a97b-5f41-431a-90ac-9624e79c061b", "indicator--6c7be7bf-3c88-49f7-b081-bd18c4b9b0c9", "indicator--7b171381-33a6-4a83-8d2c-8dec2e1f3706", "indicator--e5c4eb98-70dd-4883-b8de-f280e2ae197b", "indicator--69db465a-190e-45b3-939d-a1849ad447f7", "indicator--df1407f1-3409-47cf-ad02-ce22a4c8fc45", "indicator--20d71940-5d65-450e-8e2b-0ccecc33d2d4", "indicator--a8bc8377-e6bc-4ac1-8794-d4404f3df73c", "indicator--b8afb128-d35a-4cec-90a1-6c48c66a4a1d", "indicator--19233e1e-1d9c-4797-9d3a-e3da9581c0a3", "indicator--13ef2363-7e65-4a19-a8de-a03b39198a9e", "indicator--8511aeef-b1bd-4a99-9bf7-5a41a04e4f19", "indicator--7da5c32f-69ad-4da9-8017-26f62218b16e", "indicator--21ada4f0-6bd7-4ded-a5f4-eb3dd5c2eb28", "indicator--effa4b15-4d44-4c0e-8a4b-126684756393", "indicator--eb9bda5c-adb3-4225-8307-815c9bdd7ca4", "indicator--67bdb5be-7e75-4c9c-a306-76119205faf4", "indicator--5dbc8e10-7385-4f7f-a99d-b43d0bcd699b", "indicator--2bad1a39-01ee-448a-836f-0aa7ffd22996", "indicator--91a23ece-e6ed-4101-ab98-d59c5dcfdb1e", "indicator--f4027a54-0b4d-4570-86b6-da69689a4448", "indicator--3a53fcd8-0106-4a32-bea4-5fcbc013c4bb", "indicator--d352b885-fdb3-4182-bd81-e19f36eab232", "indicator--5c43e52e-3254-4bb3-a475-248e92ddb875", "indicator--b2222cc3-218b-4e8a-afc0-fb5996df34aa", "indicator--cce64323-9cc0-4577-ad2f-bb7d22987e82", "indicator--6b7f6cda-f421-4ad5-afa3-a279af3860a8", "indicator--c6e5fe36-8b38-4f10-acf2-a0fc655c84ab", "indicator--47360267-aa34-487a-ad0b-00d952bd5757", "indicator--5e64e5ce-d9f9-45d0-91cc-94ddeebceb82", "indicator--80c31bc0-cfb9-42ee-ac27-23aab9ae1ccc", "indicator--cfdd8b70-d4fb-46dc-9033-4fc0778614f9", "indicator--2f2bd360-b955-400c-a237-3fd8e7c8b9c6", "indicator--3d28d7a9-7a40-4f6e-8a4c-14d736aa8c93", "indicator--e7f75620-1075-43e7-965a-d58b792100f3", "indicator--d1f46fa4-0d4a-4763-9f54-d30fa6f8ad2e", "indicator--dbb43e74-1e52-4791-9fee-28e9b7e48a78", "indicator--ea828f7f-847f-4d0b-a53c-fc57e36218bc", "indicator--e32187b8-7d2d-4452-81ce-3662168d560a", "indicator--3dd1fc82-1049-4a29-aa63-32d17fab44fb", "indicator--4f71fa58-3a7b-4793-8dfb-ddd2bf6cbe71", "indicator--a92b10e5-b16e-44a5-89e9-8ff356a10050", "indicator--d983a17d-125b-483d-b422-001dfb9118a0", "indicator--0706b4de-315a-459c-89b3-65d9216a087a", "indicator--b41e6066-d7ca-473f-b01d-6c28c84810e6", "indicator--5776348a-5a2d-4a3a-bebd-19d3a3457aaa", "indicator--943d80c6-06cb-49a3-88ac-9334cc437302", "indicator--3376bb1d-a3ae-4ada-9eed-34d17a75674c", "indicator--f26f2672-beca-4c2b-937d-902d4210ddc9", "indicator--59f97a86-c8a7-4b45-b7ad-f2273d2cb6dc", "indicator--565b315e-f0d4-4f25-a6ef-1c054d55aefb", "indicator--5d08fee5-2b20-448c-861e-c7f19b377b69", "indicator--a4b2fcad-34bc-461a-a2a6-768260df2bfd", "indicator--e6d79b66-31de-4a52-a502-e74445f12d52", "indicator--f7ff7745-82c0-49f2-b496-2c768fd2d0bd", "indicator--1818c4ad-e382-4d33-b9ac-45cb5d0925a8", "indicator--ff8ce116-bc22-4931-a15d-efdc1f7ebc37", "indicator--9724a4c1-71bb-4d5c-812d-17c34b143dd0", "indicator--d1a0c1ad-1855-4022-9f14-960b7090bf7f", "indicator--699a4e49-469d-4bd4-a15f-f420af0ae593", "indicator--eebe43b7-a0cd-42bb-b79c-51d4d1d741d0", "indicator--5d41a0da-1098-44f4-ba07-eeb82c998b0e", "indicator--0496a2db-905d-41f6-a422-d03184bc629c", "indicator--431bb310-c732-4e5d-8a81-71306437fb52", "indicator--13c612cc-5cc1-4d15-b017-a7a6397a3b70", "indicator--fcb39488-12dc-464e-8dba-eb25bd12c088", "indicator--9ca4cd07-536e-4e2b-9aeb-d0e8d85ae2d2", "indicator--af67f045-6690-4496-acbe-c8045afa1e92", "indicator--8bc1693f-7fb9-48a5-aba5-9b13ce11bdf5", "indicator--97186c8b-d5f8-4d60-9cf3-26689dc800a1", "indicator--4caee7fc-1f32-4bd0-bc57-953880da2556", "indicator--dedc4696-1c64-4af7-9fbf-781a77d322cb", "indicator--decccf8a-b607-4533-a9c4-68bd0e18c9e2", "indicator--5806d195-7ebe-464b-85f9-ffdcacfd13d6", "indicator--bca2a526-3f25-4a5e-8db6-b4eb31b9f6c3", "indicator--cba09238-a9c3-4cb1-b48e-2067bb75300c", "indicator--4687681e-6517-406c-ab30-a431e0a1132d", "indicator--71cb59e7-8598-40bb-be63-7a2557bb41cd", "indicator--b2c5c1b5-5c37-4f3c-8021-18fcf6befc16", "indicator--f9f2e2ca-e55b-4678-8517-fa95d113361b", "indicator--d8c3d36c-09ab-4193-8c90-c2f298d8e563", "indicator--3dc94a23-3594-40c6-88fc-4a0a71fde3b6", "indicator--83c06f8b-c072-4709-94fb-0a9cf9b5f861", "indicator--a8a78b30-3d30-4e97-9ea8-bf7b1a9fad35", "indicator--03c07fd5-df31-4315-a4be-f998c99f42b7", "indicator--b74573a2-fcfe-4dd3-b00d-1f3f2999b570", "indicator--994572e2-1b71-4838-8e44-595922e79d4d", "indicator--c7f15f4c-2f3a-4182-b201-b731583b776e", "indicator--aa603c80-3939-4f09-b6e8-4095c4363434", "indicator--51480053-2934-45da-bba9-10d3a6ee9ec1", "indicator--0fb412e7-e9c5-4f50-986d-de8d33db01de", "indicator--a4eec475-c6d6-470a-b485-d737322a7e02", "indicator--f046f0d4-b41f-4c4d-b604-cc9c7cda468f", "indicator--5f2a5122-9c35-4574-839a-72d99f908b8f", "indicator--2509a010-e96b-4f0c-9053-9cf41a954423", "indicator--f801350e-ad66-4720-a2a9-15b89ff699a3", "indicator--97eb85fa-cd4f-4af5-a7a7-10114cf3f9a0", "indicator--117747d9-08ff-4e0e-838b-93d8f88b1ad7", "indicator--4c47770e-30ef-44c2-b145-33a3289aeeae", "indicator--ee583fd2-d5db-4dbb-a472-87fbeeaaac3d", "indicator--3df1df04-27ed-4528-aa6f-d18e16e904b5", "indicator--aef6d2e9-8091-40dc-8279-aaade4d6bf7e", "indicator--4c1dcf7a-a66b-49ca-9f27-b7a28a6a830a", "indicator--3a44893e-2664-4ddb-a9f2-cb0be5b06b35", "indicator--79dc9bc8-f764-40e9-a521-0d3fcc0b2f0f", "indicator--13901ae4-f3b6-4ed7-afb4-6da69978bd3f", "indicator--bf861ad5-51ab-475f-aef2-604ba3b366f2", "indicator--581dbddf-9660-4cea-8769-937b20384034", "indicator--0396d409-c0ca-42ce-8205-5df86afb2bb2", "indicator--9373fa59-422f-4c84-8f93-276385252d27", "indicator--67d3b851-67fd-49b6-aaab-3ba73b59af43", "indicator--ee17c2fd-4aa0-4fdd-b1f5-e31713f35588", "indicator--d308c302-6e6c-4c48-b9c5-b3a33992f448", "indicator--00e03707-66c4-42a8-9a75-b80ac302056c", "indicator--45a75cd8-78c5-471e-bca2-aca49fdf322d", "indicator--56224381-d444-4d47-970e-f724c70b0371", "indicator--780a9a94-03d4-4bb1-9514-2917f0edc948", "indicator--0f41669b-5a87-4c5f-a751-d9a6177e5def", "indicator--f809f293-c438-4d3a-b163-eb0e7e8ceebe", "indicator--afe72eec-5262-467c-81c1-f543863eb4b4", "indicator--5094e152-dae3-4040-b593-5f90d326735f", "indicator--f2f64342-5e40-49b1-b84e-0a8ac9ce1911", "indicator--afdb6251-4ff7-4f11-8a87-c4aebf6024c2", "indicator--be9c6934-0513-4c2c-abd4-ccbd9c95fda7", "indicator--345d3140-fe91-4305-bc8b-59e07f6b0b5d", "indicator--08239558-9e81-4803-9d3b-61e413614fa3", "indicator--628b93b5-6e1a-4efc-9936-1e8408da8cb1", "indicator--81c3a082-174c-4f84-a223-c2af30185f9a", "indicator--c4809558-5834-4e06-858c-65edb692f929", "indicator--1ee14d2f-517f-41d9-ad54-9be22945a9be", "indicator--ba3dbb1c-e27b-469d-94f5-8141659d883c", "indicator--adac3ce7-8209-454b-85b6-f654a8bd0c2c", "indicator--de63d512-22e5-4f32-9844-7fce22eb2c22", "indicator--3b8ba5fe-1ffc-4754-a5be-048a704d1cc6", "indicator--942fa13f-ec3d-4ee8-974c-6980042baba5", "indicator--563e2ca0-24cd-4efc-b3d5-b05bdb40afa5", "indicator--5c4a9da0-9e20-423a-917f-27a061919efb", "indicator--5873a76c-9f8c-4939-91eb-97a59fbcbe41", "indicator--2a4b5e7d-ad6b-4f00-956b-64446de39f2e", "indicator--8bbc63ce-4e3d-4da1-a9de-bbf32d80ca13", "indicator--29b1826f-328c-4f6f-99e8-9780a66d76dc", "indicator--23bd6b0f-4c0d-4c39-b84a-2990f60cadd9", "indicator--099d7af5-f867-4a4f-b547-da3c52e8d6ff", "indicator--0b9625c3-e5b2-41a6-b040-24ffce9d5162", "indicator--9cc2c475-eac9-4fc3-be3c-a4f324a170a6", "indicator--b0784165-d882-4a22-954a-810bfb564aa0", "indicator--f41b21eb-6372-4533-aa3d-02c6eb7cf9e5", "indicator--cb664f4d-8667-46c2-a875-2965167bb48f", "indicator--dbb6867b-af02-4536-bb58-d71bcd590b72", "indicator--65cadf7e-66dc-4698-ad09-6c6a798b04f6", "indicator--f136a924-e01d-4fb5-ac80-ff92e4c3e82a", "indicator--986f8dcf-9091-4a42-92cb-a94ce1714cc0", "indicator--cce774e0-b71c-43b4-b464-8b0df1cc92ab", "indicator--33d2f577-9ebe-4a47-96c2-330a74d6eb6f", "indicator--c4e1272a-829f-4f1b-81b2-f8fd4e6ed8be", "indicator--9ad61f0c-eb16-4483-bfba-c6e6a2ee5a97", "indicator--bd5e02cb-5a21-4a37-807a-29357c50f3d7", "indicator--21d580c0-6e78-41d9-8f18-e9fecab02042", "indicator--7d3d9d80-8839-4604-a1fd-d0161a1bcaaf", "indicator--6eeadc62-3ec1-48cd-94b9-5ca0e3ffa20b", "indicator--36352387-1a43-4a84-9219-445b1ffa6b9f", "indicator--eabbb03a-8008-453c-a2f0-e38eebb83e58", "indicator--627fb953-dddb-4efd-9689-5ff2bba57a3d", "indicator--c3d6d650-33f0-4d16-bc49-7ef376f513b7", "indicator--ba824f93-9282-4799-82d4-9f435817f3fe", "indicator--b8edcffa-a9ea-4a00-96bc-42a2b060b795", "indicator--f3e9622d-3ae2-409c-ab67-276d93020c6a", "indicator--e58aae73-461a-4b54-8d65-255b1cc66409", "indicator--b4ed479f-4a79-4709-ac00-b60c5773cbcd", "indicator--5eb2241b-3cb0-4e52-a2c8-d68a56954bd8", "indicator--3ccef1bb-81e1-4a18-8f70-a9dde048b7cb", "indicator--d1d789fa-da31-4f26-ab9a-405762b7a57b", "indicator--5b8a29c8-0fcd-4cc3-be11-dae0b5ea7526", "indicator--675e2095-f967-4a04-9b66-836787cb446d", "indicator--ba7ec153-4daf-4e7d-8eae-9dd3f3efc7f0", "indicator--f85d819f-5bfe-45e2-a694-7741351fd813", "indicator--abd2c532-8ea9-4efb-b7ed-2b0656bc687f", "indicator--335cdf09-9bcd-4fa8-9a9c-73ca6e98e5eb", "indicator--98a60a5b-425d-4c6e-a47b-3caea74ed675", "indicator--a169ee35-d68c-43e4-8ee3-a7e2466a4f2e", "indicator--a92e709f-69c8-4bfe-bebc-c9fb92172040", "indicator--af87418a-9011-41c9-82c4-42e713e9738c", "indicator--180a1f77-bbaa-4129-8d0c-c3b6e973ee6b", "indicator--30c94f9c-65f1-4d68-89ea-07aa4cd0b337", "indicator--bd5ce4a2-90c9-4bc4-890d-f381c9d4dfb3", "indicator--e372033e-9f24-4c41-a139-292ae6759978", "indicator--8b6b4f4a-3d74-44f3-a747-972fec44e47f", "indicator--5269c910-5fed-4be2-a362-e05229eb4707", "indicator--9e528643-a14d-4904-b7cf-7a958186e137", "indicator--4ca5c907-897d-4faf-900a-de33cf24a26c", "indicator--6fb6e8cf-b6b1-4b5e-b3b7-64bd6c6dcc8a", "indicator--d8164f6d-4823-4e85-a151-0318bec8a59d", "indicator--2c6400c0-cef4-428c-a751-c9e9115b8cdb", "indicator--3895154d-e133-4c3c-830e-08ac4a29c145", "indicator--45421546-4d95-40f1-a069-934e6946d4fd", "indicator--2435123f-1632-4424-a153-6c6a991e370f", "indicator--fda10c28-a870-4865-b015-5ac7d29b5a33", "indicator--e436a5f8-35d0-41c7-ad9d-bb380278d3e5", "indicator--14877e7c-17a4-4dd1-99ce-920e929017de", "indicator--963640d2-f7af-4453-a808-18bad1c3575c", "indicator--b3071fc0-3bb3-489a-bc09-bb4bce633cbe", "indicator--da856c8f-8555-469b-aed8-9237c547606f", "indicator--e47a9e2c-1ac9-41b0-8645-60010e012b58", "indicator--0bedff21-9126-4c09-b3f4-d07642d4d14f", "indicator--9250b948-7897-4a44-ad73-71fc983be2f5", "indicator--23a461ac-d991-464a-8737-4ab6c71a3fc8", "indicator--454c00b8-6c12-46ac-9cc8-e9f9ba13a2bc", "indicator--fcac75ad-2a35-4f01-a080-b1469fdccec4", "indicator--b6ba8d79-c1d8-4ac2-9c09-13305192522c", "indicator--636f141c-de50-4df6-a38f-86e58f54e1df", "indicator--411cd95e-9883-458d-b1a1-8067c809ba0e", "indicator--37fef060-74d3-46a7-b4c0-6eab4ed3149d", "indicator--45486876-7b25-4de2-b8c5-3079276c6f48", "indicator--08ca5be7-381c-48d6-ab9e-670b7511a8ea", "indicator--52261166-7709-4a91-86d8-53bff6072f18", "indicator--d1027ded-b60b-4079-8bc7-d183e7ed1855", "indicator--6fa6ef84-e7f6-4dff-a3e0-4b6ebd8b6d28", "indicator--69089259-24c8-4b55-b5dc-3d3d947b8527", "indicator--5d0ca540-634c-4eb5-a666-cce4e435248a", "indicator--9c77f995-825d-4f55-ae4e-1d402349c648", "indicator--d72c0f67-af8d-4551-9a41-0e65c335f079", "indicator--a1f4211e-ac44-48dd-b86b-4140b9619d46", "indicator--6b1d8d4c-cb7e-4e86-9c64-b204d7361aa7", "indicator--67aadfd0-e9a4-4854-ad32-d33cf7440575", "indicator--55a51966-685b-48b9-ab13-3f9edbe2dbcc", "indicator--2313dadb-bb17-474b-9e17-c627e950ff9b", "indicator--d3fa547e-e6b7-4f5a-acc8-ebfd3639b9a0", "indicator--80d9c8e6-6c74-462b-92fc-105d3069f9a0", "indicator--6d721d49-810c-4fc6-9b59-43d8d8346c25", "indicator--d28bebfc-0d82-4bd4-b6cd-a1349f742bdf", "indicator--528c5f94-c927-42e0-bfef-fc0c979d4029", "indicator--b9bff787-24e1-4ad5-8ce6-5174b0e55c9e", "indicator--673712af-3b84-487d-ac22-8fe97e23ad4f", "indicator--64145137-ea2d-4a3e-bc0f-9597bb3316d6", "indicator--28762de9-7c22-451e-8480-b64b038ba3f7", "indicator--0442208b-df86-4255-87af-87a6fb6580af", "indicator--b9bffc19-d6f7-401c-bc6d-9778540991b4", "indicator--6d6c9c3a-cffe-4d3c-a7a7-1159cceaeec0", "indicator--74cd46ec-e535-4523-862f-e0ab32267ffe", "indicator--c2831823-91e8-4cec-9670-bc9c056e6e09", "indicator--4d70fd62-17ad-4361-b598-e7fc750b5ee5", "indicator--c597a11a-05d3-4c5a-a4ac-8dccceb683f1", "indicator--0b10d563-bb52-43a1-8de7-428d60c4c84f", "indicator--57f36b9d-b84c-4123-a2ca-ba9b27f3804b", "indicator--695be69b-6e54-4194-a405-dfd7b1e59cb7", "indicator--9b17a84e-3072-4a19-93ef-967931893548", "indicator--f0cd0ea4-708e-4f66-a0f2-bf769e2dc38e", "indicator--5b83a51a-a9f7-4aea-87bb-5532ddfa5651", "indicator--eec8a495-d826-4fa2-96db-9db6cd61f496", "indicator--5ca119ac-c49e-4ccb-8e7f-fdb07c93b7b0", "indicator--d7372362-64c4-4f8c-a647-2864156b4d8d", "indicator--35b21648-f65b-426e-ba07-d1631d4406ec", "indicator--1dbc99bc-4233-4e2c-8d31-207f59fd29ba", "indicator--d5459009-7a69-4feb-abf0-c6029bcabc85", "indicator--26a597cc-c7f6-4313-9b97-4635f21349e0", "indicator--461e8277-3f34-4c04-b04d-5883a7f8b030", "indicator--84f2821f-134a-4985-8d49-8bd320df40b2", "indicator--e3443d79-2694-44fd-862e-445ac434af2b", "indicator--78e5e5f3-ee4d-41b3-b083-463bb71a7b21", "indicator--148a2033-0cbc-4099-a04e-b0f807c2291c", "indicator--1b17c03b-4561-4709-b1f8-80ce79939d1d", "indicator--e4b1b727-e277-4ce9-9f2d-bcadf6db5edf", "indicator--345782ce-9b63-410d-9f34-46e6dbf8f108", "indicator--c55e716e-1968-4e55-8caf-c5d04808ce6c", "indicator--e997d757-b55e-43e2-a85b-c4b0a9bf60b4", "indicator--40f55e2b-a4f5-4774-a086-ae81169ed9cb", "indicator--b1f9ccda-a8ca-4bbd-955f-fcb2885da5d3", "indicator--53402eb8-3584-4c6f-8b7c-88219ff9a194", "indicator--0e240052-60a0-4eae-808d-90ab98128778", "indicator--3acbdeef-ea9b-423a-b72d-b5b2612d6e9a", "indicator--df976191-8989-4209-84f8-914f9cda9427", "indicator--49902793-66c7-4bf2-80de-81025e73591a", "indicator--97736b99-281a-4f91-aa21-6f36c6bc3cd8", "indicator--7ccf1b66-6285-4f49-8ea4-af7a9ba3766c", "indicator--32cbfd54-4093-4869-81a0-5a1c9b97cb9b", "indicator--b22454ac-e510-48c5-9d88-32bf22398762", "indicator--a0e5f832-fa39-465e-809c-38d3dd0feed4", "indicator--699af659-d703-4918-bbb3-04a8fdabd37e", "indicator--ba26baeb-1e38-433e-bd85-125f485a8b37", "indicator--2631927c-18ce-4ac3-93e5-dd6b05e4e14c", "indicator--ab7c56c5-6cb3-4459-9ce9-e4206228b2a2", "indicator--36d486cc-9ef9-4b7c-be10-ab243be445ac", "indicator--9f73a347-4473-4dbc-89df-c52edda5b161", "indicator--b7a7fe58-b169-4dea-9989-6ec3841904ee", "indicator--5470cab6-0df8-4e05-a6c9-90e357e11e2c", "indicator--8da4d112-a549-49ff-bde5-e9cb4e5480d8", "indicator--ed62de42-edd8-44b8-aa0f-16c7f8aed60a", "indicator--0ff91fed-310f-44bb-b2e1-e9dcb36b6625", "indicator--4de7e751-be55-47ca-a2c6-dc5825dd43c9", "indicator--f7c48728-3087-4c63-b470-b7952ff7a865", "indicator--8c6e3cc8-6a23-45f5-8bc5-122d79e7551d", "indicator--03807380-f154-4d74-869c-9bc89e6bdb7e", "indicator--0ac7234e-445d-409a-b642-2f5bde3e6e14", "indicator--1a1b84ce-7685-4884-8903-5c0b9261a1a7", "indicator--cad37e03-2836-4630-8d4b-e5baabece918", "indicator--791d83ed-6cba-4b60-aa4c-e7e13cc7e3ec", "indicator--da0a5bd0-60b6-48e7-8157-1fea2c412126", "indicator--485f0373-350a-4195-9520-ef1e2e4d4550", "indicator--1b422c9b-c2c3-4516-a22b-558a0b9e4dea", "indicator--4a15c1a1-26d1-4716-811c-1422f323b260", "indicator--bee85c62-cd60-4a78-a27a-4699d14e5b81", "indicator--fee30343-49b5-49f7-9d70-9747c5eea1d5", "indicator--c7f664a9-af05-428e-8a50-cea4c66b6c8a", "indicator--659d7540-b22b-4484-9b59-d20db95ff67e", "indicator--5dff507a-283c-48bf-88a5-45d15cdabe4b", "indicator--4f9b7d9a-f1e9-4921-b180-0d199d9c80e3", "indicator--4473a57d-dea6-4f84-a1a3-58a9cf4f388b", "indicator--557422e8-ee20-469c-b9cf-ce826c5bed71", "indicator--01a1eca8-44d7-4750-b7d2-91164273a130", "indicator--7885e805-98a3-4523-aaaa-ae846cf1547f", "indicator--3bec0b56-f480-4a2f-ac62-d9b5bf20cab6", "indicator--f41256f1-5cce-4f95-9c2a-1f872858100e", "indicator--ae512228-a1e7-48e8-8a7f-6b9bbf9d0e1d", "indicator--ed9a2e84-0230-4c99-a49f-0b83c76afb2c", "indicator--a9e55854-b5c1-4e50-a25f-2b6fa298f34b", "indicator--0ad3519e-0536-43f5-b47b-dd386d6f72c3", "indicator--3984766b-fa03-4fa9-9634-81d46e3064a0", "indicator--72ad7a2a-a1c1-496f-934a-282535b6ab2d", "indicator--611d6f4c-9786-460d-b242-afbf494d9935", "indicator--2232313a-f499-4625-b060-3e99994c3412", "indicator--c369fa27-b02b-4e84-b2b6-c032a2486fae", "indicator--83bfee35-3e83-42e9-a86c-90f00ef6b12c", "indicator--726c3255-6c58-436b-b40f-3bf93272e021", "indicator--bc73db81-f409-4098-8a35-ed93c32207e1", "indicator--f1ee0799-03f5-4ec8-82f4-10b3526b218f", "indicator--9251c335-6636-4752-94ce-da450eaadcb0", "indicator--cb3a0433-06fe-4b5f-970e-442474a07487", "indicator--98be0cfd-bec0-4386-ab35-0939b19371c0", "indicator--fe05e8c3-4194-44f5-a1b5-4c388e3705ae", "indicator--a4f81d1e-f970-4d2c-8fa8-f4d3338d50a6", "indicator--d1ef1c2e-e57c-4fd5-a804-f86b37f9ea6d", "indicator--ec0ef813-b5d1-4906-b351-e3a7f7afe942", "indicator--0b655573-a656-4bb7-b319-559dcaf210d6", "indicator--54c5eba6-5ca2-42cc-9c68-6a43c4bf5bfd", "indicator--1dd77a0c-ba11-4f34-9816-eb2515b5b4b1", "indicator--e562eb90-774f-41e7-b9f0-962321ee8f3a", "indicator--2663b60f-5a5a-4336-9831-1972c2c8f1d1", "indicator--172bf9e3-dd78-464f-ac21-2878f39f7c44", "indicator--52d94610-1f56-4e04-aea9-0992227cd634", "indicator--d43edf1e-706d-4075-83da-bb625416b09a", "relationship--30640e2c-ff06-453a-87c7-4226717b048c", "indicator--94e46f98-02ca-4bee-a26e-921e423fd3e4", "indicator--1ac63573-5b6c-4282-82f3-77cc17bfb8ec", "indicator--8dd2db07-4486-44c5-9e42-cf7ebba81889", "indicator--680691bd-1845-410b-8f5f-c3c817204879", "indicator--611f2c4a-aa97-4926-ae0e-eebd150b7722", "indicator--ad77c6f6-eda1-400c-9127-e767d87ca24b", "indicator--7512a2e8-864e-44ac-a598-0d8b8388c409", "indicator--68671ecf-a88b-4115-9313-7e117170b137", "indicator--132116ab-3b05-4e40-b8b2-b186d5ae3082", "indicator--4ae3eb09-43ba-4b67-99c1-ecd9c5364f48", "indicator--7456d3d6-5feb-4b8e-8933-c026b68ce345", "indicator--7f1d99b3-a29f-428c-adb8-c9cc26703291", "indicator--f562ce7d-03bd-44a9-b9c6-77906a0c9431", "indicator--088fdc09-fa32-47b1-a5bd-0d521366efc5", "indicator--3eb6dad3-8e3b-42a1-bed2-5f1c875923f0", "indicator--11066aab-ef1c-41d7-b9d2-4a7342bcf925", "indicator--c95662e6-5a83-4004-9275-14f16c8fe701", "indicator--2ae900f1-17b9-4ec1-b587-279f7a9fece8", "indicator--3c815178-255c-47d9-ae30-aeaf74c01a69", "indicator--65c1620f-b930-443b-898a-5e56b598c1e3", "indicator--13e765ad-aa2e-4000-b489-4d1cdb7833e4", "indicator--fa3e53a9-f04a-4791-90fb-1b7b286e800c", "indicator--d57a7e16-9b00-4b0e-b9c3-de65dd2f138f", "indicator--c9be029d-c8a8-414c-816f-ace48459aba6", "indicator--a77407dd-61e1-4271-9e14-b8d4aa30a182", "indicator--0eb5f968-addf-414e-8f85-7b5442e2cd47", "indicator--a9f2b5b9-88e6-4fc2-9fe5-de7a77ebe594", "indicator--7bdc3b98-8e71-47e6-921f-0b60674a073f", "indicator--6c31251c-3ba1-4957-97aa-757ed532b35d", "indicator--55d38161-53be-4c34-897b-7cda10536d46", "indicator--4c242b47-2340-4dfe-980f-a8d5065ebc66", "indicator--80b2f115-31d8-4a15-b9bc-22571b66df30", "indicator--d7a7450b-4dc0-431c-94d4-7ae82de23ed5", "indicator--7d062a1b-ce06-4a40-8eca-a00f0d426395", "indicator--7eb54bf3-e67e-4477-ae76-ea778a4f954b", "indicator--6b5fdfff-507c-4869-ba44-8e8a65e5e45a", "indicator--0a781bb9-eacd-4aab-aca4-a23ab15a4a44", "indicator--4acff7c3-d581-4bdb-873a-ba081af2347b", "indicator--1da377b8-4137-4d4c-aa23-a2a4156feb5b", "indicator--74544025-3499-4ead-9e5a-8e75644eec9b", "indicator--70235502-4f20-461f-84f9-ba34b9e03c5d", "indicator--67a0fb61-c150-4a9a-a395-8ddf49030ea3", "indicator--ce487854-3b72-42bf-97b0-e4d1f32980ea", "indicator--314f0cc9-7357-47bf-b61c-727153d5ef6b", "indicator--1d2b9697-7fd8-4bce-8861-5f43f6090af3", "indicator--46dad616-c3d3-4ab0-b856-6fc1433bd49b", "indicator--77748c3d-21a1-4081-be3d-b97b738305d6", "relationship--084f1951-ac8b-4ec3-8fd5-7e25fb82c717", "relationship--f0bdbd48-16bd-4e42-8094-b158f03ae311", "indicator--dffa3097-0463-4e98-bc85-b43d71b818d0", "indicator--5f44db34-2be3-422c-920e-fc2957bc3d1e", "indicator--0f13dede-a3b8-41da-a525-4f8ff792a6b1", "indicator--4e35913c-3712-492b-b886-ad035a5b1db1", "indicator--2225a0e5-6170-4f18-a753-957c0b2554ad", "indicator--36255bd7-bf01-4ecb-895e-28cf78aeee33", "indicator--3aa3ab90-c25e-40d4-a136-a2d03d0fe259", "indicator--d21c5c0a-4f0c-42ea-a29f-5ee37519566d", "indicator--6f4bae02-5062-4f39-9e36-d631cc45ed3d", "indicator--3f71e7f8-2af8-4682-89bc-dfc6c6c6cdad", "indicator--32079251-3dbb-4c5f-8e10-854e4252a10f", "indicator--7b8a0896-7c32-454d-a276-36573952288c", "indicator--83db0286-0e6b-46a4-b277-936de22803ad", "indicator--7a83bad8-9aa9-4649-9094-9af011122587", "indicator--8ed046f1-23f7-4181-a4f7-00cf1b58f258", "indicator--af56be01-cdfe-4aa7-a813-5a4a1f12f9f1", "indicator--2980c32d-f47d-4d16-9d90-12b0d07dd173", "indicator--2d8f9079-0c3d-4424-bbc8-e8fb50f373c8", "indicator--c2ae0e0a-5ed2-4d3e-92c3-9b7624071eca", "indicator--f56835eb-e8db-4eb3-a089-797b02a997fa", "indicator--b19b32e3-dca8-41d5-8653-82918b2e893a", "indicator--767a9ffc-49fe-43ab-94a9-9c05d7bbe115", "indicator--a4ae5c87-dbd1-483c-8f63-5cff542920ab", "indicator--f904d5a0-fa7f-44fe-aca2-f69513d74d2f", "indicator--43dc4e63-7ee0-4c4b-ab12-dec1b14ae7b2", "indicator--3e4abe2b-c83e-41ed-a5dc-f585362ea14d", "sighting--7e6e1fa4-9af6-4b84-a208-180ea95ee122", "sighting--58faac3d-1cf1-4401-9216-0961e04e4b5b", "sighting--dd7820f5-3c4b-48c7-9741-94dbbde2fb72", "sighting--1606f20a-d8a0-4518-8f38-0b3da4067765", "sighting--6eeff180-118b-47fc-a494-25885ca533b7", "sighting--bc68f163-46ec-4715-8025-d1da8dba773a", "sighting--f5ab21eb-b79b-4938-8b97-18a5dc2bdbc8", "sighting--6158bb74-0245-4035-89ca-fb7e2a308ec4", "sighting--a7164709-586c-403a-aafc-e0ca4934e089", "sighting--f7de59c5-5581-4b3c-a831-d74306c9221b", "sighting--5a8ba4fd-b98a-4817-bdf1-197ab4ef655c", "sighting--6d69b243-2fab-4ec3-be69-cda9962164bc", "sighting--9808cca5-039f-4286-a247-701b078c1b9d", "sighting--239588aa-11ca-4b62-b5da-d9b74064258b", "sighting--aaf897a6-63db-4e85-bac0-7c41e02bde50", "sighting--d9d06512-8717-4cf7-b2ce-a8f6480c0437", "sighting--cbbb7dc5-56c7-4b99-bac1-178e63f612af", "sighting--e5bf9203-3d3d-4721-8cd8-ce972d7b5231", "sighting--c826bfc0-66e2-4248-b235-4262e2df34a3", "sighting--3e67692d-05d2-4382-9b4d-0b07663fe6a7", "sighting--0bf54a99-406f-4d5d-b25d-8cbb9c69bfaa", "sighting--950191af-9b19-407a-a840-141acfbb085f", "sighting--bd1556f2-052b-4985-86cc-ed7d88215fad", "sighting--59368c7b-bd6d-4975-bdd3-e0c194046ccb", "sighting--98c2a60b-202d-4e08-8b4e-1c8501f63670", "sighting--a0891777-3120-4d6c-8336-d617958061b7", "sighting--be34154f-53c4-4100-a446-34b58174920c", "sighting--de0fde61-941b-4217-85db-0fd91a0a6bb2", "sighting--6ad25019-11fb-489a-b2e4-2fcc6a9217c2", "sighting--664ff7d1-93b6-4148-93da-944c1bfbf30c", "sighting--d2699864-0afa-4b5d-b19f-927a2993d456", "sighting--750cbd77-f9f3-4bf6-916c-c3a80d8ba4c5", "sighting--79a2db6f-6971-44c8-9d09-b746285999fb", "sighting--75e796ab-c96c-4a67-b7a0-46bb5d92d74a", "sighting--85e9e1a8-0733-4f10-a4a5-3386471e139a", "sighting--f9992df8-b6a0-4a46-ab1f-45ed4b512d28", "sighting--bb2de234-1ddd-438a-993e-9676b2671752", "sighting--b19a3d12-99a6-4652-9326-df68fb49649f", "sighting--1b183649-0ef4-48a9-8d80-1549332313b0", "sighting--ee5df891-d4a6-4b1a-bf82-96d70105731a", "sighting--d7af01e9-02c3-4b4d-ab63-36193d14aadc", "sighting--40c05ad6-1753-43e1-be31-a96452284711", "sighting--af67b583-1998-413c-abc5-f5709ba7480a", "sighting--801840d2-7f70-42b5-90cd-76fd0739258c", "sighting--75312bf7-6c5b-4c62-b1a4-7cdd622a711e", "sighting--db797a52-e3d3-4bd8-8e5d-f967d722bc52", "sighting--0d823c8c-4705-4053-9160-de9a7e12eb4f", "sighting--e03040c9-4401-464a-b971-df24d6c05942", "sighting--385b7265-5d5d-4170-9d1e-2a881aabdac8", "sighting--880c4be1-58e5-499e-8a2d-2f4bfbbfafcb", "sighting--4b0d7532-5be4-4729-9484-56c69d8b1718", "sighting--0cddd911-fe9e-472c-9f9b-632b96ddd3ec", "sighting--ff764294-7206-4dbf-9f4b-b09b37bf2a84", "sighting--6dabf32c-8a7a-4a1a-b904-640b98ed7234", "sighting--ddebf2a3-c8d9-4cff-b206-1df2c7d382ba", "sighting--99747c95-23e9-4693-a5f1-9b82551e770c", "sighting--a134f50b-9f56-4419-abf3-64ef495cd75e", "sighting--9d07acdc-bf4c-4699-a353-cf9ccca5ed16", "sighting--489babef-3064-4562-8d54-279f1d627f07", "sighting--642cac81-ee34-4540-a0c3-f7935ece46d7", "sighting--31cba8a1-4140-42fe-b59a-dd3b78263c5e", "sighting--66dcf1be-4bb9-412a-a7e3-f9af3a33050f", "sighting--67068f13-6322-4136-bdab-6426c4af81dd", "sighting--1e391fc3-7057-4ca7-a29e-5b671df8c97e", "sighting--64ddd345-44b6-405e-ba12-3d04e812a8bb", "sighting--58a96d3b-dca0-4870-965e-17ed1cd025b0", "sighting--3c03503a-ab6a-43d5-8422-e94ad1ef5cc9", "sighting--955f1d8e-4e36-4802-8924-5411ded3807f", "sighting--50d4195c-1381-486a-8597-489e7aed06e4", "sighting--574bdfb6-33e9-458a-bc2b-a2fdbde1bfb9", "sighting--2fe2a6ef-9e0c-47d1-935f-e3271622db5a", "sighting--440f1afd-2e5e-440d-b5c0-6304d8bd74f1", "sighting--6e45a6b3-62a2-45e4-8d88-5f3a11e448bd", "sighting--514d92b9-a4c7-4212-8aa6-c0dab3c56bb5", "sighting--6e3aa270-b81a-453f-a3a5-d6b3b32911fa", "sighting--2ccec8c5-2196-4a1e-a835-3b57658850b2", "sighting--d2b5f130-4275-4b0a-b417-8d45718bf67f", "sighting--00f1b9c0-add0-48d6-9918-fdb3f8035e9e", "sighting--a3788337-e9de-47ec-9b32-aeae051808e6", "sighting--b418eabd-3125-47c5-bf4a-1549c306da4c", "sighting--1665a342-5780-4b7d-a156-91b63a2c1f1b", "sighting--471f81e3-a2d5-4156-802a-bfdedb0cf7f2", "sighting--13d80213-1088-4d2b-baa4-066ec206668b", "sighting--56e95a14-668c-42f4-8c44-10e0c402a6f5", "sighting--0dcf4138-cfe4-47a3-84db-f39d5a1d6f81", "sighting--79a62fdf-5c53-4ba0-a48e-1af52427386b", "sighting--0d23fcb2-a2ad-4b22-b941-82944c5e55bd", "sighting--b7efcba2-d888-4d03-9853-2667e1bc78ff", "sighting--ba608379-9619-440c-a553-a30578d64829", "sighting--696ac5fd-e4ce-457c-a96b-c959b3a81ab9", "sighting--1d0b63c4-884d-4a10-9f29-9d50323ba707", "sighting--3684237c-52f1-47b4-9c91-17cdc2463816", "sighting--fffb2d8d-e798-462b-965a-d8a3712c0635", "sighting--4fefdbe6-7fae-4774-8cd1-37047e637432", "sighting--f9d17cec-4363-452a-9f47-18576e843657", "sighting--42558555-d88e-4adf-beb8-bcd34f7e0c7f", "sighting--4f680db8-4158-4ed3-b9e9-82979b919be7", "sighting--ca589f08-77c4-45e3-a7bb-263741c74621", "sighting--b92f1d55-d6b8-4e6b-9167-146c9d30cdc7", "sighting--8c161595-5860-4727-8142-23bae512591d", "sighting--9c48b27b-a815-4587-98cc-608f0e6d91a4", "sighting--667ecfe8-3653-4d0e-b0ed-fabbcc037346", "sighting--26a579ab-2d05-4b68-a5ed-9cc0efa088be", "sighting--c36c951e-58ff-43d4-a126-b676b1ee61c4", "sighting--f1df9eba-a88a-4d1c-9789-ad1c19c7235d", "sighting--1437f935-efec-4ffa-baa4-30ba87859ffb", "sighting--7e7d5640-a5a3-4b6e-8332-e87ab83a5b10", "sighting--7c4d4725-362e-4431-a413-f75afe256e35", "sighting--cba1194d-ebb4-44ea-8ef3-26902720b5ad", "sighting--a04e020a-be7d-454f-b091-0e5fad13bb84", "sighting--fa1efd5d-66d6-496e-8cee-e55c5f3fe945", "sighting--868951fc-eabd-4b81-9197-930fed6b576b", "sighting--fff0350e-aaae-4dfd-8bf2-ca4a6287eec6", "sighting--1733f97b-fb86-438e-9c53-3b110360fd43", "sighting--1440aeff-9eaa-4533-a8d0-eb4ff54d2fb7", "sighting--12f9d858-75bb-42fd-a15d-aabee590f1f2", "sighting--44be6fa1-dd2c-4470-b2bd-62abb105f9fc", "sighting--fdd9d44a-8a6b-4d00-8234-0de70bc8d9c9", "sighting--011abd7e-71dc-41c2-a3f8-7a2205b5708e", "sighting--2904e625-3b37-4873-a821-b8783a6502c1", "sighting--c1d3cbac-2791-4a71-8bd5-483257c6d3ec", "sighting--398e75f4-13e5-4a29-93c0-7a01314235ec", "sighting--1d0f2c2c-5a53-4a1e-8134-8a6c83be3280", "sighting--222b99a8-d517-4f23-85f1-f65aa5665488", "sighting--fce97f4b-7da2-4e89-9ad8-c86b58bb7234", "sighting--b55a0ef8-342b-454d-b34c-33817d076279", "sighting--e212b146-b2ce-41c1-bf01-82167f615c15", "sighting--32c4edb6-41c5-4612-b785-29b0f8ea4d10", "sighting--3e5e6477-5181-482f-9cf0-964bcb0788a4", "sighting--da3b6de2-3d0c-44c9-9c66-14c2936862cf", "sighting--2b39c629-97a2-492e-af68-ff52cf171f1e", "sighting--610f7645-7266-418e-a60d-3aa81f7b1ff8", "sighting--3d449eb0-daef-4d9e-b94a-96425c454630", "sighting--1b4a3ea7-534d-4c83-ae54-a169bda8a137", "sighting--bc9eb519-582a-496c-a7bc-0d36e6da469b", "sighting--fa712e59-586c-4c47-a7dd-6daea0ece0a6", "sighting--6adc632f-10bc-48e4-81aa-6ba0014b4134", "sighting--a6b991f8-9c05-4085-8ae1-edf75dbdd304", "sighting--865d5318-72c1-428d-a6e8-b711eaaffc98", "sighting--ba8bbf7b-8a20-4d29-ad6b-ed80f123fb10", "sighting--f10d7c54-860c-4fbf-8056-1bba698d423f", "sighting--4e229997-d655-4142-94af-47f0e0d033b2", "sighting--90d688a4-5548-4606-839d-2f1c660bbbc1", "sighting--2ce9ae88-36d3-4691-92b2-e8bce1f94655", "sighting--be802d1c-4024-4e14-9d22-1817d4fe87e8", "sighting--566baada-1d36-45ce-ba14-c86718a78814", "sighting--c71e68db-e721-4ce9-bb1b-7283a63af8f2", "sighting--e60a7aba-a427-43eb-a5e4-5a65e956d8ac", "sighting--975d3864-3238-4e31-a2b2-cedf1b5aa9d1", "sighting--f750ddc8-f425-40e3-8996-70b80666cff6", "sighting--eacccb05-b11f-4f0e-a900-530e06358bba", "sighting--c3d5439c-c42a-479e-8f5f-6662b58e42b5", "sighting--d36e8ffd-d7d2-42e5-b4a7-73960edef53b", "sighting--f7da78b5-f611-4bbd-b90a-4313152b467d", "sighting--5a1150b0-7c06-48fd-88af-5fb8e7abb265", "sighting--eefbd391-3355-4daa-a3cc-38f557fb6450", "sighting--a7b8324b-65b5-4ab8-aaac-ff51c9a5457f", "sighting--956a26ff-3456-480e-8992-71dfd18cdb0d", "sighting--74bbee11-bf1c-4b00-bfb9-85b39622589c", "sighting--fd9b6a87-b424-4621-bf3c-25377b703504", "sighting--348e0f1b-8ea7-40aa-a45a-88ff4d46d0ca", "sighting--f4e5ae97-5a77-41ee-954f-bc65ff481cca", "sighting--510aca7a-57d6-464f-b2c0-c08bd42500f2", "sighting--0b2aac97-f34f-4cf1-85d2-1fa0f1e5ffcc", "sighting--0af9ba2b-eea6-473f-9733-c2dc638c1377", "sighting--41e646b6-5cf2-412d-a9c5-590385701dad", "sighting--97ca9188-9a3e-4d63-b4b7-cc20a3a6564b", "sighting--8f9b35aa-6031-410e-83d5-6bcb88a78b52", "sighting--0f04f9f5-ee8c-40c9-91df-d7e7b99b46ba", "sighting--5a49d508-bebc-48ed-9f7d-feb6eba5ea54", "sighting--6f1579a5-0fe0-41cf-8e4f-b77c0bdede9e", "sighting--1b308766-b2d0-4cf4-a596-4a9e7779aeb4", "sighting--902a80b3-57a8-4c86-ba3b-8acc44b057ef", "sighting--9a69c1e9-55ef-40ca-948e-2bebadbb2036", "sighting--f86cccaa-1214-4fa9-b562-7b5c97a5701e", "sighting--d735214a-b036-4cd2-856c-b55d699a2a4b", "sighting--8bdde66b-4d70-48e2-bcbe-f6e2402cc2e6", "sighting--299f8fb3-6f57-430c-9c88-a7e3af3f7cc2", "sighting--9c69be4c-ee2a-44db-a7bd-aea9e6e5beb5", "sighting--dd379bb4-829e-4092-b224-27a1ccb158e1", "sighting--ed7baeee-8019-43e6-8872-3c19a5c24188", "sighting--ea3d7515-1aad-4311-a5da-a035ed2a4fd4", "sighting--f9ab77e4-7f85-4861-9931-22353393ae37", "sighting--69a3f381-af64-47c4-ab14-f9346e0c0f1e", "sighting--3b4a1185-82e8-4aba-8e48-cfb79b4475b9", "sighting--6570c6ad-12ac-4398-8ae2-d2fb1d700591", "sighting--8dd67698-0313-4cf4-9fe4-3d28f3698502", "sighting--4b83cd36-d6c3-42db-ae1e-a8faf4616d72", "sighting--cb94b67b-3860-4380-aef0-3a2bb8bc9514", "sighting--1a473c81-e461-4f4b-b17a-33ef4aeba169", "sighting--a050a10b-17d4-40ea-bbf1-3520c5c18a83", "sighting--99ff3341-698b-4fda-8c63-b5a478a14d7e", "sighting--f63acb72-0666-4d46-8cc9-7712e0295132", "sighting--dfb0645b-8df0-40ed-b206-429cef26a381", "sighting--30143f70-c34a-471e-810b-9c170f24aa98", "sighting--8c584f61-5bbf-4d24-b792-1860973c16e1", "sighting--6eb5b5da-4600-483b-9a73-f6c29bd8c1b6", "sighting--0ec5285c-bdfd-4601-a63f-773e482b12b6", "sighting--7ac332ac-0723-4f24-b49d-50de5f65998e", "sighting--87d25cb4-abef-4b00-af69-f84a3342ff2a", "sighting--0043af1f-514f-43d4-917a-d02f9b90fcf7", "sighting--80df40d1-e140-4dd5-819b-40d04b058064", "sighting--f2c7708d-c63f-4eb6-93e3-20981d1304f0", "sighting--964b8284-4a77-436d-ba90-28406fe01de5", "sighting--ade6c884-219a-4a23-a96b-aa51815c4555", "sighting--b30e0faf-1339-4496-af6f-d2653482c110", "sighting--d7c72e07-c93e-4398-9d8b-2f8ede403b5a", "sighting--fe2b8c9b-e9e1-452e-9ac7-e6d2621688bd", "sighting--772c7569-5a34-4bed-9abd-5334fb9bce32", "sighting--1b9cf07c-e407-473b-92e1-d94158e81cbf", "sighting--114e6fdd-d730-4c96-818d-db0c66b6af4b", "sighting--71b293fb-e140-4651-ae0f-19b72fcf414b", "sighting--7711aede-81d1-4c63-b3e6-c243d634dd48", "sighting--a1b68858-e0b3-4fc1-835a-5f6a59745eaf", "sighting--5ef9e7fa-44f4-4394-ae96-5559d323f454", "sighting--5083c101-414f-41a6-a22a-ba003711edea", "sighting--3dc9171b-6cbe-4df6-913c-da8c1f999d30", "sighting--d86949bd-8d1c-40d7-81b2-50a6701f43b3", "sighting--9c1cbac1-fba2-47ca-9879-15682a40baa7", "sighting--45bd766c-5293-434e-bc3b-e0ceb0f7df99", "sighting--50b353a6-7486-4ce2-a647-591a50225fd4", "sighting--585be0c7-946e-4a13-87cc-0f2d8f229826", "sighting--773e4e59-84ee-4478-a280-8cfae16af0f7", "sighting--39fe4e4a-5d63-467b-8543-bd1a388646b0", "sighting--11511000-643b-4aab-96c9-69076651cc9f", "sighting--eacae7df-257c-4030-a65b-2e09b3949c19", "sighting--d0ada725-5e3f-41e8-936d-42b4d73223d7", "sighting--69d224ad-d26e-4e1a-a052-12ad60247afa", "sighting--e3ce845e-d3df-45ee-91da-b17ca31e35f9", "sighting--f265f8f6-ea6c-4f52-b1a9-af39b0029ed7", "sighting--c10b345c-a2bd-4d8f-b4bb-d93406fd0656", "sighting--977878a8-2b58-4325-83c8-71094f226555", "sighting--e6b5a020-c676-488e-9e07-90b8189beae9", "sighting--65286bc6-ccf1-4cc3-a3a1-19d4127fb49a", "sighting--8092ce43-92ce-4412-8109-2ebfea054611", "sighting--e45e5391-fa5d-49fe-a6b5-50dba41648b7", "sighting--60f8e162-7920-4bc7-82e9-471314a53d0c", "sighting--67f76a1f-e5e4-40bc-8165-320c060172cc", "sighting--bdd8a784-0a70-465f-89a9-6e16dd7bda28", "sighting--4245ee79-eadb-4c1c-86cd-4e210c55d7e3", "sighting--b970ba9b-f06d-4c9f-8d56-4b9dfeb5a202", "sighting--c4176213-6276-4945-8960-cab8909e125b", "sighting--56b5683b-277d-4241-9416-136d80e2e376", "sighting--bb795603-630f-4cdb-9f51-9fc210fb6fb6", "sighting--b89a0861-f10a-432b-9524-9cc9e280f644", "sighting--6bb7d3d9-a91c-472f-852f-fade83cd6041", "sighting--8c62cacd-55bf-4422-810b-80275350c0de", "sighting--d29193ff-3082-4dc4-9229-6a1d1d23ec26", "sighting--b5c0f046-ad94-4b8a-bc8c-b08a793d7ca8", "sighting--5578f2a0-0753-4a6d-a651-6102bbbafb34", "sighting--490c9076-9ca7-40ba-889b-8f9ea2249dfd", "sighting--28fc084f-eae3-4eb2-955c-c1b653d8376f", "sighting--9393fb0a-2850-4ea6-8a62-84d4bd54d7d0", "sighting--87b5abee-ebea-4dbd-90b2-4c8f6a4763e2", "sighting--3d074920-e990-4b5e-9ba3-48a22356168c", "sighting--cbadc3e5-ef07-46c6-af0c-7162b33933f9", "sighting--48dbbe2d-17c7-4559-87a3-ef91c105bb1a", "sighting--822d95a9-5c24-4fa6-9816-bdebb3012513", "sighting--f06ccf9b-9a2e-4d4e-b61d-db42c12e0b1a", "sighting--4b7e6c80-ec98-476b-948a-85aa4b46aaed", "sighting--fc50ad9d-36c1-456e-b56e-f1b96ca807ad", "sighting--31d93a7d-d10a-456b-ab9c-b031ddd219b3", "sighting--d28de05b-4926-468f-a4a5-956373f7ba5b", "sighting--5649a7ae-e423-4b9e-a7fc-d8f0308c55b7", "sighting--52f8a954-fdd5-4ed3-94fe-9daa8661db0e", "sighting--6ac5d392-7211-4d1a-93f0-b2d4e712ba96", "sighting--4ebfd329-60db-42e3-99dd-f490a007ca68", "sighting--2e5d8a36-7e1a-4693-a7a6-7de295987454", "sighting--af7c9623-dfa8-4327-956f-68a7b6828b55", "sighting--601b0e08-ce8b-437c-bbef-6f0f34d5571f", "sighting--659b5f86-f2a6-451d-8205-517c667ed578", "sighting--dae36c36-2404-4e58-9e77-0c4848efeadb", "sighting--720be12e-629c-4605-9d5c-d9c37e0d5fd9", "sighting--39a1a75d-5ea4-474a-a3c6-252444df0c80", "sighting--cf759aaa-118c-4bc6-8597-f807a9e33027", "sighting--668bb94e-fb05-4690-a67a-52a29c143f70", "sighting--58766d9a-c29d-4394-879d-46b861ede15e", "sighting--0fab2811-d72f-48a1-8328-37faa87324a2", "sighting--bec70a3f-7fc2-4228-9908-73a9830e47ed", "sighting--ae0e8085-612b-4510-bff6-bf91a290e5db", "sighting--b2613678-360f-43fa-a5d6-f20ecee3324d", "sighting--24e8cb73-9156-47f8-ab94-17cf3dbf367d", "sighting--a02d8bcd-bfcc-44d3-b478-cb95ebb0bd0e", "sighting--804d5192-84c2-4156-93dd-15803dd3fa8f", "sighting--f1723d42-edff-4699-b913-338115cdc9df", "sighting--fb0978c7-9c29-4ee6-aadf-cae185757457", "sighting--2a2bc55d-0bc4-4dbc-89ad-f3adc4f6ad29", "sighting--23262856-e2e0-4d7c-8b3a-522a8c845073", "sighting--2e205c90-6aca-43c3-bd1d-b1bc02190ebf", "sighting--0fea27f4-30b6-4736-a269-0ec5d716b424", "sighting--39e5962f-fd1a-43bc-973b-354f5d7f9b09", "sighting--888c3eae-4722-4eaf-9d42-ba03dce12432", "sighting--15b32a44-e0ae-4c3b-a5f9-903d9234b63b", "sighting--cd940e51-fe0a-4ff0-a0a4-9a0f7074199c", "sighting--3fbdf66f-c2de-4782-bee4-a669556bee5c", "sighting--0d11ed48-431a-4a54-9424-a84df29c89e0", "sighting--59eb4548-6beb-47ee-b32f-acb38760f4fe", "sighting--b98864b1-f3d7-4f15-a6c4-42b71f7432ad", "sighting--cc23e021-b7d7-45b7-b4bb-c6494e1a1d71", "sighting--22447b50-ac75-444d-9a90-15f9389fcbba", "sighting--bd71dbd0-f313-4e01-b2d4-11f9a781ae79", "sighting--e596a952-8c89-40f8-b7ed-6021fd4ebc45", "sighting--54fc6795-1b13-4016-9874-f0df6f1ea29f", "sighting--5cd79b33-cedb-4189-8a89-8d9ce6f0f6b9", "sighting--ae86ac23-f0ee-4e6f-bb6e-10c34cf4c557", "sighting--abb452f3-f2dc-40f6-a6e5-8ea7807bd83a", "sighting--578269e4-2b17-41ee-9894-e8d665a7d1c4", "sighting--f213fdd3-b7ee-47ed-8fac-6acf6a2e2b7a", "sighting--bd68b11c-44cb-4e9b-a815-b910b40c41cb", "sighting--155f9779-dd11-432b-a8ee-d9f45ad61485", "sighting--a50f5f8e-dc33-4616-9d79-546723c2f8ff", "sighting--9b6b1165-80c6-454d-be4d-536ffec1e144", "sighting--d3c064ef-2d92-4777-a916-60e3760615a4", "sighting--557df23f-b551-4083-b3a2-49beaba0e110", "sighting--ee9c8cf6-8e72-4b28-99e7-c3fd13436c2e", "sighting--eddaba38-a9c0-43a7-b4ae-ab9dc4d1c3ec", "sighting--14d9c533-f26e-4e2e-b171-b0a98212ab10", "sighting--e353cc89-468c-4a4b-b244-fa1e0701b858", "sighting--f513f139-dcdd-4581-aef5-0fa12f6f163a", "sighting--a416c4a0-e4fa-4e69-84f0-96fa57069565", "sighting--dccbf64d-2ca6-4472-afc8-8dd8d5dc17dd", "sighting--1fe7e761-01da-4a61-8036-62ca26448f2c", "sighting--eab75d11-4f92-4cea-be33-71dc7a243a65", "sighting--70f502eb-2bb5-4e02-aa4e-6712cb649017", "sighting--533602fd-0313-4c94-88c1-d1933d3c9782", "sighting--aa0fbab0-79c6-4df0-ac9f-a33dfa1cc3af", "sighting--bfb690f3-55e2-4fd8-aa46-7f7e763efbf0", "sighting--ec507a2b-9baa-49f1-ad11-11f3fa8a66dd", "sighting--7456b2a5-2de4-4d98-822e-f494d8defd88", "sighting--aa751728-0d44-4b03-9270-ab3042b2cf76", "sighting--2b67275d-05ff-4aff-bb06-89d62c2dc242", "sighting--609a1568-ccc8-4410-ae5f-acc92156b729", "sighting--363133b9-282b-40f1-ad8d-450e3e96ba70", "sighting--122cc509-6122-432f-a077-2fb2e7179124", "sighting--53845c0b-bc51-4ef0-ab4a-e65714af470d", "sighting--48a192fa-78d9-4671-93d8-faf2c9a09878", "sighting--e8f92564-e115-4f42-844d-f2e160a5fc74", "sighting--7cfc9627-9b7b-42ca-8aa8-059c80e0da62", "sighting--ea750520-27b9-47f5-9e34-2e2a87915947", "sighting--7f383373-1776-41ac-9e4d-772e1addfaf8", "sighting--a71d0259-2791-4b0b-a050-d79fc357283e", "sighting--c68c9c20-5495-4dc4-ba68-e606c66f524e", "sighting--937b5a79-6eb0-415e-b108-260f417c91a4", "sighting--ffef3465-3574-4f17-bb2b-11ad5785ac36", "sighting--017334de-73c1-4ee2-af51-92e641450adb", "sighting--34cc7192-6508-4c22-ac15-9f6a240fd83c", "sighting--5ced3220-b84b-4ded-808d-552dabeef15c", "sighting--9d64db96-ca71-49e9-b91b-eb2242ca2457", "sighting--795c4374-486e-409b-803b-f848933a8c9b", "sighting--5629b1f3-afca-4ebe-b90b-9165d72918f0", "sighting--ece7c7eb-723d-440c-9bfa-5f479a981c27", "sighting--e7150710-4ce2-4841-a67d-d6c1d6c3336a", "sighting--8d63d1ed-a315-4f9b-9f0d-092d61c31178", "sighting--b7b09b13-d683-4c30-a3b0-53b33c0d3773", "sighting--dfccdaf9-9435-4f57-a3b6-3bc41e4eaa4c", "sighting--7848b265-0d74-415f-9ade-2290e8c947b4", "sighting--79e2bd67-7bdf-4e47-962d-977a85fc1b0a", "sighting--6acdfe64-7b72-469d-b09d-c4b279a3c8f9", "sighting--49a2c99f-9075-416a-9e4b-02168150d4a1", "sighting--2fa3db08-0070-4180-b52a-6883a15eb40b", "sighting--9c7df2ad-7d45-47dc-b140-f6048529300e", "sighting--d4d25033-c3ed-48a4-bfc9-a48e8c5e04d4", "sighting--f7f69d96-61c1-444d-afbf-33162cc0c03d", "sighting--8c983320-15a4-42ad-bb8e-7e1a1c803c02", "sighting--a27bb8db-d74f-493d-a21e-ab92e4bd121b", "sighting--1e0edfa5-cc33-4b6b-bdcf-2fc2cbc4d4cc", "sighting--9708ebdf-e833-4c1c-9e07-79d30eba52c2", "sighting--4879d6ab-077a-4d3a-90ec-253a6402d1fc", "sighting--fb7e0e90-5d36-405d-b7ed-eb248bbdc218", "sighting--51e282de-7437-46eb-a8b5-1cae301a6a41", "sighting--b8704ad1-e325-48b4-b85a-219a9c7f9529", "sighting--3d83fd98-94b3-4346-898c-97b1d33848d0", "sighting--33c61919-a105-4c92-8199-867b88ac49cc", "sighting--96e84014-7847-4629-afbb-3344ee09337d", "sighting--6c384ccd-c09e-4fc7-a4c2-13dcf0ad9831", "sighting--fbc3778d-2f71-4191-9ee4-10e1ad885ba8", "sighting--6b8d4186-149f-4922-a774-cacd96170744", "sighting--0959cff3-0df5-46bd-a494-a835dc70f468", "sighting--590cbc54-10a9-4c39-a319-acc280c2de94", "sighting--031438a5-c857-4a49-82ff-31b4a5ffe06d", "sighting--af068282-9bfc-4487-8ce2-6c617451541a", "sighting--6d4ce976-31fb-4702-9165-08d25231161d", "sighting--f29b57b2-4249-465d-9c2a-76a4e73e1b97", "sighting--d326c56e-c601-44e2-b26d-f995ea82ebca", "sighting--07fb9f8f-ff36-4a2b-8b78-f39458002e0a", "sighting--a74d8c4b-8a13-445f-b137-813b692cae68", "sighting--ced085a1-7c08-431e-9cb7-c268b0a31b3e", "sighting--5f3e3421-1187-45f1-9638-3e56c7bf45af", "sighting--063c3830-e153-4574-83d2-cb7034066c08", "sighting--4c88f330-9c99-4528-97fc-7b4847ccef29", "sighting--5036180b-29b7-448c-ad8e-fc4d19cf0290", "sighting--80fce71e-af6a-4f77-9729-980f4e7a0955", "sighting--e38a81cf-e954-4a88-9228-09eb69b2437b", "sighting--0f36abad-3310-4aab-93c3-fe19d47a2e43", "sighting--6005ce5c-9b0c-413d-a66f-cc4758490698", "sighting--15f2fd1b-6a22-46f6-95c8-af364eebcefd", "sighting--8410f5e4-4db6-4fe7-bcf1-681269a27858", "sighting--08b04264-afab-46e6-83a0-331d5ab2a23a", "sighting--22b73776-90e7-4404-be71-27f72d352122", "sighting--0ff304f1-d889-410a-9308-68e515d351cc", "sighting--4371154c-8176-41ff-b766-d3e9907e2a0d", "sighting--36848032-b394-48bf-a78f-d18c1332c939", "sighting--c2ffd3ae-2c18-473e-b6fc-d395b4e45fd7", "sighting--08b81216-b54c-471b-b1ed-180bdd438c5e", "sighting--1ca46a01-1029-4fdc-9e08-68c75a57cc2a", "sighting--acbf9689-a491-4520-82ce-03d7d694f495", "sighting--503b9780-6289-4d54-beac-46a3a862511d", "sighting--c134d8be-3d69-424b-a226-bfdc89d23bb8", "sighting--accece21-687a-4d8a-803b-9011a0577fcd", "sighting--9b9faeaf-c0ef-4182-a949-ed0a90ac2ffe", "sighting--b34f59b4-59be-47af-a314-500a420a25d8", "sighting--e41fc07d-cd1a-464f-a6ca-d9aab187efd8", "sighting--b56622d5-413d-4b09-8419-cb8cf6996c25", "sighting--ef019f67-04ab-42de-bef6-264c7a06f200", "sighting--c28b2ca3-ac76-412b-b3ab-243aedf85ded", "sighting--cd690959-4c02-49d7-ac3b-7e485df915c3", "sighting--35734563-7ed9-48d8-99ee-8083b955d8e6", "sighting--0744e926-f9e2-44a3-9816-e187636c26f8", "sighting--3926155c-d34b-486d-b9da-e6ef5652e621", "sighting--c2c82f01-5351-4ce5-92bb-58917ccf6d0c", "sighting--96f03023-3a0e-44ec-8b1d-d26f8c89304a", "sighting--cb7a124c-0cd3-4327-90c9-ab2cdc2f23a1", "sighting--1fd0a7c4-cd31-4bdf-a558-d03c0d04d440", "sighting--1718f8a1-3780-4ed2-87f3-b984241560b1", "sighting--8b7d4df8-82ca-4a9c-9995-4ca431fe9bbb", "sighting--463d8302-c650-4bb4-a444-8dfb0b03fcb4", "sighting--f98a8bc3-5aee-44ae-a10e-7d5433c522cc", "sighting--2bb5b432-9a13-42fe-a3c8-b02533fd2549", "sighting--ac594c8f-5558-47f1-af00-ae7353c17aa3", "sighting--63e57713-7626-4203-ab50-666268639d5f", "sighting--088cd504-1c03-49fd-ac15-18d2c55d17b8", "sighting--c12e840c-d406-459c-9399-8880a788f8fa", "sighting--aff57766-a671-49fc-86c9-1ab6b449b6a0", "sighting--0c13375f-31c5-4a95-8983-0739dad6dad1", "sighting--4c70977e-9ba1-48a1-a7ea-66183bccda4c", "sighting--1db76bfb-3c40-4c1b-87a9-c30273c006b5", "sighting--d319377f-365d-4c48-8331-944fd28a0ca1", "sighting--cf3ba139-3702-49a4-9372-e29f08ae2012", "sighting--96c7c408-2b87-4936-84b1-4f181412306e", "sighting--9fdb44d0-32b9-4bb3-aa5c-54b8fe3242b9", "sighting--5770e649-2ec2-455f-81cc-eb2c424b4a0a", "sighting--f9f0a2a6-7fe6-408e-9bd7-a904541b5be9", "sighting--8a449098-253a-443d-b9a3-3287072c255e", "sighting--b03bcf5f-d644-42ea-84ce-613186e4aed3", "sighting--07f56fbc-5e89-4240-b8ea-36565300e7b8", "sighting--0d83290d-1139-4112-80cd-0ea9bb2b1b89", "sighting--c3bb6b85-7b16-4e86-97d9-b7905bbf8924", "sighting--215cda23-1896-4613-a9f7-c56b01a65aca", "sighting--8dce581c-1450-42fb-911e-daa13c35c9bd", "sighting--1ca175ae-b8e1-4ef4-871b-0b7b3a790ebc", "sighting--0ffed0f2-12f7-4a99-93af-0816b2db7649", "sighting--24c38baa-30a5-4b45-9624-7e2a6b67f868", "sighting--4d20b8a5-ab93-4730-9168-eb928e4408b4", "sighting--84e40af2-334d-460f-aa0a-22ce03b1729f", "sighting--d437d581-f599-44de-a9ff-be7c414dd88e", "sighting--aad09ed4-1639-4e18-8be3-a82bd4535250", "sighting--5173131c-38c8-44b4-9807-ca745486241d", "sighting--d4702385-b6e4-4f14-aeb0-6b6ecb3ffd5e", "sighting--513a64ad-3a6f-46bd-8ef0-1f4fc6ee68ad", "sighting--ef467bca-19ce-487e-81c9-ba7eb7190d08", "sighting--be16fffb-3290-499b-85a0-a0eabbc277f8", "sighting--561374f8-ab92-4a4c-83e9-ad3b63d71dbd", "sighting--21ce70a8-5077-4a6f-9a39-6e216a46f0ef", "sighting--0ed943c2-ebf7-4c75-990a-058163aeede3", "sighting--f074cf5b-1049-4a3e-993d-fc5bf6657933", "sighting--25fbe066-7e41-4399-8d4d-0e030c419ac6", "sighting--f4a2612d-9c75-469c-ab42-1ef99a766617", "sighting--bbdd61a3-3409-49f2-a4e1-c79fe577c053", "sighting--40d4548c-bece-428b-b161-2b76e0841a1f", "sighting--db0b24d0-096f-469d-b4ea-1dfcb67f7ab8", "sighting--a1733327-687b-4d5b-8e87-39041cf46621", "sighting--c5629fbb-62b5-4f04-b51a-875c81a90088", "sighting--c57c8775-06ca-4bdf-b106-c9b391ef921f", "sighting--248ca410-74c6-46eb-8523-48ff437ce924", "sighting--deae5913-e820-492c-aac9-a28e40397e09", "sighting--d562076c-2351-4a75-a76e-26cef1e93fa1", "sighting--bfed45b7-0151-4851-a7b2-1a733de32482", "sighting--31ef8025-9b65-452b-8b0c-4b20253c1d6e", "sighting--1f07e8a3-cae4-429c-9d05-08b8f86ac738", "sighting--610cb8ff-0d6f-4e82-9d54-ec574c9f8cc4", "sighting--28b96675-6ea4-448e-81e4-62a5c3cfc963", "sighting--b00e4073-3d3f-4348-a623-a011364cd2fc", "sighting--1f06dbf3-d0df-49d8-ab12-526ef440b8a6", "sighting--e8256832-a33b-4b72-a57b-ffa30fcfdf66", "sighting--af8b2a06-20fd-4e6d-b53b-c81e7cc2480f", "sighting--c891f5c9-34c5-4738-a38e-4b3c0e5e91ff", "sighting--909796ab-ff29-4228-ba81-52907a02208e", "sighting--3be1035c-51b5-4f20-8375-8b0dd7a4d92b", "sighting--4089bb34-2c5d-494e-8693-7ce06fc2745e", "sighting--ac10eb0c-4d3f-450a-8095-dfd529896f40", "sighting--194ea2c6-c0f9-4b1f-9de6-1bb977b2ac8f", "sighting--e5c3d519-22b3-4ab0-83db-d8825b1fe6bd", "sighting--d2df5bb3-7d6c-464b-928c-449f11d51669", "sighting--fc770b5d-d91b-485b-b437-572c0f1d249f", "sighting--e13e4c4d-d2c0-42f7-80e0-3b1346c3f1ff", "sighting--febce156-3a81-48ef-aaaa-a2cb0971365c", "sighting--9d10ae54-3ff7-48a0-9100-ed285c7a0e93", "sighting--7444ac96-8915-46b5-9a75-1568ce7f2b07", "sighting--cdbd9921-1f13-4cbc-bc94-6a0f9abc7e86", "sighting--6d729ae7-8f11-4655-8640-fee380836216", "sighting--44ad8a15-67ec-4181-958f-f138767a2718", "sighting--8214f211-a614-412a-a467-a36e6b1b955d", "sighting--39327629-91e2-436f-8cb8-92a84b8ab044", "sighting--6b8cdf22-6044-425c-9439-27a1c2a45317", "sighting--a54105cd-7560-44d6-b9b7-5f6cf52d9c32", "sighting--c755a6f2-8b90-48e2-899b-9c4025657bdd", "sighting--6167ea19-a887-43e3-8dad-07faa23aff9e", "sighting--f0effb4c-1adf-40ae-a624-73b762cd9c17", "sighting--2e04a3f0-be86-4e7d-a4b2-d79fd332dbf4", "sighting--4b51f4eb-1e9a-417d-a198-85c271f54986", "sighting--c76d58c2-f61b-4763-a8e8-c5f9293d830a", "sighting--a7e1b1b3-d359-4e69-b7d4-2a2e6ef0f85f", "sighting--d4f9dae1-eab0-4d5b-87ca-c531aac9cc2a", "sighting--6a6e7839-e7aa-48da-bb9d-df442ce7f92b", "sighting--7744a28a-450b-44fa-8042-0b6a8423f13f", "sighting--0b16e1fa-564a-435a-aa0e-7c74394731fb", "sighting--2a80083d-56c7-4420-adb3-9aa1c7a6aaa7", "sighting--ddd651eb-9bf2-45e4-9647-77f6cd19772b", "sighting--d9b62690-8e1f-4905-a6a7-f997a26fdf28", "sighting--ec019c53-71b4-444c-b92d-ddb84458c407", "sighting--2e690f19-c49a-4a2c-82d1-c4af3cbaf56e", "sighting--5aa769e8-a923-47b4-bfb1-413f1efb1991", "sighting--5c4b8b12-293a-46e2-b51e-1072eb75d1b9", "sighting--88db7d84-4da1-4471-a417-349ebfef057b", "sighting--fc7fce21-a65d-4f3a-955f-6ac858f595a6", "sighting--6c5c092e-5faf-408a-9f64-b6d045e64cc5", "sighting--f511a074-ddd2-48b2-95e1-9f62b7a23f0b", "sighting--80d693d0-37c7-4358-aada-e5473a1f7bab", "sighting--c570aca9-13a8-4f6b-9f55-84b020f0b369", "sighting--807f0f5b-904d-4030-ab41-2016f15e269b", "sighting--03237847-be38-497f-a9dc-b0c690b89656", "sighting--12554d22-ff86-4137-a4fc-b79c930e3216", "sighting--6af96d28-ba1d-4c43-90b9-c6a2639731f0", "sighting--3a93c0c4-e86f-4b5a-902c-7ed088a59f83", "sighting--09c087a5-dcb6-4e2e-a43b-517796c5e24a", "sighting--e4f41e76-4e0b-4f9a-9944-04ed72d6cf8d", "sighting--f2aa2c36-2650-478b-aae5-12bb06fca52a", "sighting--92c977a8-e1e5-4693-ac35-babe7fd05a4a", "sighting--f434d113-f72b-4fb3-9ff0-a1e21bfd4110", "sighting--ac5a9df4-5dfd-406f-bca9-e5f39ce1022a", "sighting--009675ea-acce-4e5d-a635-ea3bb07665d5", "sighting--47ce8301-30d4-4cf2-a43b-d89c7eaa9c68", "sighting--137ddb92-371b-4022-9ef7-976c2f492c55", "sighting--f0cbe409-2c30-4f91-889d-9cd278676cee", "sighting--85b5e7d1-9ac0-45fc-9619-c712606c971b", "sighting--aa89defe-8793-42ae-830f-a8d8ce612bd2", "sighting--7e256aa6-a018-4fb2-b156-ed62be0530ed", "sighting--1cc97f71-e8e4-441b-8514-57ecfdde4672", "sighting--bcac12f7-55d8-42e7-b260-e6dedfa9ad73", "sighting--12e41b6a-98df-4866-83b3-c318f45f6d63", "sighting--bbd07dd2-15f1-4189-84df-74fdb64f19f4", "sighting--61ca938a-7bca-49d6-9cc4-a32a7d224c62", "sighting--b9e221ab-c966-405d-b563-16a02e3b238c", "sighting--7a481160-89f5-4adf-bf37-98cc7b88ec24", "sighting--68fd4de4-18e6-468c-9081-9bc3087394e3", "sighting--903865d4-418d-4afe-b2ad-da8a50b25521", "sighting--ae34386d-6c3f-4106-bf64-88559c251786", "sighting--8f6c1692-7a30-4be9-a5d9-fefc4b64e7d9", "sighting--09bf5623-0ce2-4372-b99f-578bbcbd9f97", "sighting--73631fbe-4ffe-4d04-8b7a-f8ccd7ed340c", "sighting--bd7ccc49-c2ee-4750-9014-97135b3799c1", "sighting--273e95a8-5b5a-44c5-9f10-330b7991076e", "sighting--a957195a-58e9-47fd-a8d2-b0507caa3354", "sighting--0b2c47d3-4b1e-4bf4-a6ef-a4aa0d7f3fc9", "sighting--952a60ed-deeb-4ad4-9930-4f44de3da6a7", "sighting--6356f6b2-8f82-4c2d-8e97-b3ac53a2a66f", "sighting--571fd91e-97a9-49e9-9831-996a800c663a", "sighting--60ae5b94-2035-452b-b9f7-da0c2f284c55", "sighting--eee261cb-22cc-4e85-a4d9-bd2623118cdf", "sighting--efa3dc32-2979-41bb-adc8-1b45c7dab121", "sighting--43cb058e-8198-4e57-8a7a-68122ddacdbf", "sighting--115a9d82-472f-4da1-8920-ed519ad56b73", "sighting--939ee26a-19e2-433c-a311-055f4b290002", "sighting--6f404d7a-b45e-4f1b-9c14-48786949bd1f", "sighting--d47f486f-d5cc-4a8e-8679-0c8568b7b4d7", "sighting--6b1472b7-3576-4bcf-bbf8-e74e735bb789", "sighting--24db2fb2-e799-4c30-9a68-5428d59afb26", "sighting--dd98f22d-2d45-48d7-850c-85a29384fbac", "sighting--ea361d58-973c-4fa6-87f6-cc18522246d4", "sighting--7eabf63c-8eae-41b1-a91e-fd4df43b9d14", "sighting--eceedb08-7a58-4206-8cf8-d9f1ae3efa2f", "sighting--6bc2832e-e96c-4249-8b7b-327ddf27aace", "sighting--66c36c9c-3ddc-4e12-9b7f-e4247b0e47e8", "sighting--a5c98b02-0b47-4baf-b157-a46dc82c7c59", "sighting--24c24756-0893-4143-8a5a-1c9c7bf92648", "sighting--f9e5a24c-529d-4efe-8f39-2a6f08f65507", "sighting--dbfab32c-821a-49c7-948d-94ca1df9eaf3", "sighting--ad99a061-b2eb-45a0-ab4f-3f3df14bdae6", "sighting--b96df80c-c5f9-4315-9afa-ac9c1b747e52", "sighting--863b0125-83b4-4002-a287-ad97a85ebfe7", "sighting--09a2fda6-f137-4d64-8c89-808cabe3de65", "sighting--a75d81f0-2117-4a46-b73a-57a68f5309b1", "sighting--8c903b2b-cf24-44f4-b9f9-24d748590680", "sighting--776d278c-aa88-478d-a28a-6256d0ad9f4e", "sighting--36b52409-329b-47f5-8b5b-5ce938e76d04", "sighting--ce08f72b-deb6-4ee5-86b8-5bc26cbcf27d", "sighting--984a372e-c586-428e-a886-eaf79a0c72e5", "sighting--a113435b-9eaf-4b9c-b7f7-65c642fcb9e3", "sighting--4a02d7fe-0cf6-4a21-9bc3-d292b6ee6c0f", "sighting--f31cedbb-a1e8-4ec3-9e45-339d4df121db", "sighting--ec7ff356-d22d-4c2c-adcf-0230fd921fad", "sighting--dcb97ac5-2fb1-4022-ac6e-946febdeb4b3", "sighting--55201081-1f66-47df-91f3-e7474d54026b", "sighting--753f69ff-c7ec-42d5-896a-b70084236331", "sighting--4199d0cc-4b2f-406d-b6b8-7c2595667a10", "sighting--a2d1da9f-11b6-4c6d-b62a-33f3fd72a27f", "sighting--a5e2fb17-f61c-41c6-abf2-07d488d79c1a", "sighting--e8301ab2-ff91-4393-a5ac-781ab50da9f1", "sighting--a8bcb677-7e90-4a81-916a-4a3133626e63", "sighting--f28d3f27-c3b4-4c67-8ed5-f2adeaaa3e29", "sighting--7f8d47c7-9f50-4f12-ad06-3f5e3ece5e3c", "sighting--04e33b3a-6373-4609-81ef-fba01415fad1", "sighting--07691fb4-8249-4a46-99ab-16616483fb89", "sighting--db1d93ba-7468-4284-871c-ac49fcf9c7d1", "sighting--6430d089-6f95-4486-ac02-a1acf302e2df", "sighting--92d1778d-6681-4423-b4ac-0716081adc6c", "sighting--076420e4-531b-4e9a-8700-e508eeed09f7", "sighting--560e9bcc-a8e3-4985-93c7-4fbc6c8ef608", "sighting--bd4657ec-8414-4869-9c39-20bf941b1dc0", "sighting--d355908e-bc50-4522-8af4-6c7334eceb6d", "sighting--9d0fe89d-ba7c-45b5-960f-8f0cc83c0128", "sighting--3b627bfd-96ff-4f70-bfef-4ef743b80ec5", "sighting--278c1157-2729-45ef-bf48-59bf6269f21d", "sighting--a9e3c70b-bb51-4274-9ef4-5856186e947e", "sighting--d532557f-fe9c-4649-b826-b3a946303ee7", "sighting--bbcb6fca-52c4-40f7-88a4-3384afc9a926", "sighting--46fc7882-445f-4ff5-8453-1b42557617ab", "sighting--d0f7d042-cbd4-4e4e-a9dc-23e7817ddabe", "sighting--411c30fe-f1e5-48d7-82b1-b368befc99c5", "sighting--1c5e52ee-bfb8-4dd0-9f84-f948ea44c7c3", "sighting--0bc3fb6d-b10c-4495-bd65-d276afbdf29a", "sighting--9aebef56-9faa-425a-8fc9-a3af1a0e79c6", "sighting--15b25cf3-7aef-4229-9bcc-7d30afe0af8f", "sighting--ae53c74d-2798-4ecf-8814-1185e7cb3cda", "sighting--b49099d3-fb9c-4577-a448-b77247bae4a2", "sighting--dfc54403-1db6-4705-8f51-825754b87dd6", "sighting--f46ae65d-ed31-4e1e-af02-e956c1c4cd5e", "sighting--7457ea58-b7bf-4d77-9cbb-5d28b62c0aff", "sighting--1c35859c-9c1e-4ad6-ace2-f57fa696b915", "sighting--3e237e4a-edd8-4307-9632-503203a1d0bb", "sighting--d15c1217-bf9e-47ff-a3a1-f3dbe42a4ee3", "sighting--cba0ef25-8eb0-44b2-b831-b39d05487f95", "sighting--134394b8-33ad-4408-a487-65e097eac36f", "sighting--ca5f43e3-1f0c-4330-9339-7622691f0931", "sighting--4c8e2cc0-3073-48cb-8cce-a5bed70d6d5b", "sighting--551e0e09-f68b-4bd8-b94a-1eec8e3f7f16", "sighting--a1bf1288-4db5-4a04-a49b-95050ade86bd", "sighting--d67fbc59-f151-4723-aa95-2814abd3b05f", "sighting--fa882a87-3a0a-4d67-813b-51dcc441cc52", "sighting--b871e853-0588-408c-9918-b29503857d07", "sighting--2e659fe2-3dc7-4fcc-a4e5-57da19ac9117", "sighting--5bcac103-0ad3-4909-9790-1d4948996f25", "sighting--bdf807b5-968f-4ef6-8766-7b6d569a4579", "sighting--a6698e67-57f8-4c28-8093-f0740be22868", "sighting--132fb72b-84e7-4bec-bb9d-0581d2d8f769", "sighting--5b5f91b5-1d8c-41f8-ad33-8a9dbaae1b10", "sighting--87a18330-0bc5-4e1b-8f56-7bd0fd22f3dd", "sighting--85075a01-cf66-4721-88bb-2918f0ec1270", "sighting--9ba8a190-0715-4ece-9902-e0a80a3b3a81", "sighting--15485a31-bb98-4dfb-bef6-1e4b3e843736", "sighting--c50005d4-8e0e-4c7e-9b67-44479e0a6b83", "sighting--b264cace-8ad0-4e17-b8e2-5eb53894509a", "sighting--3adb4a29-065a-4da7-8621-08a57f946f75", "sighting--c0027853-86c4-4d78-af45-651a614ecfec", "sighting--5029176b-4de1-4190-bfa1-b7fdf4bfe72e", "sighting--5994f9e5-ff48-4ad9-8b87-0e816ea128db", "sighting--802c0d42-5bb8-4047-912c-8806d9cf2663", "sighting--2cae5b7d-bafa-437d-a2a6-0c8e26789a5c", "sighting--5e1ad9c4-9be2-400d-be41-f77d76528215", "sighting--62164b04-3597-482c-952c-cd4e915a42b8", "sighting--20aa2e09-c206-4173-a7d8-46ecff899509", "sighting--473538a1-2b92-4505-ae5a-4656f05dc74f", "sighting--fc847717-8528-4b88-b374-ddb18e1936cf", "sighting--62ce6c59-aa3b-4e5c-92eb-9af0bb2649ce", "sighting--4bcedb94-6ed6-4cd2-b805-30b1924f18bb", "sighting--0d7edf0e-556c-4a97-a98b-2e8de855a3a0", "sighting--b616a0ba-1ae9-4c69-ab95-690643c152ee", "sighting--1b8c813a-bd8a-4d6c-9b5c-b369ba007c14", "sighting--41698664-620e-43f6-9416-dc5ae2d03682", "sighting--29e38335-99a7-4fc9-8787-5446e258ae75", "sighting--fb46acf9-e8f5-4e11-b25f-8aa5aec731e9", "sighting--deae727e-2a7d-47a8-b775-e99f7811f554", "sighting--9e09b308-c343-416f-83da-0e5d151f0063", "sighting--709e091e-4d01-422a-9e5f-71fd65a8d42b", "sighting--6d81ecd5-afb5-4bd6-b8a6-e8452a4de137", "sighting--65f606b9-0604-43dc-ae36-c66cfede5c7f", "sighting--1ab3162b-93e2-432e-9df6-3acdc2f18795", "sighting--ab091feb-92f1-4387-ab80-6c056114291c", "sighting--bf90e628-4a88-43f0-a886-cd402051d928", "sighting--ccea3c72-e27b-4afb-9961-df53d70291db", "sighting--793505b5-2a34-40af-8896-1ed2b8efce4a", "sighting--0a309565-5923-4a04-b489-fbd2255dfc6a", "sighting--6eced9af-03e7-4151-a95e-483348129504", "sighting--36c58a94-5e5e-472f-aeab-18903d55c8cf", "sighting--04eeee7e-1453-498c-98ad-bf4cde74255d", "sighting--6f8881e9-c280-4a2c-8e6b-2102e8f0465e", "sighting--30d5ead1-affd-46bb-a531-dcc9beaccf63", "sighting--4ecce16f-81b2-4990-a544-2d028e8dea05", "sighting--1a74ddde-8c31-4b16-97af-f5b617959e0a", "sighting--556a1462-1509-42c8-abc8-d3b441934a4d", "sighting--95b3f179-239a-4425-a69a-4dbd45e4c1b7", "sighting--14df1e07-668e-44a7-980b-9aedbf948be7", "sighting--b9a326d8-62a4-46ea-bd77-0b4b41937ff8", "sighting--9588d761-e5b7-48a9-8c81-63f583118afb", "sighting--620838b0-f76e-4969-b479-a170591ff4c6", "sighting--cae41a79-53d4-4cee-aa9c-b5dc19882ce1", "sighting--42cca17b-176a-4f22-85d2-036f1ce1d855", "sighting--0d89241e-35d1-4cf2-b823-02c7a37d9912", "sighting--7ca7ac36-5230-4166-a6c5-56b79abb9587", "sighting--185330b9-0e94-4187-b383-d4b7154ff388", "sighting--0209d550-0442-461f-a88a-ab9be4aeee37", "sighting--a7a5137e-0a93-4663-b78f-e470846147a7", "sighting--17e81598-2c75-43e3-8f9e-562db43da352", "sighting--bbbc0d30-028e-4e48-ae53-e517e111191f", "sighting--c80d6148-accf-4a45-bfa3-8d72bcb60448", "sighting--56069c0c-647f-446e-a657-08986f347f9e", "sighting--631cf61d-cc40-42eb-9478-5eca7c296398", "sighting--8ad7d56c-febd-475a-8b53-f6e37bbadbbd", "sighting--6a91aa31-64dc-4969-a77e-c5c1b4302614", "sighting--372ce5a4-7625-4cca-b7a5-3e304686b40b", "sighting--4c71b1ef-f285-4ab1-a238-fb33bcb15cf1", "sighting--e7bbcff1-faa7-4739-a5d4-a80c1bcf88e8", "sighting--7ff2bae1-e046-4ae3-80c7-e940c81689da", "sighting--d987a6c9-1ae5-4a19-b1cc-c16fef2bb5c0", "sighting--ba21e24a-f3dd-4a69-8887-af88ae8be873", "sighting--11f659a9-99ac-4f49-a3a7-6e3a625123eb", "sighting--a15cd13a-64fe-4329-b43c-cfd2307c2a9b", "sighting--18ad1d15-04d3-45f0-a562-6c0d3eb0bf77", "sighting--fbecff75-aefb-4757-bf0f-e5db47e122fc", "sighting--afc66260-0c81-47b4-b741-a75fac667eb4", "sighting--1df6b527-4088-4d53-b747-d5cb99922947", "sighting--4f9379ba-77be-4d8f-b32d-d3081efd2aa0", "sighting--2d18da6d-aa31-45d6-bea6-ac864a05aac4", "sighting--a75b7ba5-474e-4ab6-884e-99f388b57fa1", "sighting--237e2a76-cd69-45df-a42b-c049009dcb09", "sighting--431d0851-9502-47c2-b775-795e69f6edbc", "sighting--20962efe-d9c1-4641-9ed0-fec18aee38f1", "sighting--4fd1749a-0599-4f2a-8ebc-7198db901c70", "sighting--e29d9d92-4e18-4148-bc6f-be62c10df9a3", "sighting--fc6c5ad4-8331-46fd-a6a9-aa3913622575", "sighting--5121ea6f-d853-4733-a1d5-0c86e4a5c4f9", "sighting--1f902337-1614-4f34-ba9a-430671282d61", "sighting--cd4d0aad-9e4f-458e-b4e1-f700737665eb", "sighting--1f533c17-999a-4344-9045-78d9d61ed823", "sighting--87d4cea0-7d97-478b-afa3-96eeb52891f2", "sighting--d64de5af-c136-42f0-9fe4-d812061287d4", "sighting--02500c60-a9b2-4cb9-a0cc-acdf0f62e951", "sighting--fe8b3b43-c109-4c11-9d91-e22a751cff19", "sighting--41eba484-64da-422e-b1ae-fd749a0d2dd6", "sighting--e6e7e439-f345-476e-94b7-b7d6f167cb0c", "sighting--c5e155e2-081d-4c76-82ee-28f38efc47b4", "sighting--322d0976-758a-48e4-8c1e-9e9b4c2fc0aa", "sighting--c1b3ab1c-cceb-4af3-892f-88e447faa1ce", "sighting--7e85de12-bac6-4db8-8a76-eea518e547bf", "sighting--5ed5d7b4-60f6-4cda-a494-00135acbdb74", "sighting--afe1fab6-442e-4386-ab30-ffc6dd1ca56b", "sighting--d22d1608-d70b-40d4-a977-2c77fffd5358", "sighting--af7c1d41-531b-4bf6-82ce-8569d0437d52", "sighting--c479645c-2bd5-4a26-bbf8-740f2e10fc79", "sighting--64bd3ff8-ab00-4a89-a2c7-74fe8b095021", "sighting--314b3d81-d4ca-4bec-ae68-cd69d6450e4a", "sighting--136078a3-8b76-4962-8afc-65cda623d7e9", "sighting--6ed3d1a0-e38e-43d3-a903-09cabd80ee32", "sighting--7874e9eb-76b4-48ce-8953-b51d52b62c9f", "sighting--cb23a6b9-0103-4fe5-ac30-7cb11f9d954c", "sighting--19d74af0-4063-467a-a78a-2fd051bbcf67", "sighting--58bd4e17-6f16-46f0-b22c-b3fbb45d8479", "sighting--df0b2772-1535-418e-81ca-14d3c770b824", "sighting--63f96bb0-3b37-450b-83ee-dfe2b6da0484", "sighting--963dc926-8416-4f1f-a621-8447a665255a", "sighting--052450ce-c05c-4b54-b4ce-359ab86453a9", "sighting--8aadc736-91ad-44e2-ab59-43f066c8c372", "sighting--b760348d-ce09-40db-9ba1-d7c287cc4146", "sighting--fc45db19-156d-468a-b58f-e09d56fdf4ed", "sighting--bc03d1c5-ce37-4f7c-a94f-a995e517fa06", "sighting--28a39242-2d46-40b5-9552-0ae1ec3ebe7b", "sighting--946c969a-b8a1-4c7b-a05b-4642d385523e", "sighting--bc0126fd-d272-491b-982e-f7b7ec5f1832", "sighting--7da30e5f-a529-422c-87c0-ba638e34a261", "sighting--a1513936-8e7f-4091-be32-663b6fab7494", "sighting--5a345103-8af4-4b2e-8070-ae4b1b7c1ac5", "sighting--95aea82e-ef15-4aa9-9a55-5e6142991399", "sighting--e5e4593f-3a4b-4175-9cb6-47b567ee16d2", "sighting--26e8c4b3-bed4-4bf6-ae19-90c289c8b790", "sighting--b95f5b0f-44a3-4248-b310-a8964f5e9ec0", "sighting--f4c3743e-491e-4f6f-80ed-ef93e7969e74", "sighting--5ffb4d92-da26-4e77-b069-213283a326d5", "sighting--097d0466-9d68-4f9a-a722-abfdc54ce994", "sighting--7cdd23fa-52e8-4663-9170-4c1e7e2e4a9c", "sighting--a6958303-5713-4eae-a8a7-113f0ea6b93c", "sighting--9402bf04-3ed7-479c-b62c-c54b321c03f9", "sighting--f970a4c9-8d0d-414e-aa45-dc7ba16d3350", "sighting--ccc9d596-df5f-4593-b6ce-95799c239a06", "sighting--7ed32e55-617f-48bd-b2ab-d03eab18b6af", "sighting--4af223a3-62ba-49d5-91fa-06c052538618", "sighting--3baded9b-7a4f-4ddc-ba4f-caddee69a5ac", "sighting--286baca0-206c-4ec0-83b1-af77b0599351", "sighting--af12b787-f839-4394-a308-f2c92302d102", "sighting--2933f12b-6d69-43b7-9157-5148504995f7", "sighting--6c7c9934-7047-4cf0-a715-93b7ea37f4b4", "sighting--ac12c669-87d7-44a6-a84c-5b14a22f520e", "sighting--fa02ac85-c1ca-47c8-8ff7-53f88d40623a", "sighting--a810a664-5770-4597-a6aa-0cbbe1721f00", "sighting--fe35fabe-c8c0-4c17-8597-1d0faf90f05f", "sighting--984c992a-2bc6-4ccb-b6ba-145a1253f08a", "sighting--d3e37b9e-1336-482f-88ad-13005f99e77c", "sighting--ec1303cd-b1a5-4371-93c1-5d41971042b6", "sighting--1a406ab6-ba2b-4f04-bc9f-17224c9ba713", "sighting--9031f07f-5575-4b8e-89ee-cbbe6b450a11", "sighting--f53beb68-3419-4ab1-96ea-0520f6e0ee2e", "sighting--7a744733-259e-4fb5-a5ea-85328124d782", "sighting--b98c9a58-b95e-4bb8-9d12-e7b71802fe56", "sighting--a0ec3d8d-a3de-45fc-88d0-cb15a8837765", "sighting--4071a650-169b-4baa-a5da-05d9b19aa2e3", "sighting--64617611-6fbe-46e5-8a1e-fc83420610dd", "sighting--b1565ae3-fe4f-4ff5-a79c-c01c487b931a", "sighting--5a0b014e-9c9e-4334-8269-20ce48e1752d", "sighting--f23514d1-ea88-42fa-abd6-e34f4ec73bf8", "sighting--46355daf-78e4-4136-97e6-6f3533b3a191", "sighting--ed4bccfd-3ad3-4483-8420-2a89a1b5cfbd", "sighting--d15a6726-fa3d-47ee-aa1b-92977b93daf7", "sighting--2f0330fa-b22d-4697-b865-c05af20fdbb2", "sighting--ffb03db4-44ee-4d94-82c1-cb6d2640d8ed", "sighting--b85f6ddb-0a40-4e79-86aa-6f7661bf8139", "sighting--594b44c7-84fa-4ae6-8dad-b64b94e78502", "sighting--293fa478-f0ff-4636-a0d8-f3b453bbcac4", "sighting--3eecd593-1763-4b93-b861-450403a5cbfd", "sighting--e7f62873-ce07-4b7b-b237-a8c15dd58084", "sighting--764b2498-fba9-41ff-b84e-54f9f9d83077", "sighting--a4954d23-1333-4170-96ec-47fb3a6080a8", "sighting--a23466a2-4297-46d7-8f87-f0bf7e62dbbe", "sighting--5e3a05cf-ba72-4a79-8a1d-dd58af2785ef", "sighting--0f6189cf-7f84-4ce7-ae1c-6d95afb7d177", "sighting--03f0ef75-3469-4440-a3c1-2b6656dc98a5", "sighting--56e1537c-cab1-4aa7-8d90-19beabc4389f", "sighting--09d871a6-fee6-48b5-801b-f6d5d6c07fb0", "sighting--5f2c9a89-469f-4e3f-98d8-9dcb947df7c4", "sighting--8361d3a1-4834-4ab8-a3f5-d315aa48f0b9", "sighting--d18ea053-d611-43e8-ba5f-a09d4a90aa67", "sighting--02be3a37-d042-4443-a3e1-8128a49e0ad8", "sighting--ee5bb07c-2e7c-4cc2-8b7f-4d568399b4ba", "sighting--91986561-3d87-4a58-be51-3a669042480d", "sighting--2346ea6b-e14b-45d4-8941-dff6643ddf85", "sighting--f962ce9c-ae1c-4ac0-bdf5-379fd3e58278", "sighting--53dde236-610e-4966-a564-e38298c6475f", "sighting--23f51ed0-c2ee-41ad-ae00-3992f86b1149", "sighting--6e0cf03c-8952-4c46-8137-c956e5528eed", "sighting--2dc162fa-b030-477f-8ab4-e81373bb4dd1", "sighting--f080864b-afaa-4c64-b7c5-0ec8de85f1a5", "sighting--08f337a1-8460-4230-b87e-cd96c368d202", "sighting--9bda0089-678f-4705-b48b-a0a202fd392f", "sighting--a708973b-0e82-4b5d-9b7e-5f84dffcf4be", "sighting--e935cf09-6fd9-4717-aafa-28fdb96fbcf3", "sighting--eec3dbf4-eeab-4a79-a01b-5b7420513b8e", "sighting--777a0b77-8870-435d-9a11-fd2ecd15a06a", "sighting--e876a7f6-9532-4576-87cf-d621fffd05c4", "sighting--3c68cbc9-52e0-46f7-b593-30a5ef0337f9", "sighting--57d98b9e-71d5-41f3-a91e-f6d13984f4b5", "sighting--251665f2-ee15-4f22-8f6b-fbd8f4d22124", "sighting--f6ea0582-3d3c-4746-817f-a24a1c942508", "sighting--15323be9-e21c-496e-9c21-5e155b85ec66", "sighting--65dfbe49-1567-4cf2-94db-92caf6a9dbbf", "sighting--063ddbac-7f81-47fc-84ac-39ec6c3f503c", "sighting--56178b89-6684-4f5d-975e-d0ea9c0f9637", "sighting--826e82f9-06ca-471d-b79b-95859dc41958", "sighting--cb19266b-f40c-46e3-951d-411d5d611a5b", "sighting--c3497765-b585-4240-be6d-3b59d41c4658", "sighting--2415338f-a717-42c6-a5da-4781916b3c32", "sighting--9634aa8a-90f4-4e55-922a-97438bb9f680", "sighting--316e6479-91eb-4a38-bb30-26f3cf6b95b3", "sighting--dac15b6f-11b0-435d-abb3-7a3e8f54c678", "sighting--b2704d09-74d4-457b-868c-6be9cb1f3c96", "sighting--a9dea124-1b89-4937-b2dc-9b0e317bd69d", "sighting--f4330b4d-e59b-4323-8bd1-da016bddd246", "sighting--51ca07a1-a528-4237-a691-0978f3f3cc2c", "sighting--af0a7074-d4ab-4cb8-8d11-cd53e872edc2", "sighting--0a00710a-75b2-46bb-8b87-82f7ff6a63c9", "sighting--8d3598ff-5c9e-4311-8244-c3dabad088a6", "sighting--bbf3fac6-07e5-424e-a7cf-6d33f0c3a24b", "sighting--912abb3c-e836-49df-85f5-243afbcfcdf1", "sighting--2df08d71-bac9-4b49-b6ff-e1b1a66d6909", "sighting--aeaec742-ab4a-47d9-bc38-e286f1f98163", "sighting--4f6501f7-c8e3-4916-ae76-81d431e1d67c", "sighting--eb231554-f503-4359-9a33-de9b13c44866", "sighting--8b819e9c-d667-4d85-8c65-a2eda66c821c", "sighting--e0f6b260-76f4-4e10-8197-03de4912be07", "sighting--1ea968fa-ddb4-452b-9f84-fab38c6fa824", "sighting--ab6b3ab8-aaeb-442f-b467-e752a0916e37", "sighting--70de188f-c318-4ca1-82dd-ec1846e2884f", "sighting--7ba17c93-d9a8-4b8d-b4d2-c44f2f2c4062", "sighting--5bb7d890-9729-47c0-ba70-926d1bcad77e", "sighting--dfda82d6-56e1-4aee-93d3-3b33fc3a6eeb", "sighting--f0ea0aff-937b-4a01-a2cb-36b9019007e6", "sighting--9e49afd8-0865-4dff-9ae2-41a0ca077682", "sighting--0646c9ef-975d-434a-9c0a-a6ab657056d1", "sighting--76b08b4d-b830-4830-a100-a3b14746778a", "sighting--c0183b21-ed5e-4050-bd60-b7a26c30fa21", "sighting--fcd9f622-fa51-4f32-9b1d-a33f83d4d1be", "sighting--f111d7ab-7984-4d88-a110-e864261538d1", "sighting--ff120a92-fce5-414f-937c-2204f658de66", "sighting--62717eb2-23cc-4498-b778-3ce07a7e645a", "sighting--7fe9f181-b670-455a-8bdf-07fb1b33847a", "sighting--31f802e9-6a64-40d9-81bf-b89ec0731126", "sighting--bc33d2e2-0a5e-48c4-a91b-6b393935d447", "sighting--31a5908c-6012-49ab-b500-140c2285cbf2", "sighting--de5bdb89-035d-4a98-8337-97d25e0cc7f4", "sighting--8fd595b8-4fff-42e9-838e-e6fc9a7f75e9", "sighting--914cfe24-186f-4d34-a8b7-3d5ec7a1d3bf", "sighting--a49c2747-8457-4c63-829b-3aff50c8a5ab", "sighting--6349e27e-bb00-4785-b2f7-1e9ac275c199", "sighting--10860e9a-b720-4aa9-828f-699f28f0417e", "sighting--cb7a4830-a82b-436e-b704-f89629ab9a0c", "sighting--444f98c0-6604-4d3c-8b89-9443d063610a", "sighting--198b5eeb-38fe-4e32-9876-e070c24f103d", "sighting--d90e220f-cdcb-4bca-811f-3329ff49d090", "sighting--e82145e8-dc2b-4659-b81c-4be438fd429e", "sighting--488309aa-5954-4c1b-8e31-09a4247f8328", "sighting--731e211e-b5a4-4e59-84d7-e76cc8338969", "sighting--7575f313-53f0-4db4-90ec-45726531ea1d", "sighting--2e8011a1-7237-4834-9d1a-7ffb5f933996", "sighting--7138a74d-8830-4dcf-ad98-cf54f8655c12", "sighting--fafab066-c6fa-4bcf-8e2d-2862872a2d1c", "sighting--6bf10c58-2ab4-41be-8741-92f203909061", "sighting--2b61d065-fcf4-4a06-9b4e-04bb6464c3ca", "sighting--2c109d48-7f56-468a-ac0c-94d2ef41be1c", "sighting--f23a5592-e260-4447-b4fc-46ddb43c7356", "sighting--bbfa4bb6-fdc8-496a-a4ff-00b77f9c954e", "sighting--111beb9e-ee64-465e-a311-be2d0ab9bfc9", "sighting--e53708bc-b86e-43c4-9e73-bddd10e3cb71", "sighting--685ef321-3420-479b-bfa3-ae07a3211d15", "sighting--abb92e85-6fac-44ca-a100-b97e15ef42e3", "sighting--57ab27b8-d094-4912-b55c-9703314567a6", "sighting--a711a989-f37a-42a0-81d1-6ad5fdf87d00", "sighting--e99f20df-433d-4d40-a949-89703afd48c7", "sighting--7d9e224c-7042-484f-b4b1-de9fce20fc44", "sighting--36ddc862-3dde-48bc-a2bd-b7be1b631546", "sighting--f18e640c-0d2e-47a0-b012-867a7317a738", "sighting--dea2067b-7764-4499-98fa-213a35715b63", "sighting--b08b3d25-7cff-4dc4-b497-710306035652", "sighting--33ba1af1-6fc9-494c-a785-0eb0864c364d", "sighting--7be86031-ec36-4383-9161-3551c457525f", "sighting--fd7eacc2-0d51-48e2-bef9-454af4c61db1", "sighting--8f10c8ae-fab2-41ab-887e-056c730a374c", "sighting--3930278c-9e30-482f-91c6-fc8283b80c21", "sighting--d4d7b64a-2ff7-4439-8c07-c3a7138552f5", "sighting--eb090f46-38e1-4ac2-bfad-69aba879a424", "sighting--cea71813-6404-46f4-82af-eb959509c79e", "sighting--202485af-c1c8-420b-ac26-7cb206349e0a", "sighting--935452b3-3b56-44f1-9b81-3cb96fe71bdb", "sighting--cd81d0c8-107f-476d-b6f0-3b5395eac2ef", "sighting--9f6ae66e-7068-4dad-9073-d37c1db46ccd", "sighting--5fb5a801-8552-4431-9ab6-f108b9e62f71", "sighting--4ec2e6b0-c280-4fc1-81ec-777f32ce5c84", "sighting--d9b2ff19-c58a-4bd1-bb41-27d54210df6a", "sighting--da09a46e-ad30-4f31-b195-1fef7d865585", "sighting--a0fccfad-7266-491b-af9c-599c8d19aa97", "sighting--1dfa5c9c-3074-4a7f-8e9f-7f0eeeef7cfb", "sighting--7fef9b23-94f8-4cf6-9251-ab33c6a2f843", "sighting--e276646c-d863-41de-b1ff-23faefb55cc5", "sighting--bc9cd024-92ab-43fc-91bf-b25e9a93303a", "sighting--0d2632fd-e9e9-4943-a8ac-bb0e618dcf62", "sighting--90a5fa0b-a2c6-4f04-acd8-c48361fd3890", "sighting--1eaa38c2-67d5-4877-86ef-18e727fec1a1", "sighting--bff85cb4-228d-4007-b683-6e4891e61693", "sighting--a590de35-7bf7-4a9c-84e5-dfc5626cb601", "sighting--4aa658ae-3870-47e5-984f-822f9e60ac22", "sighting--0c5a2a76-16db-4cf3-ab1e-a98fa712aaac", "sighting--185e25ee-687a-4f68-b0ec-c729916100e7", "sighting--e0343694-425a-467c-b10a-9dbe66ecc1ad", "sighting--2525f94f-5b22-469e-8a43-d1129d8d5268", "sighting--93f35d84-be44-4b86-bd06-2e7365e94ea9", "sighting--700c13c0-f011-4b14-9444-d68dd2245e53", "sighting--302c44d1-cb9b-4b6b-81c0-49a0e827ae4a", "sighting--375d59fd-1d0b-43d9-90f8-1873f5d064c1", "sighting--85b37566-ab84-411f-9a54-faafaff53d2d", "sighting--3342f9e3-1611-4281-8a5c-0cebb7699086", "sighting--7d33ec56-f28f-4fe4-84e5-4bac1811154b", "sighting--cb846be9-b20f-4baa-8e82-895e2affbcd1", "sighting--9c1dd0f2-2420-4b54-9daa-cd7375caecbe", "sighting--e3d1205f-eabd-4aae-b874-b7092f858db9", "sighting--fe09baf1-822e-4171-ad0e-5481a29a585e", "sighting--304a464e-edc4-4bc4-9366-041a14b56f56", "sighting--06923388-905e-4078-a5f5-80d5a448b66b", "sighting--7dec4618-3c9a-454e-9196-48f55c6877de", "sighting--2ef0cfb0-e142-4c4c-90f0-bf86943f068c", "sighting--19feb9ea-e41d-4185-8f93-114bbf8d5b72", "sighting--3e5bc78a-3263-4634-883d-f82d6338b7b2", "sighting--ecda67cd-bd39-48e5-aa89-827979a8536a", "sighting--a786ae7a-4f75-4c07-8135-f943fa47cbec", "sighting--cce79c65-9d8d-472d-b32e-c6e9d791abd0", "sighting--30ee76e8-1489-4ba4-b23b-5d06dda811b1", "sighting--a888aa0e-da65-4479-87f2-55f887425666", "sighting--83a8e26b-8351-4db9-9aed-c0ab4eeeb6ee", "sighting--09cce997-ae43-4d25-82d0-3966d256d8fc", "sighting--4adc45de-cbba-4d1e-9d55-2e645738fcf5", "sighting--15796f0e-9604-4390-9659-6a28238ff87a", "sighting--1dfa5c49-ffde-48b3-9afe-06d45f2d8c37", "sighting--e8767e39-d8e7-443f-afae-6ad6e65c213a", "sighting--e1c236b8-493b-419c-823b-3fd2507b3c1b", "sighting--1937f023-7831-4e44-b69b-a684c1d3cc60", "sighting--1e6d9871-966b-4c23-a2dd-6f03979987fe", "sighting--4c6b9049-1c7d-4eb1-8d43-df2765cff974", "sighting--7ce25466-ef4c-4c0d-9a73-754dd2376f36", "sighting--bcca1ff8-4c00-4886-ae48-c7d22999d4e7", "sighting--a6282912-0044-42a3-bf16-2705cf0706b5", "sighting--eca7052f-821e-4ce4-84fc-ff8e0840e78a", "sighting--cd7e9f8c-1e09-4e75-aca9-6bce429da46f", "sighting--056df4b6-8b69-488d-9672-26dba1f9654c", "sighting--d7f5de4c-5a69-4005-8393-1b045b20a22d", "sighting--102bbfea-0bf8-4dbb-b0f9-f23affd2ca36", "sighting--b55fb782-016d-44c6-87a1-158902d8ccf6", "sighting--42d8a62c-2e33-48cc-bdd5-83a71869f3b6", "sighting--53de9078-b813-44da-8d97-f49041e79a5c", "sighting--7c5755e8-1280-46dc-9ccb-1adc8f0ca41e", "sighting--02d277a6-3c00-4d90-a303-5ee77f9545ca", "sighting--29d40e72-9840-49dc-9b82-0c24591059b3", "sighting--4e1190c5-c147-4a0b-bed8-9d392ab4c900", "sighting--f71b2d91-f385-46e5-808a-f27973e15b08", "sighting--cf4f47ae-3e4e-41d4-bfb5-3d2aab0b92da", "sighting--999c8076-2a94-4dd8-8168-df16569a1968", "sighting--a2dd1e50-be9b-4c51-894d-3b0eb32791d8", "sighting--4d4f62f7-0b43-4ced-9404-c77273f2acbd", "sighting--f100f4cf-8ffb-4f94-9b92-3ff2808b8ea6", "sighting--c3340a14-4140-475f-854a-7fc2042d7719", "sighting--d725cae7-66af-40d5-8e89-9b54b31030d2", "sighting--32b0db79-8d5b-49b7-90d3-fdc9e185e26c", "sighting--897aad52-1636-4c67-84fb-2870a31b268f", "sighting--b434cf3a-97b0-4d82-b2fb-36fe8f7e6000", "sighting--e9f2366b-e2a5-49d1-9c52-1f06094e44a9", "sighting--d1a9d9a7-daf2-475a-a75b-a47100e772f5", "sighting--748765e3-ce86-4caa-9df2-d9a68afc9e2c", "sighting--6c61637c-3962-4cab-a58f-f884611e2c1f", "sighting--3ba5bf4b-1f12-47a5-98ee-07b2f62990b8", "sighting--e5495fbb-6d14-41df-9a15-24d404db1db4", "sighting--990390fc-1cf3-49c5-b24b-18bb3e2b40f7", "sighting--74eabdbb-848f-4a9c-9e40-571dd1cd3d4b", "sighting--babbe60f-e586-41c1-926f-d9d72fa92142", "sighting--ad5b55ca-160e-4182-8c02-b19f6b3b0efa", "sighting--6514d876-27f0-43ed-b16b-e7f4ab7ae2ab", "sighting--33a7b13b-6d2d-4822-b4bc-09a7b41f9019", "sighting--70d15ab3-77ca-497f-9516-3c3ef971d26f", "sighting--8601a9ad-6f1f-49fb-9e9a-ed4971f23756", "sighting--4120e441-d54d-456f-8879-2e5f3be8f050", "sighting--49e1a3e4-ee61-4c65-94b0-4fdc00f7e37f", "sighting--50860249-9195-4abd-bc1c-2599b8191d42", "sighting--e2486087-7189-4873-96c4-bb2f16836626", "sighting--7e769d9c-d7e1-4b5f-b871-6f7ce2ae4307", "sighting--240b87b9-dd8f-4e56-946a-6c2755159805", "sighting--9d9ecb5e-3f68-48c4-a544-30cf3bb88a0a", "sighting--fea773fc-0e47-4c5c-bff2-0fb908a160ef", "sighting--c1921194-2e1b-4a88-9d62-2c22ba498bae", "sighting--7f083c58-b25c-4cb8-bf90-8b64b270c5b7", "sighting--b1803bc1-cb31-4d86-bbea-ded493ed65d9", "sighting--d85dfcd5-8292-4f40-bc77-8fb09953069c", "sighting--f0ba6d7c-162d-407d-be29-387532442db5", "sighting--e19047fb-ccf7-4d01-aa59-0ede423a8417", "sighting--4d24429c-8223-464c-86d5-a59e8e25c845", "sighting--88f697cf-a0f2-4cb9-9dd3-6ebae24a8512", "sighting--a6850309-fdfa-4e71-b4f0-bf46430e432c", "sighting--62aa292f-6eac-4a38-8ee4-a7b7fe359069", "sighting--e9c1c389-8a8c-4821-857b-d541cbc44929", "sighting--27f72b97-a43e-41ed-afe6-0723495af196", "sighting--6ff85773-c243-45c5-986e-a156c997f675", "sighting--972188fa-9e17-4d16-b56c-368d91f02601", "sighting--f4039c05-c517-4954-812a-5756060b6222", "sighting--8bc99671-22f2-466e-a1ea-78c992144adc", "sighting--bd86756b-e744-4447-84c4-6f6332cce3e3", "sighting--59c60810-dfd9-46a7-954f-8f4590b0315e", "sighting--22da3011-714a-47d6-afff-a5e4d434d2c6", "sighting--2ea4392e-c24f-48f8-8777-7ed9dd00e197", "sighting--d1c9199a-6ca0-4c37-a990-9fd587a5bb5a", "sighting--c92edb77-1149-4fe4-a9da-605e95901e5e", "sighting--07678f5a-8a1e-4334-b0fa-d37defdeeee4", "sighting--7e9734e4-4736-4781-844f-717f8244f9cb", "sighting--a8a65cba-88aa-43e2-95df-dfb83ce196cf", "sighting--20635c08-5b61-4987-8ee5-14b4cf731ca1", "sighting--c418043a-30b8-4894-9348-f08580984449", "sighting--8c3ec79e-1321-44b7-909c-58f4d066d207", "sighting--28b3c2f9-29de-4212-873b-55f447ed63e3", "sighting--0e5b76ca-0434-47f1-a760-3edeb9f681aa", "sighting--8bd4fe76-617b-4c84-84d6-307d42dfe5f6", "sighting--7aa9ff03-1b78-4d77-855b-9d74ec188b98", "sighting--53196e69-94af-4a09-ba04-2e71c0c0181c", "sighting--118cedb1-48a5-47c1-ab44-aebad676a4c8", "sighting--747cd71e-9e35-4d5c-aabb-887277177994", "sighting--6f948e78-bbd4-4a34-a92d-e54e1f60eac3", "sighting--03e366d9-d010-4ee7-9f99-985d29ea5f3e", "sighting--8be6afe0-86e7-4a53-a418-3aa25b23a059", "sighting--78e9fe2d-2b69-4bc1-8266-1b12a0b58558", "sighting--c06ddce5-571c-4642-93cf-b9db7874c814", "sighting--cf9c2b68-9c07-4401-a54a-fee28931e8ff", "sighting--643de042-d34a-408c-9926-ca3a5fc007fb", "sighting--011f6f20-c209-4e34-9cef-966e145b3b2c", "sighting--169d284e-c9d9-444f-b659-e0ab1567b3db", "sighting--7b569e30-ad20-409d-8830-3330f3a99d87", "sighting--b80a6c10-511c-4c51-87d2-eb8a6bd42a9d", "sighting--698cc975-e620-4be6-bfcf-1acc272d33ad", "sighting--f57e6593-7262-4492-a653-0519755111d4", "sighting--15cef3cc-8a0b-4082-aa67-46096512b662", "sighting--b6fd2282-d4f9-4844-917f-2d8fe8e4f548", "sighting--dcc0c009-13a7-4ac8-9cfe-07c56c073ed0", "sighting--8caffbe1-b097-42bf-854a-4ebae9e63199", "sighting--e9a43bcb-b5ea-469c-a1a3-c0e28795f6fd", "sighting--7184ebcd-c7b2-45ff-b93c-1bbfaaa072a0", "sighting--3633ea10-ee99-4363-bdc8-ade519e0d276", "sighting--2d4c5bfd-a085-4b3d-bae0-d994eaa03aa3", "sighting--091a2b55-568c-46da-8ff0-587d336d0f64", "sighting--c7acc4da-96be-478c-8d57-536ce7045c3c", "sighting--664f132e-191e-4868-a8a5-9cdfe8c59e52", "sighting--d50e7038-0638-46b3-8db1-f6a6a8201495", "sighting--3e94e46a-d5d9-479b-a280-87f337ec17de", "sighting--08c60bc9-3aef-40de-9398-eacf5091dc24", "sighting--ff5bb566-1072-4570-91e3-fff8e5fc89d4", "sighting--428d1f3a-df75-4179-ab8f-02877b725974", "sighting--acb1cd3f-712c-4d53-9601-b4397b0d3e2a", "sighting--f78e9478-813e-447e-968a-a6389d876fe2", "sighting--9adb6fa9-267c-4e71-af73-9eba02f44c5e", "sighting--bd4bff72-cc08-4be7-8dab-f0f83b2312e3", "sighting--e0b166f7-0a1f-4924-8d59-eaf8999cbb4e", "sighting--74881aa0-d891-416b-9eeb-6eb5f191b7b0", "sighting--09afedbe-340a-4bc3-adcc-743c3fe24ff1", "sighting--f0cd21c1-fd69-4bba-b19f-18a5ad3b5f0a", "sighting--27585afa-4c50-4fdd-a6ff-a58d37c3871b", "sighting--933508d7-4ab4-4809-aaff-cffae4f71a23", "sighting--77716266-2ad2-4524-8d70-95046fc513b2", "sighting--aedf2806-631c-4030-bee2-fefb37371c7d", "sighting--f9d9a455-7d5d-4972-9847-94395f7c4740", "sighting--445c8be4-9298-4458-a52a-e5e552c2fda8", "sighting--7693061f-e900-463f-9e4c-179dccac8874", "sighting--349c14ef-601b-416b-b039-46a61b34395b", "sighting--9bc65c5c-3a93-4e17-84ff-efe12daa957c", "sighting--4498fb9d-68dc-486d-b121-63e581c92ad6", "sighting--95e1ab8a-da84-4f82-8afe-f9060204fc17", "sighting--d0aa5615-cf29-438c-8554-31b87a1cb86a", "sighting--8f77aa3b-3bae-4c76-a716-b7d8b5be4f1a", "sighting--60c6e572-a4e8-484f-9f23-538a91335eb7", "sighting--ecb33270-b8cb-4864-a48f-cc1e012041ea", "sighting--8f440b2b-14a9-45de-90e9-d4ed59c70e0a", "sighting--b4f8156a-9a2c-4889-b8a8-310fe8950d55", "sighting--1e0541c4-6dc2-449f-a01b-610d2e34c3d6", "sighting--03d48901-3d54-4be6-92fd-7034abbea87b", "sighting--84d21e78-e1ea-48ac-98bc-f28d2934667c", "sighting--1b6a4917-5bdd-463c-8ef1-ea1a794398d2", "sighting--afdc0cfa-f3be-4731-be80-08c16f6b614f", "sighting--4bf3190d-1fc5-494e-8d2b-683e5d8ac6b0", "sighting--d63d2094-eb15-4f50-9115-cf02320c48db", "sighting--670562c5-bd6f-4519-9848-c5a45d4bb8d5", "sighting--d91892d3-37d4-4989-80c7-1eefa6538686", "sighting--f00ef715-1582-46ed-a1e9-7c55ffdec03c", "sighting--57ccb615-7f24-4d31-ad8c-cf26fc324aac", "sighting--62d32e75-ee34-46e9-8f32-ab63d3b152bf", "sighting--1a2e1a4c-816c-410e-8011-7bd7c9d6f273", "sighting--29f8a2b5-bef2-4d75-9729-7f621a21764b", "sighting--d84c8e60-e9e2-45a7-ba26-0c489e45aaf0", "sighting--e7ea825c-c744-475d-a8d0-04e69d4f9a76", "sighting--c5f29d43-1e9d-46d3-95d8-a5e747414512", "sighting--585f1114-efff-4dc1-bc67-d2e175602b53", "sighting--8ed5d106-1c7b-43dd-90c9-d6265aae2755", "sighting--057878ca-30da-4c7a-b54e-61473c0069af", "sighting--a8e00793-14b4-49b9-bca1-8c6c7256fc99", "sighting--28eca07a-d208-48bd-8451-7312e3f86d75", "sighting--c9377e18-6be2-4588-a7a9-fcebf1fc71ef", "sighting--57b633f4-11f4-4f04-8d3b-ce7d57ebcc07", "sighting--7fb96dab-949d-4ac8-9c8a-fb64ed389b4b", "sighting--68ec2fc8-616f-4c20-9227-8b96e487e131", "sighting--824fcda9-d4e8-456f-bea2-4f3298699e98", "sighting--ba9ab9fe-4e5a-4545-889b-cc925d48b5fd", "sighting--bf5f4027-525a-4b94-b76f-90c2b6fd416c", "sighting--a7aa7351-a091-46b3-aff2-0e0c55db735f", "sighting--d42a947f-18ec-43ec-b94a-076b55db86d0", "sighting--658782a6-3c48-4f22-bc11-008d8d8f80b6", "sighting--b58834f3-7d02-4615-842a-9b1be8141d6d", "sighting--5b7b5b1a-8b97-4018-babe-85a9c39b35fe", "sighting--bd018e5d-87f0-4675-ba4a-49ba2318193c", "sighting--3645db65-1831-41d5-a0b7-1d2892b259c7", "sighting--47bcde4d-d17e-4389-817b-937d48ece417", "sighting--c3eaa0ec-a0f9-4cdc-8590-b5ff5c402b06", "sighting--da4de5eb-db4d-42e1-bdaa-dbe4239f154e", "sighting--7d0413ae-5237-4712-ad7f-902877b9709c", "sighting--a4cb463b-a681-40e1-accb-60a6ea0c6c09", "sighting--1e474b98-062c-462f-9026-9e803abb2293", "sighting--25239a87-1df7-4444-b065-91c0fda7acda", "sighting--642ee7e3-4997-4fc0-a1f8-e1376205d1b0", "sighting--42e00f01-f736-4a8e-ba37-5835717af1e1", "sighting--e8774391-b294-4deb-899d-8949a81f63e4", "sighting--0041cf40-c014-4dfb-ad09-2044c9d00d6b", "sighting--d61c51ac-387d-4592-844b-76957d342014", "sighting--4e0caeae-87aa-4238-888b-3edf34b5d26a", "sighting--d53b55a6-5e39-4b5e-8201-33110dbe534d", "sighting--4b88ce39-4000-4100-bfec-d1e514db6f6f", "sighting--f892f2c1-23fa-4a73-b8f0-07b727c61cfc", "sighting--f160ff9c-a54b-49e1-85aa-086e84433bba", "sighting--aafb844d-45f1-4710-925f-4d38ec0d9493", "sighting--c06d121c-4c60-4083-b35f-0884d8ae6ac4", "sighting--085056c0-3326-4aa0-88f9-a4409586f4f3", "sighting--f9d68c03-9b45-466e-8e1c-b2623a54ab2b", "sighting--c6a9d905-5db4-4c87-8004-bd9ca909c0dd", "sighting--4e7a40b5-c9e4-4fcc-873d-f7e3d7413448", "sighting--843ec6fb-13a9-4d4d-b243-52ba8186011c", "sighting--5be79871-ca2e-4079-b68e-d82e60511d22", "sighting--7ef0720d-45cb-4a0f-b63e-f2d1443cdd05", "sighting--e050322c-8b91-44e5-a668-e2de7d7770ab", "sighting--2fb94904-61b7-4c7d-a09a-6cb7daba8cfa", "sighting--232a4732-8ddb-413d-b1bc-88de948d9116", "sighting--105c8846-9e66-4d58-ae4f-0d8cd7e7b1cc", "sighting--48c936da-66b0-406d-be45-2a03cec3c4a7", "sighting--af08b4de-fc29-48e2-9020-92538a4aa75c", "sighting--aa4c5fac-c568-4a9d-9e08-ba7e37044cf6", "sighting--ef8de83f-652b-428f-87ef-1fef06f1179a", "sighting--a7b4e02c-445a-4313-a096-0165bbaa8783", "sighting--2a995144-a275-4206-bac3-a65c1d6cde08", "sighting--8514c97f-ac1f-4a29-838a-f2227371d9ab", "sighting--1acc2f2f-cee2-4090-af6c-afe10b53ee20", "sighting--3c05b44f-9591-43cc-bf6a-b7d38b830b20", "sighting--fc752524-2af9-4bc8-94b8-64f2c88f1e40", "sighting--19acb888-e195-4ad7-be40-1ab203662f74", "sighting--a9c8c84b-3960-4f75-a01c-177d147b0573", "sighting--c3b68dcd-e0b7-48db-bfaf-222789f9fb46", "sighting--4f023a0d-87c4-4370-bca6-bc5c3b2e3ff7", "sighting--4df5a463-577d-4835-93fc-0ae0bb72312c", "sighting--f2484c73-87a0-4acd-8049-1ef5efb9eac1", "sighting--02c2bc18-526b-40d8-aadf-3c38a819b296", "sighting--5064f439-4b30-42b9-8cff-c1167471cd89", "sighting--48a7d7a1-2eb0-4155-8a55-b9993f7d743e", "sighting--4c705744-6413-48a5-b41e-f3864707585b", "sighting--02fbdb83-a469-45eb-830e-124e451afb04", "sighting--46963958-8a7a-43c3-b8f3-d37072c0f4fe", "sighting--6dbbabaf-65bc-4d46-a546-9ac2db3d4696", "sighting--78e4e5a0-ff14-42ff-8885-adac62c358b9", "sighting--a20d86ef-f0ef-495e-8d98-2f44a4a45785", "sighting--10215b9d-aa0f-4088-897c-b76b9e30f72d", "sighting--3e8991e5-b7fd-4ee3-9f01-b4b1cb3c7f05", "sighting--5f76c1d3-493f-4bfb-9b37-19436e47c14c", "sighting--14f841ec-eaa6-453f-8934-a1d1b5616da5", "sighting--b6da7c0a-6c4c-4f0b-bb35-8f9f603f03a9", "sighting--1ed1c47e-f5ab-4e7c-9e18-474f9b8c69ec", "sighting--9ccc8cfe-9722-475a-b444-1ac356acc586", "sighting--0d0f6ccc-bec7-4459-ad1f-96100605d31e", "sighting--e4b8b374-4998-4307-b406-5cc7cd5d6d2a", "sighting--2564aa2b-5dcb-446a-9c13-9f04bea050d0", "sighting--a5cba2c4-d809-44d9-ad3c-4dae39e68a45", "sighting--991e8e94-2438-46ea-ac16-b0390d468634", "sighting--c57005b9-7f53-431e-b597-c76240f962d9", "sighting--68731833-b824-41fc-b505-bfed171fd46f", "sighting--22483630-9135-4c83-8dd2-7881fcb52254", "sighting--5f459596-1646-4ed0-8c90-5c2329651846", "sighting--5b803d15-f557-41d2-863c-1b7b6b3f56c0", "sighting--d5a87d6d-2ab0-4dfb-8d02-895441992dcb", "sighting--a5ad5b1f-346a-4032-9cb0-0d07ca9ef718", "sighting--4f92b2dc-5f38-4524-b406-b0d6ab6dfdaa", "sighting--f49354cf-707d-422b-aaf0-6f6ed13cdfd2", "sighting--f28ea3b1-e65d-4bd1-a2e1-a2d0491f2f7d", "sighting--dff3a10f-a07c-4f79-a365-50b02e3e603b", "sighting--4a45add8-8cbf-4e2b-b9ad-9639358e6b96", "sighting--0f804773-7547-42c6-9662-c4424d55aea8", "sighting--f1e92f22-734b-4ac4-b110-d5b1676982d8", "sighting--f29d065a-e627-4a82-a431-846ab5553c85", "sighting--4cb3eb8f-5390-4fca-9003-4195dcbc29ca", "sighting--89d37819-420c-409e-b4fe-982470c60ba5", "sighting--3c8202c9-27c9-49f1-9068-1a639bb29c47", "sighting--2529b713-73f4-4e20-9524-c5ca93a6fcad", "sighting--a46827bc-619a-47d4-803e-a0c860ac0595", "sighting--a8fd90f2-7a42-41f0-9cd1-2def63036f72", "sighting--0a11f2cf-67af-43af-891c-e6c7462b495f", "sighting--6ffc0a98-07f5-47cc-aa4e-97954c1053e0", "sighting--67d8da4e-343a-43ea-a7c6-5f2ec7133d0a", "sighting--4703a1c2-3a6b-455d-9189-d0e5f1598d5e", "sighting--14bb3d20-d85e-4e35-9a61-a558d6271d0e", "sighting--2cc4c27b-7953-4aec-99e4-137b663186b7", "sighting--a6e2cb5d-30ee-4be1-b6a2-8606c8e08d0a", "sighting--d4c28f76-535f-4d16-b100-6c0e3f4c80a4", "sighting--10f5b435-1fa0-4fe2-b144-3e51d10b580e", "sighting--f6cc1b1a-4304-4f47-87a8-765df96e5a34", "sighting--d958180e-d219-47a5-928f-5a613ea8e844", "sighting--396941e6-87e6-452c-962c-b91120035ee2", "sighting--5f719e0d-c54c-461f-b811-2512233945bc", "sighting--d645204f-468a-4101-9e0f-39799ab03d65", "sighting--85fbfdd5-6566-4e4a-93ee-c3a9b6670ba7", "sighting--b1c4cd77-ebfd-4936-8f57-62d142f8611a", "sighting--7e1eed84-a1a0-4602-9d5e-c9b0074c4804", "sighting--a0adc816-90a5-4872-b1a5-9f41e38ce553", "sighting--3cf527b0-cce0-4181-8200-5cea80d5d1d7", "sighting--0456b218-4889-4ef4-ad26-b919e4183ea2", "sighting--c1da0c43-8888-464d-9cd0-b6f22395374e", "sighting--c5887759-02f9-4c79-b827-f49797634c15", "sighting--ce7727a7-f432-4971-892c-8ee63d3dd466", "sighting--cce91566-55fd-4134-938c-445e281a9281", "sighting--66f01672-48ec-4ebc-9769-63e83d9e89f2", "sighting--3b9a0e5c-424c-4936-acdc-ab763139a862", "sighting--2d4a620b-025c-4e51-bad2-1faa3ce59283", "sighting--e994c8d6-06ec-4ceb-85de-6a5cc39e09b4", "sighting--22e3d9fb-7b04-4b17-8264-87968bac9d53", "sighting--371d9a1e-af99-43e7-b553-b39dbbe19836", "sighting--7d5affde-2c96-4670-b811-690f6f5a58ed", "sighting--6778af2c-244f-4808-a4e0-ae76bc9f239c", "sighting--a4a07345-850d-441f-90f8-57291ac25463", "sighting--bbe1f278-1f92-4218-8dcd-d7d22797e84d", "sighting--b0a11873-f0bf-4675-b546-6bcf47553478", "sighting--81772685-1525-4c78-b484-3265b91960c1", "sighting--793b807d-6f05-4943-accc-24e5194de11a", "sighting--c7224578-ac3d-4d85-ae6b-dedc44e20949", "sighting--5d7eef51-30db-454f-afe4-f6c179987587", "sighting--85f6728a-b098-491e-82d8-0f707b41f707", "sighting--8fa42335-d8f8-47da-892f-278b984daaf7", "sighting--dcd7d288-adcc-407f-826d-20ef7636374a", "sighting--c229a5bc-e6e1-4bbd-884d-1d5eaa482976", "sighting--c1a32cea-2d9f-41a8-8f50-55041b5a93c0", "sighting--8375ce0c-16cf-483d-a01c-a00c0f43f8bc", "sighting--5eeddc69-aca7-4c6b-b51e-378fe4f394c8", "sighting--b3087d67-3c05-4541-bc6f-e513355cfe17", "sighting--2e113366-824b-43b6-a436-c8ffb443374e", "sighting--fa7a380d-cc23-432f-bdd4-0ce65ea53859", "sighting--7de8047e-b178-4892-a100-660a93e72295", "sighting--9e486904-d058-47e3-a4e5-68cb84702f98", "sighting--da0ba8f1-118f-49e0-a5cb-b02d75839ed5", "sighting--1642be01-39a4-4764-9540-6a191c41eed6", "sighting--b710c3dd-ea5e-426b-822f-6f2404efcdf2", "sighting--d62eafe2-c4dc-4fbe-a195-246c23dbef79", "sighting--8f16fcbe-f74f-4c28-a4ee-c953560fa8de", "sighting--79e47fd5-0835-4f82-b9a8-78c9d939640a", "sighting--50912af1-e0a3-4a0a-a886-00a4e23cc40e", "sighting--74202fe4-875d-4098-954a-04e7a25cf44c", "sighting--6c99b6e8-2adf-439c-8b83-b9f6b3adf52b", "sighting--6d6d5adb-824c-4013-9711-943bf22353ba", "sighting--e17a4cba-f790-4f50-ae2f-6f6a54f0acf1", "sighting--9555f12f-9ee2-40cf-bfdb-6a2150222428", "sighting--2582bbfe-5c8e-4062-895b-2c1055075315", "sighting--652a12ac-5cc3-4f14-8323-80eb65fcdd65", "sighting--3b6b2d45-a788-4fcf-b559-20fceb729b96", "sighting--9456a258-6e4b-40c0-adb5-48e2ad65a048", "sighting--730dd57a-0e53-4cbb-b650-a2951202489c", "sighting--31aac3d7-d17a-479c-9347-a47470b4a309", "sighting--2c314f98-75b2-4647-952f-5787fa1db4c1", "sighting--e7ac818b-62c2-496c-b97b-a2d9d735bf1a", "sighting--e4002283-20de-460c-a8dc-6f0d1ace3c85", "sighting--facea323-f45e-4d56-b1fd-8b4323faecfd", "sighting--2de11d40-6352-4fa9-a8a2-eb59bfb15b1b", "sighting--00e5c2e2-f0e7-4247-91a2-e6c6f2fcd83f", "sighting--b3b4a284-96e1-48f2-a368-6c850cf26cc4", "sighting--cf407658-b7dc-4908-8e1d-9d2678a828dc", "sighting--1cd47b3b-b1db-4311-8ed3-254c75b1c3e0", "sighting--d8f2a013-5525-48ce-ad5d-e1fd13e79710", "sighting--5255d2d0-839d-4b60-bab7-652aec337f38", "sighting--efc695e4-5911-43f6-8540-65a1de9ff2ac", "sighting--7de5186d-011a-404e-8dcd-8af9eaaef111", "sighting--a3d9af0e-8210-4364-bfd8-b16e8268b8b9", "sighting--e0864a79-07ac-4927-81a3-4b70ae9821c0", "sighting--88ba87b9-7b9b-40dc-8396-208c90ea5392", "sighting--6760b727-2b2c-43c1-86de-a461e212683f", "sighting--01369d0e-24c7-4d14-8cba-1b495bce8f4f", "sighting--344105bb-8ffb-4e67-95e0-3152231654c7", "sighting--b054cc0b-22f6-4fd4-90bc-56ce6e6cd8ed", "sighting--5614eb68-0a52-4e30-8556-79c4bb176de7", "sighting--4d9a758e-70d4-4890-a275-0c3ac80cd122", "sighting--0e25d31c-e244-4dad-a9ff-e12caaa9d577", "sighting--9fc118a5-679e-4f5b-95ea-0198e76f57cd", "sighting--f012a369-e127-49f6-8d4e-06539af0ac42", "sighting--422dad0a-f9a0-4cf2-9460-c176b95025aa", "sighting--1002f741-6154-4a8c-bde0-f6fd961a52a6", "sighting--d78d736f-f494-4ed7-b4ce-54c12ae66a54", "sighting--66ba9571-1d42-47c4-8307-419f52af54f2", "sighting--68c455e4-91e8-48d3-851f-94279eea7f7f", "sighting--4f4f6b9c-642a-46e8-a573-4b5216f55b10", "sighting--6b4b573c-5ad9-427a-98b7-07b2c29460df", "sighting--6a85d9fa-4c82-44e7-9da5-23f0ac13f239", "sighting--7c43037f-b155-4359-b5ca-517c3887feed", "sighting--a7d0962d-b872-4a50-b610-9db4c72b2667", "sighting--ac66f56c-5675-4291-9b58-31b4d7a44b09", "sighting--85485293-a8e6-42fa-a227-a75abd49353c", "sighting--e0145f2f-f617-423f-822e-61efce7f6233", "sighting--e3f801e7-670e-451e-94ec-a4c5a3257e69", "sighting--1167fab0-33a7-4514-987e-2350bd8d73d5", "sighting--2ff3fa65-0955-4339-b827-5160a699d7cd", "sighting--c0306efd-efc3-4fc5-b777-7fade1419efa", "sighting--97bacd94-5618-46ed-aca4-6c61eceb22f4", "sighting--2a5e4f98-766c-447e-932a-1d1f9e289eb5", "sighting--ade205e0-7f8a-42d4-a08d-eda494ec16e2", "sighting--ee1bbd05-7a30-412b-a000-867c081e88b1", "sighting--393e6ec0-6737-4155-a684-229bf99fe772", "sighting--783fba52-f932-46b6-97fa-dbb15ba52a91", "sighting--2d7a6921-0128-4385-b854-39be6f4c92f1", "sighting--576adb79-8a6b-4e65-a1a5-33430b042fcf", "sighting--af5ad45f-b2d9-4531-a6f8-737d9186e434", "sighting--cd672d2f-889e-40a2-9594-6c2aadda8117", "sighting--ba64a876-8100-4076-971e-5c3c23df9d71", "sighting--aac54f10-7f8b-4289-83e0-099d1fa7390a", "sighting--b7bb6c9b-c399-4977-9dd7-9882a2f5a36f", "sighting--4a5656fa-f4d8-484e-8a4c-786db8a9ac91", "sighting--38d76005-33e7-4633-a86d-bdd6b06b038c", "sighting--22ffc041-8961-444a-9010-6a3be7f62aac", "sighting--e7f31317-ccc4-47b9-8d12-86cce32c81bf", "sighting--c04fdafd-dded-494b-abd6-594ab7459298", "sighting--c4ce2189-df24-4111-a0b6-493d2ab0428d", "sighting--42054357-13af-422e-8d25-27875efb9a97", "sighting--7e7ee268-a296-4a9a-bbd0-4b5dccaa1686", "sighting--daf90c4d-c2ed-4f8c-ad0b-40d9553effee", "sighting--3877e8e5-ddec-448f-baf3-94c7f83f5d04", "sighting--39b6d1b4-8911-4045-8a5d-5e3b2bf7b838", "sighting--8adcbda6-b00e-4842-8a2d-3b3cd9e73a4f", "sighting--70d4150a-dc06-4086-90ec-b19a5d1b788a", "sighting--7924e1c5-6ef8-4e31-9ee7-63a895338b31", "sighting--848b33a6-fa9d-4b3f-a554-e7ae46f8cf39", "sighting--4bbf04a1-c323-4995-868c-3403eed2dc1a", "sighting--c45f05ad-070a-41a1-b64e-23fb9e53eb9b", "sighting--eb95ab17-7d26-4d09-affc-8f1ae2d84cb9", "sighting--9c34fda5-83f1-4a52-94af-aca79121f363", "sighting--aba3b0d3-f830-484e-8609-de2713ac2be4", "sighting--aca08790-eec8-4434-a170-cb75aeef2fc9", "sighting--88fb2814-8299-4487-81a1-38a1e848e39d", "sighting--50fb6bdb-7433-4d61-bc87-0e71fecd4597", "sighting--a5b914fa-e642-43d6-809c-b2fc411856ce", "sighting--24c107e2-1728-430b-98e4-55fbf074c256", "sighting--842eb353-a6a7-4168-b115-333e45d7a392", "sighting--f141e3e8-ac13-4a69-b405-132be2a4d790", "sighting--9dd2245e-3d4e-4dde-9327-ec74f0869059", "sighting--d1960b15-a3c4-4ebe-bb5e-d9ef229dcbd5", "sighting--b8628f9c-291b-4c07-b932-7fc30a71581f", "sighting--c12180ff-2433-42c8-ac28-da8292aad387", "sighting--8c1b8824-ee19-40e9-bd47-e2bb405d0a1e", "sighting--3af16566-84e0-4d97-9bd4-5ddb241b6731", "sighting--55dd72d2-6552-4e41-90b7-cd22ad32ae76", "sighting--1ead426f-687b-4634-b09f-c10cf75f3a6d", "sighting--36c495e2-3132-4483-8073-ef17ce7f0365", "sighting--a4d332ca-f0b5-4361-a85d-c815feab2c4d", "sighting--bcdd559f-c206-4976-a059-75007ccb6243", "sighting--233bed2e-edd6-4693-afde-2c15565685f9", "sighting--8db166be-d2ee-40ce-a957-acdf985351ce", "sighting--26a240c8-037b-407f-9b31-d53c2e145ac5", "sighting--4ea583a3-4af8-495e-87ae-244318d88e5a", "sighting--b291540c-0df3-4000-8315-ce8da65a0dc4", "sighting--ebca50c5-f8b1-4158-b4a1-03f59cbfa3aa", "sighting--26b40c19-bc06-4bc9-8641-20e8f308c4d5", "sighting--83305449-4346-4f90-a139-b270bf418ef5", "sighting--32f6292e-07de-4429-9a10-1739c41f794b", "sighting--be2534bf-b8c7-48d3-a40c-d6d35795cc8d", "sighting--22743d37-5860-4ac3-a646-cdb4165dd28f", "sighting--070246af-d9a1-469e-90ed-59cb97b951df", "sighting--e885fadf-5817-4da8-97b1-b2bb0cb4eaa9", "sighting--aecc07fd-530d-4e3b-9c2d-81192b8f6d79", "sighting--58cac76c-07c8-40b5-b322-22054b2f82ab", "sighting--17e2cc82-6fbf-4992-a4f0-9d6e675ff46d", "sighting--4b04e66c-08a5-4a1e-9eab-de92131a8ce6", "sighting--7f889d46-58af-41b0-b907-b14eeb90deb9", "sighting--83d7d1d5-9b5c-4f94-8701-4eaa3f8837ee", "sighting--e31988bb-5322-4ab7-adc9-2f1bfbb449b4", "sighting--f9780633-ee3d-4d2d-a771-6be4479b6b76", "sighting--3529fdf5-96e8-48e0-931f-55578049d9b7", "sighting--87d33a86-8322-4deb-9199-618734fd43ac", "sighting--4aab01f1-1151-44f0-af03-dbb280d19998", "sighting--415291d0-fa64-4605-990b-da268e979f00", "sighting--45a37f7f-60d6-4dee-a14f-efd870cc65a4", "sighting--83603aa6-95d7-4f8f-81ec-bd927fef3402", "sighting--6d57c213-8a34-4428-ad8c-22db1c6ce3d4", "sighting--b7caa934-fc20-45e9-ad8d-c5e4f7bd2a5f", "sighting--ea4094f6-53a2-4952-8c6b-bfbbf970dc0e", "sighting--e8c83a50-186e-422b-9959-6802b0ff110f", "sighting--c73a8983-a632-41ab-8314-5b97deff9e07", "sighting--fbc18eb3-1f32-406d-8a25-58d7b80477e7", "sighting--4a0a6af2-c184-4450-9917-008ce7b8d111", "sighting--f1bc3d28-a46c-497e-97a4-8e7880978ed7", "sighting--10ed5995-14dc-4b70-ade8-35fd295b900e", "sighting--db5583f3-c689-44e8-a309-4a8a1fb95ee8", "sighting--8e40ca40-8587-4403-9108-85b578734056", "sighting--a0e244f1-9b32-45fb-8471-4ed390d7f194", "sighting--c903afed-6487-4fc6-9079-d67b03281b8d", "sighting--f1bec310-ad01-4976-9bd7-d5650a75cc04", "sighting--040470c7-fd66-4e13-89c5-71b45bb5d2d9", "sighting--aaa1e249-2ad7-4b00-9c40-52b4335d0912", "sighting--33436ead-3dfa-47ac-9d59-172ad1e0e381", "sighting--ca52c0a9-1542-41ce-ba4d-6c9fa99e3c3c", "sighting--af51129d-68c0-4c70-85d9-4838fafc4cc7", "sighting--350bef7b-6b0e-449a-af27-d1a2ab2731f4", "sighting--e6492eab-01ad-4fd0-a2e5-020ada4236ae", "sighting--5c004189-7da3-4652-a8a7-af5216f2798a", "sighting--196abc2f-eaa3-451c-99b3-c6f55a37f37e", "sighting--6b064e07-6899-4927-83cb-ac328fa2f748", "sighting--5cd595c1-89dc-47d6-ac67-a4cea1722b87", "sighting--0238f425-627f-49b0-b91d-03cdf4e5b084", "sighting--f8a20b52-44e4-4b38-a085-14aaedb4e62e", "sighting--53dc0259-6a13-4d1f-8ca8-606f372cdf78", "sighting--37b7a53c-9031-49fb-9a4c-b71847a507e1", "sighting--a6c74c97-3969-47d2-b29e-5131048e4235", "sighting--f9727630-2408-452f-8093-6e1892512017", "sighting--58a8f369-747e-4ba5-b590-9ad5da8b59d3", "sighting--212605a1-8177-4079-9fa3-cbb7bcafd301", "sighting--af7ed6d2-f1a5-4120-a2db-4f59620ea763", "sighting--2e6e82d3-59e6-4d43-9fa8-793f191c35cd", "sighting--b6c99b09-1167-4877-91db-596364600348", "sighting--dc15e19d-e586-45b1-b47d-a6cbd8af63a5", "sighting--e15fd5a3-766c-4f4e-ac43-8c3fe1e94468", "sighting--2273b3d9-403a-4236-b215-86f46f68c7ab", "sighting--b13c2caa-358a-4362-8053-7e414cf73113", "sighting--2fd1777a-ef22-4c05-bc2e-7c54053f2f94", "sighting--304f8034-28e7-4282-ab31-6bdc3b18b6e8", "sighting--efad7095-e7c4-4fbb-a162-c552095d8873", "sighting--0697cd41-8b7d-4abd-8c2e-f8d9e4686f54", "sighting--b1ea8515-fb91-43bb-8f85-f10540d3e5bf", "sighting--260c714c-015e-41d3-aa96-4dbf08055eab", "sighting--5ed54f8d-b870-4e5a-a632-a3a8825c3a4e", "sighting--5c43f6cf-eae2-4ca3-be92-6663982003af", "sighting--9d354804-3fc1-4622-aa5e-609663a5d48a", "sighting--41915185-6ef9-4cbb-9352-61e053b50dc5", "sighting--88a77423-37c2-45b6-9c6f-3325b1b68920", "sighting--168911e4-4513-4770-8ab4-3a3a27fcf415", "sighting--3333b52c-a654-45de-a7be-907f809050a4", "sighting--e62a1f7f-0fe5-48f7-b540-5d79b473ea44", "sighting--01298675-445e-41c2-a542-d2c3c31ceba0", "sighting--c84eca41-0e9f-4e93-bdaa-e458d051dddb", "sighting--e2cfdeb0-bdd1-468a-a926-f6198194b3fc", "sighting--901a193e-b5fb-40f2-86cc-b7ed12704231", "sighting--2ab0556e-4a36-4717-8b00-ad57374191cd", "sighting--c87cec4b-c45a-4c7b-ad84-3f26e9b66e3a", "sighting--3df692ea-f56e-4609-951d-9e67a875554a", "sighting--0cf90fbd-460a-481b-afed-66d2ec887df1", "sighting--0d1740c5-f824-4287-a447-83257a12e71c", "sighting--f351fcde-1ed4-43c9-a01b-467eeed8b1a5", "sighting--ba6aee3e-79bd-4e3c-8bc4-eaf37d0c6e09", "sighting--9713b3ed-7c85-42cb-bd10-f7c4c3b338c8", "sighting--fc758828-1c35-4a55-9d04-5979096992e5", "sighting--23b39e25-ab65-4bc3-a1cb-b35e3a16315b", "sighting--20e4b4da-3d62-42af-93a0-6beefc7c7c30", "sighting--e514847b-0614-4c74-9b6d-9f63bbd70665", "sighting--75d46d9e-7e85-4b0a-bafd-20b90776af93", "sighting--f3ceef7f-166e-42d9-9a3d-bdd0ebd3ca40", "sighting--678d95c3-4c95-4496-bd14-ca3793aa0922", "sighting--3fa338ea-8bd3-43f7-b0b7-09380c178f8c", "sighting--128b6cb0-23b6-4789-b6f9-59e8bffce829", "sighting--25d63743-42b6-4c2b-9860-716c3663151b", "sighting--2243cfbb-c264-4d64-9089-c9cbcb0c8176", "sighting--b19045e2-8c33-4eb3-9d23-8e99a37ec66a", "sighting--34de293d-4d2f-40be-9446-0da0e9de43c0", "sighting--26f6e388-cb7f-4283-9c6d-28a254471189", "sighting--ec24e33c-c533-4904-8449-2c27bf85a4ba", "sighting--f09453db-a58c-410b-b196-269ebe6cd1f0", "sighting--bbb578e7-5e6c-48e4-b632-fe16e78c873a", "sighting--d34688ed-1bfc-4bd0-9235-5f12cd39b9fc", "sighting--9324ae8d-b943-41c1-9493-6d665dc5617b", "sighting--0590617f-0f90-41fa-8f7a-2a64f503b215", "sighting--55a8780b-5b7e-4a88-aa79-69f1053b544c", "sighting--d03cdb8e-3a8d-4609-abbe-0ca28a993383", "sighting--7e4b4b75-4770-473d-817e-1647d4bc72b8", "sighting--6e058413-a6ad-485c-be43-483727a1795a", "sighting--17b3e091-7c09-4653-b377-6eaf4438cc62", "sighting--34f7c3ca-7adf-4b8a-870f-40d3a494cdce", "sighting--1780188e-542c-457d-8547-3e25e4f98e05", "sighting--f9c7e93d-f85a-4b4b-9e0a-60b71ad35a83", "sighting--bd33e068-35eb-486a-8f31-7fa09f370391", "sighting--eba55d89-24a9-4a02-8e37-66df2b906f06", "sighting--6e404f7d-d8f8-4fec-9202-28166c809752", "sighting--721f5873-365b-4d84-b96f-e3e7128a368e", "sighting--080f00dc-c6a4-44ec-863c-5d7b23db41f0", "sighting--b65180da-8306-4c70-a154-33bee541a610", "sighting--94c656d9-f36f-45c2-b5e7-5be97e69ea04", "sighting--3eb0b9d1-1786-41d5-a28b-216d436d467e", "sighting--e5c17239-e6ee-4246-a6c6-f3a4cd73eae0", "sighting--ebf0649b-69dd-4acc-89c7-67472b6311c7", "sighting--fd65b826-babf-4ae9-ad98-9fdd32e3e068", "sighting--adfbc67e-4bfd-4ca7-9624-e8bb73513348", "sighting--40397487-08f1-40c6-b05c-6c30031f0b02", "sighting--a2f066a4-2abb-44ef-b04b-2959d2ebddc5", "sighting--3730860b-1ecc-4ab7-90aa-0d01b47c3e87", "sighting--d2f9fdaf-5fda-440d-b76e-76a8d2b40347", "sighting--4b4a2b41-0940-47ea-b8b7-e66543d1e4b6", "sighting--0510cf86-e14e-47f1-a111-56471fa5bccf", "sighting--d6a123c3-c07d-4bf8-add5-39b021da5ae3", "sighting--33d4fa8f-268b-4d4a-9d38-8273653c7a8d", "sighting--76b0d46f-9c31-44fc-850c-fa54aaf57b83", "sighting--a3917fe8-86b1-4068-8f3e-9c6929793eec", "sighting--2108a4b4-8344-450e-a472-cfb82cd6fad3", "sighting--ca0d0c59-0e5d-448c-b6a5-14c54b72beb6", "sighting--37633f54-95bc-432c-8d72-b69d0a951ada", "sighting--cb2f94b5-284a-4882-a17f-7ea2e4fb81c2", "sighting--3ccc422c-0264-4f5e-98d8-0147e4f22c8c", "sighting--1655b37a-9f46-4983-a057-a3667b928e2a", "sighting--da4aa42d-dcb2-41f9-9997-0975b67e03c5", "sighting--67361824-748b-4fd7-a6bb-0c7dff9a2b88", "sighting--1c477a6c-2659-416d-8078-8ee84caecea7", "sighting--8155df6f-10fa-4e1f-ae07-097f07fec62e", "sighting--58ea570f-2a06-4d63-99fc-236364960e32", "sighting--816e53f4-ff4b-4ae8-9282-a517c6f022c7", "sighting--c44ebd35-8d7f-40c8-b806-61b775e69da1", "sighting--f404509d-4d3a-4a95-958e-ee159added79", "sighting--3d620d3b-dfc9-430f-aa35-b0f35dffbda1", "sighting--d1c05c1e-6e6e-4452-aa0d-d0bc54ceabc8", "sighting--50ba1de9-fea8-416b-80f3-9448ec91487e", "sighting--b76e3d5a-edec-4475-92c0-c126bc5b910f", "sighting--388fbbc4-03a3-412e-b5d3-b3bc5c37e20e", "sighting--8a590dfe-b140-4a37-904f-00e716de4d42", "sighting--66c20b1d-d7fd-4303-a692-71ec9ba75dcd", "sighting--211c65bd-2699-4b46-ae04-148619192d6e", "sighting--b0cf1ea3-1dc2-44ba-ada8-2b4eeee248da", "sighting--b83af4c5-8d8f-44c4-a2ea-8ac21426ec2d", "sighting--99da436f-c66b-452f-ae56-ad644d499e05", "sighting--f0777d19-35a5-4243-a03e-112381f36f6b", "sighting--51c579fe-4c38-4d94-8adb-60921e596adf", "sighting--45691656-d0d1-4ded-a009-77b5a758d0bd", "sighting--81513cde-c65e-4014-ab43-59a59a0df58f", "sighting--85b07caf-502b-49c6-9064-99cdbacdbdf6", "sighting--261a9fdb-4338-45e1-95b5-b189bf00edde", "sighting--b9dfbb98-284b-40b1-a612-ff08374f648e", "sighting--527736f0-5482-45c9-8805-ba1724aa54e2", "sighting--f7846655-6f97-4bf8-99bb-3128e83a7fb2", "sighting--f7455c79-ad10-46c4-9722-87a750cf3d61", "sighting--4cc32436-c9ce-4527-bb71-96e30457c8ea", "sighting--b1f45c5e-e4dd-4270-9a4b-12e155b29d78", "sighting--69c744d9-4fab-490b-a2bb-c96958806277", "sighting--e56492bd-3464-4795-abfe-4c6e7d31bb97", "sighting--94e8b24c-2970-4ab4-aedd-caef03405a33", "sighting--682b58df-e0d2-4f29-b130-2d37ec8f5b32", "sighting--3edd751f-99ae-4600-bd2c-681f8baca6b0", "sighting--1a25445a-c36a-4581-a273-c4221fe38787", "sighting--b304bd55-8378-443b-832e-1c4c907c98c0", "sighting--7a7d4eec-f260-4822-9d55-026f07500b2f", "sighting--2f063a2e-2367-49bc-bbaa-345fc669286c", "sighting--0a71fe29-e80a-44a4-a72d-5d4741dadc2c", "sighting--6d5a34b0-2d72-476d-b38a-cb895b03a8a5", "sighting--327e8a1e-a916-4388-8919-8486fc13d8dd", "sighting--7c65083c-899c-49bd-8c00-2cb5a7b524ee", "sighting--c4f5a801-1345-4544-9d64-bfbf61a76d23", "sighting--379fdcc8-1624-4b86-99dc-c7023649d64a", "sighting--12d9d9e6-f21b-4ab1-a334-e3a8adda1f52", "sighting--507b5376-ee5e-4852-8676-4bad383c5fef", "sighting--0929f4e2-32b7-424b-ae58-c04da08b7108", "sighting--59b879af-3255-43fa-9c66-1f597179372e", "sighting--67e955f4-5b0e-4d9d-b189-d34eca613208", "sighting--a9aeb2f7-c39b-4e51-9ac0-4e20638d6be3", "sighting--3b58a7a3-6bd2-4dbd-bd14-ceeb7edba1cd", "sighting--74beb37c-146d-4ba7-af79-5a915377e53a", "sighting--42f7b958-6bb6-483e-b965-c05656135362", "sighting--41721ba4-b9b6-4558-8635-0f5efc007c98", "sighting--c95ce35d-ca5c-4834-ba53-336d85e7d9b8", "sighting--620e9077-e5a0-4a11-afa2-c66655c214b9", "sighting--b3284f9c-2488-4235-8e28-dcaeb5005b69", "sighting--8d3871f6-0a84-43f5-88e7-a9c466cf45ed", "sighting--11f722df-dd5e-4ffa-ac94-488b8542079d", "sighting--69f86d18-0d6a-41ca-8bd4-a6bae6cde29c", "sighting--bad4e84d-e0af-4bcb-af02-6f56537b2667", "sighting--9dc06d4b-340b-4cb7-941d-01172374ad98", "sighting--439c60fb-7644-419a-a208-92fb1bc96478", "sighting--408c37b9-1099-406f-8572-4d68009d236c", "sighting--257efaf9-c488-49b4-9641-72e912bef806", "sighting--72ce987f-741f-4714-b0cc-7310a1a9602d", "sighting--abd0f9fd-36dc-49fd-9847-1c40cd2ab6fe", "sighting--ffc39c49-002f-4726-850e-a63bbc5d4703", "sighting--f54ce1f6-2fc6-4e78-a10e-9f0b979e0d58", "sighting--cc00d95e-c04f-4430-8cd7-9642d6ae5b5a", "sighting--8070d331-abdc-42ec-b17a-d405a1a80d30", "sighting--ea42176c-5327-453e-bf08-eb0436a6b785", "sighting--3054a175-0db1-4064-a980-cb651cd28de3", "sighting--65856033-e153-4683-a881-c40012659854", "sighting--d1e8f427-71f5-48de-9890-b92ae4a966d1", "sighting--7179e9ab-33b8-4a70-9fad-25488bf59f3a", "sighting--1ff2e229-13ba-4519-be3a-fb4390be0e56", "sighting--2163bf68-160e-4190-a055-3ea9e303b32c", "sighting--c9f3fedf-b99e-46e6-990a-04f904868033", "sighting--d1b14c11-db1b-4e2f-988f-f251162d2517", "sighting--4cf25e1c-a8a3-4f13-9357-03a694bf3559", "sighting--d6a26045-60f6-4d9d-8548-5853b8e7ca00", "sighting--0737a1dd-43a7-4d00-88d2-9b06d2428199", "sighting--71c5495a-254f-4f19-b735-c7f479a32457", "sighting--5be6d730-38bc-4510-baa5-5b77d1ba3009", "sighting--299640c9-92a8-44cc-8ecc-18839b652f72", "sighting--36c0f253-d6b2-4822-a750-2c48284e0d9f", "sighting--fc68c625-8495-431f-bae5-78cd3f2b3c92", "sighting--c7266e12-0024-44e4-b369-c5b07fadabe8", "sighting--c3bc19ae-13ba-4511-a693-0a5a7fe35a88", "sighting--bb029496-8f39-41ca-ae1f-fb3dc25e930c", "sighting--0cf21f1d-1fd3-48aa-981d-0283c89e2299", "sighting--357d0be9-b703-4d8f-9200-c0bfabfdf673", "sighting--5f8664c3-4ae2-4a91-9e86-9b45e3b50ee8", "sighting--8d483600-7339-493c-8046-75fa834901d3", "sighting--c996bf65-9b3d-4e9a-81b1-63f2022cadae", "sighting--99c606e6-ba79-47f9-860e-003756750ca2", "sighting--fbc0320a-eea5-4bb5-80f5-b4dd3ef6c405", "sighting--5149716b-3abd-4011-b1b6-d31c2f7fc46d", "sighting--1616ab21-be58-496c-9ead-bf0a15f15d37", "sighting--04d53856-5037-48cb-b763-149360e0740c", "sighting--f5fcbf6a-b382-4a09-84ad-e3aa525d0c9e", "sighting--c20dd942-8c7c-447f-81a0-00df77cc9a1f", "sighting--ee4d3363-2645-4906-85a3-ad85de85ae14", "sighting--f42c7097-f449-4ee8-9f44-183435fa1a8d", "sighting--6974d877-d52d-4d1d-b785-4c4704fc42a2", "sighting--8d55c06e-d9de-46c3-8ee4-651e0be216d3", "sighting--e5fffe91-1127-43cd-88ee-4922dbdded08", "sighting--6ae73a8a-5d54-4481-9a1f-a2d998ad3e6a", "sighting--327ba2fd-fddd-4cc4-9047-6085c3494f78", "sighting--07b65600-d653-452c-8d5d-31127313d9d0", "sighting--9e9c1426-2e23-4185-8d7f-6988b248a79c", "sighting--fcbd1788-3e16-43fb-9c22-d06d6c1ff8db", "sighting--68d98a10-cba0-41a6-a2a9-5f7ddc555793", "sighting--6dc93e6d-bb13-4a16-bdd7-3fd4f8765eaf", "sighting--8caeeb0c-d2c6-463b-b87b-1bbe6a079d1e", "sighting--14c71fc0-8fe7-4d2f-abff-2d8d611c4d14", "sighting--ec56ebfe-587f-4a62-b831-cf36f37a0b94", "sighting--c219c8a9-112d-469c-ab1b-369284a0088f", "sighting--f8762eed-7e6f-40f0-abb2-3fb7a9a3a96c", "sighting--e031b1fe-88b7-4638-a814-7f6d26923f39", "sighting--732beb3f-a1a3-446f-8a73-0d5554303066", "sighting--6ebeacf2-8ec6-4830-b69a-ab2e2631bf75", "sighting--97fbbf0c-344a-468e-92be-11b155433234", "sighting--5b0b7b82-a658-4520-938d-0bf54dc40df3", "sighting--12de9cf0-536d-4c60-8ca2-84bdc524c967", "sighting--d66adfbd-d4bd-46fb-a65f-aaff80ada8c3", "sighting--b909fb99-9dd1-453b-aad0-ff465b3eb548", "sighting--7c3d109e-0304-4528-ae13-8a40c37bd051", "sighting--81e93936-4269-41ea-881a-1fc5043d8525", "sighting--f6aeda49-dac6-4944-ae66-419281bae14e", "sighting--9f0c72b4-a839-4009-8e0e-d763014fc169", "sighting--4b7082b1-e2fa-458d-ab7a-5362d2502189", "sighting--9917dd33-356c-442b-ad32-798468eae801", "sighting--b11f8eb3-61d0-448f-b084-d79fd78388b4", "sighting--ab051401-3d2b-47cb-a59b-f3f0d1ca43ab", "sighting--dc28b6b8-e134-481c-b3bd-d07548f3a261", "sighting--1b629419-2dd6-41d5-8b9e-52a8c7517e4c", "sighting--2aded28c-8b15-4ceb-be8f-7ba010f793f9", "sighting--60fee37a-42fd-468d-ab62-6b20fe7e6d83", "sighting--1a3de66e-236a-41f8-9e1d-b234cd529e76", "sighting--1208f701-24d9-4b7d-ab7f-d3c99a28fb58", "sighting--5ceddea9-0a16-4bf4-8beb-b60b281de243", "sighting--3a334b82-faa9-4402-9fca-aa18f6c05626", "sighting--d47a6949-8827-4de9-875f-d0fee9b3d43f", "sighting--e0436e6c-c7d3-4898-8d60-822f1eb90e6e", "sighting--417f89ce-05d6-4b3c-a587-b15574a7b2cc", "sighting--ee46baab-586c-47db-a4d3-6b59938c6cb7", "sighting--c9800196-4a6c-43ba-9506-8e4ed7df41c2", "sighting--6f4be454-a2f1-480e-a139-fd7164123e43", "sighting--8085975c-ac32-4370-8437-b4a4129d0ee6", "sighting--dc7a82ea-8c8b-442d-aed0-91ad5a1f93d3", "sighting--3f09df9e-8e8f-4e7a-bc18-fac20b308a83", "sighting--279e1593-bf9f-471b-ac29-4e12500ec2c8", "sighting--1360fc38-6faa-434a-b8c4-c7116efae722", "sighting--6cdfebad-6696-4e3b-99ff-ace2aa2019cd", "sighting--05fc2abe-608b-4128-ae83-0043d80ed6a8", "sighting--f7333f8f-849a-4e4d-95c3-45eca18df274", "sighting--f7124348-2e9a-403d-a7ef-365719c18052", "sighting--45a10862-e111-4ce1-bf44-596a3b137558", "sighting--b8ff9fbf-1000-42ab-8aee-c4b571b83ada", "sighting--13f1d95f-358b-4bd0-b40a-5266dc921a8d", "sighting--b5272917-362f-4216-a460-0019c093ef90", "sighting--6250b61c-7dea-497f-91ac-ea4aaa5fdabb", "sighting--2c58061e-0ca4-41a7-974b-3ec283989219", "sighting--0e497e8b-8b0e-406f-b807-5b11d5f8453c", "sighting--e3ec2d4b-95f9-45cd-8b9a-8e623c82cb8d", "sighting--6b7eb4f3-e728-4a45-a178-98a11b3fb530", "sighting--ff33e548-25f5-4aaa-b450-985b3adf08de", "sighting--08cb9de9-4bc8-4385-80d7-72a0df864fe5", "sighting--bc04be58-648c-4f2f-a6ec-3367651c5195", "sighting--0476d342-7c0c-4708-b25d-0887c0d6d1bc", "sighting--dac2fdfc-a8d7-49c4-b14a-1e76bbe589de", "sighting--d343cc5b-ceb7-47dd-b6cc-7521820ff2d4", "sighting--4b42bb0d-e5dc-467b-a4ce-7a1b628064fc", "sighting--f8484433-5fd0-4fe4-aea6-dea18b0ffcbf", "sighting--0623ab80-7b00-45a8-b901-2b3f0e9ce7e2", "sighting--5c269c9e-5113-4596-bd82-0c4733fa86a8", "sighting--2e245879-eef4-4eed-936e-6cde9364289a", "sighting--fdc10c7f-842b-43b1-80b0-eafcb5f02b54", "sighting--3513803e-4891-4d69-8513-9a0f08c7bc4f", "sighting--a0f83a00-50a4-43e6-b7f1-1a805d739f96", "sighting--8ef85e63-a58b-408e-982e-89ff9ef2bde2", "sighting--e2e1f867-84fd-4ed9-806b-ec624105546c", "sighting--788d3c7b-c04e-490e-b312-da32b489969c", "sighting--0dd3f061-544d-4b4a-8c0e-becbd6c8595b", "sighting--b8b1a96c-ddce-483e-9ec1-e774e4efda3b", "sighting--a48f73d7-0ac0-420e-9950-59193da7fc16", "sighting--cda3f8aa-788d-43e7-8f53-44eae00086d3", "sighting--97a504b9-59f6-422f-b4b4-e8dffcae8883", "sighting--ef600c2a-dae8-4d22-82bd-06df7fc611fc", "sighting--343d56c1-dd00-42eb-ad11-dc7a3d75d2cf", "sighting--f0bf0dbb-eff8-466c-a267-00d814d77e13", "sighting--edb1f421-691e-48de-ae9f-4a997f52d991", "sighting--82b16716-849d-491c-8bc6-ddfad0038bab", "sighting--cb3cd68d-5dbe-459e-86dd-9b0ac3416777", "sighting--9421e95f-f36b-4f66-b90b-1e64e93ccd0a", "sighting--532e6d20-bd23-45eb-b632-92d5ac4913c3", "sighting--b3e2fc8e-c94c-4dd2-a637-ad656144d8fb", "sighting--d8bec73c-032a-42f8-aa40-afa3ff328a23", "sighting--307a6309-6036-4ffe-b2be-e0d4d6d13614", "sighting--d2fc7ff1-fbb1-48bd-b92e-fb54e0291f20", "sighting--4966d635-fa90-4755-a582-d1ce46110dee", "sighting--6d54607d-393d-4735-853e-34d867d4d5e3", "sighting--2909d155-9a9e-4517-807e-05dbdf11dc41", "sighting--cd3cb29c-c93d-4857-abec-e9e213045a7f", "sighting--511e93ac-379d-41d8-b3cb-e6578e679002", "sighting--80b55a52-45d7-458e-882b-8e8b57696923", "sighting--9e2d9f33-4663-4049-9d0a-01c2d6f0e066", "sighting--71b96190-c80f-495a-bc71-e12111c22d02", "sighting--e9df91e7-ec3c-47b5-8409-2ce813e53dbe", "sighting--49acafd4-38a8-4bb0-a7e9-77dd6c29acf5", "sighting--8b0e9d76-f121-4c68-a5b5-c29ef7a01303", "sighting--0aeda5fe-9836-46a7-9257-283c27b79284", "sighting--e283f64b-a794-47c0-8cb1-7a5f5592b05a", "sighting--d42b33a8-b9ae-4488-8e4a-bc8e54aafcb3", "sighting--fde75471-166c-4e23-9d36-f0e56fb12dab", "sighting--a5e46fc1-ee65-4e5b-8ccc-ffc1791c1636", "sighting--3b5b2dba-e5a3-4d27-b76c-b6bdd9b147d7", "sighting--8870f8a2-d52e-447a-8580-7c4bcc267173", "sighting--4ae9ceab-8021-42c5-a7a9-d70df9954eda", "sighting--2ea5bf70-f9ea-4ffa-9d8a-3dff740f6db1", "sighting--20f00031-3155-4cf3-820c-8ce93b5e9137", "sighting--f3521e16-ef5c-47cb-94ed-a094c2db2fff", "sighting--97531fc7-f32f-43ff-a1d9-d9c1853fa713", "sighting--784e7819-4767-4663-8f0a-810a0787c43c", "sighting--46064cdd-5915-4f8f-b3b8-1735b2c93e1b", "sighting--2b9f1921-fc2e-4693-b4aa-eb013b5b9e95", "sighting--32e92350-600d-4b09-8070-cdc2d58504eb", "sighting--152c3741-1a8d-4c08-84c1-db2230b881ac", "sighting--f2b74204-8c13-4ee3-88a4-bc0e918f35d1", "sighting--868c263c-4518-40dc-8499-233720c045e0", "sighting--cccbadf1-9736-4b2b-abb0-2bfe3d120381", "sighting--83f646c2-6b7b-4637-befc-d950dcc329d6", "sighting--a1d31cb7-3d91-4f70-a3e4-35ec7304fb45", "sighting--c48a74c3-f2ab-4bfb-8add-97689958ab4b", "sighting--d72e9b38-947e-481a-942e-bc36680ac815", "sighting--d7e24493-ce75-415a-940c-60178bbc1cbb", "sighting--6a10a327-3466-423b-9341-cf2215e3b411", "sighting--249b334e-2e4e-4f3b-95d7-552a9ac0878a", "sighting--bc40e9d6-c790-478b-8313-f7edca7a7452", "sighting--ae2a0c13-b8c3-42b2-a6e6-b2539bb52736", "sighting--3abd38b0-0520-4b40-81ea-dd3073dba3a1", "sighting--c9c583bd-808a-4b47-82d0-7bc83b5f714b", "sighting--e541dce9-72fd-4c04-b41a-f905444d3f71", "sighting--9076b15f-9469-4c7d-89e1-63111c0a49b5", "sighting--33ed4e52-207a-4057-a302-0bb9887061c3", "sighting--461f319c-e00a-4763-8e92-5ff5cadc2eba", "sighting--665f7211-d2e3-4739-94e7-1b575bdcf020", "sighting--320805f3-6a49-4212-b6dc-1133a48d20d1", "sighting--fbaaa5dd-3b78-49b5-8469-ee349ac1baf6", "sighting--e8ebb707-b645-4f8e-aef0-6dce0e9f378d", "sighting--0d946035-2c52-4d14-9a1a-db50daf470b7", "sighting--3e598623-4324-4fd6-a909-a1de15124ac1", "sighting--8c44dab0-29be-45e9-a6ae-102fef0cd972", "sighting--424134c9-d505-46d2-9a17-e610459dcf48", "sighting--baebc121-498e-42af-9d11-a618f16b6871", "sighting--37732f03-fb3e-4b5a-90ce-d6e796816ca5", "sighting--034d69da-8aa7-4438-9507-27776955ad92", "sighting--8ab2f5db-f0bb-4009-91d8-98d7076e69fc", "sighting--5ce6de60-397f-42ee-8988-6a27b0a9f021", "sighting--f014261c-9725-476d-87ef-22df5115182a", "sighting--26acdc6c-7a36-4f71-b96a-fd73edbf967b", "sighting--a65a5ea3-15d4-47e4-9d16-3ede3fd036c7", "sighting--932b3f9b-fc99-4172-b34f-13dfad07a8ca", "sighting--f6c2471a-ac98-4cbb-8865-facefd3a9909", "sighting--37cf3951-a464-4c4e-962b-d34645ce6dfb", "sighting--6f95ce67-9d3a-4f9c-b8a5-0b1316f7ddec", "sighting--71666333-f8fb-4c17-9b42-ed1d370f16bb", "sighting--f806d3a1-2182-4c8f-8be6-9f3992a1e5d4", "sighting--f9f10d14-940a-44e5-8bcb-6a91f89d1e01", "sighting--b0fc80c8-1cf5-4193-9e49-03b33dc330f8", "sighting--3289c16b-86b5-4205-b5f7-6df8ce066572", "sighting--e39ed337-1e76-4d6b-a64f-d5fb298ae7f7", "sighting--1e5e2255-3b21-483a-966a-ab031282cd3d", "sighting--00dcb0f4-18ec-47c5-b0f4-c6c15daad3f9", "sighting--d33ee723-c92e-4615-8c62-7e5e0fbf4846", "sighting--44193684-fa00-4aba-96b7-479868369150", "sighting--35d46ee6-3e3d-4cfd-be94-e045f744ded5", "sighting--d3a82d50-fcbc-41c0-880b-498de98b69ed", "sighting--67bcfd32-9278-4387-b522-67a719df2767", "sighting--50c9c715-842f-4731-b50f-6f741c27c0a0", "sighting--8dda179d-09b1-4eb3-a16a-d692febad3ea", "sighting--76026219-dbb7-41ec-96f6-b1e8cbe574a0", "sighting--7e819182-2bcf-47ed-8924-0faec9fa2d02", "sighting--8c03a625-81e0-423d-a685-5685337e4d67", "sighting--789e1716-86b8-4ad8-8762-9f553b48bf91", "sighting--6ef5d950-66db-4e55-9050-e8b91f0b9564", "sighting--8151c10f-3151-42a0-8a64-d08ddde8c013", "sighting--7f2f153e-cbd2-4a18-9d4c-a57be9c46c9c", "sighting--c83f931c-7097-4032-af91-7055933b5ead", "sighting--c96c875b-1926-4186-858a-bd56545fca0e", "sighting--26f9b94e-2635-4d5e-8b80-e72c7f57d96c", "sighting--317386c8-1df2-4bc2-9c22-0d930caad9b4", "sighting--b580deb9-4d38-4a5b-83fe-d76f18915cbd", "sighting--3f287b6f-9819-4088-b70b-5fc464859e82", "sighting--ed88ab41-05b4-45c3-808a-68e902548eec", "sighting--f95f243d-2818-47cc-8938-4920cfabc46a", "sighting--5c81f95d-46e3-4844-871a-a609ac633a8f", "sighting--a4c8272e-c146-4f3f-8caf-76be5759a553", "sighting--69df4b76-620d-4bce-a96f-691bb1e27924", "sighting--0e1a0fe6-a30f-4d1c-b3e7-95019ed03514", "sighting--3f2e3d2e-4bfd-45f7-8545-9c7d42ec7390", "sighting--b8c35ef6-0e32-4451-a7df-dd3ce50d6c23", "sighting--d8d6eabf-41a0-412d-aa57-efb9d7f872de", "sighting--875e8d7e-0354-497f-9f22-05ef9433f0b1", "sighting--4e1f496f-fdda-43c3-b573-e5db7b903722", "sighting--d312d930-918a-48c5-b63a-ba914ca34fd7", "sighting--53db6024-494c-4aa4-af24-f27ae75a9541", "sighting--4c2e8857-c664-4714-89c5-ca7a8615799e", "sighting--e6b6a569-9e25-4c37-8ba0-6a04ca48738d", "sighting--a8ad897f-6351-47fa-99c4-abfd6ca7a06f", "sighting--3be87bd8-b55a-47b6-a5cf-0a439e70c997", "sighting--d9969c2d-3648-44da-b616-ac14ec5ba396", "sighting--eed4e286-e2ed-4976-9571-a5f63bca7963", "sighting--05170d3f-2555-437a-b333-53c65b3dc0f8", "sighting--15a34207-fc0b-497c-87c5-8578b8007f61", "sighting--0a623a16-7288-44c3-966d-6b8b422e270b", "sighting--5a665224-5ff9-4a45-97e0-6ebcf39cc287", "sighting--9cb8ba64-53ed-440c-b27a-6d91dbd7a9bd", "sighting--90c58785-8125-40ff-89f2-d2361ca4105f", "sighting--acee4df5-31d7-4e4a-8d47-037e5991964f", "sighting--f27b8507-1e67-434a-8023-09b9c39df192", "sighting--e5b81cc7-fb93-4397-be84-49961cb12e09", "sighting--9068d8fa-ce20-45a0-b8d9-d6c85d66856f", "sighting--c7eaa1ec-18d1-46fe-bece-86530e801dce", "sighting--9bef9750-1f21-4d62-903d-91ca0cfb76ed", "sighting--508b206a-1dd2-460e-a76b-3bdeaffeedd7", "sighting--06ce93dc-807c-435d-a885-4718683b5030", "sighting--f4ce7478-9c19-4d7e-9d87-e496310308e2", "sighting--887f9c98-7312-4534-af93-33c4cc76fcc7", "sighting--587480ec-c789-40ba-af2b-b854a4fa5700", "sighting--88a989eb-7bcb-46a8-bbd0-1429c3729f93", "sighting--04560a9f-9d24-4b58-9f3f-421c8fc68006", "sighting--4473453e-161b-4930-a57c-027ba3f67fef", "sighting--499fbe6b-7f06-46df-9640-6f961051d500", "sighting--05bf1fa0-6db6-4dc5-bf3f-16f967fb140f", "sighting--b779bf9a-1a8c-4b93-8f7d-2d91d2c17ef8", "sighting--27d4aca8-b220-443c-83ca-594929d8c064", "sighting--d23e78da-0414-437e-9ce2-b0c03a3a9a6f", "sighting--1554b1a8-8ed8-46b6-9bd4-85e1900f3e81", "sighting--2b6212d5-d2d0-4ad2-8059-7a03bf92dfae", "sighting--173460c7-e886-47af-9495-e9df7c0692cd", "sighting--f903a2ea-92ab-498b-b8e7-0b198ec9dd39", "sighting--749e8c1b-35d6-4461-81d5-7da2407a2f40", "sighting--0ccedfbe-15c5-4c1e-a5b6-427f8ccd1868", "sighting--dc0e954e-ef9f-4ebf-a677-542ef7e20955", "sighting--1e45bc3d-9781-45e8-a686-5c8b6da56883", "sighting--7de42d99-2e0b-456b-ba1a-405006c7e319", "sighting--cf866d59-e243-4fd8-85f1-04ebbedc2d1a", "sighting--47b66f23-79c0-4ffd-895b-af03d4600fe0", "sighting--9368fe7e-e014-4427-bcc8-87715d6781aa", "sighting--affe0ef6-d508-4cab-ac2e-a98687575447", "sighting--329b9a31-5fad-40bd-8957-83069dc10850", "sighting--58fe1ff7-8efa-4bf9-af00-c464faf6f3d4", "sighting--c08a35d4-f1b1-472f-87a6-980b7b2bbd7a", "sighting--c1ddbb1e-a270-4325-b084-6ff4c4d8f09e", "sighting--f224be1e-138f-4d51-b570-b1079d7bee91", "sighting--4c473495-a9a3-423b-ab24-5e7a3d02aeea", "sighting--8ef3e285-96a9-4694-83b1-f35584b783b0", "sighting--2b6f2230-8a27-4159-ae94-909e344c29a6", "sighting--16407060-3c24-4b9b-b3c1-328547d24c7e", "sighting--e69f49f5-fbcc-4772-a5b7-7d9d912cc2a7", "sighting--3a9df69b-da90-4a89-9bde-42ac5a6eba4b", "sighting--552e5700-d76f-4524-8ba0-1d282e7b524d", "sighting--137794cc-5c1b-4a2b-808e-17f745d94c8f", "sighting--bcd4eae8-a0cc-4d3a-b624-ce722c06c332", "sighting--ff715f4e-d4b6-4cd7-b04b-7cfe0f0be698", "sighting--7438b349-2067-4783-9baf-80e9d0efe53a", "sighting--a6640d9d-34ab-4d8f-866f-70aa9de8e84a", "sighting--a6a99655-3e27-43b9-92a0-0d7e84ce4417", "sighting--04327e3f-e079-44e1-9041-602becc23c9e", "sighting--90340a7b-08a0-41d4-8343-d6a87d583a21", "sighting--0f313e1e-c77d-4f3c-8b8b-6c2642fe3c6e", "sighting--7a28e1a5-9beb-48ec-bea6-40a234194a29", "sighting--4fa7106a-2580-4af4-9403-7fc7f266f82d", "sighting--c3cda84b-dbd1-461d-b110-d5261da46ab3", "sighting--186b5047-0f8c-4361-9ef5-c27bcef6b7ee", "sighting--085969f9-8d30-454b-8f28-454c61bd6a8b", "sighting--ffa06f57-08c9-46d7-8525-babb02324997", "sighting--002ac75f-8584-4dc3-8e27-756feab269e6", "sighting--24061533-50de-4c60-9f76-3170023b79c0", "sighting--24a6535b-5f01-4a62-9285-af70cb2daae3", "sighting--b8b06d52-7084-478f-bb65-b4e5603e33aa", "sighting--e06b36ec-ca94-4937-91ba-d12f22a9fa48", "sighting--17364361-0519-4ca5-b694-998deeb2ec92", "sighting--4876322c-d5f1-4b8f-8844-9f9574b55a0e", "sighting--4f50e87d-f4f3-4050-ab1f-544917c00e3d", "sighting--9ce2c39d-074e-4276-933a-9e33f5adf962", "sighting--d2adf101-b684-476e-9a22-74dcc145f86e", "sighting--0e6a3a18-4053-4397-99a3-6941d9405689", "sighting--7ca6b311-134d-4d19-9926-61c5ce1c14c6", "sighting--1488dfd8-bae5-4be1-bc4b-4e6a55e4fa90", "sighting--c1dea5a5-6422-4f96-bed4-6764099e4877", "sighting--ad897fab-38db-4af2-8b6e-4e6a15707c6b", "sighting--c1d812a2-fc52-40d6-b0f2-afd621164c94", "sighting--d6307ea9-2a19-4884-aad9-4d35ea12045f", "sighting--b73c46fb-a5b7-4f91-8756-e0a2046d981b", "sighting--f2d5efb5-0713-4d50-8b74-ee791ad36faf", "sighting--049acdab-209f-4061-b7be-ce7f46cdd3dd", "sighting--7cb9a363-3c0e-4458-bf79-75dd24052b26", "sighting--360f02cb-9f3c-43d3-b00a-3a4820dcdbdc", "sighting--b8c4deaf-4e16-46e8-a7a5-4f9a60dec0a7", "sighting--72aa08d0-745a-405f-9d40-dc4401ae52a7", "sighting--eee4a4a3-463e-4c2f-b326-9ee3c56d62d8", "sighting--2563a198-3ee6-44c1-91ec-b64571855b73", "sighting--59a8eaf1-7a76-40ac-9cca-e108ebd396c5", "sighting--0e1e1ca0-e654-4356-8dbf-14e233bac83e", "sighting--d7b95950-63cd-45dc-b094-d9a319c8afa3", "sighting--7a57d415-1c3e-4e38-8db4-de91c2b8e48a", "sighting--994c32bb-c538-4f05-972f-41bcde1cdaad", "sighting--76d977d7-732c-48cb-aed0-06ac327c8c3a", "sighting--e3fcfe8c-25c2-46b8-9bd8-3b7a6f0189f2", "sighting--630a35b8-3d05-4e20-9b81-dfa075ec65cd", "sighting--5220ede9-4d96-41d2-b381-ac74504cd8d6", "sighting--f253bf7e-9f53-44a0-b90e-6344e622b604", "sighting--41dff346-3fd5-4606-92aa-5ab0e7dba6a5", "sighting--4c984f94-0ffb-4aa8-a0b0-4faa81063b54", "sighting--3588191a-6f45-43f4-9c7f-b11976d1c4a2", "sighting--b2f358a6-6c8b-4aad-98b1-86fae932f97a", "sighting--51097013-ef1e-4c50-8d8b-04611abc6a4d", "sighting--276e2852-3180-4423-b093-faf3c3d2eaa5", "sighting--c6ee8d71-cddc-4b5d-b3e3-66080cfa9a72", "sighting--ec53d07a-8ad3-48e0-99ed-2e03df5cb208", "sighting--e0244654-b2df-4087-a041-a6162c718a80", "sighting--1a4bf931-6106-4f02-9870-1209441f3656", "sighting--226091b6-4384-4427-aa79-b34dabf4053d", "sighting--b68178f9-02c9-4044-9b24-9409ae2e1443", "sighting--6927e01e-5e96-4b96-8a20-3c81e50519b3", "sighting--db644be9-5d8e-47f0-af37-491b859f66e7", "sighting--bd654b50-6cc9-46c9-a84d-d1d4afe0cf44", "sighting--43f16da5-f9b4-44c0-9be9-a139d5ed467e", "sighting--2ee6e066-c3e9-408e-a71d-ea83aacfd6e0", "sighting--9480358e-4fca-4b1d-b40c-e96d6fb201cf", "sighting--bbe85578-1318-47a1-9624-7624b16a9372", "sighting--1ae9287f-9525-4c34-93ef-6cd805b9edbb", "sighting--96a1b12e-fa24-4926-b687-7be6115fd849", "sighting--e52f6eea-8b5b-49eb-aaa3-70a220100dda", "sighting--d73ee855-e4b3-48d4-9b6b-85edc1ea6099", "sighting--fc883e99-3573-455d-83ee-a2eb5d52488e", "sighting--dedce486-f938-49a4-9962-ffb00fc4de8b", "sighting--b72e2932-b3f7-47ff-836e-15da7205c62e", "sighting--71c28eb3-55c3-4c3c-80f3-17eb0102c298", "sighting--838a9d8d-bf24-4179-a102-902cfb384836", "sighting--0e274231-aba3-4dc3-8d22-8b0ef6162d07", "sighting--e9e04e68-91b5-4eb5-8dd4-f98b0b755637", "sighting--e5ae8560-c349-4c34-b1ee-cee5a8198974", "sighting--0a1f97e5-e2b7-498e-9788-5e71897b4cb1", "sighting--4f451a26-1929-4ffc-9803-803f04f54f74", "sighting--93e61971-e05f-4fd1-9f8b-9996f40aa5de", "sighting--4ea6cdc5-4ffe-4331-9e3d-3f7f3426bcd6", "sighting--b9742ddd-9963-43d2-96d0-3d8478a0db7d", "sighting--1e45c69e-800d-41a3-8e2d-369fae740f17", "sighting--c6288ac8-4f95-42f8-9c48-7204d33c46d9", "sighting--794b2734-801e-4cb3-9622-34d6e61c75fc", "sighting--9436ebc7-8247-4a2e-a5c7-7371ae051869", "sighting--c52671a7-dbe6-41ab-9c93-000e7390d4cb", "sighting--2506276a-9c4d-43a1-b184-827457f6f487", "sighting--9bee68d1-5fc9-4b7f-907b-6456d9b83df3", "sighting--3128f3ee-36b7-4ab7-95c9-47cb6a8d986a", "sighting--6444b468-5eb2-4ccf-9229-882a9e2513d4", "sighting--72f6369f-e02d-49ea-b9eb-238d393ad67f", "sighting--1d69b028-a12c-4639-a1d7-d5bb551207c6", "sighting--603726b3-c496-405d-bbaa-0ceba925cd38", "sighting--e2affe2b-fdb2-43db-a360-a6f5ae11c644", "sighting--4d8546db-d0ad-4ef3-bdc1-0d827edc38ab", "sighting--74f63e34-a1b1-4401-845f-96293ec2a4f8", "sighting--89808b8f-6cf6-44e8-a6e0-dd0817d5adda", "sighting--37fbc575-05fc-423f-916c-7b571b747a56", "sighting--2edac141-8ec0-46d1-bb8f-f7186260b827", "sighting--d42c081d-55a0-4bc1-a43f-0541858330e7", "sighting--4264453b-f497-4037-a5bb-a4ee26d59755", "sighting--036d62fe-f073-497c-83f2-9f6cff5b8c8b", "sighting--be38aa46-16d4-4b01-9e80-d19f26d4ee4b", "sighting--5148df09-3f0d-4593-8264-16229b4d3bd2", "sighting--baf9adc5-9d67-4082-9a6d-9f352b15b4e6", "sighting--6d73c004-95f1-4fcb-b854-71625ee7ed53", "sighting--52f70dfe-7705-4fc6-80f5-c1a2991f1313", "sighting--a3c0d4d4-491f-4c24-b9c8-ed23f95910ee", "sighting--e06780ed-57b5-47c5-93a6-e6ff982b419d", "sighting--1724f58f-e076-4eec-849f-8278fcc97260", "sighting--f9d19cc5-6af6-4022-bb42-1fd84d12387d", "sighting--97afb46e-99d9-4ed8-8871-ed3294cf694f", "sighting--04a66036-c389-46cd-a9ee-ddf461f57864", "sighting--0b126395-bad9-456e-868a-9c443ba67b52", "sighting--4617581b-448b-400c-a0a0-40c0b4e43461", "sighting--8e114eeb-7dc0-4d23-8679-6d904d569e19", "sighting--0d134395-1227-4035-ad22-adce07012f06", "sighting--9e4977e1-67bb-43d9-b47d-4777b6079248", "sighting--a7ad8842-4fd1-4c58-a75a-c16e73f8cd66", "sighting--f0043186-7bff-428b-b67c-1e7365aba58b", "sighting--76b463a5-8028-4f95-ba1f-a89dec02ea1f", "sighting--3132275a-be14-455f-84b5-532cf7e8e36f", "sighting--7f7783fe-ed1a-49d7-b837-faf5b40851d7", "sighting--cf769118-e661-4841-a992-a7c52e5d1696", "sighting--e3cc52aa-9e78-4f87-888d-dcacf7902941", "sighting--5ef960c1-c085-44c8-b556-389db410d1ec", "sighting--8177044b-0c76-4645-a602-a297d2ab9677", "sighting--463a109f-22ca-4c90-ab40-653e00853a1c", "sighting--ffbaeb12-27f1-4301-a68c-46a7e25b479d", "sighting--286be479-8bd7-475b-9c85-598d2b00f093", "sighting--ef0adfd3-54da-4f06-bb84-d9307303f4ec", "sighting--0da89ebf-e476-4bb5-b23f-531db54d73e2", "sighting--49a1a755-a292-47df-86ad-1c6cd760671c", "sighting--b8100603-d135-414b-b551-712f0ef38ebf", "sighting--428223c6-900f-40ce-b965-64c342952c6b", "sighting--d571915f-0dc4-4747-b9ec-69b25c0df7ad", "sighting--f5954f35-d337-40d1-9084-5a22805fdf39", "sighting--d9bdb1ec-f6e1-4c55-b297-27d41c39bd30", "sighting--679847a0-2eb9-4df2-8ff7-13be6c1be21b", "sighting--51037cc7-ee2d-497a-ad8d-8d4eb3dbdd21", "sighting--319da980-963b-4f8a-85dd-bedf1e19adfc", "sighting--43fa24a4-3d8b-43f5-b41f-88d370679609", "sighting--72bfd7f8-8921-44c9-9ba1-5176aee8cdc4", "sighting--2dd775ba-e322-4257-9d7e-c83cc1c5fc30", "sighting--697823e0-8d42-4e83-abc9-bdfe8ef5c9e2", "sighting--8c6501a0-a691-4756-83bf-f4a5d3f79928", "sighting--6b3516ba-c3e2-47c3-9882-8113aa771635", "sighting--72ddf020-c262-4cd5-81b4-574bf59f643f", "sighting--59708832-0dab-43c4-b41d-9337844ec451", "sighting--1cb65fa7-694c-4675-8b5a-e7da090ce7f6", "sighting--175fbabe-8bb2-4493-a3d0-716c3e7776c6", "sighting--016395dd-65fe-491a-848b-4f1692c05a94", "sighting--176f0555-f5e7-4c27-b0c2-2a088c1a03aa", "sighting--ea8c0f5c-4365-4bab-a4f3-b8639f002cf0", "sighting--7e7e19c3-b1ed-4f06-a28f-63710d041745", "sighting--8368a3ca-e72a-4a67-a0f3-dcccc7caae06", "sighting--0f114979-358d-45c9-8f1a-2d863cba2859", "sighting--001506e6-4e2a-4ea4-90ca-d4c6d2eb129a", "sighting--127d4535-e795-43de-a907-78dccee66b82", "sighting--de211832-183a-4325-aa06-e363ec46a815", "sighting--9ede6e3c-0cbc-4b50-99bb-0667e4798ef2", "sighting--09c7f77d-a052-406e-b60c-2fb977c8a20b", "sighting--f98d1d40-24c8-47c3-815e-5a6233d8bcf4", "sighting--5ac6a001-e4c8-48a9-a770-eef5c91e9966", "sighting--02607acc-829f-4d84-a022-e130d02490d1", "sighting--ccd41458-7095-4322-b02b-7c277219b39a", "sighting--8f811bdf-c2a3-4150-9995-187a4294c08e", "sighting--eb7b4dd7-f67c-4dd6-b02c-bf1536c9c54b", "sighting--8baadc4f-3c8d-4626-b4a5-c8166febeae7", "sighting--d16560f9-c56c-41e4-99cb-0eb08341d00f", "sighting--4cb89e28-67f1-48c6-beae-75d45bec5938", "sighting--875ff086-3f92-412a-8161-f68c1f364547", "sighting--dc8ba915-dddb-41dd-aa36-df8a3e406eca", "sighting--62cbc8b6-58e4-42ff-a38d-19dbd91dd2a0", "sighting--427d284e-67e5-4954-a58e-2accf2ef6a85", "sighting--9b8036dd-6450-474f-8b28-83ee7640a5ae", "sighting--63079049-d28e-4902-8169-65899753dc3f", "sighting--b68a02a9-c656-4003-b9d8-a68b552f3daf", "sighting--c322c38c-ed50-4f0f-bfdf-d701d1daa3aa", "sighting--bf4c65b6-978d-4630-bdad-9297af06d459", "sighting--d3062613-80c5-4e3e-807d-ae1feef58b7e", "sighting--aff00d13-7b36-4f2d-9da1-5a4c59174d27", "sighting--175b79ad-2fb3-4a78-adaa-14341470aa42", "sighting--d439dc89-083f-4a67-afef-98fa18888c0b", "sighting--85d54403-4915-4bd3-bdb8-f5bb691125ac", "sighting--a29c11dd-fe6a-40a2-a241-8eb568098892", "sighting--837d251a-5cab-4a11-a1cd-d3b4503c3c61", "sighting--84ec1eca-2360-4261-af62-1d9eebb23059", "sighting--737e3787-33cf-4f61-83ef-8a997c18bd95", "sighting--9f8a8673-79c4-4c92-8cd3-10f4cb5a8ca8", "sighting--203d776e-03f2-49a2-ad72-dcbc9f646d98", "sighting--ba4db573-e7b4-4bde-a9f2-9082badb468d", "sighting--bbab85df-ce73-4b10-8bd1-1327679a1c09", "sighting--bc2fa56a-923d-48c4-b864-f8308818737c", "sighting--02e1fec4-fd05-4603-b775-33339fba53d7", "sighting--14889a70-793b-4590-9fae-858b7a53ae75", "sighting--4847d682-b7c2-4270-ab07-b11acc33794f", "sighting--81ee903d-5e29-4097-b5ca-33d8d446e76b", "sighting--df9ae4ea-1793-4a0c-a471-c946946e0a06", "sighting--299b5e36-1337-4380-9956-6989bdb1869a", "sighting--651e9df9-4051-418b-bfc6-b83fc44d7954", "sighting--cd8d44b8-c6d2-4cd9-ac0c-86463aa03377", "sighting--dd2ac385-a51c-4b94-90e2-564336f4dd43", "sighting--338748d5-0574-4a38-a5b4-d4b631a73d3c", "sighting--440d8929-f552-4ef8-8ff4-717b225fdc4a", "sighting--6ca85e6e-ba7d-4912-8b86-7a94840b2d36", "sighting--b69e6b58-f826-4d9e-bfee-61a9f8ef8002", "sighting--a0c11a0c-2e1f-454f-b76a-7ad3dfc43899", "sighting--9fcc2f90-79d6-406f-96ff-8ecbc8a27bce", "sighting--4824a2fe-d88e-440d-bece-4531f12f66ae", "sighting--54c43fef-a03e-400c-a83a-b9036cd00d6e", "sighting--8e9048c9-ab66-43ce-8116-1ca0429c22ca", "sighting--56c78581-4d63-4d24-bfb8-37f099621c3f", "sighting--d5467c65-1f14-4276-871f-87249a437c5a", "sighting--7ed15ac3-195a-4986-a6c7-9370b17e1711", "sighting--1f7dc36a-2854-4474-86ef-0117bfd4d95b", "sighting--330fbbc4-a679-4d14-a9c0-425f6dd476c2", "sighting--434e80f7-c8cf-4a0c-990c-a232cd0efe14", "sighting--19f0de1c-ab06-4115-862e-b98581bc2e03", "sighting--47c42893-45af-431c-b7c3-251d7915dd67", "sighting--3b94e4b0-0d56-4d2b-ac14-75df2b7d524b", "sighting--88477bbe-0474-4f65-88d5-6e4255e9ca65", "sighting--e9902f97-768a-4f1b-94c3-f68d3f1e52e2", "sighting--7736c8be-8e15-4314-8767-ca7ad1e44f55", "sighting--3b4d17cf-e480-408b-9452-e29714283bce", "sighting--7e08435e-08ec-402b-b9b1-984a813ca959", "sighting--4c0a76aa-434d-4877-bfff-2cdb4ce1dfd2", "sighting--b1f0222c-b742-4ea5-867b-6b7f889b9d99", "sighting--d7668924-cb2a-4d4c-a4d9-8dd260f307d5", "sighting--ba4b1845-c046-460a-b1e6-f21bf1ac2464", "sighting--740a1483-0706-4745-8838-d7278db5ca66", "sighting--a547d8ef-9e9e-4ec5-8988-f4f630920e0f", "sighting--a4012328-2f5f-4b9c-8a2f-64056ec7def7", "sighting--4a3e969e-1c45-4411-a894-a8dfb17ba013", "sighting--751cb3fd-9855-4a74-b80b-84e135ab688c", "sighting--06f021e9-e79f-40b5-a8cb-3b52f48baecf", "sighting--1f5e4771-4186-4f04-8f08-57a6432dc20f", "sighting--b62ee136-5389-4278-a704-3f7df2b0427b", "sighting--21d6ab43-5ff9-4e93-99a4-09da49c15d31", "sighting--cb60d113-a6a8-4f20-85d8-0de7ae62af3d", "sighting--7b434bc0-e514-40e4-bb9b-e97c39084740", "sighting--fca798b0-4f83-4ab6-8735-0fcd9612366a", "sighting--303cfda5-19f8-48ad-8476-5f978de6a971", "sighting--276bf0df-92a8-4964-8b64-31f6b55a4ce8", "sighting--e34604f7-fe6b-4953-a3eb-8cb732ff7fab", "sighting--541aab39-4ede-4094-8aa7-d1e053ca9142", "sighting--45191df4-cefc-4741-85c5-68ef9980038f", "sighting--5e913c72-d378-45e6-8de5-cd7803a5c323", "sighting--05f23b7e-02e8-4f57-9e7d-4a01c2b6c8fb", "sighting--d93fc32f-6e97-4bbb-839b-21bd631f6255", "sighting--685f5532-2649-4f33-a0e8-9911105392fb", "sighting--b460839f-b353-4f36-ab87-eb4c1632f440", "sighting--b14d95c1-83c3-4c74-8912-2bf3ed6ca853", "sighting--49fbaa9a-8f56-463f-a38e-9b7c27b205f3", "sighting--aea68d29-ef03-42ea-9f17-11fa7d1a569b", "sighting--175e3866-d0b4-4fb3-8594-949478308099", "sighting--e5175573-0b07-4671-afde-4ea4bb7e4482", "sighting--04545b12-6266-4922-8e86-2b6cded3dc05", "sighting--f047d39c-fc83-41c2-a244-919ff6693daa", "sighting--69836824-d896-452e-ac80-9439015c6f6b", "sighting--06fb09eb-462f-4ad3-873a-cf3b42365808", "sighting--cff829cf-2b3e-4819-ac5a-89e91ef492db", "sighting--fd2934f0-01ef-4b06-bf0a-dd464697894c", "sighting--866406e4-8239-42c1-a458-535bd2d8f061", "sighting--02b083aa-2a20-4100-b93d-a8faa5bbb7a0", "sighting--ed42eddb-d67f-49ec-9114-6c2a37025bf7", "sighting--a6b16e35-5d29-4339-917a-a9e91248b183", "sighting--37b37b88-0ee3-4929-93c9-5e681394dbb7", "sighting--6681cbfd-4ac4-4bbd-9c22-ecb941f07a06", "sighting--cbca31d6-704c-4f94-9d8f-60e5b79e2b65", "sighting--68533ce7-52f2-45ed-a207-3ec97bcbe06a", "sighting--001af1d6-6f95-47ba-89cc-0a059b900c89", "sighting--32cf47b6-e66c-40ce-b28c-4f21daf143cd", "sighting--01eb560c-8bc9-4995-ab5c-f99fe4c0efa3", "sighting--978fa4be-2add-448e-b45c-65a0854a69c1", "sighting--3998b390-92c2-49fb-84bb-b46848e0c6b3", "sighting--fab1c83b-667e-4bfc-9628-a096ea236473", "sighting--85366b35-d1cc-4850-b524-a9ca772d45b8", "sighting--f51599c4-4f79-44a7-abd8-6f25b6c140c7", "sighting--a00524c5-117e-47e5-8252-2011ad5f127f", "sighting--99e28a63-3b82-4020-87e8-d5ef80452de7", "sighting--a6e0a2ac-c7fb-4d4f-ba69-aaadae8f13eb", "sighting--0a2c448c-a862-4889-8a3a-8fa2dc2bccc5", "sighting--e847bbdc-4564-4470-b0f9-df6f60a13310", "sighting--bf4b871d-834e-45f5-9ab2-9a37e9158beb", "sighting--be815c18-d733-4260-ba50-516fea314dff", "sighting--66cd989b-ac56-4307-ad27-360de6ea9db9", "sighting--3b5133e2-68b9-480d-8719-cca0c14e92da", "sighting--7b7e98eb-c0c0-4d85-9047-842d28f5d2f2", "sighting--80620540-8832-460d-94af-5e6c170d010b", "sighting--045027f8-3be4-44c6-89ca-f0981bb8c10d", "sighting--cfdef48e-caec-4939-809f-2ae838132ccc", "sighting--9b4f100c-714f-4576-9dc7-75ac0626bc5d", "sighting--70dd25a0-6609-425c-a67e-93cefb21af66", "sighting--49a21786-3c3a-4da9-96f4-ae73fea64e0d", "sighting--9c217093-5176-4be3-838b-5d565336d3b5", "sighting--1ee15863-c9ff-42d0-a5ff-2383bbe287ab", "sighting--1157af21-2a55-42ce-941f-e31e596df2e5", "sighting--6b4b6e71-0e5c-49ca-8d3f-db62eed00e89", "sighting--4d491b6e-72f2-4e6e-a5cb-9a331f881859", "sighting--df3793fa-e407-4ab8-b601-c224cc2806c4", "sighting--c9d6904b-73a0-4422-a6ef-ac027b7e3b71", "sighting--34d41dbb-fb9c-48df-876c-66cc22fd94e3", "sighting--2f289e5c-72b8-43d6-b717-e8e9002d3324", "sighting--d68b7bd9-f300-4456-aa69-75269793316e", "sighting--294f217a-025a-4fcf-b4e5-2aa88cd7f7ab", "sighting--39de1be2-84e4-4685-85d1-0a592e0fb5eb", "sighting--0ab60e45-2286-443c-bbf0-97a7d58ed2a0", "sighting--f85b04f2-ad21-4b4f-ae0d-fc0d08e52478", "sighting--159b6df2-96d2-4290-a81b-ae51f46e2028", "sighting--be0e8800-78a6-4a05-87ae-76cefd6f6edd", "sighting--9c1c8420-b469-47c2-bca9-d2e116470e94", "sighting--a01e980a-d6b6-42b4-bdd7-4de79b7f66f0", "sighting--212bf497-2a0d-4370-9b61-39c290b4fab4", "sighting--0929baa6-73fa-4753-aeee-c093e4af371a", "sighting--08cceecc-9aac-4a2c-a27e-d714c91f22d6", "sighting--505159a5-c26a-44c1-9e76-e5e841b8a537", "sighting--2abb94f1-0a42-4530-a2a3-1250e3fe84dd", "sighting--ba3813fa-1e53-486c-bc2b-03bcb35ed6d3", "sighting--ef874bc7-cafa-483f-92d9-5d7affb61822", "sighting--57d8a4ba-2f1c-4d5c-ac7e-f62b4069531f", "sighting--cd1236c1-0591-429e-8a1e-5c220638bbfb", "sighting--f2059092-f585-45bb-8e0a-4c864b5b75f5", "sighting--67a86eac-528d-4e18-b37a-0f5c5a2b8c60", "sighting--2037a82a-7bb0-46f3-aea7-da8a4f354a24", "sighting--5e67e811-c7a5-4fd4-a80a-e3b9c441f700", "sighting--c7729ac1-8c96-4f02-a462-0671084e0fe2", "sighting--9fe507cb-fe23-41e1-b169-25a764d3d752", "sighting--34fdae8c-8747-4245-80a3-e1422fed7316", "sighting--0c7d7f0b-552d-4fd9-9c7f-32ee608fce4c", "sighting--24b3f131-93fc-407b-b4c1-9d1af9c4e72c", "sighting--7df3108e-428f-4037-bed7-c5a50fbebd15", "sighting--12bdfced-5948-4311-a97f-561937c7660f", "sighting--5a801fd3-0d32-4fed-a386-32e00cfff814", "sighting--60cb3080-f35c-485c-a742-c2c3b48bf668", "sighting--b0194b22-8f63-4a61-bbfa-32a04e254741", "sighting--bb470a43-3fc7-405e-a0b5-5e0560aa65c0", "sighting--61696daf-8cf2-47a6-80fd-b80d63dc5c4d", "sighting--83e53385-e6f3-420d-8f34-88b8bef99105", "sighting--d82a5c3e-49c7-4309-ad20-ef36a42b9b7a", "sighting--fe22a88c-a11b-4d10-b0a6-d5ddadbdb553", "sighting--5f20509d-d636-4ec3-9786-f5cb2fa7085e", "sighting--184d7dd8-1106-438c-94d1-f031791a5d06", "sighting--704c77c6-7a42-44b4-8dc3-7e8b2c723b07", "sighting--1d66655b-1f15-435f-917d-6f1a43206bea", "sighting--23bd1b12-53e4-4a92-9041-3c718f4fe166", "sighting--d9167ce2-b5a0-4dbd-a6f8-f555b26a22fb", "sighting--eb581b2b-74fd-486a-a167-f1598864924a", "sighting--c46ec5e8-5c4d-4f2d-9a22-81965cbdc6e1", "sighting--370c0a17-49b5-47e3-a71e-9bae758e7906", "sighting--0bc80b7c-40b4-4a3f-9805-548d5554955e", "sighting--0706a177-9f22-45bb-9e98-2f0f8cc734a9", "sighting--26c4c77d-c691-4025-8b3f-5ad3781a2c81", "sighting--90012d0d-51c1-4371-8338-93862006e6cc", "sighting--b7ed4b84-286c-401c-b022-d7a974a2141c", "sighting--efbbb8b1-0a05-4bfb-8d14-6605171b5c92", "sighting--d3c4c01a-f263-4772-aecc-7754e0fc183c", "sighting--1760fd2c-6c5b-464c-b6df-584ae4dd0ce9", "sighting--b6157990-ff0b-4048-a1fd-bb6c887ea267", "sighting--190440b9-7537-4483-9e17-d1db5ca0178b", "sighting--8b4ea562-623e-4493-bd2d-d79bb39a4e13", "sighting--6add40e0-ca85-452a-a100-76b0e61c7eca", "sighting--fd6d653b-530f-4fec-8356-edb21c46e95a", "sighting--761c6e6c-5529-4297-8c5c-8a32bceec116", "sighting--cd5b0c2c-0130-42c6-aa26-28e993263719", "sighting--478ae67d-0b23-4992-ad5d-b8551551d7e6", "sighting--f250070e-bf59-4c6b-8d53-3d2448165618", "sighting--f37ffda2-121a-4743-bfa3-5804fc177c25", "sighting--85df4212-9bc1-4bf4-ab56-f6ec0927840d", "sighting--23efb573-731f-4fce-b600-cdc6bbb4a462", "sighting--84115fcf-b0d5-4f15-a7ab-32a706fc1b3f", "sighting--ff4983ea-94da-479f-b8b1-92540967b710", "sighting--2f8c98cd-ccf7-42b0-aacd-0f3e04464663", "sighting--08490ed5-fa17-4fb5-97f9-175b97c6f528", "sighting--f6df6106-469a-4200-8acf-95ec1c64f03e", "sighting--2bec64f6-6d99-4560-b108-eee90158c771", "sighting--fea96212-f904-4ba9-8dc2-4adcd36c6530", "sighting--1ee24c7e-22c9-4097-8b35-680e5da56992", "sighting--41044d27-d0e2-41b1-9545-c2f6881ac2ee", "sighting--a39af990-9aed-4241-a04d-5ccf3f0014b3", "sighting--723cc874-9975-4151-a6be-3fab4c795f07", "sighting--a2569ee5-09ce-46c1-ba89-1b0d7330b34b", "sighting--6e2be32d-7cc8-4703-97db-fb7d145a06e3", "sighting--cd096304-c887-4300-aff9-0f115c8ca599", "sighting--760194ff-4d42-450d-bbff-bb0e4bd5ac43", "sighting--6f0de1b6-ec32-4ddc-b2d6-6c3f5af60f1c", "sighting--99c1e350-1cd5-4c8d-bccb-02ce005fff64", "sighting--def0d26f-e79a-4254-8b73-e8887050d581", "sighting--a5b244c3-63d0-465e-9fc3-bdf9c5f7e214", "sighting--8f4ba00e-3ef3-40fe-82de-281cfbca3427", "sighting--35d8dbb3-cfd6-40d9-b9a5-8b031806a141", "sighting--dcc29144-280a-4744-83b9-c4a9e6d17f6a", "sighting--1354f90f-0464-4440-914a-db8e45e4dc38", "sighting--d3c3d43b-d3ba-45bb-ba2b-94c511294d15", "sighting--99dad1f9-818d-4c9c-8338-fc104fcfd3cd", "sighting--b814c198-2267-42bd-872a-169090302c33", "sighting--35629c7e-80b3-4301-9c06-c906cf6456f8", "sighting--0ab92fb1-bee4-43a0-a218-5e808c55fbc8", "sighting--a484c41d-3c1d-4043-9660-73c5979878d3", "sighting--604823f5-765e-430a-8fb6-3b4f3120936e", "sighting--4f5a603e-216f-462d-aa45-07e0b9d81eee", "sighting--1e818693-702b-46f7-9b43-980e52621792", "sighting--5aa347ad-8d53-4b17-99d4-34943dd475f6", "sighting--35d35a50-45fb-4324-9bc0-95944e71e565", "sighting--91f6391e-178b-4614-ad75-e9386c1c7794", "sighting--33185cc3-87f9-4bf1-b4e4-9fc7d3905bb0", "sighting--fe03e811-6617-4510-81fb-bd01d13f760f", "sighting--e08d341a-d8b8-495c-a58b-6f41186536da", "sighting--39a1c570-137f-481b-b142-8dfe03b0deed", "sighting--b2f88a44-b4c9-450c-b79d-c056928fc12d", "sighting--3b522154-6017-48e0-a76f-dffdde75bde4", "sighting--ae60ad0c-c470-441a-8b1c-67b380f36c7b", "sighting--d4da6d9a-6e2a-4827-a2db-6ed40226ca06", "sighting--5a2d5247-1444-4aec-be0e-7995d21986d4", "sighting--5c92d1c2-f88e-49cd-a663-31d63053f3d0", "sighting--9d833919-dac4-4b0c-b6e4-76b85bfed9dd", "sighting--00825385-0192-4313-9af4-2c2df31fd781", "sighting--aaa97ab2-ce38-4857-bb5b-2e27cde85cd2", "sighting--c39630db-2496-4704-a5dc-58f846c278b0", "sighting--bc39701e-9120-4039-a97f-ab1d29ca0159", "sighting--601d8202-8091-4162-ba61-0563db34406d", "sighting--a767252e-2274-457a-a488-ebc588f6d4d5", "sighting--dcd90ae2-d2c3-4679-9217-ced604abcc4a", "sighting--4db86ce7-e252-4a09-9bef-f6b694d22094", "sighting--e650629e-f7cc-4b09-84cf-0e7a6d797de5", "sighting--5ece0211-8a1f-4c0a-9bf8-ad080e3b38a0", "sighting--ae65caaf-cd58-4407-8cf9-d4119e697140", "sighting--984a6df2-7738-454f-8e12-82ecd29fd566", "sighting--76dac7e0-5ebb-453c-b9ab-418c9d0363d7", "sighting--7e192753-ee6b-408e-94c6-f270c6b9b310", "sighting--d2507d8b-fc74-4437-98e7-15ac86f32741", "sighting--5a6b4934-dbf2-45b5-960a-a8d886f1e1ac", "sighting--7f81914b-e3a5-4c6b-922b-bed6c8026028", "sighting--a8af6a8d-2920-44ff-b88c-0d73186c24b9", "sighting--25249b32-6e2d-43e6-af9b-aba7022965b3", "sighting--11fc5342-0137-40d4-8b62-64170fc263cc", "sighting--14a0e841-a54f-436d-8cec-468fe95f4646", "sighting--76e0767d-1fce-4053-bc70-13415b596a2a", "sighting--88ed508f-d551-4b14-9768-1a86f958704e", "sighting--d123b3a4-4ba9-47ff-a973-1eac7ccf8ac4", "sighting--9c8440af-018c-4fe5-adeb-75b06d2d18ae", "sighting--05d16fcd-9f0e-47d6-bf79-ebfbe054110b", "sighting--926ab1c8-f6cd-4981-b9e1-07e8d0e88394", "sighting--24c15b1f-63a1-440f-bdea-5e981c318957", "sighting--b155d34f-c914-4cbc-92ce-a90f4339f54e", "sighting--8fd02636-26a9-4a22-adf8-4fba167df604", "sighting--58c47650-e4e1-4957-8b1a-4d48ecccde1e", "sighting--0541e213-7a9d-4e86-a499-02ef6d1cfee1", "sighting--c0a0c0a4-8295-49eb-807e-94a0f78503d0", "sighting--c953c8af-4aed-4c86-b3ad-3ef844387db1", "sighting--ecb95a21-f234-4908-a30a-1d3901b73537", "sighting--52551c1c-f4fa-412e-bae2-7bfb7df76001", "sighting--336454d5-2ca1-4cad-9b3d-158f74d886a5", "sighting--9fc2bf91-c02c-4dae-89b0-ef9eb28165b6", "sighting--42e2db10-1d79-4c77-a921-f95793fa6b6a", "sighting--93f18126-ab82-44a8-8d7a-bb11dd240524", "sighting--018efb8c-0e54-445b-a667-d9c804153959", "sighting--545cd8ed-e9b4-468c-9c45-c0bb63e68935", "sighting--c35ee91c-7799-44a3-8ead-d6bd5c73edb8", "sighting--6bc14be6-da62-442c-a2c8-8f3f05395edc", "sighting--e7301843-c842-49c8-9c04-d56b69f08130", "sighting--ce7bea4a-4473-428b-8190-5d290764ba61", "sighting--c52f6a75-fff5-4b10-9c2b-bb869034d189", "sighting--5102d570-a013-4af0-b154-ec101feba0c8", "sighting--018ed886-0369-4f84-ab04-f93cd4aaef49", "sighting--6c9c1320-5331-4a9e-b5f7-6c18870a0198", "sighting--4ff13108-d1d8-472e-9900-27beaeae4c46", "sighting--c3579ec6-2ab2-43cc-be06-030fd70af528", "sighting--84f01453-5d49-4717-91ec-108da52976e5", "sighting--35138d9e-15b0-40fd-85c2-e666b7109eb7", "sighting--4012d1f0-4074-44ad-a040-506b11e28d4d", "sighting--bb6733a5-cab6-488b-b01e-958bd693ba8e", "sighting--2d4d46c9-083a-4a34-a9dc-d4f0e28a612d", "sighting--a579d5e8-a72c-43ad-a52f-e5dd0931d956", "sighting--f518eaa8-74b9-4fd6-a347-4f17ad04828b", "sighting--fab9ce1b-3a85-4b80-a5c9-1f0b2a6da033", "sighting--213197b6-16f4-4159-a275-9905a8f134b8", "sighting--328e82a8-0089-4609-b6e6-ac4f26945cec", "sighting--131a73ad-aa90-4317-85f6-5d92dedec309", "sighting--868f5368-6318-4021-9e96-f5de4dec9a24", "sighting--3d89566a-7c51-4d6c-835d-f2ec67e77ada", "sighting--636c890d-77f0-4e2c-89b3-a26dd045d8bd", "sighting--1ac8d281-e103-406b-b8fc-6ba1379fdaad", "sighting--0bd1c5f3-2bd1-4fe8-be16-c85571eadc71", "sighting--94459e2e-949b-464f-a3f0-a25086768ad0", "sighting--dc3fc107-b4e6-43a5-9b58-4c1cd4419ad6", "sighting--d69c7f7f-d26d-43d3-ae6a-6e6d4d00c139", "sighting--53e7bd59-3372-4225-af00-56b29850a893", "sighting--505b8a7e-4e97-466d-87c6-dcd5ed5164f9", "sighting--bf424849-ea42-49bf-b415-e33aa9c81df9", "sighting--18e11ec0-889c-4d8a-a062-bfa6ebffeac1", "sighting--0bac62b5-39ae-432f-86b8-f1c0e1162ca4", "sighting--500703fd-470b-499b-8531-98f1d6366c5e", "sighting--f05b38ca-8985-4fd5-9529-24f6f72af384", "sighting--121fb32c-14e2-48f9-b3bf-caf5012c6688", "sighting--182ee72f-640f-415d-be22-8b6ca5377d0f", "sighting--141aca10-fb05-4e1e-ac86-8b1db2cfe829", "sighting--e42ab768-92b5-4b59-b307-1a05d686dfa8", "sighting--75ad2e5d-9de2-42d2-bc90-fffd78bd048a", "sighting--59af0978-0f55-492f-9f95-27c1ec13e5d5", "sighting--55f205e3-2b00-4be7-9a8a-30f30bcad872", "sighting--64b12fa4-1bcc-4582-b21a-b3e39adbd793", "sighting--024edc9f-5131-4153-ac99-3826ca40fd3f", "sighting--3e567617-4ec1-4d5f-8cdc-1a4bdb0b8d59", "sighting--c5c72aa2-93e5-48e5-9f73-5d3359e6bec8", "sighting--8089147b-2e3e-448d-8dd5-5f465b2b6c3e", "sighting--0f8464f7-b92b-4468-9e86-9cd58729ae95", "sighting--720ea46e-9496-4217-bfc1-f759cea64337", "sighting--ba1b3f5f-2e38-4e47-bacb-8cd36171e9eb", "sighting--be9c7a84-72bf-4d28-b0a4-540e5259e6d2", "sighting--f9f2d2c9-03e8-4ed6-8aaa-3e2807daf7b4", "sighting--44d3ee5c-a3fb-4339-9cf7-8871f5dc7d9c", "sighting--00e58eb9-015c-4115-813b-24068b15df34", "sighting--d1118439-5dbe-4ec6-b5fd-8911e7410be9", "sighting--70a95f96-3382-404b-bb0f-96434a09804a", "sighting--4f089926-e953-4b05-a430-d482de1af78f", "sighting--0d2e4613-6013-46d0-acb5-1cdd03aa57b3", "sighting--ad1406af-3613-4c5d-9c74-5f81660118b0", "sighting--a3a7a895-16e4-4ed4-96be-05af457cea96", "sighting--6ebebb92-0d18-46c4-aeb1-a68187a06a9a", "sighting--5c5c9182-2f26-4117-bbff-75d875a88996", "sighting--17e2148c-ce46-4801-bd7b-f426ba4787b1", "sighting--a23b24fc-49fb-4c7f-a42b-3e14540d25ec", "sighting--e80bb890-6e7a-481e-8ddc-38bed8b4582a", "sighting--f9839b86-a375-4d60-b288-d296119ef9a4", "sighting--126daaa1-edb0-4498-aeb7-5f1005d759f7", "sighting--c2729080-e2c0-4329-82e6-e11c5c6105b1", "sighting--3af3b792-4f3e-44d5-bd37-104fd964f60a", "sighting--03afe7c4-0361-4870-a3c6-f6a9ea3e4f05", "sighting--4086dcf1-ddcc-4740-afbb-e470797bf48d", "sighting--6333e66a-f43b-4b32-ada2-13d0c947b7b0", "sighting--9eda1abb-2a8a-4a90-b1b0-f7d3d9e6f4a6", "sighting--745c51d0-ca84-4137-9f02-3c3848cbdeba", "sighting--84349b0d-f72f-4c8b-b7b0-3f2d6d2ea3f3", "sighting--4f3bc4be-23e5-49f3-9a0b-e71c09044ecd", "sighting--cf668428-79ea-43c9-a470-e3b8937ed493", "sighting--e7501270-5868-4f3b-99f3-6c30d00d8ec8", "sighting--1b8b18da-6f7b-43eb-808b-119073fe2724", "sighting--3cdb5292-718e-46d6-ac26-1939a86b332f", "sighting--bdae3a21-1ec2-4409-ab7d-8ad31c688210", "sighting--7b48329a-0e46-48f5-b02d-9d424de86158", "sighting--70d3b164-204c-4cb7-8ab5-e9cb7647a9eb", "sighting--6c206466-730f-4846-ad07-459251d05725", "sighting--d3e46e9e-4d90-4f1f-a27e-73f8b51dadb9", "sighting--6ffc23f3-8122-48a7-81db-19fc59af05c8", "sighting--2243b8c8-3589-41d2-b29d-d62fe52fab76", "sighting--0ed66837-f90c-4704-830a-52575e7cf4f1", "sighting--420e992e-733b-496e-a917-e30ef93ebc25", "sighting--df0cfd48-baa2-4a25-82a8-cae144f8bb07", "sighting--9d7ac289-3e7e-4a68-92a2-4ebd80e3c1e0", "sighting--f74eaf91-5b44-446b-a01b-4d8b9d229fab", "sighting--f756dbad-44f8-4448-a3a5-7d2cdf55436e", "sighting--fa564f5d-58c5-4d2c-8c57-5e766b6f3006", "sighting--a3852882-98f2-461d-96dc-93647983c5ad", "sighting--544fcb37-bafd-45f7-856b-ba5593c86277", "sighting--058267df-2a7f-405b-8bbc-248f0017f091", "sighting--972e2bdb-106c-4983-8ab4-8cad4ec0d9d5", "sighting--d32ce249-f129-4200-aac9-22abf694a299", "sighting--03d55676-4367-4131-a121-abd1495a8902", "sighting--5369720c-145c-432d-8d38-e807300081ed", "sighting--90dcc533-9ac0-4576-b1ec-874230f227f4", "sighting--7a515df2-5b7e-4e77-82c5-4398a8748069", "sighting--6dca97fa-4995-49a9-9f7f-9c2c50ceefc2", "sighting--151a7e79-1bbe-4fb8-896e-c85a54e77b5c", "sighting--f882e5c4-98ce-4587-bf1c-c4afddea23de", "sighting--be66e3b1-8873-4a50-ac4e-e2a2d86df07c", "sighting--305b5f66-ef0c-41ed-8a52-96d739443d84", "sighting--4a33e9ce-fbfe-4f7c-a066-108af0fa9ba6", "sighting--13c5e1c1-b7ac-4dd2-b3dd-2ac7984fe78d", "sighting--138831ec-c620-4e20-87ec-ccadf9b7cb45", "sighting--fd428f68-f1fe-4f13-96ce-01371afb207a", "sighting--43421ca1-54a0-477e-b1fa-2904d11551f5", "sighting--fab6667c-ee4a-4ad3-8241-988a929506a9", "sighting--7a16cbf2-f2ef-452b-84e2-ba7d665213b3", "sighting--dcebb178-5388-442d-b0e0-bbc6dde65251", "sighting--84d3ff3e-7aad-4c6f-b283-ae7f5f044f31", "sighting--02871764-8de4-4475-8af6-f821a7f6abfc", "sighting--6b1a823a-9618-422e-8298-e680334e3ecb", "sighting--2c095099-5934-49d6-93c1-cc04c4eed256", "sighting--e854f498-b809-4ae4-8af8-b09701cf6ea8", "sighting--a537bce0-f3a6-496f-94bf-35ca1028b995", "sighting--35b38c81-ada4-42ef-b778-719e303c07df", "sighting--c7902651-ff78-43e2-86bb-2ee359323b81", "sighting--05ab2285-5035-490c-9e79-9eda06d0c002", "sighting--1cfd8a99-14a2-42ec-a496-3b05f17ba0f3", "sighting--7e474f0a-f34a-464b-8a76-8ebd20b807df", "sighting--6da55373-9a95-4b86-bdda-28bd9a6968f6", "sighting--ffcbe579-6984-4ee7-8051-924cf22c0e13", "sighting--4a3ba289-d944-44b7-a8c8-dd429859d077", "sighting--0a2234bc-ce2c-47db-b264-72c885f9ef4e", "sighting--9552809b-c4b8-4672-b525-529a46fe1bba", "sighting--3e224d92-e323-479c-b618-9b8cf936edd8", "sighting--e0907da8-c0d4-4a0a-afef-20334a8027fe", "sighting--37d4e8ce-e029-4faf-992e-7c08ed7f1784", "sighting--83eab53b-4e0f-40b1-8e77-7dc60cea2a07", "sighting--1f12680e-ef22-4e9d-9819-e819c7cb3df4", "sighting--e8e3dab0-1edb-427a-8393-c94040e52c04", "sighting--29c63c82-2a96-4e37-b15f-8629dd45823d", "sighting--e2c65503-2800-446c-a9f1-bc66d1ad46b1", "sighting--171d86c9-b886-4774-b611-3a95b6b08fe1", "sighting--700ecfdb-b616-4d66-9e87-3b803f48230c", "sighting--365ed916-d88c-421c-90a6-5bcea63176e4", "sighting--93745105-6f12-4819-a4f3-254a541870b4", "sighting--44af32e1-4ba3-44ca-972a-da2ad5c84be7", "sighting--ccead0a2-9b77-4bf2-9213-4e4f5757430d", "sighting--d2e29092-c61f-4579-975e-4de4a0e54cb6", "sighting--39992fe7-d202-46a9-8e6c-2b9dc1c78a58", "sighting--0c8a724c-7d41-424c-b79e-61d7f7777761", "sighting--0d1795a4-e0d0-4e32-8915-bff3c401bd24", "sighting--23693afb-ad41-4a3e-b110-c80754bf3875", "sighting--24a33e10-e0a2-42a5-a3b2-e063104ebd6a", "sighting--6840e6ef-8333-4439-b8f2-a4a8bb92e7fd", "sighting--fce92d9c-28b1-4f99-a71d-08af5e72ddda", "sighting--7dca1213-a192-492d-96af-06508f27450e", "sighting--724d099b-be6e-463b-afc5-0d8cde2d88ab", "sighting--436814b8-15f2-406e-8089-a5ebb0969073", "sighting--5a705820-68c8-4611-938f-c3407494a0d6", "sighting--dbf9b647-3fa6-47c5-986b-9ef8795915af", "sighting--23e429e3-afc9-4d7e-814b-0dc7e9428184", "sighting--a873def3-252f-41be-aa4e-1f6bde51426c", "sighting--c32d73fb-97e2-4927-9335-dff32d920209", "sighting--bf30d16e-7e8a-44f6-abe9-811bc5551e2b", "sighting--9ec5d08f-7031-43ab-a92a-edc900de7b72", "sighting--222338a1-7881-465c-ad28-cf5310562a93", "sighting--40d85cd8-c5f7-4480-b303-423f521e2118", "sighting--2e511258-1bac-4da4-a068-952a716844f1", "sighting--535e1d30-88ef-4b1e-84b7-61a98cfe25c5", "sighting--e098ce9d-27ac-47bf-9744-d6306f65eaa2", "sighting--a7cb1d0d-0f2d-4369-bb26-22da3b2daaa8", "sighting--717c323a-1723-4078-abff-3b89de3f673b", "sighting--03d2026e-e3bb-414f-9091-3c3953e5d193", "sighting--3818a825-6a66-4c77-9a1c-5a2fdda3a76b", "sighting--7eabfc5a-2339-4ace-b3a1-8e87b582cb97", "sighting--d25c3973-94d3-410c-a7b4-a326028650ba", "sighting--7dd09650-9a58-40f0-8824-65366195bf15", "sighting--c676e0fe-8835-4b61-a46b-4408af626855", "sighting--9a9223fd-e5cf-4058-bc15-d303a6404a28", "sighting--deb8553b-6e95-40ac-a55f-d6290a0136d6", "sighting--10c65ab4-0c53-43a9-9061-1af506e88394", "sighting--8dd42c4a-6ea5-4f50-95aa-4cf4d547d162", "sighting--da079021-d70b-41f1-8d8b-f7854d543d33", "sighting--5ba1217f-21ff-4622-aa15-20c0dcd8020d", "sighting--1a28a459-0e7c-4a99-afd3-80a0ec0d6de6", "sighting--1a477ce2-2c1e-4e56-8952-b15ff3287677", "sighting--2c9ed044-41b3-40f3-9495-90c9c197fc5c", "sighting--0028a44a-071b-4842-b177-248054d74c84", "sighting--c115048e-25c4-47eb-b68a-26c864d581aa", "sighting--814381ef-5050-4b9b-92ca-bdf3f82613e8", "sighting--1e5170e2-94ba-44a0-b77a-beabecc04b41", "sighting--be5a393d-1ec6-48ff-af8d-4a58b1b31fd5", "sighting--b91981e6-7b6a-426f-9ccb-e9a70e6ff42e", "sighting--c6db76e3-2010-47b4-a4be-889aea251bdb", "sighting--88837e03-8585-430f-b1d4-3e216d52ec36", "sighting--4b64294d-0e5f-4f6f-9a5f-55c8bacce3a4", "sighting--9e2a014f-21d7-4b9f-a703-0720369588cd", "sighting--df9df28b-3930-4fbf-a329-5049fddd1e84", "sighting--7288bae6-0d92-4b63-97ed-504d50373c29", "sighting--59966be5-28b6-46f1-ae5a-8bd0e03eccc6", "sighting--269414a7-6651-48db-a6fb-13499250a736", "sighting--dcb8fe2e-b732-42f5-8af7-88b0cdec65a7", "sighting--e39b5e4b-c585-47e6-a424-19c423c9b442", "sighting--6a195643-b54b-42f0-b38f-d0b3e1f70d9a", "sighting--1748b720-830d-4d1a-84f8-7c9abf1b6239", "sighting--67c01132-66b9-463f-a6b0-63fc96add54a", "sighting--fbd02427-89a0-4b86-9546-df0ee3fe14ba", "sighting--c9311844-1c4e-42d7-b233-dfc411e4035e", "sighting--cee6a074-d5bf-42bd-896d-bbfce293109e", "sighting--cb81f1b8-9332-45d2-8081-f5cc4b98ef3e", "sighting--ec3fdc99-08ec-43a7-91e0-435918bf6a6a", "sighting--5cf2b25f-6610-4d50-b61c-f39e00acfcfa", "sighting--a55a0c7a-2496-41a9-9996-bb1c6d007e2c", "sighting--604d6398-6ff8-47a4-9203-16e58dde2ac4", "sighting--e91326c9-c80e-4eaa-9289-06815f3a8e20", "sighting--62b3ebe8-6036-4dd1-8488-862705549542", "sighting--a018a0ed-367f-479c-a5c2-77f7c6bfbeb5", "sighting--942daac7-0ec2-4159-a0a9-d4272e0f8639", "sighting--5fb3eeae-ef36-4af7-b156-783a4849793d", "sighting--00a09c71-b4f1-4530-9f4d-36e804a8578a", "sighting--745b3df5-0d22-437f-af74-b1bbf6bc7132", "sighting--0fea5899-0c27-4b77-a6e5-0173d1c6fee9", "sighting--3ecaa0d6-4bbc-4d1f-af1d-b3f8bb7870f7", "sighting--e4ca6ce6-22ad-4a6f-a1a5-d135d272b772", "sighting--9de65a03-09d5-478f-ab14-67cb7059b1de", "sighting--265125c9-f738-4d36-b3c3-9c2b1a863a2b", "sighting--b52876f2-f1c4-4279-8171-875f2070b9a0", "sighting--70e74bdf-0cad-4dc8-a24e-2ba08ed25e54", "sighting--957b01d7-708b-47f7-b146-04a3e9fcff8e", "sighting--1a84ec89-f923-4db1-974b-f4bf019d132c", "sighting--b1f20be8-cdcf-4391-b268-d055b4e687a9", "sighting--20b20e74-0724-4fa0-8b6a-9d69cad2f7da", "sighting--54da279b-c6ef-47c8-97c5-7957dfcfe892", "sighting--925bee29-603b-4bfa-a34b-3e69dd1f38bc", "sighting--c19f475c-6cf3-4e04-92ca-7f69c900af90", "sighting--ee978013-a5fe-412f-b64e-beb4acd63e1a", "sighting--7a3e7ca8-80ef-4b94-98ed-f65ce75ddeba", "sighting--bd871b89-49df-48bc-b76c-8f318dafef20", "sighting--f9632099-ccd8-48c9-83e7-ee8faeb85cab", "sighting--380973c4-2d02-40eb-8ab8-54c72b79e819", "sighting--b6019799-b69c-4b8c-aa52-b900e47e6d38", "sighting--78a47355-0732-43aa-a5bd-4797724d734e", "sighting--83bc34f0-6de9-43a5-ac9c-8f87422c2733", "sighting--a2a4fc20-dfdf-4e46-b5d1-f916365591e9", "sighting--d88eaae6-c25a-4039-9d88-78d9fd7db904", "sighting--31c05b9c-f532-4b02-910f-1c107800ed86", "sighting--b5e35b18-cbb8-47d4-ba55-cd064b2e9d90", "sighting--b5aa0057-af5c-4b57-99c7-98cadf28f9ad", "sighting--e2d968b5-880e-48ed-9d92-2471b3bc16d4", "sighting--e29dcbdd-15ca-43a4-913f-38dc7d88b339", "sighting--6618c06b-e25a-4fc9-8af9-bae42e053696", "sighting--ba39ce8d-2b96-4748-baa1-882af7552c16", "sighting--82783a86-39f1-436b-b083-e830f7eea7d0", "sighting--a8c9d0ce-7151-49c1-b250-e4ac5e394cc0", "sighting--33f90b04-88bb-484e-ade9-697ef28edd0a", "sighting--382b53a8-76c4-4290-ada8-32b699cdb40d", "sighting--ce9d3418-c694-404d-9e8e-8a71dcea2e9d", "sighting--fcef3319-565f-490b-94b9-06dc4ae6cf18", "sighting--5e35a846-763b-43b3-b88e-47bc997bd7a4", "sighting--ab3cb05e-9ae5-4ad0-a924-5bb720431893", "sighting--e67ac6fc-2fa0-47d6-b601-382f83fd81aa", "sighting--50bb2408-af6f-4b1d-b5cc-0579cb467487", "sighting--4eff9b5b-999a-46d2-bfba-6d33b7f7807d", "sighting--2bb5ce00-b208-4ddb-89b2-4ebf54baf55d", "sighting--bf07ed95-b10e-4964-8dae-5c793d1990e8", "sighting--f1b36d0f-7c7e-473b-9b4b-00b19343e395", "sighting--1556f191-ff79-4b9b-90e5-cf56be0c4e4a", "sighting--56a9654f-b650-448d-abae-47f1fa837b6e", "sighting--78e64176-c6a4-425d-9c2b-e7bdb4ec8a33", "sighting--ec963fa2-7be9-4714-b42c-f6850f73e855", "sighting--2c1daaa6-c33e-4650-9ee4-2674983abaea", "sighting--496917a2-cbd8-4475-97d5-c6700baad899", "sighting--6e853802-deb6-40d4-bf39-4c04cd499c45", "sighting--f5f524f5-ab31-4d79-89e1-e1761925f359", "sighting--bdcf49c8-a394-4fcf-9720-4f55b39a17c3", "sighting--de9cb6ea-7690-4144-a3fd-5e3664834ae4", "sighting--5c00388a-f44c-4147-bb4d-ba34edae805e", "sighting--63894f0a-1241-41e6-ad73-18c47469a062", "sighting--c6d6c647-8c12-42b7-b12a-0078ee2b524a", "sighting--d1717ab0-6a76-42ae-b3ff-135c39f88877", "sighting--c84f3386-83b0-41e6-bba3-da8ddf71ab69", "sighting--8b58a469-7a01-40c9-87d7-2fedf3606cd0", "sighting--2fa79579-c3a0-42f3-96df-6c80a21a1ef5", "sighting--20f1ec08-38cf-48ca-8b0f-a47fb5b95511", "sighting--66005a9b-2095-4a97-8f74-6422c39cca8a", "sighting--9777f27c-e757-4a0e-a3fb-e07b8c395c62", "sighting--d3b04d7a-0f3d-4f1b-9461-9fcf1ea361d7", "sighting--ee809ddf-90fe-49e4-8bec-de0ac8165073", "sighting--15f69936-35e0-4944-80a4-784d309abaa9", "sighting--6fe8b14d-21fa-40ee-85a0-eb56784bac20", "sighting--94738617-6797-47f3-9170-0001ad848e6e", "sighting--02418f2e-5858-4216-a59d-eac8dc86a37a", "sighting--83b7a4a2-f3a9-427b-b975-695efedd0fb2", "sighting--bef50aba-5562-4cc2-8967-340c7f250d72", "sighting--00882727-e087-450d-ae30-567677f3d909", "sighting--06e121ad-044a-43d8-babc-8ce0db0ad447", "sighting--d3831a8c-593d-41c1-a9c7-10d20d658d68", "sighting--8e421179-4492-4144-98c8-a8604e8f3b0e", "sighting--1593b9c4-1dcb-4905-931c-dd6c995c5ccf", "sighting--269e42d8-fe93-413d-b415-df1ee76fbcfb", "sighting--15724c66-9caf-48aa-91f7-9a86bbcd4d2d", "sighting--b1d0ef6e-2ed0-4f7a-b1b4-37ad685c90b5", "sighting--b2cf4c4a-63ab-406e-aa26-cb873f111c95", "sighting--6c793952-5a99-4198-b118-aaeebb1bf66d", "sighting--ab4b2d37-db3b-41e4-9285-5869166d0387", "sighting--a8139dc1-12d2-4829-8dd0-82d1998f3dd9", "sighting--13ae2547-9501-4ee4-9c1e-d3ca7571ccf6", "sighting--f1884f74-e2c4-43f4-a88b-479cceb2b6e9", "sighting--f9186dad-cb1f-4818-8087-f8966b17269c", "sighting--9ac975ea-d0ad-442f-8b69-29798ff4739b", "sighting--9f892c88-41ba-49ce-83d5-78c7ec0d03fb", "sighting--f3aa411e-e12a-4f19-9c86-a11a365a7038", "sighting--379b10e3-1b3d-474b-bb4f-b8118c5ed311", "sighting--1d01fcff-21b4-4d0d-8dc4-a6639a049ab0", "sighting--0db08ece-0c99-40a8-9266-960083e2765e", "sighting--7bbc796e-0f10-49ad-91a0-912d812339f7", "sighting--4f109052-b4dd-4c06-9737-5dc2f1e127e8", "sighting--6e053f00-9ccb-4394-a633-97659ff78866", "sighting--dd81b06e-673c-4962-9859-4ce119ea87e0", "sighting--c363f816-9bcc-4580-a704-26649bf8c014", "sighting--bea16b70-488c-4b1d-a86a-9f6bc09644df", "sighting--85aafd51-368b-494d-a6df-c62e06eb342f", "sighting--a5f73e37-38bc-4fb1-8f4d-bb07e8dd501c", "sighting--86d8956c-3d3a-4774-9341-b0e813176123", "sighting--2dc38ad3-20a4-43ad-8bcc-6ac453bd8c0f", "sighting--bf3b7c20-321a-4431-aa10-cdfe9bb9c278", "sighting--81c34ea7-7c7e-4684-89fa-8872726f64f0", "sighting--50e12fda-4c82-4172-a19f-a02286bfa333", "sighting--e60e2867-c5da-4cfa-aaca-204ace5083e0", "sighting--0869ec54-0f4a-4b0d-bb8c-1f0b866d259f", "sighting--76fd4c89-fcc7-4873-83fa-745b27504278", "sighting--56b18b9a-9f2f-4067-92cd-46e5a98ccc62", "sighting--8e34541b-51df-4f3d-88ed-b5542b5fae86", "sighting--b802aa1e-e2de-4b43-80f5-2246c4789776", "sighting--40bd4b78-b65c-406f-ac3b-1ece2487237f", "sighting--5728d8ef-7d6f-46b4-a81e-72f8a6585365", "sighting--63a938bb-c1c7-4753-a659-3846e7f36e76", "sighting--c86c8806-df43-48b6-93b0-79f984c8eed8", "sighting--0289712e-f0ea-4dbb-b79f-615cc51d25c4", "sighting--8d7a289a-be18-4c2d-bacc-cceda9b60ef4", "sighting--2c6ef309-a08d-4292-b3bf-667ef8e9ae56", "sighting--384ce6ff-340b-4c32-8bfb-f1bdafcc4f41", "sighting--0afbb83d-efc6-412d-ac8a-b385e416e1bb", "sighting--4c7697fe-412d-4461-a553-9218d3f2d338", "sighting--76e467e9-c839-4e3c-99ab-d6b623045ac1", "sighting--93aa5fde-fe39-413a-9eaf-5b31d3a434d7", "sighting--fc7c9729-b5d6-43d4-9713-9cad3b830b0d", "sighting--2fcd7dab-ad04-4e7f-864e-97ed1d8e2c2a", "sighting--cdd40506-228e-4797-894a-29d03b1acb3a", "sighting--02ad20df-38b2-42e4-a353-12f7f6f19b0a", "sighting--28d258fb-6db5-422b-98ca-584f0f6a7957", "sighting--bbb92bff-68eb-4d2b-a931-8f8380cd0828", "sighting--e878adaa-c2e4-4f97-848b-19303754a42d", "sighting--65bbacd3-02cb-4c3e-b7c9-a85f7d229fc6", "sighting--fb47bd95-1357-4b45-9f60-72692ed585f5", "sighting--b907ad00-49ab-45cf-acd9-d9363cd031f3", "sighting--817e680a-6f3b-478d-b752-57521b60f10d", "sighting--6ea5acb9-c6a0-41de-bd70-1d69e14e0e27", "sighting--2018f2c9-c07d-4c85-b198-0b169c0f7a33", "sighting--58381c46-66a4-4088-9253-611037b3c6b3", "sighting--77890fb2-f5ae-4f15-9d1a-2a9f18806f8c", "sighting--9feda932-111a-42a8-8f64-ed3bb4bd2ed6", "sighting--34d9d50c-098f-4190-bbd3-4a6ca403f57e", "sighting--30ed763a-f280-40e9-8e19-fa2eec7dc6c9", "sighting--6a8a8819-a0b0-40f7-a61c-05fa9106f85d", "sighting--4c3b8065-e8e9-4ed1-aa7d-8e594d39e0ec", "sighting--471f0403-14f6-43b3-add0-7fc57095b562", "sighting--5bed2dcb-2375-46a3-987b-3849164f1eca", "sighting--f6f7d1ca-5739-4656-a672-cb4423e2b1e1", "sighting--a7650511-715e-4e77-823b-a1fb6b1f710e", "sighting--faba747a-9cad-48f0-b9f5-3f2e07ad984c", "sighting--69f29161-8c42-4764-9f6d-9a3005a27d45", "sighting--f21ed325-9603-45fc-b9d0-28d67f1ebdb2", "sighting--0e070e30-9de7-414c-8d4e-b82026abc96c", "sighting--fe3970a2-fec0-4984-9662-f80699bea619", "sighting--f40ae413-a343-481e-b846-be7d2106f434", "sighting--c64aa589-1f1b-4b2e-9976-2eda37931a52", "sighting--59ff5510-23a8-478d-8097-260316087056", "sighting--2a10e898-5e0e-425c-a67a-35b6017a2705", "sighting--c9f54856-97f6-46e7-9996-0704b5598dac", "sighting--9a3cc15c-2307-44f0-a0b6-1dad50d67ab3", "sighting--963abf94-e232-4465-be97-1a2e6588ea8c", "sighting--eb5c6c17-12af-44c5-b0e3-e4326891cb07", "sighting--c1a99525-7e2a-4750-995b-0b277e5fcb77", "sighting--3dbe894f-6edb-48fb-bf11-0aea372e6681", "sighting--ab185722-364b-4406-99a9-891caefcc92c", "sighting--428b1a0d-9c90-49b3-877a-237d7b77637f", "sighting--e84e59e1-9c57-45d7-b7f5-88f26376857c", "sighting--b4b832c4-9879-48e1-aac8-bc83479dbeda", "sighting--8d110381-d428-40ab-8c8e-baf79afa4163", "sighting--6fab3354-5246-44a3-b3e7-758b4f30f880", "sighting--f595cb52-455d-4dfe-b207-0f07780d7f0e", "sighting--dc58e682-672d-4281-9306-c1408808e44f", "sighting--005a65ae-fa45-4e2f-8108-6c0b3f472189", "sighting--81d9b6ac-4111-44ea-81e6-0f4be613486b", "sighting--c4094918-1423-4027-addd-2de0916706b4", "sighting--c06f234c-aec8-4325-aee1-8e58a803c497", "sighting--d23b0b58-991f-4c79-90bf-e7f1e2ac2b0c", "sighting--792f4ab3-45ae-44cc-a364-f7116fdce532", "sighting--ff13a75f-1470-4e68-8643-d36291c79047", "sighting--b628b6cf-7b13-443e-8568-7223c7b5c060", "sighting--5a5237c5-37bd-481f-926e-901f3cb0b186", "sighting--6593423b-56b4-462f-aed3-0f73f503cdaf", "sighting--99cfadad-e506-4fd1-8b02-9e1dc6a4956c", "sighting--c4984f9d-c1b1-4699-913d-14dda77b2939", "sighting--795bd301-f03a-4c68-a5fb-fd8d113384d3", "sighting--3ead0157-3b25-4ebd-8735-55df80b2cf4e", "sighting--1899b83c-a769-48ce-9e1a-c19dac0e3ee9", "sighting--fff99335-5ddf-457c-8d57-555895cd48eb", "sighting--f08bc371-cd8e-4426-a53c-b50249c52343", "sighting--ef382d3e-c1ce-4d0e-a27e-4978137e6c1f", "sighting--966f6de2-43bd-4ebe-b30c-2328f889af5e", "sighting--cd0c80a2-1640-4b00-8de3-6edc69634c4f", "sighting--c723aec1-360f-4bd6-b4c3-f7ead1bde832", "sighting--50ce8d33-1703-4cb8-b946-77fd46983ac7", "sighting--689b4943-4dec-4735-bdcd-ca4e3ea8859c", "sighting--3e1c1abe-f57c-49fc-8344-e469f026e822", "sighting--5b5c708c-f62b-4d99-a6ea-b96d8329bcfd", "sighting--7790bd2d-2670-4bbf-aa53-15bf6850b2be", "sighting--bfcef1e4-cd96-4247-96d8-2958eaf30055", "sighting--2ebb1b09-39a0-4812-8f4b-f5848c55ca96", "sighting--4398e5c6-498e-44db-9436-0de085d971c7", "sighting--fc7251c4-5dd4-4fb6-8733-3ad721abb1b5", "sighting--a9153262-66eb-49a8-852d-00e0482f9181", "sighting--20468c48-67cb-4e66-bd23-3f4e05503290", "sighting--a982843a-438a-4fcf-a379-e4a4dd233f7d", "sighting--762ef011-8828-447a-b97e-85f9caadd663", "sighting--5df1b191-c07b-412a-bedf-bbe818d0df2c", "sighting--e4cb1419-569f-4c99-ab8e-2037950e6e8e", "sighting--9151a965-04ac-486f-ab83-b36afe8adbf0", "sighting--f77d6e62-5f30-4265-9d7b-ada032456b68", "sighting--a1ea79ed-5890-47e3-a27b-7faae31b58e5", "sighting--fc96ae04-26a5-4738-b62f-783aab855c52", "sighting--09a5423e-8101-4ef6-867c-728afa5ab3fb", "sighting--278315e0-e63c-4b3a-951f-ec91ddb015bd", "sighting--f7205214-bc21-4555-9448-6919324bf244", "sighting--3f09ad4f-a36b-47ee-8baf-46486667c2b7", "sighting--8514a25e-7d7b-4070-b1b1-49077f82846a", "sighting--7325155c-5407-48aa-80fe-942bdd1e7372", "sighting--30f78e78-256f-411e-829d-00643cf4b18f", "sighting--48b50fce-e516-4f5c-99d4-1097037882d7", "sighting--dc3c9c69-95bd-42cb-a42c-897ff5b8bd2c", "sighting--c2a5c55f-f8e1-47bc-af66-8cb672e7f451", "sighting--e2297fe6-f415-4e81-93bb-fcf40b6588a5", "sighting--44988ed8-cc2d-431e-a4af-949d4c47751f", "sighting--9ab86f98-3a89-4262-b539-8af108d81f6c", "sighting--99adb6b5-0b30-4170-b976-d7eb44115c4d", "sighting--da1ae97f-661d-45f9-8a63-0d4aede28dd3", "sighting--f2d8b4fd-9578-4a11-95d6-43a300889d8c", "sighting--644f9162-5453-4249-9ada-c3b496d162f4", "sighting--2c07b045-1a01-433e-b4fe-cf25074e178a", "sighting--1e5f4080-2a6f-44d6-8203-2fe07561a52f", "sighting--cb0da92a-e8a6-4545-a187-4273aa813126", "sighting--00dac570-45d3-4986-89f4-eb9178327aa4", "sighting--c21b3d03-b935-4924-8e59-ab76f50e60bc", "sighting--70dcda7a-08e6-458d-8e54-57a075660fec", "sighting--bd16480a-da89-4a05-9fcc-5c137532471f", "sighting--a34c24f8-356f-4b80-b95b-04846471029b", "sighting--7b88126d-bd0e-4cb8-aadd-5c4811e2c316", "sighting--fb128f44-29c0-4301-be87-00e6507e9615", "sighting--5c90b826-9e84-42af-b774-e58b7b601b42", "sighting--7b05b0b2-71a9-4e20-b505-161c8e8efc77", "sighting--6b8446ce-eaeb-4d0d-abf5-2c5003af795c", "sighting--d0b29722-a3da-4f74-bf5e-204625b43b41", "sighting--3731a228-eb4f-442f-bbe6-2962e1116a5c", "sighting--640a5777-e876-4048-9627-8eb1faeed330", "sighting--aae8008b-35f9-4e7f-a5a2-1bd1fe2f093b", "sighting--8df8e817-df73-425c-bee9-7c97f174301a", "sighting--fd71c727-c9c1-4544-a317-6b3ff4eee80e", "sighting--8b651e6e-d119-4caf-9f75-99e52144cc77", "sighting--f292a0fc-79f0-48ea-806c-b8406366898b", "sighting--ff5809ab-f9eb-4b14-8a6f-8acfc6c89c42", "sighting--e1b2febf-7aec-4105-b4ce-90239a2a5eb8", "sighting--0de8d5d3-386f-466c-bd2d-ec604c9c62d6", "sighting--fbc8f23f-291f-45c3-88e1-dbfd5af03d93", "sighting--588bce78-ca00-49d0-a5ad-8f529477b843", "sighting--46aaccda-4e76-470a-b5cf-b7036e0ca706", "sighting--3e86cef1-02e9-460c-a52b-2ed7fd52e6a6", "sighting--ad91bc3d-ce5c-4033-be4c-0fcf3f41dc80", "sighting--949505e8-4e90-45b1-a146-3cef05e2a6b6", "sighting--4b8b4164-2606-4a26-9b74-2e19e2fe509d", "sighting--ee4ce6c3-3e7f-4cce-9e88-5838968365c2", "sighting--a8860fa0-30af-49d9-a291-ad978c8a939a", "sighting--363a979a-50e3-47dd-a68c-58a89577ad79", "sighting--e8bb799b-e326-410d-a7ce-9343eb39b8d5", "sighting--eaabe603-9754-4dfe-bfa2-55fd18ab09d0", "sighting--e1c52ac9-4e23-491b-a75b-7c33bde3f18e", "sighting--6291230d-cd5e-4947-b193-147b38b2298d", "sighting--829f6b10-dfa6-406c-a6e5-45cb274089b3", "sighting--2ba85fe2-070a-4443-a6db-d36797fca520", "sighting--de83fcca-3be6-4532-aa5e-6ccd391f502b", "sighting--9210b7da-2a85-4a6b-a5d5-2cbca67be8ba", "sighting--f68d7b90-f3aa-476f-9745-11b520b3b154", "sighting--f563ea1f-e627-4eec-a409-d1f8322c79df", "sighting--34f81156-a3f1-4199-9164-910d22e9de48", "sighting--b71d2f25-c97b-41ed-b993-2992f9045c3e", "sighting--97c90906-4657-4f3d-aa61-69ef6837fb96", "sighting--9ab1353d-4e83-49b0-a804-8bc93875505c", "sighting--255d635f-6465-45d5-b946-83cf163d3fd0", "sighting--ba86d2b5-13a3-4fa8-ba69-dac9a77e9d4b", "sighting--6a19f332-316e-4c7e-9c02-5289bf4ac401", "sighting--1872728e-57d4-4351-bfeb-0d39066ed9d4", "sighting--efba7b47-ff7e-4ab1-9727-2f492b96f8ad", "sighting--688c2246-2f33-4071-acf3-7fabe27cd47b", "sighting--61cde8eb-4d9b-4719-b6d4-8726d80cc5f6", "sighting--93fd5d45-c2da-405f-8a1c-2c30456a7ebf", "sighting--0a5e748b-6975-490b-89ab-9a682e73467a", "sighting--5fc544b2-4f50-4cfe-bac2-05d0fba0ae69", "sighting--bf1f3975-0bea-466e-86a5-85204a54f12a", "sighting--b4fee6b6-53df-42f7-bab9-96b25591f03a", "sighting--a8698d20-7409-4e1d-990f-355213e6f226", "sighting--dd086e53-2c37-47c4-ad75-d0045921b66a", "sighting--bf51c37b-1c82-484d-a242-576227c75c22", "sighting--13af89b3-7556-4780-9e26-ebf755c7072c", "sighting--592844ac-a493-4858-81cf-139c3ccfa8ba", "sighting--7e68bb9e-44db-4a4b-b9c3-0c5705c0df27", "sighting--e2de01f1-6f96-45c6-b55d-9a8299e01497", "sighting--535ea632-b4e5-4ce1-a123-81d919d45913", "sighting--6f206abb-6b34-428b-a676-074c055e1481", "sighting--89f979c4-a495-403e-8576-6ce85a0ac129", "sighting--a9121c6d-465e-41e3-8fd9-7a7c56b5bd8d", "sighting--47646916-69ff-4acd-a05f-b5fa0f13f9f0", "sighting--5ed2460f-1a58-4b09-8ba4-8b6cbf0215b2", "sighting--54a6e5f8-a9da-4b73-8ad4-fb0a0effde97", "sighting--280b29d0-0400-4d1d-b2ad-ff9e8caeb0bd", "sighting--ca3824d8-b5a1-47a7-8881-741dc5b6c063", "sighting--83544569-7d3f-443b-b42e-fedb229abb64", "sighting--adb340b2-714b-40d5-bc1b-2a650e982761", "sighting--0b3f45ee-0561-4b5b-87fd-56f09dfbcad2", "sighting--0176002f-6ad8-4322-82e1-c0616ecff538", "sighting--83607085-512c-4d99-a0d7-f0ac94ac11e3", "sighting--594f307b-109a-406e-af41-be99515e45de", "sighting--2f6a2dae-c287-4997-9ce5-81f63cc84907", "sighting--c8ed375f-7b47-49c3-a2d4-647140892224", "sighting--82aff2ac-349b-4d7b-9b5f-85975d3c5055", "sighting--52c05860-464f-4096-a718-b6d212ee6202", "sighting--d6abf83d-95ae-4a6c-ba54-3234e8b614dc", "sighting--523c0eec-060a-4f40-9613-839af894d4cb", "sighting--5a7c4671-d8cf-42df-8d23-25e8b3d1be49", "sighting--bac8bce5-9683-45f1-9b1b-7a28301aaaf8", "sighting--4c45de23-bae1-492e-8053-449fe7948027", "sighting--79168736-5183-4710-a569-fd46699d4ba0", "sighting--4db738ab-8b58-4ae5-a5ef-ab0bef1bff20", "sighting--d2d1231c-dfc1-4cdd-a22d-dd1234ce6cef", "sighting--bbab547d-c623-4a70-828d-f4398e607a41", "sighting--3eaad972-34eb-4623-b104-9e88e16996a1", "sighting--9e20c6d3-a4b7-4ebb-8954-d7a9b8eaf3f6", "sighting--c8bbfc7f-7adb-4af5-a91f-b56e9f975bbc", "sighting--61770ca1-f142-485d-b79b-d50ceb9e9990", "sighting--bd99c320-302b-4e81-8920-53a0cfb6ba29", "sighting--46fba936-85d2-4eb2-9359-b8ff6d569acd", "sighting--1c80e9ae-f1d8-4437-bb2a-604f6d469487", "sighting--d0769dbf-24ca-41ab-a7b3-23ec7748784e", "sighting--af1e10d0-298e-4e27-85c9-37456550a3c0", "sighting--586fe1b8-78da-42d2-95fd-96048824146d", "sighting--cd406b91-10d9-4296-bc63-9c07ec00a0d4", "sighting--d6f81303-c54f-4566-ad32-a0386af576be", "sighting--d6eece45-7e4a-4992-a591-6b5c3b07b14c", "sighting--4e687519-280e-4849-ac83-005222fc4ddd", "sighting--64371ab5-ea84-4ab0-bf37-f12f1ab87d2e", "sighting--054f985a-90c9-4e5f-a448-40896516370d", "sighting--9d62e0c1-5d1b-4651-a609-ff2a321befd3", "sighting--1bffc282-379a-4751-9b9b-38d520e5f6c2", "sighting--c2cf0384-17f4-4992-b46e-23add94b8677", "sighting--adc54674-5c95-4fde-aab7-fb26ff52e813", "sighting--f4bfad05-def7-42e5-82ab-57a2c30c15f8", "sighting--d889cf46-a9d0-4e66-8ac6-00581a41b366", "sighting--41e167b3-fccb-43eb-8b99-d69fe1ac1008", "sighting--15fa207d-c438-4244-932b-dae14208d5bb", "sighting--10e98b46-24be-437b-bdcb-0c922149cd5d", "sighting--52353819-84d9-48a4-8464-805ea19138ac", "sighting--b7077934-b7a2-41d8-9c7d-34f35029ba2a", "sighting--3e457aa0-541f-4b46-896f-9e2cf215d254", "sighting--76784bab-a5e0-4e6d-935c-969c88740b90", "sighting--6c28f698-e61a-474c-804f-66afe323d5c9", "sighting--0218ecd8-ccb6-4357-85c8-afe2dfbb022a", "sighting--074c49d4-d62a-4a16-850f-d41517c64b17", "sighting--8174f673-425a-46b0-a18d-a2ba21ac2db8", "sighting--24754c76-5d77-4edf-a820-37ed9ed504bd", "sighting--f6d54d54-612d-4134-8162-5f1711ee22a8", "sighting--5a1bbfb0-2212-4def-87f8-6d3a54a7c867", "sighting--0fb41760-24c6-4a92-9687-bebd4a720dbb", "sighting--798b9586-4c61-436d-9228-61b705c5caf0", "sighting--1123eaa5-bfb9-4db9-9f24-8ef4d22d54ed", "sighting--56d96e8a-ce7b-4b62-9ee7-ff00d39de696", "sighting--36256dbf-f11a-4e6b-8b96-c51bfcfb009a", "sighting--c535e11f-128a-41a8-a6ff-83d7d9647f92", "sighting--178b6ff1-3038-4736-b61a-71b3ab1a059a", "sighting--0f6da653-5f62-42be-8604-3af1bef9c3ed", "sighting--da9fc4c5-3a01-41e2-b27e-80c98722c001", "sighting--1a6bc73a-6051-4abb-bd78-b27e4e966444", "sighting--0b6ea0b2-87b3-4ca8-9dfd-32bd78152c1a", "sighting--0e9d01a7-a5d2-4172-b0e9-10262e5ca5a6", "sighting--14217abb-e571-4edb-b6b5-3ba16931c27e", "sighting--84a30d1d-924a-43ef-9b0a-cdac174c5f8f", "sighting--8b735656-ef11-42fa-82b7-16f2aaf164e4", "sighting--6cbaea7e-a826-426d-878b-3cb17b391c29", "sighting--8c1c8091-b724-4dd7-9d78-4889a24bf46c", "sighting--32af20e9-8316-4aa3-85e5-5bb2a68a0fa8", "sighting--20e41622-5c46-4b6d-a4f6-cd4a5fafcfe0", "sighting--67fa2c27-a716-42fa-91e5-5cfb1160fc5f", "sighting--d9112faf-2949-4b4f-901c-306f69d07b3d", "sighting--13b72653-7466-4b3f-a444-1f00b1bafd78", "sighting--7de49244-8750-4583-a07f-9ff59a1b6043", "sighting--220bf975-5bb2-45c9-9841-7822ee71b38e", "sighting--ec904c3a-29be-4490-b09f-670081288171", "sighting--fa68db18-c8c7-4820-8ab1-bf6ba18f83b4", "sighting--4405731b-e1d2-4265-ab79-4b1e726f4d1f", "sighting--8dca0299-ced6-48e7-8c95-f2c3684fcd8a", "sighting--1f4a4ab0-3297-45f2-8e59-d0a87a3beb9a", "sighting--457854c7-5e7d-4a4b-9d27-aaffcfde259a", "sighting--39fad436-5d8d-402b-a923-818d0bc75bf5", "sighting--4293775d-512a-4f5c-a44a-298bddd54ac0", "sighting--11fd44b0-6784-4f94-9adc-ff999bbdc740", "sighting--6299aa93-adb7-473e-8e9f-93b58e616e8b", "sighting--2c3478e8-1983-437c-8c06-baa60525423e", "sighting--7fee7287-8aba-4f1c-be23-fc40e63dda38", "sighting--2a23984c-b200-4a49-a024-297c2dc7eb71", "sighting--06eccbcb-8d7a-4590-9242-63fa93074021", "sighting--a6dd8809-6337-48a1-b73d-8be1ee32946c", "sighting--23cf1bb7-bf67-40dd-be1c-374ccc4ae0e0", "sighting--d5eba698-ddbe-4465-859f-7107e8e23e43", "sighting--ffd31b3a-64b5-4caf-a0cb-e62a9b48386a", "sighting--abf5b9ce-97b1-4b74-b4a5-3d0f2cc7fbf8", "sighting--ea5b1014-7a2f-4b90-adb5-657bec6cd644", "sighting--275ff887-674c-4cb1-bb8e-809b04ed071a", "sighting--1bc2bb44-0e51-45ae-a7d6-adcefc8e0e85", "sighting--2027af79-9e81-4077-8cd7-317adb488447", "sighting--d5a9666b-b8db-4e6d-9380-bb57ed055f94", "sighting--8fe91253-3679-4d30-b5b4-48dd5dc59920", "sighting--fadd2935-acd0-4e6a-aeef-d4245de69861", "sighting--b0515088-b928-4065-9812-55d18997cff5", "sighting--e77da544-0362-4fef-a333-7288f13d2da1", "sighting--d04832e8-49c8-468e-ae88-eb854448f6b1", "sighting--4291b95b-06e5-4f53-bc55-fd2f5279ff42", "sighting--25f45716-93ff-491a-9eec-a1b21622ebd8", "sighting--0f91923c-59b2-4fc2-b7c5-5553e0577c59", "sighting--59b75296-cd38-4548-a764-f75cd560020d", "sighting--530871f5-3fc9-44ee-bdfe-1b2c8ff97b53", "sighting--14d2b12b-c571-42d5-a191-78510ec79f3a", "sighting--2b079952-1790-4f69-8fa4-010048863f5a", "sighting--a9a55661-eda3-4ed3-99da-152fbd57fcf5", "sighting--75119498-313d-4827-827f-b27b362fd737", "sighting--f870c686-e84c-4dd7-b19e-8742fa4b51e2", "sighting--2a03b937-b600-4121-aa6b-25c725a7633e", "sighting--d8950ff5-9a27-49e0-a7a1-e69327b83e63", "sighting--e7ecd6d6-2413-4d47-ab86-5a7412ac10ab", "sighting--a4ae9e59-5909-47d6-9b3b-d6bd3be17b76", "sighting--c4899e16-f2ac-4d02-b666-b5cf608c5a1a", "sighting--3d9d104b-ec36-465e-92bf-96fd934fb398", "sighting--ed854680-5d2a-448d-b70e-49d1469f67f4", "sighting--58b455f5-67e6-4892-8238-2ec0845c035f", "sighting--0f0477e5-e86f-4f8e-9405-685872b4f0f0", "sighting--5a508534-d8c7-4d2a-8ec0-c649fab41bc2", "sighting--89d4418e-5160-4231-930f-89c2f5d80a52", "sighting--8f2d8cad-8fd0-4ba4-87a6-5e1bf198b964", "sighting--17afc553-66b6-4311-b876-7a083e9d34b3", "sighting--305b4556-7d1d-461a-845f-f3bde57cc2cd", "sighting--9d9cf7ad-8224-43cc-a90f-be7b7fed3ba7", "sighting--b031b279-8937-4f7a-86ce-fe2bcf9215be", "sighting--5e3bb67b-4608-4549-9a31-63f1e504f74c", "sighting--c1b484b9-4e6b-449b-8323-7ae8ac8c5037", "sighting--24c31818-e0c9-4472-9a17-845e5209fd2b", "sighting--b71fa347-72eb-4284-a5a1-56901d0cef8b", "sighting--b9231f2e-a1a2-44a6-a422-aeef7d6272d0", "sighting--f5e3eab5-2300-4a5c-baa3-b54081443eb8", "sighting--2437f1b0-76ef-44e0-95dc-9ef4369a632f", "sighting--6ab8b900-fe81-43d3-bbb5-88dec5e3911c", "sighting--f29e4b62-6adb-47e8-a9af-6155f1704225", "sighting--bd3658f7-dfdc-4323-bc12-432ed9fcb358", "sighting--b58af7db-62ae-4a26-ac79-d08e06ced6eb", "sighting--eda6b184-c024-4fd2-8bb2-03da739d4a21", "sighting--9149852a-8408-4389-ad9a-1314ce12b41a", "sighting--07139e09-2619-4cf5-8d7f-f2b22e1c74d8", "sighting--dafa55a8-e87a-453b-b550-c9aec50e4485", "sighting--4ad48ed6-80e7-4f76-9750-af4bac9e9c20", "sighting--b62df20b-5dab-4c70-b5fc-294f93198c55", "sighting--30c1e555-af0c-4d3c-8c53-0dfb256279b0", "sighting--40c346fb-9fba-4b3b-8c57-c53d74425b2d", "sighting--eeea2cdf-7ef8-4ade-847e-f56795d0ac22", "sighting--5e894481-fcec-4e04-9b6c-85c93a37f080", "sighting--138cbf1a-0b38-4843-8aec-b26d6cfe74f0", "sighting--cb075aa7-097f-49cf-b4ba-8ff82af7b77c", "sighting--91060481-1749-4168-bdd9-70087d2477f7", "sighting--16688a2a-1322-4c76-9442-809cfd722016", "sighting--1a1c9448-ebb2-40ea-9ac0-ab84eb4c64d4", "sighting--8e16f6d6-a84a-4d15-8fa6-ca2130983b96", "sighting--6c40112c-a373-4c5f-9a2d-e8a27ffe040d", "sighting--9c1b9132-1115-4a18-9007-0cd8ae7e97ef", "sighting--d46f4b42-420f-4f39-83a8-9a1c56edc1a4", "sighting--3d13893d-84ea-4078-b31b-c30944b198d8", "sighting--3423f6ae-61ab-4411-a0c7-9446dac1efb3", "sighting--2c65f88a-0855-4da7-a81f-b63a214571f6", "sighting--429d4d27-9c5a-4bb8-a715-3b1d7a352d9a", "sighting--418f0dce-2a91-44c2-acd3-f85b29af09a3", "sighting--f4afd0ed-6bd5-47cd-bd46-e3a35f48422d", "sighting--02e8a642-cf43-45d7-a412-59affc6c19df", "sighting--c3455251-337d-4d45-8923-02d9345694dc", "sighting--87f594c1-e9b2-4574-9a14-53e5fbb5612e", "sighting--de70e45a-66e5-4675-8545-146d6eb8ea70", "sighting--1a057a2f-6209-4a1c-b2cf-5983072136b6", "sighting--cd81bf58-bbcf-4504-8492-22176ef92dfc", "sighting--29b39fc7-091a-474d-af99-3519adfd340c", "sighting--fe432b82-7dcb-4177-b9fd-1ce4bf3ebef4", "sighting--0a750d58-4c1c-4f26-bf4a-742b5ee9e303", "sighting--f932beee-ff98-4b6d-8a66-11fc68215d27", "sighting--f889596b-63b9-4ea3-90ba-416407f0e051", "sighting--1ed5bcfe-2915-47d3-92a0-2d4e1f315851", "sighting--8c29d06e-4db6-4697-b3c4-db68715e87e1", "sighting--8f4475cd-4405-4806-a9d6-16c8bdbf1768", "sighting--5e59ee53-6975-4545-8d11-45d99f3ca91c", "sighting--29d39c51-bfd7-4fb0-8dc1-2176c5690c50", "sighting--43abd028-96e9-47b5-99b4-a7569ce2f5b1", "sighting--fb473f18-21e9-49c3-af17-ff861cb1d051", "sighting--a054c277-d9a5-438b-a0a5-abce91d3b73a", "sighting--774381e4-c4ae-49d6-a171-c6a83c13455b", "sighting--377b2dfa-4678-4f02-87c0-d242ef1362bb", "sighting--030c1eeb-6c0e-4cb0-bd7c-f6caee7c61a4", "sighting--ff4eeb1b-bfbe-498f-b1a5-317b6ce6c082", "sighting--436ea16a-436e-435a-a4d9-52bed41cd6cb", "sighting--4d7a6d3b-b84e-4fed-af1d-db7e760453a5", "sighting--91925eb2-72e9-4274-a8b0-5ca1e635076d", "sighting--84b46a4c-5df6-495e-9005-13c1a61f1468", "sighting--065373fd-a151-43f0-9a04-98cd02d45c57", "sighting--581021c4-3524-49ed-8d36-c8978519330d", "sighting--c07cc928-58a8-45e0-899c-9628bf35f37f", "sighting--72f24de3-ca56-44a2-acfb-96eabba2c632", "sighting--3251190f-6446-4900-98df-1b6ffc2ebb24", "sighting--a92bb877-d50d-44b3-b331-d22a236d0c9b", "sighting--84a5841e-fa21-4887-b689-e432f2c35140", "sighting--f140d684-547c-4bc1-9ce7-6abfedea42a9", "sighting--29f8dcc3-12bb-4762-8993-f48124a9b92f", "sighting--30bfc3d5-321b-4939-89a0-e58d7a17b48d", "sighting--41b476b6-f9aa-472f-93b2-2351632a0a24", "sighting--e3f101a5-b5ba-4d85-9854-86206c581e72", "sighting--aae33596-6cc0-4d9e-a113-316d2935d928", "sighting--b38a5c0c-9b7f-48a9-8b10-4123a616ba18", "sighting--fd0fd85e-4a8e-48fc-9732-6815876561ac", "sighting--a703cce1-5acf-4832-aa2a-14a5c7491957", "sighting--dd9b9a71-2765-464b-ace7-f113093ce767", "sighting--4309bcef-582f-464c-8c44-a2531e7db2ec", "sighting--3a15c07e-4349-4166-a508-612dab383493", "sighting--f7738322-8503-4e1e-8ffe-0511f1f826b6", "sighting--513ff868-9246-454c-b841-73d17717732b", "sighting--d93fab55-7c11-4b08-9179-615dfd842fda", "sighting--f7089669-b3d8-414b-89ce-0159d2b14eca", "sighting--8f913f20-4f6d-439e-b2c2-a1465203f328", "sighting--6ea1194e-e8c1-4168-90a7-d08220f15796", "sighting--f338db23-5b87-4687-8da2-f72c87a821af", "sighting--df3bcb0f-0ad2-44c7-bddd-428682e2e954", "sighting--5e4883b3-a560-48c6-9081-aa229f77ffbd", "sighting--8c41fb43-5d4a-4940-b5f1-72b340d7553f", "sighting--7103b427-a0d9-40af-b890-914c631b7648", "sighting--ee7d3d13-2bbe-430b-83f9-30560f5770ec", "sighting--1f9bbe38-f4e2-4d20-ba89-4e575e8381c4", "sighting--893573f0-a34f-48f2-a2c6-c10b3ba83203", "sighting--08ed49b3-a1cf-47e3-98ec-994cac0e31ee", "sighting--262852ee-be8d-42c1-84d9-416f95487a49", "sighting--f4b9e491-c918-4f91-9ad7-0d841ef1a6fb", "sighting--e7803202-cdec-438c-9b7d-c94ed2c07b87", "sighting--534f4447-a01f-405e-a481-7cdd0f954777", "sighting--bccece2d-b8d7-4815-b946-6a8e27608d8d", "sighting--16dfb22b-d329-4d73-bc73-851136433352", "sighting--244034cc-a4fb-48f6-9565-cac467535b99", "sighting--94d70813-72ea-43e6-9d01-c2c88931b08d", "sighting--0c02278a-f723-4aee-a3d1-9311b2ec2422", "sighting--d11f2f78-41dd-46c3-be28-66c97f0eeff8", "sighting--234396c3-5632-4807-b2fb-3e700a70ebbc", "sighting--489db407-e57f-4c19-b5b1-f156eb4e0e64", "sighting--a889babf-4567-4c15-b826-8c1fd39a6596", "sighting--ad91ac82-85ac-48d4-8925-8f78c1200719", "sighting--e0b1f633-e26a-4690-8790-35b7d572bcf4", "sighting--65c1be20-87b8-43be-a25d-21485b4cf412", "sighting--3918c27a-2a0b-42c1-80e3-89fa4922f8d5", "sighting--db9d1faa-0101-49f2-ac71-ca1f10987b6e", "sighting--0b9448e6-fc02-440f-8449-08fefee8fb2f", "sighting--dc3cf778-4f40-40ff-b2e7-1939931fea5e", "sighting--a8eff4af-e52d-48ef-b196-3e1f555fc81f", "sighting--775c2402-05ba-45e6-b199-6573aad5a6cf", "sighting--a1a24f07-386a-429a-8f9f-f97f5f737252", "sighting--92a369eb-7837-426e-a4a6-898e7065ac00", "sighting--d9aa65a9-ee6c-4cb2-98ff-66485cda0d65", "sighting--970648ab-20b7-454b-963a-fe4a75ca9c7e", "sighting--51b614b2-1ac3-4ecc-9fc8-2e1552a91b4c", "sighting--b2ac6017-8d29-4f36-acde-6703ff260807", "sighting--45cb34e4-bf2b-4a38-9a87-65c40f698827", "sighting--355cd7c5-9248-4f90-a1a4-e48c6ddf12b6", "sighting--74cf3958-7146-4aa7-bdce-cb9b1037361f", "sighting--89c42a7c-6e55-454a-b45e-32a074aea614", "sighting--ccd640d8-edde-45b4-8cc1-1685af59d0d9", "sighting--86f9e129-1ffb-4aad-ba6b-79e39de85cd6", "sighting--721c7b88-28eb-4b39-9175-864ba2e925df", "sighting--465b20fb-52e5-4c16-bcd7-da281957be82", "sighting--a0da96d3-2ab2-444d-a670-6fcf68983ccf", "sighting--24d77a2f-1ce5-4873-86d7-2a8fd88e6cb4", "sighting--4634af97-5aab-4caf-98e5-de65d9193abc", "sighting--2609cf1d-63b3-4923-93d5-28bf74d988b5", "sighting--6b6d0efa-7165-45e7-ae69-109bea1ad695", "sighting--fd1fe403-c9c9-4d98-b761-d6f7fc77babc", "sighting--a5e00552-f350-4667-bd3d-1e351acfc801", "sighting--78603c7c-49ea-4a31-8c9c-173a91e828b1", "sighting--7ba3758e-cfc1-45c2-aa45-f2c754e1bd5c", "sighting--0dd55928-9dfa-47ba-9759-20642a245b4f", "sighting--69911aca-0d24-47b7-ba87-12214e0b8b89", "sighting--a9799fc5-bcd5-4ad8-a518-27575079e786", "sighting--36f7a6fe-819e-43f3-9aef-877ef2915150", "sighting--0a550c69-d582-4604-a001-0bc947bebd3f", "sighting--48514cac-b71b-44ba-a499-a0e9bb0bc46e", "sighting--c9a1831e-364e-4ccb-83d2-aa59877c5f7e", "sighting--afe95187-4527-492a-8102-b87c9692b68a", "sighting--92731ebc-a19e-4066-b427-44b6f698c765", "sighting--a00ab7db-ee5b-47b1-960e-391a2fcdb20a", "sighting--05c52416-518d-4ce0-9a97-94fed61c4abe", "sighting--a627d493-52df-446b-9c1e-2a25a4e7319c", "sighting--8e9da6c8-342c-48bd-9472-520ec867959b", "sighting--965b135e-ec2b-4a83-b2bc-4bf60ff45e21", "sighting--d3d26822-89f0-4ce5-bb17-2ba80c2c4b1f", "sighting--ce16893b-8609-4bba-b148-324a25b6a97b", "sighting--bc3ca195-35b9-49d8-8a17-4ace164419ed", "sighting--c6054084-cf50-43ff-8b8d-4d3b9114fbfc", "sighting--70d4100f-4850-42eb-a9b9-6e012125d313", "sighting--e2f3edcd-3203-40c0-b9a7-c1c92f54d7b5", "sighting--99120aaf-876d-4cc8-9969-bb11316eef7f", "sighting--9e87389f-9490-499d-b78c-5257af9ce94d", "sighting--8e811cc0-2a3d-4a73-97ea-5b344ea673ff", "sighting--e93c6b96-1ad3-4242-81be-5e6995fc987e", "sighting--eebcd7dc-97b6-40af-a405-3d5e468dae27", "sighting--4eb64d77-f80b-4836-83d5-60320e04ff06", "sighting--aea10b81-33fc-4f24-ab60-a2507f4dc73f", "sighting--f371eb9c-3d89-42b0-8746-576bcef51650", "sighting--6d33e799-c6ee-46fc-b53b-2a2fa88c1c32", "sighting--28c769d3-364e-4563-b6cd-b783295eb2fe", "sighting--48dd6f4d-8b08-44c4-9b2c-ae3f3fd7cf78", "sighting--46f68a7d-64ef-41fe-92b8-63b648343211", "sighting--31e879f4-2c97-4897-82df-155fcab7f893", "sighting--352a71a4-d241-4296-a307-9994c55d02e1", "sighting--d1983e7c-67ae-4fad-98bc-9ba59a50b9d2", "sighting--57dfba5d-2a0d-4832-b80b-4cb73ee9dd5c", "sighting--ca88f703-af2b-4d00-99a2-e7b64c3dc658", "sighting--cee2cd20-01c3-4286-b6d5-ee1cc2427a47", "sighting--0f75564c-637a-455c-9f06-612ba91b4a57", "sighting--68692daa-809d-4870-acc9-e162007a1df9", "sighting--721a03e3-e0bc-48c3-b430-881a14c4b5f0", "sighting--002a8cf9-f10a-4f08-8661-32ae987c11fb", "sighting--3b912d61-e2f8-4130-9697-e4e08d0e2562", "sighting--bc9adf70-f1d4-4f94-b863-5993e34d8bdb", "sighting--e06883f5-8a29-4533-8d37-028d24adf110", "sighting--5a48a5bf-bee9-4bb4-acf4-9c2459bcd760", "sighting--6b9f738b-b3fc-4d06-ac33-bc0d4ead8279", "sighting--487fa813-ecea-4511-ae30-b16431d272f6", "sighting--89a21ded-dbd9-41ed-bac6-13325d8a7111", "sighting--b5244ffc-2478-4992-a523-3f96adb9877e", "sighting--675660c0-6ec3-4bee-8ba6-0a2bcb7cd74a", "sighting--7f1c398c-0d81-4a07-af19-aec4593f948c", "sighting--88d1fb28-9c43-4a78-bb15-b7a12d2feee3", "sighting--3fcc56b6-c1ba-4e76-940e-a84f11ab206f", "sighting--3edd98b7-6911-42df-9087-41efc32b031f", "sighting--8db2e0db-de15-4804-83db-21286912ae6d", "sighting--abadec42-abf7-4405-9fab-cbe5f92ea1bf", "sighting--6e886d59-cf49-44ad-b26b-98ef8d2f1f1f", "sighting--c30414f7-ca3b-4140-8f9b-5308954eec2c", "sighting--79a2675c-b043-48f3-8c71-def9037a3da6", "sighting--18dd04b3-e856-4406-a884-acbae72d4e4c", "sighting--5b186bc7-c735-4d6c-8485-fd2d3f695ab7", "sighting--fb79122c-d97a-4c7c-abde-a1976b54d7cb", "sighting--0d32e3ea-8233-442d-bc79-c993244d8ae2", "sighting--2590496e-1f09-4f03-bdb8-a3441bd7314c", "sighting--4e2910c0-22dd-432a-8f54-ca18213675ca", "sighting--855ff873-ce1a-4fef-a733-10b4d03a2317", "sighting--237e7a6e-68b5-4395-ade2-9f159b6bd5fb", "sighting--11d32365-481c-43f2-b799-cd1c5b410a31", "sighting--f64e964d-9307-4fdc-bd5e-b117cd41834d", "sighting--76c902f6-86b4-4ae7-8c30-ad51ae84719a", "sighting--257e0efa-a871-45c5-9316-82f11696677a", "sighting--88f90ae9-6132-43f3-82f7-b474004d03c3", "sighting--63279fd8-e66f-4efb-a8ac-9be5dab32d5c", "sighting--d8248119-8ac4-4d1e-98db-179e6fffd6b9", "sighting--68ff6b63-6a45-4236-a9b8-b797e2add2e6", "sighting--73bc53b0-9cdc-4ccb-a01c-2a07761d5db2", "sighting--ecb7a11f-e77d-46dd-bc37-f5ffacb02711", "sighting--49af38d5-3cae-48d5-9f12-63f5369aa46e", "sighting--6f7a13cf-1d81-492d-b681-04e9c47e81c4", "sighting--ede2cd12-33a3-414b-821c-9f6350428f14", "sighting--ae848a58-48a6-45ee-bf4b-1af000b6d35b", "sighting--30300e82-e2f9-42cc-af67-7c31f60f18fb", "sighting--8e81a441-a1d4-4367-9bd7-f1ad50bfb6b2", "sighting--6e4e3023-beea-4d1c-b2bd-5d28cb46342f", "sighting--841d8070-c946-42b4-a2c3-c3898cb59839", "sighting--caf8432e-4b6c-4ad0-944c-c0cd73418256", "sighting--d6836c30-4358-4926-ada1-1d15b0b94402", "sighting--15d762f3-c01f-4d2b-b615-630fe5f60da2", "sighting--9c752b5a-eacd-428a-8e23-beefc92c7c1f", "sighting--63a868e5-c9b7-446d-bba9-dd44a297572e", "sighting--8b73184a-bf3b-49f0-bcfb-30956bb073d2", "sighting--b2f551a6-2be7-4525-8761-c40a61f968a7", "sighting--bddc05bc-c534-46cf-94cb-a86b6ac1ff33", "sighting--fba8e422-c661-4ed1-8a0d-87561e13a7ba", "sighting--149a2b69-8c67-43e8-ae25-03d1faca3a1f", "sighting--5901bc2e-8e91-4812-97f1-bb382d49989e", "sighting--474b0df9-6d02-4b3f-ba9e-260006000cd2", "sighting--1d9a8336-23cd-4fee-9fac-ebdf98bd185e", "sighting--a2d9a65f-2f0b-4826-a973-7a4e47d9df87", "sighting--0bdaa3ae-db26-4e71-96a3-5c3a8e06c6b4", "sighting--9d7a9a7f-81e4-4706-857e-c836668ca8bb", "sighting--761a26e1-be5f-4068-866b-edb00f3698ff", "sighting--c6272416-7393-4516-b11e-2029c1b9f078", "sighting--0ddbc7c3-6581-42ad-8792-6d24b82d3aca", "sighting--9a0ee479-1990-4093-8d22-160240a0ee6b", "sighting--5d745e86-e9e0-49df-b429-1c4dd8f4469f", "sighting--0446071a-aafd-499f-8305-6df5ba960053", "sighting--9301530f-5718-443d-b50c-ba9919a98b99", "sighting--0df86049-c4f7-4d09-9130-0e76d82e70e8", "sighting--8b058788-c8c7-4877-ba59-14b7638f4fec", "sighting--3d4dce89-c503-44d7-b1ed-3c148eae7b2a", "sighting--7decf6a2-b94a-4696-b3d8-338eacab4340", "sighting--d5d6b1d3-43d0-4937-882f-e7e274b8509d", "sighting--dace69d1-b1ea-4555-b933-875f96af2393", "sighting--d3df90a2-4f28-4cc0-ad0d-0d01c159dc4f", "sighting--77f3cf58-1a9d-48a2-969e-2561ec4b979e", "sighting--5188b536-c90c-40eb-96b0-a72518535010", "sighting--5791d6f8-da9e-4983-a571-f24ce186ec69", "sighting--664a97a4-b054-4de7-a21b-1c5aba0666e3", "sighting--226c7d43-d93d-411d-a995-c490fe6d561f", "sighting--dc850040-f27b-4a32-81e9-dbca24f38b34", "sighting--094c60a8-fbe1-4059-a722-633b430ad281", "sighting--5589b38d-fa68-4f10-a88f-9cbc398f7ad7", "sighting--75923c00-8d07-4c5e-85fa-061a1dbac13a", "sighting--868ff7d9-9989-423f-b98e-de6c8dfe5bcf", "sighting--17ee1646-a465-47f9-a57d-19e8df9529e4", "sighting--f832e9aa-a2f8-47fe-85cd-86aa1d4c3e76", "sighting--b719b65e-aef1-480f-b94a-587d2f19268e", "sighting--444c56f9-47a2-41e1-a8f0-3103470f4c19", "sighting--5351fc9d-d2bf-4023-9307-75c615fc2865", "sighting--f21b81a1-e65a-4238-b110-7558aed6342b", "sighting--1bddb3cc-cf86-438a-a620-0e75f20ed341", "sighting--04c46388-d2dc-4da0-b621-a7b01bd216d0", "sighting--b287ab48-d90d-43f6-b156-fed81656f873", "sighting--b7d0f3cf-eff5-481c-a666-f7fd47770598", "sighting--0052f05c-91ca-4de7-9e1a-315aef362b36", "sighting--5ffc96c8-123d-4262-a060-200843e1db68", "sighting--c40d12b7-7bbc-4a5e-9284-7a62dcec2382", "sighting--2d9c6691-912d-4817-9822-3bf7fef7544c", "sighting--71b8b5e4-aacb-4710-b6c0-b3705bc7eeb4", "sighting--cfdf1a3d-5c5b-4df2-a316-5643b3a37e3e", "sighting--3d7ea330-ee02-4144-9875-1e5018ff7e4c", "sighting--d01d3216-6eba-41d1-8218-e8bf08047fab", "sighting--05d42964-9516-4cf0-af7a-c420b1462761", "sighting--9f8f98c6-8986-4267-9837-13a45f389a50", "sighting--a43cd991-2f18-4c26-8f87-9e2a900f0a98", "sighting--3b147a57-4afc-49f3-bda0-74efd35c8be6", "sighting--9b003dda-782d-4405-9c76-982978288020", "sighting--89574860-bc29-48c0-ace7-cdf06d47c994", "sighting--a269c226-9904-4080-be7f-416bd0c9faa4", "sighting--f3d7c963-0fb2-499f-8111-35df7cdfad83", "sighting--efaff747-36f8-4d7a-86ba-50f5b36b8133", "sighting--4dd8d585-4f0e-4d4b-82c2-ac142eb8cd55", "sighting--a24828f1-11c3-4702-a6d6-65d71deb813e", "sighting--3e945a13-7c08-4b5c-b3f2-0c402b6080e2", "sighting--3c5ee303-474e-45b8-b192-9de836b60cac", "sighting--e9dbf882-b9d3-40f7-b0dc-d007d800e51e", "sighting--5a8a71a8-8d32-4be1-a2d1-ce031fcf884b", "sighting--7d838766-fd1b-4bf5-9083-a3d207b42cfc", "sighting--168b2bb3-6ca7-4143-a495-d75ceb6ae5b0", "sighting--8c795bef-766c-46f5-b952-ca03934cb0f0", "sighting--394557a8-11d0-4b33-afce-2dd98a188ac4", "sighting--61ae9705-335a-4e80-a814-6343a2a12828", "sighting--44cdfe7c-1c83-445d-bc92-9f2e82885577", "sighting--38756ebe-f8d9-4506-83cf-242e1475a6d0", "sighting--f9247bf5-54f9-43e6-8a95-085a65a1e02c", "sighting--2d54b5bd-4013-4bcc-a2b3-f9e77133e5a5", "sighting--d0e1ed68-d483-41d9-8f77-6a56426352fd", "sighting--c9115900-f6cb-4f26-9463-98a89a05a19f", "sighting--52f8f1aa-2f26-4568-96db-94ca0a3bd8b3", "sighting--4ae673c0-e5f6-464d-bd5b-1f7962522c23", "sighting--88ffe41b-ca5c-4195-a296-cc24814d9123", "sighting--7b3327a6-0039-448e-990b-ef6473c7b9a3", "sighting--5329bd7b-6ebb-43df-941f-5e1b569c505e", "sighting--9b817dae-f547-47e4-bbcc-944808b2cf72", "sighting--1f1fed81-2e23-40f8-89d0-88d758cb54d6", "sighting--7f0fdf65-fa1c-455a-baf5-20eabb743cf4", "sighting--f379e90e-42a0-41ce-8058-5b5b9a224d45", "sighting--a6353226-446b-463f-8a4b-f0eaf3a51415", "sighting--f68e9db4-ec21-4fbd-a1e0-7be4b9f822a2", "sighting--b08cf959-1fe2-4621-8e0e-b6b97d5cb6b2", "sighting--789c3a9b-5a6b-4116-8bc6-edc7d512fd78", "sighting--c5708402-665a-4a9b-9473-c6831451f0ba", "sighting--8712a212-cab2-4847-a3d4-986317ebae43", "sighting--d3b22626-364e-404a-b147-b995aa6e8ff1", "sighting--d419a410-0b2b-4208-90d1-e4e0c6fbdfe4", "sighting--5077b34f-7ecb-43e4-8792-d5de58fa6417", "sighting--4ac86ca8-029f-4f88-83fd-8828d245ce85", "sighting--d61c43fd-9c65-4a4e-adae-1935fc32457e", "sighting--c80f7a0b-4871-454a-bef5-eb1b17474897", "sighting--2a8b5fe3-4407-4f9c-bbcf-42c554d61366", "sighting--d336043e-d0c6-4733-8d7d-06c02d74c373", "sighting--084ba820-f216-41de-8e0b-85f109c44fb2", "sighting--deeff21d-61e7-499f-ad72-6d4bf6e07df8", "sighting--27a489f2-03c9-419c-8c64-c63aff39185f", "sighting--1eff9b21-d78d-4753-8612-8a3169e87fba", "sighting--73412c7e-6dad-4c88-a36a-096d32125f16", "sighting--7d61fe28-50d2-48f3-8ae4-e2b636a9830e", "sighting--086d70d5-29cd-44e4-85fc-83c4eaf161ed", "sighting--5e75b526-b98a-4670-96b5-f37bd2113317", "sighting--0fe3bd9a-18e1-4f97-a648-402a451ca6bc", "sighting--90a6582e-94ac-489e-a8a3-9dfbdfdced2b", "sighting--cd3c5c14-d6bb-4f07-b159-55f100659641", "sighting--f95f208e-908d-4053-a2aa-cf892ae1296f", "sighting--3c63508d-cc87-4fc2-a6ee-5570e9caaea0", "sighting--c695d194-f1de-4cd5-8970-2bb540a8c081", "sighting--cd68e31d-55d1-439c-8eb1-1b8058233020", "sighting--ce33a14a-d8c2-40e8-ba94-8fcfa0ad3328", "sighting--0b6de5f7-3bed-4bc4-ba5f-a75e0b44d7ac", "sighting--b20d6453-77dd-44d2-8623-f75d8c64367e", "sighting--916e3f44-f51b-4c03-a012-5a2f07f13a83", "sighting--2e14f6c8-7891-4060-bb78-082722863aec", "sighting--bad4e36d-a329-4a42-b178-847855cae8ef", "sighting--1bdb31eb-ded7-4afb-82db-8ae2761d0fed", "sighting--4bb092ea-caa5-4759-9370-817d940430d9", "sighting--9c9493e3-d8c3-4efd-a718-f8019591b3f2", "sighting--bf0f60e6-87c3-4adf-8881-87be0ba13811", "sighting--a365198f-ea82-4f7b-ac4f-86db03620eca", "sighting--3a3ed8f7-5e94-4e9e-8df6-f28ba1f0a5c6", "sighting--6ff7d837-3400-4ba2-aa64-7fab2212eac8", "sighting--bdd45315-c612-4c99-a7bc-57075d6e8952", "sighting--cb4d3856-0de8-4fa3-b4ee-e9558cb058d3", "sighting--04ae71c7-90da-48c4-8fa5-ff55ecfd86b5", "sighting--d0ae8b99-c46c-4be8-b488-5947d397481b", "sighting--0739d9d8-ab48-436b-b877-c3cbbf5e09ef", "sighting--2e6441cf-de74-498f-a5a5-1c722e5da1ac", "sighting--65123bd4-c549-412c-8c51-5ae1bcdc7883", "sighting--24d6d7a6-0330-4421-b5a9-1cb46951b36e", "sighting--c8d52749-aa2f-4c5f-941c-ea77e5b9f3d9", "sighting--570cabeb-3a28-495e-a1c6-2ce4e0a173cf", "sighting--058acc89-6199-42bb-ac8d-8de3a70ea2cf", "sighting--40de58a9-cd32-435a-85dc-c96183072cfa", "sighting--d3eadd35-1081-4e0b-9baa-f5ac57c235c2", "sighting--8120601b-ea21-4b7b-acf4-4d6cb3bc48a9", "sighting--cb1ccdf9-f94b-44b0-b031-c02d281c59ab", "sighting--79c3251f-9b4d-4b4b-b210-0bdc91dffe59", "sighting--de4d544e-2207-4ef3-a00e-c83901f9af96", "sighting--8fdfbc04-84d2-4958-ac1d-861b6528efcd", "sighting--b75b21e2-837d-4bf3-a846-a9aad0660169", "sighting--771587d2-95d9-4adb-ad8a-f2cf9b4e2fb9", "sighting--2bfdd0da-c3ee-4073-bae3-2102f55fbdc4", "sighting--5a3a21cd-ca02-4d02-8db6-b95bb006973a", "sighting--a5d28253-4576-4892-9301-596c71e5b4a6", "sighting--c24d12ad-2c10-48e3-80b9-734ee8e64eef", "sighting--9e2a1afc-5f08-4a95-96ed-3ff5e0dec211", "sighting--7e2858c7-9f17-413f-a0e3-92a8dfe9a582", "sighting--06733ccd-de6a-41d0-b885-1e987ea6153d", "sighting--d937fd6b-cf3f-4e04-987b-f36359e52a8c", "sighting--b35e6aae-6fc4-4ed4-97d4-4fa991d48478", "sighting--4ae03a96-0dc6-4896-8a8d-2360686ca0ad", "sighting--8551990a-173c-4709-919d-c2cef1c137f6", "sighting--388dd975-7556-429a-8fba-fb7bb2f05ea0", "sighting--9235464d-adab-415a-bb4d-6ccb16456f9f", "sighting--6aa4e150-89e0-47a9-a92e-bb1d284dfac1", "sighting--0fc475b1-41e2-4e4b-bc73-6d1269ab0f4f", "sighting--7cf5a988-c3bb-4721-9616-114b77a8f64e", "sighting--865953ca-434b-4ea2-875f-cebf9c55a4eb", "sighting--c3615048-5c40-49a8-b49d-bd2306fd7d92", "sighting--499efab4-b3d1-4cf4-baff-6760d7ff95cd", "sighting--dd6214df-4ae3-45d4-a9f7-49d849f50646", "sighting--a95ca21e-752c-4458-9a39-c39e8a4fddc8", "sighting--f53c154e-102f-44df-9f33-e82d5cbec71f", "sighting--cdf80a27-bec8-4a29-894a-b68de51466d6", "sighting--04a4bcc7-5d1e-43ae-8cc3-ad915b84a1bb", "sighting--3843f610-b638-443a-94c1-b950b2ba5d97", "sighting--31999228-afc6-4e12-b881-13d5edf3404f", "sighting--ad4a906e-875e-42a0-93d8-b1f738f12516", "sighting--2700f3ed-aa15-492a-9a24-f9852d3ce47b", "sighting--f37b2fb2-c054-464f-ad16-f63ff5d0e7c4", "sighting--eb83130f-c1b9-4f48-ae7c-de58b5cf1fe4", "sighting--4fd80763-4468-43fd-a415-f24880c0f792", "sighting--1c3b2d6a-d05b-41d2-9d57-19bb5dac13be", "sighting--0b9866f4-d5a6-4512-94f6-b8a63f45ab6c", "sighting--158de551-6b78-4578-91f2-10ce3a920f62", "sighting--dbf1cf31-fd7b-4a0c-bbaa-b395a7cc6768", "sighting--94856d22-29d8-428d-89d8-0f8dc1837969", "sighting--f9ccd152-dd2b-47e0-9a9d-55073b4a05f0", "sighting--0e11bdf0-0ad8-4a51-b11b-b5f014dfa9c5", "sighting--c1db4f9c-39ff-4a27-a102-455a2bfed328", "sighting--caa4fddf-4e61-4197-91f8-910fff5e3fde", "sighting--e247708c-881c-438f-8551-721325d40fab", "sighting--da56ea37-80ff-4b6d-9827-14d8cb4d7dc5", "sighting--46afea07-124a-4b11-b9fd-a5f0194b9dff", "sighting--16a36177-b3ee-4eaf-a101-b37080719e00", "sighting--eb8de1c0-5785-4332-8623-5846d2f06b2a", "sighting--d2acd857-bcf7-4c8e-b40f-a14915e996fd", "sighting--5df9726f-1c0c-41ea-b6b3-7b7b4d87d6fc", "sighting--0a90eb20-31c6-442b-9eac-8f0c1950f575", "sighting--340388da-8845-4fa6-8719-225d2beaf164", "sighting--ce84e441-1acd-4421-b3f2-862680779c25", "sighting--9ecbc676-7ef1-4e9f-a0c6-eaedc455c54f", "sighting--f697e440-b80b-4471-b441-915b7a9c51cd", "sighting--812a4048-d9fc-4608-b683-ba5244ed36bd", "sighting--31f36534-0413-44bb-b550-e387ddbe9ac4", "sighting--99ef89fc-af1c-4946-8a46-fe7e23fc43ff", "sighting--81851da0-3114-461e-b490-1e9697405f32", "sighting--10e8806d-0ff6-4fa2-bef4-679a684a1d79", "sighting--74f7efac-4b94-4f30-a676-95ba1a72eaf4", "sighting--c6a2b976-4751-4fba-90e1-b4753db3fa59", "sighting--3ca620a9-2902-4667-a571-26c207303320", "sighting--5df8959f-0334-40f1-b079-341d3900e5d2", "sighting--8f861062-4053-4a3d-83a0-e8f553d71a9a", "sighting--65254b39-5ab9-4bdd-ab54-73bb6e7c9324", "sighting--96201bec-8448-42c8-a8d9-8500456acfee", "sighting--a8696856-5e66-4557-81bd-0e034fa861d3", "sighting--51bd9837-a86c-4008-835f-33daa2e0c696", "sighting--0b8fe61e-0d2e-4a5b-9eaf-9858578b2b15", "sighting--65c70163-e769-4668-b90c-ba5bad638e96", "sighting--472d34ca-1d5e-4e2e-a11b-17d3364096a0", "sighting--5986392b-19e0-440f-aa51-43bbc4f4b792", "sighting--05b44f4a-b622-4c2d-b369-8a1650637d63", "sighting--b2f64df0-0460-4ccd-b622-e1526f5c7626", "sighting--f172eb49-3730-4581-9533-c5bfe710e186", "sighting--cd71713c-1245-4d83-9b68-43fcfb98b723", "sighting--af524020-5dac-4eb5-9fa5-92dfe89383e3", "sighting--6a5e620c-f6d7-42da-93fb-ddea97f277f1", "sighting--1ef9d46a-58f8-4008-bcfb-075327bc9635", "sighting--24b33fd4-4e6a-4309-804e-509134e47a1f", "sighting--fafbabb2-c643-45aa-932c-73bb46dc6791", "sighting--c6a9ec13-00f2-4ab0-8e17-5b2be0d19c9a", "sighting--9b42f5f3-f7fb-4053-a54f-bc555b0a266e", "sighting--e8119c7e-7a30-4691-9fda-e1c015c14e63", "sighting--db415f5a-a145-4483-ad48-af1f484f60ef", "sighting--c81af562-92cd-4ac5-843d-b78114a7b5d2", "sighting--dde1c8bb-9d79-4102-8a37-b659827b4202", "sighting--2aa64eb6-c61e-48ba-9315-4520be8c4fb9", "sighting--8d14cef6-b930-488b-afdc-ae4b80c2d3f0", "sighting--f96d1834-5c5f-42e4-9701-604352727286", "sighting--badc609b-6cbe-4c19-a99f-c857606710fc", "sighting--d2ea5982-fda3-478f-9ab5-b5bc6f7bc034", "sighting--70c25853-01c2-4925-bdf5-4da2d5bb4cb2", "sighting--33a21f93-9dfc-4dd9-8543-dd07d06fdeef", "sighting--74d312c2-be5b-414e-870d-3db081617d96", "sighting--b0ad3b4c-299a-41c1-a700-61ea00cd0c3f", "sighting--b0c65b4c-28b7-4cd1-8da0-55efcdfe5f82", "sighting--90436fa3-ea42-4897-9d0e-2315ca25b851", "sighting--e9cf5853-d938-438a-bab8-2931514e4803", "sighting--809173dd-6426-4ab7-94bc-25898e030986", "sighting--0968215b-136d-405a-9a90-edc0ed5e8ad7", "sighting--4770c00d-2751-497d-a1f3-2369ee8d0cb5", "sighting--a364fd9a-3fb9-437f-9bcb-45f21fc1ec03", "sighting--d26dc460-3e03-4e65-999f-b4ee7cf2f435", "sighting--70f03e3d-1a44-4f41-a241-7576743ace10", "sighting--80d9beff-a9ed-485e-8415-ced3f360ca3b", "sighting--619a37b5-c6e0-4d2b-b053-a14468ad7174", "sighting--d4d9e4cb-6703-4361-afb4-d121f53ebda4", "sighting--d3dd6285-8d89-46ee-ab01-10ab3174aca6", "sighting--3c4a601d-6cc6-4683-8d71-95becc96a705", "sighting--6c1c8638-d077-4109-8eb0-eb9ce6e289a7", "sighting--351a51c1-daeb-4d42-b290-cb6ccc9922d0", "sighting--f6984247-2c21-4c10-bbb5-cee941c8bc52", "sighting--aadb8f23-0dff-4c17-8ae7-b00faac13b83", "sighting--a339e86d-c9cf-4199-aca5-4dfebafc9ad6", "sighting--65551c42-9988-4813-89f6-c7f5698d6d85", "sighting--7e424c1d-0fe7-4003-97b2-1b38cbc0ee0c", "sighting--6342589e-e89c-4054-a77c-f08a18ebfaf6", "sighting--ca6cd5c0-8e0e-4a0f-a801-acbc3e2986f3", "sighting--ddfae0cd-06c4-4bc8-ad00-6b76f4881fc6", "sighting--353d11f4-d4b3-42b0-be92-11099696a38e", "sighting--1f1ad9b3-d0e8-4820-9647-6fdd31141237", "sighting--aad14538-8552-4ed4-8135-6beb2cbc4d3a", "sighting--673a9d44-4f2d-4690-9ba7-e24f2df7bcaa", "sighting--f889aade-07b6-4f17-8bad-61b189e5790a", "sighting--e3002672-7a8b-4a7c-ba2d-40acc8ecd04a", "sighting--12bd8b35-2933-467f-b130-2d68797e2fa0", "sighting--2d3ab884-d053-4e23-833d-572b4173ab9f", "sighting--9562644e-40a4-49ef-aa62-575508a89f18", "sighting--80f8b90c-80e8-4e29-8926-530025b5bbce", "sighting--1d6cda03-89a9-456a-96e2-b8843665f1dd", "sighting--072177d7-3bdb-4cdd-b68e-99a4eabd750a", "sighting--74600e3c-e784-4b7d-8813-ee970786e58c", "sighting--7f9de578-2685-4ad6-a29b-726519e4561a", "sighting--7f3aa1ca-009c-4c4f-ac24-13b738895d71", "sighting--72409d39-edb1-4025-82c6-2047a44ee174", "sighting--4224726c-0707-4fd1-8dbb-1be515ffebb7", "sighting--3361f458-c18c-489d-bcc7-a13810648e78", "sighting--76e991f7-9ee4-4c25-838f-d5a83bc7296b", "sighting--31adcfe8-9ff7-4acf-ab41-41399a66fd5b", "sighting--0c960055-9be4-4fc6-9a0b-d4473b6d4a3c", "sighting--04b5fdd7-5ba3-47c9-8dd6-a823af64e2b0", "sighting--3ec8ffd4-bce3-448f-9898-dd366a914d55", "sighting--755bd569-3cff-4dcb-9fb2-90c28f81c9d5", "sighting--341df8a7-f37b-42e3-b279-2084b41bd84e", "sighting--c74816f0-1c93-412e-ac58-f23b80ab0336", "sighting--ef5d4542-b9ec-4ae3-8be6-48eb99b8ec5f", "sighting--20659e8f-34a1-4155-a3ce-3f5ad622b2aa", "sighting--eb0591bf-8d17-40b0-ba6e-27c71a504cf3", "sighting--6855b4cc-68a9-4d63-a1fa-1ea649146836", "sighting--1946866d-121b-4d6a-b81f-5a9751cfc653", "sighting--7361594b-282b-49db-b00b-22a71a973bb4", "sighting--83d93c00-1fc6-4642-b1de-7511dc28e916", "sighting--9315e7e6-d5a2-4727-901a-6180ee470e8b", "sighting--994baa42-ab8a-45e0-9f6b-21f28a255f79", "sighting--29d83c38-abb1-42f3-b1b9-a5d4b3713130", "sighting--c272f918-fa15-4839-8fef-37f4d8992bff", "sighting--55adbdeb-3e84-45cb-b01e-713c088c308a", "sighting--2c5a3fe4-1811-43bf-8956-3c1841c17ae0", "sighting--83b417c0-8159-444e-a8bc-7b062e971a43", "sighting--46a24590-2b78-4fa9-8eaf-52042ec5c426", "sighting--d2f35679-6668-4922-abf4-eaf09db904ce", "sighting--9559ec3b-d29d-4fd2-aa0b-38c4ddfbb6ac", "sighting--337f4936-ed48-4c34-a1fc-38e1e45ad58e", "sighting--9adb1659-f58f-4200-8915-0ac00b1b7972", "sighting--1795bede-45b6-4509-9762-c2e0068a8cbc", "sighting--b68f9f6a-ed99-4a20-bba7-aea33aacb47b", "sighting--dc138e31-cc5b-4276-b611-37a3be86e2fd", "sighting--66d38efe-b7aa-430a-8ffe-b6b2df1b902a", "sighting--2050f54a-15a2-45be-a298-cd55c7205790", "sighting--12acef2c-6872-4d4f-81ac-e68db94c3ac0", "sighting--9d3b3772-e4b3-4ec9-a3ad-7d231e36b4fb", "sighting--d2745b0e-d6b6-45d6-b9e8-c91511cee7bb", "sighting--f31ae881-ec19-4143-b4f7-45581413fe7c", "sighting--c967e8e5-4d67-4f6f-8040-70018d44485c", "sighting--941a5214-bd6e-4549-834d-adbd24ff86e1", "sighting--5149d697-5324-4c2f-8092-ec7d988121fa", "sighting--73636bbe-7398-4479-b948-e78cfd54ce4e", "sighting--b8e52016-252f-4b4b-a57e-a9d6a36fee3d", "sighting--2fcb92f0-3ea2-4114-b142-4ba35a5c5236", "sighting--06ca79e6-3690-4584-9e0b-409f8a1dc587", "sighting--e6324695-4595-47e2-9eef-eb7433df7516", "sighting--f3522ea8-42e2-4ae3-bb1e-a43336a72c6e", "sighting--d81adfd9-0f62-4504-a8bd-a0bf6adcb3af", "sighting--51c5caf0-adb9-401c-9312-155cc39e4886", "sighting--b8eeb9b4-d55c-4de6-8c1e-2966c63cad36", "sighting--51b7168f-7ee0-4f01-b7f1-d89faeb36d18", "sighting--600928a7-a7c8-46ee-84a3-b93497e958dd", "sighting--7cd895dd-010a-4d28-a320-9fc36eb7f1f3", "sighting--6038688e-676b-42fc-9f78-9861d5cfc029", "sighting--a975a18b-818a-4106-91ec-7831ae820643", "sighting--1d568228-7b1c-4e77-adf3-adea6bc888e8", "sighting--83b7f96f-97f8-4ded-a3d1-693610db633c", "sighting--baf72ffb-6acc-4252-b1d0-efac62ea9160", "sighting--aea31b01-ff92-4eff-95d0-ff1c65a040d2", "sighting--ca70f0a4-26c1-4baa-a124-1b5db4f2da4a", "sighting--c03deebd-4d5f-4899-a6e9-c4be7582d19d", "sighting--131d6ad8-dec1-40de-bad3-150553429f29", "sighting--c8818891-fc05-466b-8b33-29148372e33f", "sighting--f3a9088e-5353-4863-950e-60b7b7b5f9aa", "sighting--a34236f3-6a56-4832-bc7e-042275aa8a06", "sighting--00adfdcc-1f33-4a5a-9660-215c2c8e375a", "sighting--28003d67-41db-47e6-acb8-7168975334ac", "sighting--61a99134-06c6-46d1-962d-718a2356071c", "sighting--b39ab860-5656-4039-90f8-c7024d7be3d2", "sighting--dc310867-72fc-4847-8939-36b48a2d5eb9", "sighting--d6bddc6b-202c-457d-ba7f-7c462b8d8025", "sighting--631621f3-5a12-47f1-b72a-4c8160ce3428", "sighting--7623bd86-e0a9-489a-ae7b-07d272927269", "sighting--f1b52b49-f883-45e6-8768-ea172add00a5", "sighting--f6330b6e-502c-45da-aa1d-afc3dec48fb2", "sighting--d6fb899b-587f-4bdb-ad88-ceeda82fb9fc", "sighting--5b886248-adf2-486c-a939-97c3c5ddcffe", "sighting--f0328f46-5400-496c-b7c1-35bf3b496aef", "sighting--81d08b8c-2278-4e67-96b8-951131f18014", "sighting--e3dda454-fbc2-414c-8f29-95ef0a84b4a4", "sighting--ef87e143-8195-44a5-afd5-cd53fa430a86", "sighting--6edb0471-d5dd-4015-a0f1-81d2f6d00eee", "sighting--f3fa497f-5af6-4316-b52b-31b587966b6b", "sighting--1e50d715-c5c9-46ff-a465-3e86b042abee", "sighting--d1760782-a3ce-4d18-91d6-4ad7ba0f40f6", "sighting--19616e8b-215a-4488-9b87-a6e47f80e627", "sighting--a59208ac-c64f-4406-ada8-9f7c3405981c", "sighting--96de4268-1bc0-45fe-b565-5806044d925b", "sighting--81d19661-8921-40a4-b274-d362fed17855", "sighting--50fe7670-0d13-4fb4-8c08-8985bb3ec4f5", "sighting--505467d4-4dd9-4b08-89aa-33ca3f5b6e74", "sighting--a083ee67-8eca-472a-b18a-988d724e3fae", "sighting--3c2e7f54-5df0-4c15-a7eb-3a01292d9db2", "sighting--e1ca83f5-91a6-48bb-9f1e-502251e0a1ce", "sighting--55ca746d-df2b-40f1-93ab-bd01286ee001", "sighting--61fb34dd-6045-4cc8-b6f8-b0decdc4ea41", "sighting--c9ba92f9-8478-4044-ba17-fc22c604737f", "sighting--4b713322-7742-4751-b295-c8b190c167af", "sighting--8cf786bc-62dc-4794-8475-9735f4bdb698", "sighting--1ce49e32-a982-435e-a6f6-c0d7187ec79e", "sighting--89c02b98-af64-44b7-9610-6c471e0bb593", "sighting--02f1f7d2-af31-45c0-ac6c-ab66284afc22", "sighting--97361f9f-132a-46aa-ad4e-0f2268118f00", "sighting--aa1ca2b0-b868-48ee-9dd2-630782d8bba0", "sighting--84c622f4-7f96-4b02-a029-62ae218f0747", "sighting--3b789b13-080f-43d2-b230-ffdb370ed9d3", "sighting--408650ce-046d-445e-9467-750057405b9b", "sighting--9249c923-cf91-4fe3-8825-356f248f453b", "sighting--2312d98d-0e52-41a9-9511-53726c5961ff", "sighting--7aacc6aa-7271-4f96-b277-797e2dc6d742", "sighting--a315b2ef-8248-4615-83eb-31437196e32e", "sighting--6a69c35a-7363-471e-bc95-a04ee58eb556", "sighting--5a028b99-43f1-45ee-8c47-2a93b33a78c5", "sighting--aaff3178-f1f5-42ee-be8d-27c735526a1c", "sighting--a8cad372-d6ae-4893-8ad7-8fe291d1af59", "sighting--9663c12b-7940-4199-a976-fbf8a1ea8ef9", "sighting--f59ef105-43c9-4d0d-bfff-d560a79130c9", "sighting--47e5bcf3-3bdd-44cc-8f4b-06820115faaa", "sighting--294fc053-97d9-44cd-bee4-6a711bc2c1e5", "sighting--5af56e92-da64-4190-950e-3e6b2ea17ccf", "sighting--1f97dc23-1c1a-49b0-b626-8f9bb9700032", "sighting--ac204587-7a18-4ef1-9987-a76b14ca1e85", "sighting--2990d074-5a57-4ac8-9be2-63145bf2f918", "sighting--747f17ac-3cc5-4326-a256-babab99106b9", "sighting--ba8a1ef2-355f-491a-bc64-598020ef820e", "sighting--8b7e59d2-2668-4d55-9f0c-549df35a846e", "sighting--53c392cd-de0a-4682-a0c5-b5f3b22538e2", "sighting--f3b61f45-307a-40aa-9c82-541f8174b4d5", "sighting--e921da3a-3da6-4e3b-bde4-51ab5e77097a", "sighting--328db245-9873-4852-b3f1-28278198b70a", "sighting--37b41669-c83b-4fd3-9eae-c6caa83f6ce7", "sighting--aef40c81-80b3-4232-8a3f-94c4ffe19bdc", "sighting--98b905a9-57c3-4657-9f6c-9a43ab563be7", "sighting--c9127066-3cd2-4101-a06e-8f2b21173a58", "sighting--6267d207-1c95-4677-8d36-1096a10d4b41", "sighting--390acedd-df16-4396-b838-faba34584622", "sighting--4ca64600-e552-4dd6-87b4-d3e12de29081", "sighting--1aaf9c33-bb37-4b6a-b915-b8ddbe0b61d8", "sighting--621d2b02-15e1-4ca2-aba7-d878ee519df4", "sighting--41f35e55-00ce-4399-80b0-4337bc36230d", "sighting--24f27901-b185-4559-be28-a3f437450df0", "sighting--25ef5ea1-11c1-46ee-84d1-f91b453e895f", "sighting--976487d2-a8fc-429d-90b2-4f0b0d04060d", "sighting--963920c7-ef40-46aa-8be2-789dc3f76bc5", "sighting--b5a25a3a-61f6-4f65-bf03-4478e259423a", "sighting--bfcb3bcf-5b5c-45a9-863f-1136571366e8", "sighting--2f85d3ab-53ab-452d-a6d6-fc3c24ad5e95", "sighting--1b380259-22ab-4aed-ac53-16603b96eb98", "sighting--4b12d981-9041-4777-aad5-55c65af9a457", "sighting--26d4f50e-51be-416b-adb0-f74443fc66b9", "sighting--9bbb8c20-f5b6-4003-83ab-599314f371dc", "sighting--cf8ccc41-bd2c-4ce1-8d5b-d68bc15175bc", "sighting--f6a0113a-c95f-4060-93c9-8d76fb565094", "sighting--b3cfbf7b-4152-4f84-b88b-a93faf603ed5", "sighting--94484b3b-6bd2-4614-a663-5b71238e86de", "sighting--389780ac-b621-4f87-a4b5-cbb3615f3269", "sighting--ebbe54a0-ab16-4458-b4cd-cc74ed40dc79", "sighting--40b6b6b9-c81e-4c33-9c6b-d8adb3044e09", "sighting--e400d26f-1493-4690-86e3-2da5e79aeb82", "sighting--be271e94-4e08-4f6f-8a7f-399b4dda4813", "sighting--174741bb-abda-4fc3-a917-bfec40202499", "sighting--e8f99204-f54a-47ee-8923-984c272c0c1a", "sighting--cf2053cf-449b-4ecb-837d-3861494ed63c", "sighting--03492139-9090-4d11-854a-922ffc073ca2", "sighting--dcb6b7bb-7476-4ab9-b905-cad94d19c818", "sighting--7388aab4-8ce1-4ca8-b363-a990c936d76b", "sighting--66b89cf7-4726-45c6-bf41-a0072c811065", "sighting--48975482-e138-4a6c-9a47-c1a21501723b", "sighting--c8dafef6-b0c6-4bc5-acb7-d15dce49f12b", "sighting--496f488a-5bf9-4c2c-a9cd-93de761a5fc0", "sighting--f4b1f731-b6ba-4f1e-8ef2-d96e42bf197b", "sighting--d1642427-d90c-412e-a6f0-57eb34ec953e", "sighting--ef14899d-890d-4122-b447-a08dd13e7ce4", "sighting--26224f4c-2525-426f-a478-5c0a705e2c84", "sighting--3686edbe-9bbf-4a9f-9fad-a1cd8df0eb6e", "sighting--1864b0d4-5565-403d-877b-419fe02ba24a", "sighting--ccb53f41-e186-4e66-bd9c-10d177d532f7", "sighting--1e6d627f-59d9-49bd-8fbd-d4c5d3aa1e5a", "sighting--c65f9afb-0443-4489-8256-1e3c1fe8d9b5", "sighting--f8c620cd-4874-45a7-866a-dcd1005b598f", "sighting--113a4464-e207-48a8-8f9e-363d436ab1de", "sighting--49e25da8-95e7-4dd7-becd-7b96fd996754", "sighting--a1e30d06-cf8a-41fa-9349-6b658818ac16", "sighting--504be631-5733-4823-88fa-6acc6fd156c2", "sighting--5d585b59-a6d7-4cb6-bb8c-f6c3348ea17a", "sighting--f6e20e62-4fdb-4217-9fa7-ddf9432726da", "sighting--d5b325b2-4da5-4c82-b534-da7dd094e76f", "sighting--98e60a65-02c9-4e6f-b24e-94d838f22b8b", "sighting--d93173f2-997f-4ab1-a1af-2b4ab7f9a6df", "sighting--91581f46-687c-4297-b849-5fa93bc17bd7", "sighting--a6a78a71-1ed2-43bd-8198-b61acf7c26e9", "sighting--366df02e-a982-4560-82ee-60137e95a8b8", "sighting--227021fa-9c40-46cf-94d4-6ef21735c9ab", "sighting--d57a2216-fb4f-439a-8c5c-f6eb5121363b", "sighting--22e69554-e61b-4bdb-a89a-1c5836be8425", "sighting--811d51c8-13cf-4c65-a94c-329f4301c4e9", "sighting--15220728-85ec-4221-a037-5cb2461dec88", "sighting--906d3911-0684-43e0-bcc7-76bf8ef07080", "sighting--ddb9cbe5-ad62-4e9f-ad23-a409e2f18f0a", "sighting--1c21ede9-5897-4c54-8e39-ff53b6c49b1d", "sighting--7c117e4c-ca7c-434b-aa55-4da3c9504461", "sighting--5344a6a0-003e-4cfa-a390-7857b86bb5ac", "sighting--342de580-ee5f-4abb-9b71-30d668581184", "sighting--785670fa-a4ea-4934-bba1-93598c737a5b", "sighting--2f042a91-d355-49ef-85c4-3696af150dab", "sighting--984155ae-abf3-4039-ac43-4b9a7c9a8bcf", "sighting--7080d138-c60c-47de-8d4c-9a82865c9651", "sighting--74939df6-daa0-4923-a1a9-1aa65a5faa35", "sighting--936ac2e5-92a3-45bc-9759-79b2b5d549f6", "sighting--e5fb6fe0-a500-4e40-bbde-7fe94d4c1a5b", "sighting--1e2f52a0-b96b-48df-9c58-c6850eab848d", "sighting--eafa39d7-9bfe-40a3-a2c2-0d21ea468d20", "sighting--bb3d3be2-1951-4bb7-a95f-56c4114655cd", "sighting--570fead2-d28b-46fe-90d1-e67f7f347333", "sighting--f584698e-fb6c-44b2-aa2c-98c30eb76f84", "sighting--26e8b350-e146-424f-b81f-4dc94e0e0ecf", "sighting--55295ebf-d0af-4267-a850-1d240a492894", "sighting--42fabc23-10c5-4e31-9059-622e9c8a4e35", "sighting--6f6f26ee-cee2-4e7e-b67d-e0b14b777b85", "sighting--998adacf-dff8-45fe-b763-d48d7cce3064", "sighting--3fad14a4-be1b-4b43-9a4e-2f0f7db5d160", "sighting--7f0a05a0-4446-42c1-90b6-c19af3d10dca", "sighting--a2507e4f-5ad1-4587-a373-4c98bea85c4c", "sighting--9b3dee0c-fe1b-4a0e-ad9f-5711e5c716cf", "sighting--642fa717-fcb2-47a4-96ce-4398df3a3f90", "sighting--70bcea3a-0860-4ca2-b103-df32f78d633f", "sighting--aa8245d5-9a65-457e-ae03-7e9bd5566f91", "sighting--172402a4-5de3-486d-a685-2afd1eb4c93f", "sighting--8b20a656-d32a-4e43-8f51-f5c27819d5c2", "sighting--1749c24d-80c6-48bf-b708-45aa3e985009", "sighting--edc0a13e-87e8-4ba4-be0b-2f8f85d88838", "sighting--2a038db3-d62d-4d4b-bd3c-a0f97d79d95a", "sighting--6acf7392-ab17-43fb-9fb9-1b3a06bd9e6b", "sighting--5ffa71e1-dced-4e41-820b-2dc927552bef", "sighting--d6098cd4-8068-40e7-8f15-7cdad0ed52c1", "sighting--dda6d69c-57fe-4a97-8a27-8f877065285b", "sighting--7e04e654-e063-4072-9945-bd1849c13111", "sighting--f68d735d-9d52-4c83-b2c4-1d4486b2f22e", "sighting--d2b537eb-67a8-4290-b3e1-a1be993e2a4c", "sighting--4a556560-a229-4e3d-a85e-e4854f6af1bf", "sighting--3969ff04-68de-460e-b331-278c548156e6", "sighting--7c09d7e8-ecb5-47ef-849e-bf68ddd15e1c", "sighting--f4ab244e-d28d-4252-b113-63bf4ff7ba0a", "sighting--ce63da98-f143-4373-9514-6bf2253f683e", "sighting--5f18bae6-9ae1-4f70-ac3d-114d036f5249", "sighting--b48907de-c8e7-457d-b49f-af07428168e8", "sighting--dc173f85-6ee3-47e3-a7cd-322c9b0336d0", "sighting--905c4df0-3fb8-40d4-bba6-e8863e15d48b", "sighting--19166988-c4da-48e5-b442-45a3bdf26882", "sighting--873cf252-ac9c-4bf5-9506-1bc12740d4ef", "sighting--ed912747-8168-42ed-b5e3-c30b99b5aa47", "sighting--f8afc960-a1bb-4745-99b2-b1fc518fcdb9", "sighting--75eee79e-aaa0-42a3-9efa-57178045c5d2", "sighting--c78e76bf-728e-4bc2-a60e-5ce80f160c74", "sighting--3278b2f8-3cbf-4b3a-ba1f-d885a8aed698", "sighting--778ac07d-7a8d-4710-93ee-0084f9e20000", "sighting--80256b6f-f87c-4e10-acec-4c490125afc4", "sighting--9b5a6282-b57f-4991-ab8d-c6d2ac6a9da9", "sighting--6a675b9f-1c51-4a54-9306-c44fa05467be", "sighting--56ef31af-6e5e-4d4d-8649-d0e27eb9364a", "sighting--4ad7dce4-16d7-45b7-96f1-9b0d22dff037", "sighting--40176ede-2269-4eb7-8708-6d7b5782be93", "sighting--1404c3e6-4aae-404a-987f-2932c09f9ef8", "sighting--dad53898-cf84-40ba-a2ac-ea17921575e6", "sighting--7ace0752-707f-4637-ac11-0bdc14e09bfc", "sighting--02778475-0731-470f-8fc9-e341d67532ec", "sighting--4b3ebca5-8a57-4e37-88fb-419bf5bfbc58", "sighting--278487e8-23c9-4602-bd59-89e218e2acc5", "sighting--7a71e5a9-e972-4481-b66f-41cd3c2e7b14", "sighting--a2433f73-c256-4f4c-a7b1-fe816141925e", "sighting--1f915dec-612c-4dd8-ab4e-4ddff93c42bc", "sighting--20611ae3-9b75-4f0b-b873-be32a04e0c3c", "sighting--8324eef4-fc8d-43b1-97ef-eecc396f1dfc", "sighting--caf67f0f-3600-4d0a-8aea-73f120b2d885", "sighting--3d823366-9687-4624-abd1-f0e5315a5ce5", "sighting--8fe2d062-82e5-4170-aa6c-a3133ee2e53c", "sighting--8f2bc322-1ce3-490a-9e82-75eb2d6d8f4b", "sighting--4daef0c2-3adb-4e4e-a037-3131a1fd21a5", "sighting--99248a4b-0255-4ccf-a3fb-a2dc244830f9", "sighting--b4961e2e-c93c-470a-affa-224e21cc3caf", "sighting--2ef401a8-59c9-4acf-9d87-b11bd1d00060", "sighting--0d991c5c-80b6-4ad7-a24c-e15b7626ffb1", "sighting--02c4e3f2-0419-4c04-b949-ec29e2cd9e4e", "sighting--2c708abe-95f7-47a7-bae0-c4dfc46f7304", "sighting--f25022ff-8673-432f-b874-684aa1aaf006", "sighting--17f1f189-d79e-45d7-9130-bcea6f5c4c22", "sighting--0389c6af-dc94-4202-9ac1-773f54e7f8a4", "sighting--3df005f0-c37a-4a7a-9ca2-8d60973421e9", "sighting--d9b7c88f-5c88-4444-a281-e121a20a126a", "sighting--a1bb8355-26e9-4ce8-91ad-0f669a4d48e3", "sighting--5325e304-2770-4631-a90f-20313873a10d", "sighting--d384947a-8e79-45e9-a26d-6dfa78b40955", "sighting--5090edfa-62b1-4acc-b840-d13ebc911a98", "sighting--b1fdbdfd-2a59-4fc4-aed5-c7f4ffc71b47", "sighting--d66a4ce8-39b6-4f9d-8232-905fa99f5c5f", "sighting--b1bb1791-98a9-4a87-ac42-fc259249d7d6", "sighting--dc9886e9-444b-46e1-bdb5-9ce6870df9d0", "sighting--6de08758-cffa-450a-a249-30f033a1f88a", "sighting--d32cf23a-96ef-44a0-8b38-48dd54be6dd4", "sighting--14d215d9-7ea9-4caa-935c-591dbc73f3b6", "sighting--6271e808-f748-49a8-9c60-ba5a0c1aae95", "sighting--115fb8ed-b2c5-44a7-a2bd-85971892a17d", "sighting--786400f8-df24-4de6-854b-5f46ef897f30", "sighting--898e95b8-2ed9-4379-9f6e-5957f5af00ea", "sighting--d25eb05d-5259-474f-b8bd-c02a32383878", "sighting--cefca70e-db77-4920-a2e7-a4364fd74173", "sighting--6ee32fae-5626-4961-bdc2-97e9be56962b", "sighting--6743f1de-f00d-4b66-9fe8-5a859367e936", "sighting--5967c83a-4630-4455-839d-eb5a3923ae3d", "sighting--9ba6dba2-cd09-4b27-a82e-eb120eb1b7b6", "sighting--633953de-9d1e-4fb9-9953-9eda1e7a3cef", "sighting--65a4055e-c1a9-44fb-be3b-92a798804de3", "sighting--13a63f0e-c63d-4c61-81d5-0bfafe4a157b", "sighting--44665bae-ad07-49b0-8fa9-0f8a149eebd6", "sighting--8b83e1de-4c17-45e7-aca0-30e4e3174dff", "sighting--95c7e84a-cad7-4430-aab7-8e05786ebcdb", "sighting--c66ea302-2e10-478e-8720-d1911f4f6cd9", "sighting--4b1058fd-e22c-4f6d-8992-a7ee5263492e", "sighting--c24f2657-0acb-4c84-b4c0-f0081f78cd8a", "sighting--7876831a-d680-43a2-a82a-c533300f7cce", "sighting--8ee2efdf-ca38-4df5-a020-ccce6a739e31", "sighting--324e0c6c-c004-4170-a3b3-2ede576e5a3c", "sighting--877a1bbe-2f5c-4c3f-a642-cbd203e1d22f", "sighting--f876d747-92dc-4384-af55-1cc97c7836b5", "sighting--caf09e79-e418-445d-8a7f-d9211053c8f3", "sighting--4587763b-9e3f-4b5e-837c-2f735f76901e", "sighting--1ebdd401-d615-4944-8096-2bb89b323ef4", "sighting--b6df57ce-b537-4c1e-b087-cfb0e4772ab3", "sighting--e1af9aef-7ae4-46f2-a245-ea42d663d88c", "sighting--3e677fed-8578-409e-a7d8-91316bb1dd76", "sighting--e8f834cc-4e66-4954-a751-d2424b4a73e2", "sighting--13d5a3b7-7187-4d0e-9bc1-2cfdf6a64810", "sighting--2a92b84c-38a2-4b7e-bcf4-03e980ff4351", "sighting--3e14fe94-079a-40c6-8430-32406b3a3b61", "sighting--75e36fe1-da31-4438-b599-81d1172ac3f1", "sighting--bcd6d500-edb5-4349-8a71-cf721b32bd73", "sighting--eb70a2cc-2ddd-42bb-9a23-633f15a0ca4d", "sighting--8ab613d8-8ef9-417a-b4e8-01dacb90020e", "sighting--f1b322fa-cbe9-40c5-880d-04b6831ce643", "sighting--d438ab4e-62b6-4f28-bc6c-6984b362a8fc", "sighting--78f81be7-3450-4655-906b-f9a00fcb485c", "sighting--a213f6a0-7345-43e7-bfb0-51245f4a0afc", "sighting--ac667527-b633-4123-bbc6-f43bace980ec", "sighting--06818b50-e091-4f96-949e-2ad5a17a8a18", "sighting--b2df4ec0-2183-4a9f-ba2d-dac7d1807a81", "sighting--cfcd3ced-a60f-47fd-8e06-401070bc8a99", "sighting--0fb957df-efb1-44eb-a64c-af0109177d03", "sighting--e18d61a4-9d9e-4f04-b131-ac3d956ac207", "sighting--394f4d2c-7e2b-47e7-9f6d-96fc23b4bb38", "sighting--abdcb874-6bf7-47b2-94b7-71f372944ec0", "sighting--4f1f6c2d-bc39-4cc7-b6c1-7b5663a12151", "sighting--2190c3a0-a986-4b72-84ce-9ab32fadebf1", "sighting--c07ea469-9eb7-4b0f-9b0a-d72f6790b419", "sighting--daa332ca-e312-42b1-acc0-f54d69bf1eed", "sighting--c183a0b2-b03b-4f8d-9239-c56dfa2e0fcc", "sighting--6ab36016-b122-493e-b130-7664c64d1b26", "sighting--c05e44ca-349e-475a-a66a-d77bf0be193b", "sighting--097dbb5b-288f-4333-8897-9457b5b3a8da", "sighting--952dd673-1862-439a-bdcf-a72c5c7a247c", "sighting--edfd888a-2c10-4947-b6e0-edf3091868d2", "sighting--d0ac843a-1656-4d93-aaa3-0de0b3b4cf16", "sighting--54f2b11e-112a-4779-902c-7cfe114d795e", "sighting--c6ced511-f31f-4422-9ee2-d7111fbc0680", "sighting--8d1c8199-b5e3-40b5-adc5-0220a004bb15", "sighting--41430d08-e040-4a08-8279-10953b22ffc3", "sighting--1e333f51-8f49-477d-a1b1-a18140b9f961", "sighting--d6bd7ab1-b270-4bb1-9553-42b093f712b3", "sighting--7087698b-f0cd-49c7-9ca2-2fe49ce25122", "sighting--7426ad38-1fca-4930-bf71-2b8ba66b454f", "sighting--7835cbcc-9e51-4985-bb06-8fda394f2d44", "sighting--9c899768-c871-4501-b6a0-dd050963f016", "sighting--4ce1d6e7-4b16-4f3b-8c84-3ec115bc5d46", "sighting--d5e2677a-2c35-43bd-99d1-b5d13e026151", "sighting--3b7d982a-4cb3-4e9e-89e8-da24d3f239bc", "sighting--1caeca0d-1a8d-4882-9f61-250f8a5788f5", "sighting--8825d0bd-4e72-407d-bd55-735a216fb554", "sighting--61f02bfc-be43-4186-b792-fec982432728", "sighting--370efc53-358e-4f06-ac01-8a6432f440c1", "sighting--2e4123e2-dca9-4a95-ba71-e86bd99d45e9", "sighting--7b7c8c27-0ce2-49c0-80e0-13ce7c2af218", "sighting--ae12d56e-f376-4a9d-beda-0332e747617e", "sighting--af233a87-71f0-4b5b-bed3-5359263dc136", "sighting--7a1da216-58e7-4842-96a5-7017123e5787", "sighting--ed7e7330-a4c5-4c6f-ab53-8d4568f04306", "sighting--6cf0690e-3db1-43e9-bab8-a4cd9efc3279", "sighting--7160b18e-83fa-48d3-8d3c-58270591da74", "sighting--b8626bcf-cf5e-4357-ba9e-0e5bbcd506ed", "sighting--5041b5e5-2fe4-40ca-8a8b-de867d5b6144", "sighting--2ffb7e48-c0a1-41f7-8686-9cb6d936e121", "sighting--0a05fc88-5fa0-412b-a754-cf11c3f7d6a5", "sighting--541d174f-2b17-488a-bb3e-88c713af0473", "sighting--4899f8fa-3833-4671-8ca6-9e689263fb6c", "sighting--caee22ee-065f-489f-8bff-3ef019657701", "sighting--83498510-47e1-493b-aa5a-2e72789e2ed4", "sighting--8d2a0722-64c6-4960-bf40-f09524084498", "sighting--e7f87015-d945-4443-8411-3a1fa9e709c1", "sighting--6851fb88-cc8b-44a4-a38e-e37079249974", "sighting--697aefd5-94f9-4c40-bb8c-32c461f11b8a", "sighting--276254b7-34c3-436f-bf01-583a5a126b7b", "sighting--6d9b1fc5-1962-40eb-af4e-877e0236fd5c", "sighting--be95c874-b5d0-4b49-a6aa-ecf4086c27c3", "sighting--54c1ab83-930a-4799-9b90-a8d89c8e9361", "sighting--a3903dd9-e9c3-4143-b279-ae481b5846cd", "sighting--83939c52-e30a-413d-afbb-69b502172b16", "sighting--c0dcf82e-742d-4438-aa10-a36c1a7fdaed", "sighting--6c512aa8-c11e-4156-8177-4d851d41f487", "sighting--fa313241-ed9d-409f-a759-0f7202cc1a73", "sighting--e7a41245-0dca-4a8e-ad50-5a44cfd85262", "sighting--53100884-d743-424d-ac28-a5d8a88bb992", "sighting--0a9b590c-1fa7-4037-b6d9-dcba090fa319", "sighting--180fe948-be1a-4181-9713-6a7fdb9c2ece", "sighting--6a122aa8-44f5-4f6e-b098-e44bc783e897", "sighting--4e241ebf-72f1-4e06-bd27-56f116f8353a", "sighting--0777ef4a-b267-4522-9f77-a6e5a1d33d46", "sighting--d53de3eb-830f-4759-9cee-bf611bb684c4", "sighting--00504a0c-1583-4b06-a8b9-2004afdacddf", "sighting--c752752a-8f5b-4d6d-b52c-1c6c3b0eec68", "sighting--10936607-bbcf-4103-98dc-e5128d9ddc8f", "sighting--de13d7fe-ef76-4489-bd7f-3668056d47d2", "sighting--5ebd3766-a3ec-45ea-92c2-3e75531b758e", "sighting--797228a1-4d78-4e1d-9cbb-74e63f7dd28f", "sighting--10e553ee-6423-4bcf-ac3c-67ffb8acb30b", "sighting--197b3c49-bfb0-4a7e-8443-3c4ae3bcb53d", "sighting--c07ae499-aa5d-46e6-b44e-fee564e0f5d1", "sighting--142a2b00-45a3-4ce5-b192-4322ffff1c1c", "sighting--36bb6f2e-58b2-4423-b098-58391ac9b8bc", "sighting--41857a80-fef9-4aa5-9575-1bc03d921db8", "sighting--341f17b8-e0cb-4ca7-aaf3-736580448475", "sighting--b09d6eb7-b1ad-48f5-8e75-c9ae3344d1f2", "sighting--c5491c52-1430-47cf-b306-ee5b48fba599", "sighting--522ea91c-1971-4146-9e8e-721a277fd419", "sighting--ce865d6f-5091-49b1-9d7a-9ecba821f447", "sighting--6a8af9dc-5855-4454-bce5-573aa92ed231", "sighting--0633a437-4a1c-4cc4-b169-b4f89e97a0e3", "sighting--2d7dc13e-e0fe-435b-837f-50e716dc14cf", "sighting--f6df0867-cde0-4227-8a19-630690e5b19a", "sighting--45527e30-820f-4d14-b730-837f9cdc7dc5", "sighting--fcb47e8c-7ffb-42c1-a669-c0452cb9ba8b", "sighting--02eda780-5f01-490c-91f8-8760638e7005", "sighting--d3d944cf-e734-455e-b63a-e7502a6e1c88", "sighting--33a7fdbc-e839-4472-9445-f959698a3293", "sighting--eec7154f-1126-48df-b15c-ce6635b01eae", "sighting--9450939c-e9d6-42fb-876a-aaec99684bfa", "sighting--8881ea06-0b98-459f-80fd-3def865723ce", "sighting--b32386f0-88c0-4164-9cb9-25437949303b", "sighting--61bd8a11-c7b4-436a-8949-5882e4fe9423", "sighting--472b9d2c-0dc5-49e4-9380-df19721a6a78", "sighting--6dbaec5a-0f94-4125-8328-e589bf17f0ab", "sighting--263e8a37-2882-422c-a0a0-b1a16ffa392d", "sighting--33bc6265-884d-4ad3-b6bf-e5eec0e81875", "sighting--32c52f0c-5ca4-42b2-a198-908baf3c003a", "sighting--396ef8de-0098-4407-aadf-d553b807ee06", "sighting--31f5b467-8e7a-49b4-8fab-b7a294d97045", "sighting--5202c19b-9e02-48ca-a2b2-70af95a1ab2d", "sighting--ba4754ce-677b-4317-b41f-f7af0c1924df", "sighting--9ac78bef-deaa-4e0a-a410-8396290b3e14", "sighting--40482014-1222-4f09-b54f-fe42f9dc5e6a", "sighting--c9455003-77be-4156-b2a3-69e4764e46a6", "sighting--b2e1090e-be60-48d8-a66b-eae6cc345870", "sighting--2b1e6c10-6afe-4409-82a7-3613c9272937", "sighting--13d7ee04-33a9-4f80-ab6b-6223dcd29e3d", "sighting--46a6f403-bb9f-4819-8066-bfeb6f722382", "sighting--420bc469-3bb6-467a-97c0-146975cd3267", "sighting--8f0a25cf-74c8-4dae-92c5-7f4c39195813", "sighting--a280d3cb-a5a8-4eb7-91b2-269b9f4c5c60", "sighting--f974e728-8cb0-4ab7-ae7e-5df0fa6eaed8", "sighting--64c33442-04a0-4ac7-a974-ac27b6113b94", "sighting--f7fc4a44-e9ef-40c0-b5ec-1e00c3489f47", "sighting--2a860286-efeb-482a-82cc-0daae30375b3", "sighting--c431e4cc-8028-4519-92a1-3d93aded21d6", "sighting--fd78935d-7392-42e6-82fe-52ba3e07348a", "sighting--bfb19ba5-03cc-46b3-8a4a-e942a24ecb5c", "sighting--4d97ada2-e6fc-4f32-964f-f186494a9dfd", "sighting--6f2f70d1-fb89-454b-87ff-244ad5d1f3b3", "sighting--dfcf0ef6-3248-4eef-be51-ec535a6186aa", "sighting--f38a5dd1-035d-467c-9f28-e592d6784644", "sighting--9c25e09a-8925-43d4-8f45-6a7309ca050b", "sighting--e8da829f-f5b4-42d6-a29f-7ecd170a494b", "sighting--258a0208-a1e7-45c5-9c7c-f26b38d6f49a", "sighting--b9f0feb0-1c9b-445e-b7b6-d3427795369e", "sighting--f4f72ce0-6d4b-435e-94f5-f3a00d61dec6", "sighting--d37107cd-a9f0-453e-801d-c34c03e0643e", "sighting--c3fa26ef-686a-47d5-bc56-0d5c2030ee8e", "sighting--87282882-f225-439e-90cc-fec6a00271c8", "sighting--24b1e27b-9cd3-4a0b-82c3-f4016025b995", "sighting--6fcac218-3f54-4520-83ea-036cf14c0ddf", "sighting--b56fb461-7d9a-4b0b-8ea0-cb799ecc0ec9", "sighting--d06f2fb9-4a81-48e7-99ec-a7b9d7a95c61", "sighting--eb7d6e88-6530-4c1a-bbba-a13ecd926853", "sighting--4845e7bd-b759-4c61-b72e-90d92dc10439", "sighting--d4bf7fb0-5652-471e-923c-bc60c2c5870b", "sighting--c83dccdf-e92e-4ea8-9fed-8d5f51c80035", "sighting--605c7d10-971c-417f-ac99-ef11a602ae90", "sighting--22354c39-7b21-4aed-b7d3-0073cb54618b", "sighting--787b9757-2c19-4311-a426-3dabbf1ca489", "sighting--7ebd778e-8bdc-4d9d-b246-a2059b1ca37c", "sighting--6a177d96-5cbb-4bc5-a58f-6db73085ec53", "sighting--49fb2cae-85f6-46ef-9f66-555ca0a89e38", "sighting--d889628b-b133-4dd7-b9b3-ff9f3397271f", "sighting--ea2eb025-9fa0-4cfb-b23f-7412e9307812", "sighting--7f9b358b-6986-488d-a9a3-097bfc9e9727", "sighting--7abfa575-d063-4f61-9a6b-faea46aa54a8", "sighting--09d71a73-5669-4433-9ca6-317fc98d42eb", "sighting--faa20848-d6b1-47a1-b40c-3b2ad4a519c9", "sighting--8761e2a9-3122-45eb-88b7-53ed7445292d", "sighting--90c4cbe8-58d4-4490-b83a-1feaf944ce5c", "sighting--6b989001-b96c-4b73-87d6-620a15cdcc0b", "sighting--929da241-decb-427a-9281-98f61e42c456", "sighting--f2891f58-f47b-49a4-a4a7-530111f24d18", "sighting--258749c4-878f-4bfc-b8ca-b3e21c68a683", "sighting--d1209a64-88c9-4ac5-ac23-d2b6f0413fb9", "sighting--2c6c6fed-6e67-42f5-9b57-69040787518f", "sighting--042427a5-49fe-41df-9fa9-e18d3ac27384", "sighting--374b7703-9021-40c9-86f4-ace1f347e955", "sighting--1140aac8-7636-4dac-bbb5-922ea3a88698", "sighting--5c29cd8b-1603-44a4-840a-997357daba19", "sighting--32bb8ab3-e240-4db3-a7db-684fb9c15fd6", "sighting--83f5e699-9215-4821-93f2-b4a2ec28281e", "sighting--37999403-9237-44a8-b3de-0c960788d917", "sighting--14316690-e7e0-46b2-a233-f82a4d17ff5a", "sighting--f2f30469-a554-4d7e-9800-65a84282c710", "sighting--31851ba2-c7da-47f3-a04f-6c3356194021", "sighting--f3b46ee7-514d-475b-86ce-ddb6cbd37241", "sighting--561d141f-fe5f-49d2-9817-5419f446bcfe", "sighting--9c06dff7-734c-46e7-8f5f-560f2704573a", "sighting--3a1ad229-4441-40d3-b460-2f6bb31f8009", "sighting--1aea4135-326e-46b4-ad91-a89b8edec63b", "sighting--f85e9440-b2e3-4e15-9022-587f2595dfeb", "sighting--d106d5f6-eece-406d-917b-f8f56feded7b", "sighting--687a9354-5594-4e24-a394-a225a7e96f05", "sighting--fc05a48c-1bb7-4974-983e-a4a66947f490", "sighting--22295b3e-63e1-459f-9c20-0bc79396342d", "sighting--0eb0e999-5254-4313-b31e-c086726c1ed4", "sighting--48503e26-296b-486a-a3d7-91777c910b13", "sighting--ceb712ce-8538-4b5d-b354-56e5329cb5bd", "sighting--a49f9ae9-379c-4494-8339-bc3a17e4da3d", "sighting--f6b1688d-2607-46f0-ad52-5a448f9dfaf4", "sighting--50f7af5d-0075-4bc2-9b93-99ed67913bb9", "sighting--18a61109-485c-4ae7-bddd-2ca6c6af47d3", "sighting--feeba678-336f-45cc-86cc-327dbde22858", "sighting--685ad1cc-68ee-47a7-9652-bca07a766649", "sighting--ca67150a-19c1-48f4-baac-696cc385ff3b", "sighting--1c3a6fbb-e5e9-44b0-a1b0-5868378deeca", "sighting--66ade1b5-253d-4f78-8727-a1b975684ede", "sighting--32e3a60d-3d6b-4b0b-85cd-acff86f984d0", "sighting--a6f32be1-25b6-492f-869e-ea1a80a544b2", "sighting--31761b32-cf84-4913-9d12-99cc47f197a7", "sighting--0171b27e-6cb4-41b9-bce7-7898ed78d947", "sighting--7bc27965-3316-45ad-9354-ced0e183ab24", "sighting--b072d5f7-631f-45a5-b842-af5f788d9c22", "sighting--6f49c600-329d-4288-ae59-7eb0bcfd2a8c", "sighting--e425c5e4-fa3d-4e63-8f09-fc2633b57bf0", "sighting--e9fb7dae-5b8a-4ce0-9cfc-87a9e03d49b5", "sighting--ed3ce39b-4be7-43ec-9e20-f16c2b57a404", "sighting--d35cbcb6-7b19-4936-a566-ed9f8d556b46", "sighting--889e118e-329e-4bdd-8cc6-8e23d9e076f9", "sighting--05bba1dc-50ef-4daf-8e14-d796588ac04b", "sighting--4cefa892-0f58-43c3-adb2-a7b38277a276", "sighting--d9d58e47-707d-4365-95a3-2c5c39395c5b", "sighting--6974244a-7d90-4e2a-95b8-ebe4691c2497", "sighting--8aebd038-8c26-4504-ac12-732aaa721115", "sighting--9edd376d-79cc-4f65-a70e-1f31471b96a5", "sighting--298c4dae-965f-423e-944e-77b41cdc339d", "sighting--314b9911-a363-4847-a6f8-baea2c6a8163", "sighting--cc2fad71-9c56-4afb-a2f4-2288c02ffbbc", "sighting--8262b1d5-9b94-4b9d-a72f-dba124b7ef6e", "sighting--afad7542-6dd6-4705-9807-63d79c2885c5", "sighting--dee54edc-fa07-48f5-b72d-63faa5ec7e62", "sighting--54d34753-201b-4a09-97ad-78aa2e66ca3a", "sighting--d01c986e-6fbd-4552-a32b-324ea452ed63", "sighting--fad893a2-abb3-48c0-8095-3210f474bc57", "sighting--d99d6db3-8883-49da-ae73-a19243c8e680", "sighting--ed379915-9f8b-4e46-b19f-c50ea2349a87", "sighting--07d776a1-e2eb-44f2-83f5-e2458997995a", "sighting--03c38f41-0594-4f60-bbd4-a8769abb5f38", "sighting--8c4dfd40-3bda-4c7f-94b8-22b83d74b958", "sighting--9a6cc970-b34f-4a3a-9c28-5bec120b21d4", "sighting--8bbe1654-a2ac-4a3a-8ba3-5fcc38a58d8c", "sighting--34b93294-90b2-445d-9ed6-320ab69b592c", "sighting--3bca9c14-f34b-48ae-b2d2-f83910e8458c", "sighting--51afba1e-2719-45b9-93a8-3373722408e4", "sighting--ee38dd51-ae88-45de-9ba9-532a0aa47edb", "sighting--4edf1eba-6868-44f7-9467-acbb2105a63c", "sighting--98e8e77c-4667-4bd9-a845-3c5ce74a8361", "sighting--42d2e7fe-c893-4dd5-a628-8575a503d797", "sighting--ea20d556-d4e0-478d-bdba-07a23af6eae0", "sighting--6b07e765-b5d0-40af-b991-90a9bc95758b", "sighting--93cc36d7-7fa0-4f6c-a2fb-0af4ead57a3a", "sighting--1cb83794-5108-40dd-ac0e-500a2f658f45", "sighting--d50f3d62-e4eb-4415-b203-24676ce5438c", "sighting--9fe27e11-3a9b-4e91-ae96-770430b26e76", "sighting--f1ce0b7f-5fc4-4b90-824a-da1d974e7750", "sighting--65158fc2-96af-45fd-a55b-3c16a7ec0ddf", "sighting--d3b3ae7d-71d5-4900-b678-c7462a69f64f", "sighting--1f8b203c-832c-4b70-9a0c-e436eab37658", "sighting--621d9dd7-cb7a-45e9-bf44-4d2136719f29", "sighting--f0965e0a-8cbb-432f-8b6a-5dda8bbe0cbf", "sighting--6eb0f3a1-00a5-4a62-8f5b-443007b7adda", "sighting--fd78ed0b-823f-4e80-bea5-ca4778e1ad68", "sighting--7a6e1b4d-3ff3-41f8-93b7-bb2a94e0d303", "sighting--847bfcc6-b550-4009-8c76-1facc25f9026", "sighting--9dfc5aa4-792e-4cb7-9322-d818ee2d3e98", "sighting--52ba916d-c63b-4c40-8c65-9a596d46e997", "sighting--72d1c109-f698-4cf3-8028-cda13d555208", "sighting--f4a33ea2-9000-440d-96f5-d77d0b0aeafa", "sighting--ed4d883f-a000-4e33-8284-5c6bdd1db97c", "sighting--7410784a-3d2d-4d4e-8e4f-e6896a3a174d", "sighting--068e61ef-1095-4f93-a5d8-bfb466378ad6", "sighting--ffd6b1e5-615e-48d5-a2cb-6b09e374bff0", "sighting--dcab4f1b-badb-4551-ae22-9ed13640d5ce", "sighting--816e22ab-e012-4e42-9396-afd0588be89a", "sighting--d6e4703d-d018-464c-bd4d-94468396666d", "sighting--69b44ad9-c220-4855-a73d-ea9ebc966768", "sighting--828a7e27-cbd6-4aaa-b20a-1b83a71bd204", "sighting--fe96316e-cbe0-4c3e-b287-58b148e043ac", "sighting--585d7392-ec58-4f92-811d-e9412a5966a5", "sighting--ac7fa020-1797-4035-b39c-b26b78aad640", "sighting--214f235c-819f-4487-a08a-8011406e0f68", "sighting--1b2aab9c-4c8b-482f-8c7f-ab76f17c2573", "sighting--f50e394d-70b8-4912-8c70-a789e2fedda0", "sighting--e3bd21a2-db8f-424d-8ab0-bf88cb948705", "sighting--e2e478ad-88e5-4107-bf0d-667673a313f5", "sighting--1bb6db7d-abf7-4803-a200-be1a35d5c7ef", "sighting--356c4bb2-c7c1-4373-a52f-c171b1cda578", "sighting--33f835bf-5bbf-4862-b6f0-e564086de5e8", "sighting--e5dd33ec-03ae-488e-9a32-6a93eeac52c9", "sighting--b297aaec-6a17-463b-9818-dc75aae4c6a9", "sighting--145ec0d2-8364-47de-903a-e656e5ebb2b5", "sighting--4180a8db-fa2d-4a66-bc02-99800e34906d", "sighting--07b85269-d88b-4889-89a3-edfe5e99b139", "sighting--150995f1-08c2-4728-9ab9-4d0fef6082c1", "sighting--cdba74ee-4cb8-461c-b45c-538f5a657384", "sighting--4e073568-a50b-4c50-bae0-a97ce7c9f2c8", "sighting--a1241364-45db-43fd-bacb-fd4b681febfa", "sighting--c4670c91-4a9d-43df-85f4-38f297a235b9", "sighting--3d55d0bc-1ebc-41d1-ba43-205cb7f69c0d", "sighting--ccc4c3a2-80ec-487b-934f-8ce757e5f62d", "sighting--5c9c8652-6404-480a-8c06-a4e17656b78a", "sighting--83ab01c4-cb71-4071-b681-d6b0ff7c26db", "sighting--1c70830a-c9d5-4180-8749-f84a4b9835d4", "sighting--6aa6ea4e-f310-409d-b75f-5bff005a6b4e", "sighting--d7bb5037-79c3-4ae7-8ffb-5f77f7bd8124", "sighting--f6d8cce9-b07e-4989-a840-1611265554dd", "sighting--5faef1d2-8f59-49b8-b7cc-d94dbcf6246c", "sighting--0bf1ee1a-e7d8-4e5e-b981-67a7b2d46a85", "sighting--be50e609-52b2-4345-98e5-5cef8d939bf7", "sighting--ae62f8f4-8120-4126-8295-16cc785439c3", "sighting--8682f526-bea0-43b1-ae73-3555b86237a8", "sighting--f15fe3bb-e07a-40e5-8df6-29f03a5b552e", "sighting--8080bdad-d72c-4e1b-b7e8-42c1aa857324", "sighting--2f0f9ab0-bbdc-4195-a13e-d88c441b7e8b", "sighting--f3e7bca2-b64b-472d-b9b9-81fd3c578451", "sighting--c6b463e2-6875-464e-9789-6ae4e0ab95ed", "sighting--7734412e-01bf-4cae-b953-04a2686395c2", "sighting--1ef7d03c-0510-421d-97ed-ec7bc35c86ec", "sighting--287a3581-8099-45ed-8e9e-bdf00862fc3e", "sighting--6005dfde-55b6-4926-86d3-17829afbb1c5", "sighting--2874ecd1-4de2-4395-917c-29fb2b45c732", "sighting--9efd9a27-fbe0-471b-8f1b-f51833eba0c9", "sighting--796788eb-b3ce-4f8f-aee7-aba07bd17fcb", "sighting--6be993ad-4450-429d-98bc-bd769c840a29", "sighting--aa4b79cb-8f3c-4d45-a03d-e8852b7ca67d", "sighting--d4fc0038-174e-4b56-9dd0-0ab341007366", "sighting--4de1c8d8-02e0-4d60-8a75-05b0534c797c", "sighting--15ba18da-10a5-41a4-8a66-5fd03052a158", "sighting--9d0dbcba-79fe-4b78-b113-bd490b292640", "sighting--780bafe7-4654-4489-bcf5-1dc5d8224a0e", "sighting--6b6ccc3b-f214-4ae5-8c3b-694a74cda840", "sighting--7dc8ac3f-3e04-4f86-8cc8-a5f51c034a4b", "sighting--0412acc3-b7bd-41ea-8104-e80b56617670", "sighting--2d763e4b-1d0c-4b8c-9f7a-efea54d4dffb", "sighting--268a23b8-551e-4d22-bc33-f62270799a9f", "sighting--d5854611-b3e9-4801-b200-581fcd7461ce", "sighting--95a5ca4a-9da2-492f-a168-ff7e7b7815a0", "sighting--9727d4b2-37b7-450f-b287-a3e6d0050b59", "sighting--0967fe50-c491-4c98-8f45-52dbce388e61", "sighting--bcd34575-8921-4427-be32-49ba6fbcc995", "sighting--9c747c46-985f-443f-9347-900a6c8daa80", "sighting--b82214ee-8699-4fe9-b955-01e92e12f13d", "sighting--b620b6ef-3314-4508-a5b0-84256fb1f2b9", "sighting--095bfbb3-f387-4d6d-9bed-14bbe3271bf7", "sighting--aeaf7be6-76bd-40ed-8520-6396869e9ae5", "sighting--c6653dbf-1b3a-472d-93ec-58f62acb8385", "sighting--d9cdf3cd-3994-43b5-afe8-7d0b4fa323b1", "sighting--d83532c5-1244-4e5e-a236-27274fbe3605", "sighting--78c90613-2aa3-44ae-aa81-940d8b653f99", "sighting--f51db90d-c081-404e-aa78-608d1edc5266", "sighting--326a28f7-3431-472b-82ef-8f61061ce4e5", "sighting--525bd615-ae35-41fd-ae91-da8c58563968", "sighting--5f52f865-4ee2-4627-8cd9-4573c4da3f5b", "sighting--4c077f92-3f02-4282-af39-e24c31203392", "sighting--1efaf9ae-215e-4f0a-bfac-9cc8689c5dd7", "sighting--0a577673-a49b-4ff0-bf38-430f95116bed", "sighting--2675319f-b0cc-41d1-8ee0-49f628fc360e", "sighting--7e8064a6-7b26-4a11-ae05-1bd4812cf4ba", "sighting--bf4da3b8-def8-4548-bd95-3bf458f2ad0b", "sighting--9c64f66f-2908-422d-85ce-3d1f4c5ed6fe", "sighting--65c67a83-4168-4647-9559-1adfec2592e1", "sighting--7c1471f8-cfcd-4fd6-ac7b-7a55f1a35806", "sighting--da39a0c8-f909-448a-bafa-ae484803bd15", "sighting--19b15eeb-1fd2-4ca3-bca3-f433cb6cb02c", "sighting--2957b9a4-80fe-4beb-ba3d-ac74cf9f2ee8", "sighting--335e65c2-6125-4acb-be0e-2f9cfa043fde", "sighting--b057e639-03a0-41e6-b26a-dbd694eed63f", "sighting--aba45c6e-29ca-4cd9-9e55-16a7349ea283", "sighting--869601b3-f8bf-471c-b57e-eca72a970c29", "sighting--0e3ae2eb-1edc-44b6-b425-a4299d007df8", "sighting--2330b47a-059e-44a5-95d9-28f845ed9301", "sighting--ef6c3cbe-a666-4a3b-aa68-0e32f3135c89", "sighting--da9f434e-0ceb-46e2-ad58-a85600ba0cad", "sighting--bdfb1be6-1aa8-4208-ad31-9702e30ba6d2", "sighting--7a51e5dc-31a2-4049-93a0-c56112d44282", "sighting--5c6d5c53-03cc-4cce-8bc0-785aeae6c124", "sighting--ff0fb41c-9dc0-43ab-87c8-f935583740d1", "sighting--eaf73753-d1a0-4ec1-8e27-aab81ac0730a", "sighting--f9a74f7b-46ca-45ba-b95b-ff57fa9434b8", "sighting--92127205-a088-496e-94ca-44c4522ce7b3", "sighting--5e9ba70a-04ef-4e17-aa6d-a1cde8974c9e", "sighting--b6a18b72-51fb-4e24-9448-63654839995b", "sighting--5cba89e7-e024-430d-993b-da30eea116c9", "sighting--8a447019-cc07-4e2b-9974-95a3b2ed4488", "sighting--3aa1d100-7f28-43da-9382-8053d433cbc4", "sighting--ea279c17-9c88-4b82-a3da-01b755d8aea7", "sighting--3408112f-b34a-4c10-8bb1-b207537b60de", "sighting--55d7956d-8a45-4fc4-bac4-f30354ff208a", "sighting--f30a924c-3336-4ef7-ac12-ca43928ae9b8", "sighting--b3c5a0bf-be5c-4382-94e0-3f84a51389f7", "sighting--40398c3b-f776-47a0-94a8-ce5bebd3a10b", "sighting--21401484-aa81-44d3-b333-2e45434dd442", "sighting--67595829-d90e-4de7-aba0-88139a81fb9a", "sighting--1cd7ebaa-1d37-43fd-a37f-7fe4b336bfb7", "sighting--b43bde39-4594-4c38-8110-658009fc9194", "sighting--9c6fef23-2edf-4fdb-b22f-f6d0b5d48ec2", "sighting--64af1c84-d058-4ce8-bbb3-443bb4a071c1", "sighting--91745ec4-24ba-437f-bf63-eada47605e33", "sighting--41434fd9-71c3-467e-8d5a-785c6ab56d94", "sighting--e47d3305-fb02-4d0f-a0d7-b62e44e8e646", "sighting--8e6fdedc-0303-48cd-9948-a40cd4e3147f", "sighting--ba8c7ebb-d6ab-4660-8979-752badec1c71", "sighting--15f142e7-44e3-498d-b15b-3f8c5e186e88", "sighting--20c0c5b4-160d-4c8e-806c-a8aed76f2979", "sighting--f33e4a4d-15de-4036-ad0a-dd3aec67e37f", "sighting--ac9ab678-0fbd-4232-a87e-61e95c7bd4dd", "sighting--c385a3f0-33f2-48f0-9612-af5327d1e285", "sighting--547d15e6-351d-455c-bf0c-2aba2023bd1a", "sighting--d35b9fe0-c2f7-40b4-b9bc-92a045410064", "sighting--0c44fafd-11a0-4d6c-be51-c5988f34edf2", "sighting--100d9dcb-a118-428c-92a1-8c2e098eed5e", "sighting--44a6a17d-83ce-47c1-ae89-be515d4c96d9", "sighting--706c7132-075f-435d-aea7-2510b776cded", "sighting--f83895a0-8d53-4652-9fc9-d42294852b08", "sighting--d9126a1b-e3c9-45a4-9f2f-af1b583a9be1", "sighting--7fecbb24-0c7e-4215-a0b7-f99a8e633fc6", "sighting--015080e3-cdcb-4d51-b162-92737469ccf4", "sighting--6ced9883-34c3-43cb-95fa-191929fe6eb9", "sighting--fd0eaef6-6c17-4ba4-ba49-441706640b4c", "sighting--48f4ec6b-49bf-4642-8c8d-d3eed8f64694", "sighting--77529585-77f6-4b44-845c-b8ff0d416873", "sighting--d0bac9cc-9cf7-4e1c-8ac8-3029a4584e22", "sighting--dddd8b92-2cda-412a-97a9-cf6f999c26c1", "sighting--b6cdbe23-98d0-42c8-a3a0-38507772c60e", "sighting--078b8b64-40e9-4464-9fd8-be034b7c8bf2", "sighting--76ea7c3d-b553-4672-9cde-8ff94c1c558e", "sighting--7f8eb0ce-7319-4090-b62c-41116da937c7", "sighting--bb2f6ca4-bcdf-48b6-9882-6b3253bd134c", "sighting--e5072066-9c17-4d0d-bb04-07d4170adbb6", "sighting--5c053be6-c56f-4da5-830b-a205bf6cdb93", "sighting--fc5dc148-0f0c-411c-a566-aa43167d9852", "sighting--eb4670e7-4d8c-4559-9207-21af994e1830", "sighting--1b9538af-59e2-4a81-9d2e-2b060737df0b", "sighting--be51e38b-c3c5-48e1-9424-fba84d3054cd", "sighting--c4b43957-b22e-430a-b109-6bc9714720c2", "sighting--464dedf3-8ddb-4880-ac06-b9278a2db432", "sighting--765547a7-180c-4bab-a602-55371bd62a7f", "sighting--82f6b120-6614-4f9c-9a6c-f8b2c2cd8dc0", "sighting--9583ed89-351f-4308-a423-07b2c2292f66", "sighting--c9d467ee-77fd-4a0a-a8f7-d074c9e14647", "sighting--28ad6eb9-955f-41c6-bc3f-91a0265e009b", "sighting--ae093e33-570b-439f-a010-dd215afcd58c", "sighting--9824f54e-b0ef-4466-8a83-a56f273b8562", "sighting--bd1cf35b-d573-446c-ab07-0163e24e9762", "sighting--8c5541ba-f0d7-4c2a-bdfc-b423d1937132", "sighting--35a92ff7-7f30-43f4-9c7f-d12949867db6", "sighting--cac86f79-273f-41a5-a968-b359f6f24bde", "sighting--787f644b-dc87-4dd5-a979-69c0e5be4ae1", "sighting--5d63ba3c-c6ea-41f7-9231-585fa3061ad4", "sighting--4b002ae4-87d0-4a61-a933-9aa432430963", "sighting--4e575b46-8dbb-4886-8c7d-faf9cd946689", "sighting--1074df01-5449-4f57-a077-0cc91a0ecfab", "sighting--567732b9-4304-49e3-a440-09a0c153dd2d", "sighting--644929c4-c618-4e2d-8833-57a005afa272", "sighting--6a3f4fd7-16b0-4d96-8d18-2a5eaadae717", "sighting--b6de73bc-e7d4-472c-8d00-c1d8b556a58a", "sighting--1cc1618d-654a-475c-94ac-f0d72426a223", "sighting--26ba4036-caa2-458c-9f58-16273850e62e", "sighting--f97d2af9-f7ed-4dbb-8402-10f21f457a57", "sighting--01dae915-9c3a-404b-8a1e-a9c21c8e6c52", "sighting--1b036f34-c6b5-4fc6-8993-78295fc12e79", "sighting--185eb3c4-74f8-4c29-abef-086a0991c22e", "sighting--290da82c-6b0f-4d06-9ca0-9092a7194228", "sighting--a5a6b6ae-6991-44dd-b72a-9430ebe4949d", "sighting--eef4193e-60e6-49b3-a73b-f7ac105da4fd", "sighting--bc070433-f84b-4ef0-be42-90a8d4688045", "sighting--0df2b247-126a-4817-ad1b-70824de1fd0e", "sighting--74b3ec3e-88df-47dd-96f1-9cf7253f2a40", "sighting--c31a3f5a-fe98-4eca-a2ea-ce1909cdf4a9", "sighting--f384629f-b9d3-4e46-a72b-2e65dfedecd0", "sighting--c6abd046-c77e-4a12-97cf-c0e6b38976a4", "sighting--bf5a85cb-aa1d-4260-86ee-9709b301c1d1", "sighting--9356df40-9371-4a00-a3f5-1b2b0532fafd", "sighting--bd855570-fe3d-4076-a433-4c0c1628bcc0", "sighting--ae59b9a9-132c-43c2-9e76-995ee5f95841", "sighting--3e180039-db38-43ea-ab68-df4d73b3a5b6", "sighting--e00efd0b-558c-48b7-84bf-b3d93746f0b2", "sighting--9a7be801-1f2f-401e-aea4-0f7294891305", "sighting--ad55669b-20ec-4bd8-a25a-6fe8586e1b89", "sighting--0a34f57f-d4fd-4c80-b49d-fa25158736de", "sighting--890e9aef-6892-4325-88cb-6723f1bd4b4e", "sighting--7591e1d2-4411-4b13-8c32-ff9bfeecfbb5", "sighting--8cc4b26e-daac-4722-a930-c69f9ed33c8b", "sighting--7f60a635-b7b9-486c-a4cb-a82bfe680d15", "sighting--fdb344cc-b4de-43fc-9f6a-562b09677ae9", "sighting--39321cd9-45e1-4d59-9ec8-54793e54a499", "sighting--8c0283d8-e2c6-46b1-9674-0d9ea08f595f", "sighting--695f2cfd-d8a7-4271-82a1-817036ecd5ff", "sighting--b51ff91b-0f81-4390-9063-b1277b2f53a1", "sighting--eaf40dd6-3649-45dd-8aed-a3f4f8338a81", "sighting--6886e08e-72f1-40da-9b21-b72a7ea7985c", "sighting--8eb2d8ab-e639-478b-b275-0df7dbad2b44", "sighting--a37aafb9-02e8-4cba-ab4c-aeb08476415a", "sighting--8e47beb6-ce8d-4ccf-9478-fbc43d60d124", "sighting--6dd8e24d-c14a-406e-9dca-5ffea158d671", "sighting--3df02d8e-1e65-4b6b-afb6-23878e841881", "sighting--20aef2ed-33ad-4cdf-a4c0-9781839bde1f", "sighting--c56c5e58-db67-476f-994b-f0be65fea076", "sighting--77b5f501-2de4-4e51-8e07-4c0fd2ff2331", "sighting--684dafa6-b2c3-4e07-beb8-7c37a9c85519", "sighting--6611226d-4176-4029-bd8d-c2d5e2e7a48e", "sighting--734fab09-a736-4328-9621-bcfb1aab1652", "sighting--07a767d1-876e-4c55-9431-b53851db1dde", "sighting--690d223b-049e-4542-9c4a-e929fc5c36fd", "sighting--c6a08572-8174-4381-9570-a23e3bdcd0f9", "sighting--da68ac2f-683d-44e8-87d8-2acebb775862", "sighting--5e261f9a-854d-4b2f-a748-0c58c53d3b62", "sighting--f5340abc-8105-411e-804d-36c7027c37b3", "sighting--a8f02497-0906-4d70-b14c-8deeae898093", "sighting--34176fae-1d46-4bde-ae27-d1ecc0d0a6f8", "sighting--0063f898-4784-4a30-96a9-276581dd4c10", "sighting--55b4767c-4a3e-4885-9bad-d6728bdd721c", "sighting--99b3e1ae-4356-49da-8957-3ffb23cbaa96", "sighting--cbd1a307-6138-4c9d-ac8d-2a685162993f", "sighting--c6532d97-6549-4f6e-936f-3b141f1bedc3", "sighting--1e28b8fe-c3d6-4bb6-9168-c03eedb835ac", "sighting--433afab9-7623-4087-bf71-8d8c7fa1f193", "sighting--29d3884f-e1f2-4404-a280-b43d8dabb4e6", "sighting--743b9963-8c69-478b-8c1f-6fe73ac2ae42", "sighting--a165f90c-f60d-4b08-bdef-9195bbab11fa", "sighting--a7cf1790-e62a-4410-a057-fe862943084d", "sighting--8fe21044-7701-4f4b-aa5b-6a7103ee7169", "sighting--71e961f7-9c46-4339-916b-7ca3bc58db0b", "sighting--2fe8b0c7-37be-4e06-8aaa-02f8ab34227a", "sighting--0a781c16-2009-44fd-a8b4-1c4e034e75ee", "sighting--d6517554-f627-40c8-8ee6-32b510f0bca1", "sighting--793a98f6-165e-4084-8d2d-6b2e4fe12731", "sighting--d4f48750-8199-4444-ad49-453c950e1368", "sighting--5258ff5f-8b0f-418d-95d3-4c741fcdc938", "sighting--932ec7db-5bbf-4e12-8e70-e5ef33d9694c", "sighting--473190e9-79e7-4b75-894f-570e85dbb827", "sighting--843a642a-5848-457a-8e52-8cc945f68f72", "sighting--902649da-9ccf-4d52-a989-6d614dbf2f4b", "sighting--edea3e2c-15f2-4278-8356-45af8ea88d4f", "sighting--dc5922c0-6664-4ca7-a25c-11065886034b", "sighting--3a8eeee6-6033-4df5-9991-ac511cc77ef3", "sighting--1c15ea5a-938f-4607-b21c-e3cf55077c1d", "sighting--8bc83953-004d-4838-b5b8-720912e22203", "sighting--1834f0cb-fd85-446c-932e-19bb4c27ec00", "sighting--023d3ec4-2c37-41fb-b045-bcb7b7f2513e", "sighting--3b193502-5ea6-479e-a11e-442c80fc0c56", "sighting--3a6ed2bc-5267-498c-b7fb-ee74eaf5bef3", "sighting--59779902-5d50-4753-a5bc-2e40633379f0", "sighting--14945702-f1ed-4f4e-b649-b432ea970c96", "sighting--e9d54e91-24f2-4ece-962e-72fd80c8eaa5", "sighting--e567d2ca-879c-4e30-be2e-439bba21aa01", "sighting--b9100a90-8ba6-415b-a58f-87c4d48a2735", "sighting--bb4ee78c-9931-4f31-8f99-39c6d1d53560", "sighting--c0a028f3-ce18-46ad-bfbc-4310e70302fc", "sighting--c75e9129-b01f-471e-b48c-a06c7d295131", "sighting--672e1391-1f87-48ab-af67-836306670222", "sighting--df2b95f9-ebfa-472e-b8c8-9112c57af459", "sighting--602c039f-8ad6-4f9e-9bb0-7c4f75a0cd96", "sighting--e146567e-7883-4620-bcef-ce23072723cb", "sighting--44741111-ce7e-4992-adae-30ac3f77eb65", "sighting--3494eb7a-7401-43d4-9be2-b7fb1a88df9b", "sighting--0fcabb05-e612-48dd-8e1b-2723391bb20e", "sighting--aeb2d08d-cbdf-4181-ae8d-895680509927", "sighting--ff84b651-8117-4357-9d45-f60d8060db17", "sighting--b0f9c3db-0643-414c-a7c1-a62646b0d44f", "sighting--52ffce61-0d65-4503-b8e7-615f5ca9dbe3", "sighting--829005e7-f619-4d43-a784-0c2d25e8ced6", "sighting--ff18f0e7-21c1-4c12-a9cb-b87c480daecf", "sighting--68bbce53-c3c1-4b24-9b61-a3e5a6d2e683", "sighting--948036e3-f41d-4ffb-8c5f-4987c3c1c82b", "sighting--bb37e114-de72-4c02-b047-1a3415ebbfdc", "sighting--dc374a20-da08-4e91-9570-2e0fac788a46", "sighting--26f1bd18-a634-4494-8196-0494b9e18680", "sighting--964716b8-d0f5-4972-b5e2-13cfac1857c9", "sighting--6d1c0977-d754-4684-a77e-00206759bb76", "sighting--3683bca1-4856-4429-aa76-b29ce67da4da", "sighting--60ce7254-d24b-4dfd-b198-777ad3ed27c6", "sighting--ba13ac60-1798-41e6-931e-0a61de98f1d9", "sighting--90d92c8c-715f-4272-89ad-89337a9769b5", "sighting--4279085c-1452-4e7d-a58a-d79ea9b5432f", "sighting--6eecfe17-754b-4248-bd0c-0ccd8f3b81b9", "sighting--8646fd6a-cded-453c-8d7a-e770d7676635", "sighting--2a3dbca9-9d01-42b2-b9d1-8a3e301276ba", "sighting--94b9c075-0822-4df6-911f-41b60e719619", "sighting--6a9a77ed-67b0-4a4d-b029-3cc6003b5a34", "sighting--b443618d-2841-47b1-b253-2a5bdf153ed6", "sighting--f255397d-6695-4cae-8631-ee809c462a7c", "sighting--6f2b5cba-75e8-4383-920c-87a792208f0a", "sighting--e2d830fb-600d-4c67-90c6-87827f14ef8e", "sighting--f46d947c-01d5-4c6f-ab25-cd73c0d01159", "sighting--c5da8eb5-0c20-4e14-8d53-0cf2ab27f30b", "sighting--bf18f10d-9e1b-4c83-afda-fb9b0ed2ba65", "sighting--84ce8d41-cd69-401f-be82-c07fe1785fa3", "sighting--94ca9649-6a5d-43f8-8b05-c0d4433e9a49", "sighting--d454722f-1aca-45e7-8047-a77c3e9583ff", "sighting--c1f18838-aee9-427e-80d5-6fbcc3f7fb69", "sighting--4108ec1d-2fe3-4589-9648-1d6bb4e8d279", "sighting--8cdddd91-b29b-4a4a-bbaa-9666abdb1162", "sighting--143f6c9d-d4a7-4dc9-aefb-605360368bd6", "sighting--dc566d55-23eb-4cd4-b42f-ab2a5f4b4066", "sighting--88eaf8c4-e8b0-4566-b129-e509a7b17cae", "sighting--4bf8a477-5b0c-453b-9d60-ed16ee54bc64", "sighting--cf71558a-8bfd-45f4-880b-5a517ccaa5ef", "sighting--8594d2c0-4df5-45d1-b1b5-09ae3331a1ce", "sighting--19f9ae54-c091-4b3f-b0e5-7d0bbad10405", "sighting--a9573201-b272-4b21-89fa-b311800bb9ba", "sighting--0e402eee-837b-47c7-9387-1ce97638706e", "sighting--03a8fcb3-a675-414e-9883-1940a7c13848", "sighting--9130cc53-08d0-451f-aad2-6dbf75ce3714", "sighting--1444cba0-78ba-4476-9d74-8c46d4c45eb2", "sighting--725fe849-ce1e-4561-b5f8-ecf76e7f0f3a", "sighting--a5b06bb1-227e-4faa-b9a0-da9bfc53ffb3", "sighting--c8fd2575-6b4a-482f-a746-362bc3f2e431", "sighting--a4fc73a8-abc0-4dad-a911-e50babb33b30", "sighting--d37a2474-8309-480a-9301-89cf0d7fa989", "sighting--f5939aca-21b9-4402-9b3c-d0273caf4dd6", "sighting--ef6596f1-ae3c-4f78-a8c9-bb0306b828c0", "sighting--c509023d-892a-4bb1-8a92-468256bba558", "sighting--85c48d29-9eb8-4686-b9fb-5cb4c54d0050", "sighting--9bcc2e4c-75a9-464c-a61b-4ea302fad66a", "sighting--26174d50-6865-43ea-b834-a839628060c7", "sighting--fe67567b-c6a6-484f-b176-3a3b7b718761", "sighting--e77aaa54-e190-44b4-98c1-454d63c5a87f", "sighting--1ea947ee-d318-43d7-b824-a0aa83a8b938", "sighting--72403e25-5aed-4bf0-b7fc-a715e5e41da7", "sighting--05c65836-6972-4d5b-a147-b79f821b937c", "sighting--f72c1916-d6db-4ed1-9c85-76ce99efc157", "sighting--3e4953ee-53fe-467a-9bea-533853b627b5", "sighting--38b4e488-8f3b-43c2-bc7c-c975c3fd8959", "sighting--ac30b17f-c386-4bf2-9798-5ae16efb8d4d", "sighting--12e81aa0-6b05-4b64-b682-123e71c72fef", "sighting--3bfe0ea7-045c-4e22-be89-c668a0ce0ec8", "sighting--1715d07d-f42d-46ec-899a-278410594cb3", "sighting--13b6f6cd-619c-4a98-bcef-e536138fa6e7", "sighting--f672a813-3045-499f-b741-0aa5f6bad141", "sighting--fdc7b728-38da-4225-9a7f-78e5e66f9acc", "sighting--47c35933-e435-404c-ab35-d1c9060bd054", "sighting--58cd6a55-e9ec-4a94-99b9-55d335dc1e6d", "sighting--382e895b-b7ad-4c28-9e85-831d5494a4d7", "sighting--57822987-3cfa-4abe-9664-7d4de900add2", "sighting--b7cac389-c737-4142-9f73-49a3e7790726", "sighting--f5812592-3886-4524-94ad-2a56456cbf20", "sighting--812ec519-6ed6-4cb4-922a-b8e1d4e94979", "sighting--cf65e0dc-6c2a-431c-b960-0819a8d64966", "sighting--0a006b7e-417e-4d02-88a3-3b9948828831", "sighting--c356642a-c290-4ad6-9bfe-fdf6a9486da4", "sighting--49bf45f0-2bb5-43f1-b76a-612a8be2d737", "sighting--6e543667-804d-43ad-8728-205bb1a96ccd", "sighting--05d68ed5-75c6-4e68-90ec-90f33351b239", "sighting--45d96a37-2e9a-4531-846c-81bd9e18b1d5", "sighting--ef1b942f-dcad-478a-acb1-7cc1aa68881c", "sighting--63adf337-8209-42d0-9022-c1ae41e2efc8", "sighting--3dc16b4d-4421-41c3-af5d-c4b77d2d750b", "sighting--fa0052e3-c4cf-4a31-9a92-66517b098899", "sighting--995887f6-fc1f-4c74-b04d-1ceab9f7f09b", "sighting--12463bc8-c32d-4002-bcbb-edab94f8ecaa", "sighting--9e99671b-aa36-4bda-b802-fe7cec4e50af", "sighting--904eb692-d341-403e-a6c2-818403ec4d30", "sighting--55826634-1d5b-4e07-ab33-7ed05df69ec6", "sighting--3127d868-dead-4b58-9601-3747db831174", "sighting--27a67ed7-8063-4b1b-a58f-c64288b3e25f", "sighting--07757b58-bd92-4db2-a6b6-e0ac9f2f52c2", "sighting--003f7be5-856e-4170-92ee-a17a6c6f4b60", "sighting--ee97f88c-7a8d-48d9-ab41-00466872dd80", "sighting--c94138fe-8583-4e7a-ad3b-0ad88b9d5b6c", "sighting--9c0a4448-dd84-456e-bed6-6a2b945beb04", "sighting--95bf2af9-8976-45fe-9479-969b3926d027", "sighting--3ba5b71c-ab7c-44a3-b181-1422428c38ab", "sighting--00c2f79d-c554-4c49-9a8d-76e386d7af67", "sighting--644db72c-cc20-4a80-b1c5-f79ddf050b06", "sighting--51681884-e212-420a-a22f-dbd4521db757", "sighting--687fea1c-b211-458b-984a-0bd34c4f6c6b", "sighting--fbd86101-ab87-41c2-9892-803f35fd7423", "sighting--05c98411-2c07-40ea-9f79-3453f2921261", "sighting--b3735de3-3b73-4f57-9603-f05b60c0d863", "sighting--0fb55d6b-0bef-48ad-834b-89e5b2c59ac5", "sighting--e1d63258-c7ba-4e09-a02b-0e4bbbd49d37", "sighting--35eafecb-f31f-42f9-b9df-0dc778db29fd", "sighting--479cf88c-371f-4aab-be25-a371559a05bb", "sighting--4bfa2c4e-9efb-4046-96ae-7110e40fd688", "sighting--205d8997-d9f6-45dc-bed9-d301f82e5bd0", "sighting--7b9528d3-401f-427b-87c4-f677dcb8f36f", "sighting--8b2cda1d-7969-4581-b8bf-7871ca2235b4", "sighting--307b0915-f4c1-4efc-b980-5c6ad411af54", "sighting--8a80bac4-aa61-45eb-a034-0c0e6daba2e3", "sighting--49761128-aa41-48f2-9cd3-4ec4fcbd1fa5", "sighting--cd37e7c3-6e33-400f-bded-a76da96bab85", "sighting--878a2cec-0e08-4204-99e2-606100291f63", "sighting--9573135b-2219-45b7-9fb5-245a3d5ffeff", "sighting--c7853067-8ad7-40f7-8c8a-6ebc4c8ca00a", "sighting--b8e21839-4aea-4a78-8427-b49cd2227fef", "sighting--e6c64d62-7604-4bc1-833b-bc939660dadd", "sighting--5c323f41-1681-4696-9d51-093ca5518600", "sighting--867863af-c09d-4433-9894-5d50e611a01b", "sighting--1a9725b3-c49e-4446-9ddf-2ec671c70e7f", "sighting--0be816a5-718c-42f0-9a6b-cdc7819d621a", "sighting--885a2f7c-a449-4457-82b8-4504f81d0108", "sighting--0186e675-bffe-4999-9919-2843edcfd5a0", "sighting--a19a6962-639e-473e-99c5-97aef3a91e61", "sighting--63c74cac-f33a-4851-b5a8-09a975c25965", "sighting--17683767-ddca-47ae-8838-b80a1fbd4b74", "sighting--e6be0ad4-953f-4a43-afa8-3876f7201c05", "sighting--64857d13-c985-424c-8d44-99c1ff916acd", "sighting--92102427-eae5-4134-849b-1500c4479656", "sighting--27439ee6-ca51-4078-9f4b-c8a606eb6e13", "sighting--306dd020-6bb4-4432-9718-56978390a78f", "sighting--46d80286-63e2-4572-8cd3-c5e4010ce164", "sighting--45117141-3125-4f13-9629-8ca84104aae1", "sighting--b65c0e11-3710-4aae-bae1-89e0374e5d68", "sighting--e2091ebe-432a-4e7b-bf16-5012ed608850", "sighting--60f71cc0-eb7d-4ae8-9cb8-5ba3b730800b", "sighting--79628c5f-743f-4452-8228-faf35d774d92", "sighting--85dde565-5ffd-43f3-bccd-90c59f2505a1", "sighting--b4f38c3a-3d78-4c14-bcd6-5ee90e809587", "sighting--e49de894-6b98-4308-a6da-8f4ad47a8e06", "sighting--75624c24-ce39-4dd4-a229-cbd1fe8e8005", "sighting--646ac619-5d33-438a-b538-798299898d07", "sighting--7baa5c1b-f70f-4c28-ab5e-d8f8ecc9a100", "sighting--952a1427-635c-4d55-8597-0382b92a0b89", "sighting--b383514d-c773-402d-838e-6e6e365fa1c7", "sighting--b541947b-a141-43d4-9555-27936d136893", "sighting--baa13673-dc2b-49e5-84bd-2974b851dbf2", "sighting--7254a4f5-dcb5-4201-80da-11a926a04474", "sighting--8a7be64e-8b65-4788-a533-e2e65b53530a", "sighting--66ae418a-feac-480c-966d-bc4a46026f10", "sighting--1e99851f-6e9d-4b12-821d-819cc2c8ccfd", "sighting--c0aaaf82-50c1-49f7-83ab-b3dbc5fd7094", "sighting--1ab05016-1a38-45a0-a5e7-539c1a1648bb", "sighting--d59cde01-adf0-43a2-8339-6b5e1747c859", "sighting--2e4b2f80-77b3-4e96-8439-9dea190efa0d", "sighting--e3ac8ec5-e064-432a-a740-7d6925b9be88", "sighting--1a285407-6fc4-4add-bf9c-f0a05f7a39e8", "sighting--01930d9d-3d0d-4eb8-8563-2b3f7bc930b6", "sighting--221672a1-70d5-4414-9ce4-fab7144d50fc", "sighting--5ddaacdd-f353-41d1-9669-260c1a4204f1", "sighting--23551583-0333-4f35-b214-3c2992151560", "sighting--f32cfd36-5c74-46a7-a2d2-2f9910805c4d", "sighting--287c0e77-e185-4867-95d1-e30e06f6e896", "sighting--4bb5b058-44b8-4f1a-89c6-cab35a6480d0", "sighting--a5aac88a-8b6f-4fd9-b828-0bb4828e1aa6", "sighting--088269c6-dbe7-4347-9051-45fcf14176ec", "sighting--a64d7f65-15f5-4598-ba46-9be32528c789", "sighting--1ebb6f46-9137-46a7-997a-5e73e273a26b", "sighting--f86d75ea-6a32-4631-ba99-0200de91fead", "sighting--83542854-0189-40de-aa1f-743b446136e6", "sighting--8442c5fb-0462-4b1a-8de9-02dea1fa5a80", "sighting--02669337-ce03-419c-b98d-2a9515bf1ec1", "sighting--fb4d3d81-ec57-42f7-90ca-08881be3e3fd", "sighting--f356f8fd-16e3-46b5-8bc4-68da910422cd", "sighting--00814465-4225-4242-8960-00c3685051ca", "sighting--5ec4b404-caaa-44eb-a2fe-8d4db44c7b9e", "sighting--c6235a07-15b0-4804-ae6a-c0cfc0b62389", "sighting--b4f75fb6-b0e6-4f1e-b460-ba86f3abf571", "sighting--0766263c-122d-4190-a155-61d8efb7ffe1", "sighting--a7c2ad26-e755-408c-bf7f-464717d7164b", "sighting--41f85749-a9c3-45cf-8d30-0fac6f387a74", "sighting--08921d53-d943-48e3-893b-bcdff78c7653", "sighting--63ae5a68-207e-4e38-8ea6-d8a6c487222d", "sighting--0de9266d-126e-4fc5-9b77-bf931703045f", "sighting--606f3a6b-b92d-4425-8d0f-360f62dacd9b", "sighting--678dbb78-de4e-41c1-b7ca-c64f53f7d455", "sighting--9cf01415-f2e5-4fa9-9540-479c2d38a76f", "sighting--0c6bba19-d9f5-47af-bc29-bd1cc680f276", "sighting--165c189c-71b0-47d9-a4b8-6ddb466a325d", "sighting--4d7dd354-3f1b-4b28-a1b6-7edabc874293", "sighting--4b20bb62-9e03-488b-8d65-6b314ffb2c75", "sighting--58ea377c-71c8-4fd5-be0c-fdab46f84612", "sighting--bcd99f1f-6515-451f-94ba-b9aefb27acf7", "sighting--98f69954-7e07-4591-92ed-affd16070a78", "sighting--d4dcfa81-390c-4239-ab75-e3963877a1c9", "sighting--6860e0a2-5a5a-4a8e-9206-f4aaff4bf9fa", "sighting--f268bfd1-3ae4-4172-917e-fdc71b5c9e7d", "sighting--9306d749-4aa8-4880-89a0-068a6507c3b3", "sighting--c90d2b07-da71-4cf7-b5b8-6b044a1ac37d", "sighting--bb6a5153-08db-40ff-a359-7730c245794e", "sighting--4f9f44f8-c646-4250-a8f4-e42f09ef1789", "sighting--fd90a5e9-733e-474f-8fc8-badeea302b0e", "sighting--5555f83b-e6fb-4423-88cf-8981d82e4761", "sighting--07853369-3a66-485e-894a-8f1d6a8fc6c5", "sighting--38a6f0b5-e0b2-4b56-ab20-fb1238b89187", "sighting--709dd1d4-788e-468c-987b-958535dd02ab", "sighting--77b1e01f-130b-455e-93ae-029065c8b50c", "sighting--7f5ccb32-8f3e-4360-869d-65cc6ee18dcd", "sighting--18f9a01d-d779-4c18-82e8-a89d1e97bda3", "sighting--8832046f-1227-40bf-b0d2-1f26206daff1", "sighting--742eebd1-1524-4ec2-9f70-1d2649096366", "sighting--0c80a8e4-80d1-499a-8e32-5fe169c90926", "sighting--cd0c1ace-b8f2-4115-9d75-5bfc457e4be2", "sighting--af4074a0-82a2-472b-bb3a-9e4f0faf88e1", "sighting--797de4de-aa9d-4604-8da0-32fb1c7086be", "sighting--1f3ef28b-d3b5-4055-bd2c-99ed56dc8694", "sighting--585c14f5-66c1-42cd-ac1c-6b65fe5524a6", "sighting--cb6d2033-d252-4be7-9881-96490b4d1f33", "sighting--b95a04ec-c8bc-4484-825d-6dcc47e15aeb", "sighting--799f9a80-1c7f-4d02-887d-c53ff1ba036a", "sighting--174a4773-ec50-49c2-a0c3-aef1a628c2f8", "sighting--37b03cf8-d818-43dd-b8f8-e26f5aa4d829", "sighting--2baeb3b5-6bfd-47f4-be49-d0f4bd046588", "sighting--b747653f-74f9-402b-a270-77636cba09fb", "sighting--489c1eae-8238-4d01-a1d4-7a14505acd7d", "sighting--5ce9640f-a734-492f-80d8-f219f27caa0b", "sighting--c944781e-c531-49c1-8f13-633a526aa291", "sighting--d593ede2-a183-4a10-9186-b2a4801ea59c", "sighting--575fb66b-3604-405d-8572-8b8ab3f4056e", "sighting--01a12971-1c2b-49bf-bd37-66fc7e954ee7", "sighting--04451b41-df11-4bf8-89ee-42e7b74079af", "sighting--7f9ae8a3-219c-4e2b-8bc9-52681c5101a2", "sighting--8d4de852-7a47-4efa-ba7a-d5ea45e9e356", "sighting--f3d1d294-904f-4ba5-99c6-bb0b8b484f27", "sighting--499788fa-b64b-4e09-9ccc-cd7c80a3205d", "sighting--a9d8d8b4-041e-4c54-a099-8b8b5e3c2f98", "sighting--e182c0b0-6dbd-4892-90f2-92636acbf3d7", "sighting--2bfd0e2b-60a5-4aa9-bff7-afe63328c70e", "sighting--ed6d2299-a51d-4fda-939a-eae973d31327", "sighting--f3f52637-a974-4ce0-a300-9d160b8c9dd9", "sighting--7bc22e90-11c2-41b1-a4a4-0957c4c8c6cc", "sighting--c44bc90e-c732-4480-a583-010be1d65590", "sighting--c233cfd2-cccb-4861-952d-a15cf2e85e09", "sighting--7760fa4a-f875-4105-a040-dea737307f8c", "sighting--e6236695-6a16-494e-9406-b608a6b5bd0e", "sighting--25858b59-d645-43fd-a59f-d890175273ea", "sighting--23737a86-2dc3-46df-b496-1bcbb314f0cd", "sighting--3c5be8c9-33fe-40a7-9a11-163dd58c1e4e", "sighting--455a8b67-d394-43f5-a9a8-a791a05b4ebe", "sighting--a0b25862-f6c9-46af-8b64-8774b3e8df6a", "sighting--2511bb97-727f-4ebf-8352-473de69b26e2", "sighting--a6c07410-aa0a-4475-b581-727d33bd8797", "sighting--0c8b3cc9-a311-4583-bfae-b9c6cfe3fc08", "sighting--a07cf1d8-be2c-4f35-9744-e014c68a43d5", "sighting--69d62523-df23-4d72-a4e3-b6dfeb718efb", "sighting--37b1bcdd-cb47-4b27-9e82-c3dd00a15065", "sighting--56fb9399-2639-403d-b1d8-fffcfe429686", "sighting--bb425a03-3a83-4a3f-a735-8295049c84a9", "sighting--1a909a92-d9ce-4f1b-b66a-57920420fcc8", "sighting--313025b8-0b72-4a7d-ba06-23e88cd20e0b", "sighting--2f5efb84-f5fb-47bd-8224-43de76ad61d0", "sighting--299e237c-2920-4c7c-bcd6-a12655a8100d", "sighting--eda5e2c8-0ed2-45fb-bd5c-f196768a5012", "sighting--31d34204-b0ef-49fa-b181-ded5716928ce", "sighting--f97c167b-c8aa-452d-b51d-236a909bd12a", "sighting--87308463-5d89-4d3b-ba88-6285727ee3d6", "sighting--4bb9a60e-d2d7-4420-98a4-98ba89dec26e", "sighting--70140a7f-d60d-4ce5-b6dc-507e96f84d75", "sighting--4807944a-a9a9-4243-9467-db6ca60a158d", "sighting--51cea71f-83b1-4f6f-875a-245d41f305b4", "sighting--bfc37a4c-ba7c-4532-9f92-711f7bb52188", "sighting--3fc5b632-fb3a-4951-b8e1-8d70f7bfe7c8", "sighting--90204699-97fc-4715-9877-dbb8dce314d8", "sighting--0402b6cb-4e1c-4739-8acc-abc3ae8ac7d3", "sighting--df846dff-b46e-4135-a4bb-c46e7c8badd9", "sighting--708b56ef-25bb-42b7-9da1-408c6815f75b", "sighting--098142bf-0e4a-47bc-965c-acae8d2db7e8", "sighting--1499bfad-f78c-46c6-a9e3-72ec26364eca", "sighting--31ad20e5-c103-44aa-86cd-8a823cd8cf56", "sighting--9cedb223-02e0-4b00-b146-ea2f356bd4fb", "sighting--bb0843e1-3d03-4265-91f2-9868cd109c45", "sighting--238f93ba-5d85-4d18-99ca-3cf6f6eb0741", "sighting--3097dc0b-f0b8-4331-b94d-0bf78a4c5b86", "sighting--db2403aa-0bf8-4fb0-b1e9-f4285a5a57f3", "sighting--6553fa9a-4437-470d-9ecc-c6f736f75d6d", "sighting--b4c472b9-b6d0-4acb-beda-ba9b9230e472", "sighting--ea0e08d4-5ac4-494e-802c-e92f1d0cf4fd", "sighting--ed97c99b-967b-42c9-96e1-d2e02a939401", "sighting--f3e94908-db88-4448-b01b-03dcb3158fcf", "sighting--6c1b2cd9-efa4-40e0-aa61-62f2211cbff4", "sighting--887dc705-c74e-4ebe-8bc5-297386f0683d", "sighting--1a244234-22ee-496b-8f71-4541eed89d7d", "sighting--d3d46965-29f3-4644-8872-efc251b01acc", "sighting--72ba89bd-5298-4934-bb4e-b02be01ad6dc", "sighting--a6d5fd2d-2b82-40eb-942a-80ea636de578", "sighting--cba67ef4-099b-4a9c-a306-ebb1d2045a8a", "sighting--17c67e6b-9cb2-4e94-a3fb-a09b01959821", "sighting--0c5d2c98-64bb-48e3-beed-dd66a41e2363", "sighting--3ab20f59-fbc5-4a37-91e9-e6657fac5682", "sighting--84cc5b18-8b16-46d4-aa5c-73833c283e0d", "sighting--430b52c6-d959-4312-946d-3566dc6b1ad4", "sighting--acdcb283-f59c-4717-b9aa-77858305c186", "sighting--d327ca19-28a3-42a1-8945-07cf1af210ab", "sighting--50338ea4-a399-4167-9180-e493b703804f", "sighting--8e366879-294c-49dd-b812-64dcbb52a29b", "sighting--82165f78-09c0-465e-8fd6-7fa55a431166", "sighting--b30025d1-815e-4775-981b-e7bca5dc46cd", "sighting--7e4850a7-5ab7-4730-b04d-8cc10fd66217", "sighting--2b32d534-681b-4d7e-a777-b3c983e97aa2", "sighting--3c78c70e-c416-4042-90a4-dd66a65fb5fb", "sighting--75fc93b9-91df-4c39-9395-b4a56d1a3397", "sighting--194b0971-a887-4348-862b-ae0a3eea9672", "sighting--bdc7ecc7-d2b9-45b6-be74-6cb43400025c", "sighting--b15f0621-caa1-4045-8094-021d983cbed6", "sighting--c66e6b18-1243-4c3a-833d-fa567d92954b", "sighting--267e4d2c-2b53-46e3-94ef-ee0f5807b77c", "sighting--5f890f7f-7953-42f0-ad5b-706581bb92b6", "sighting--42af62c8-344d-4191-bc4a-4519c41a2e5b", "sighting--4e7c7a53-f326-4b6c-acab-e390b27d0f07", "sighting--4de87a33-261f-4fb0-969d-e67a37d24d3c", "sighting--c07240b7-3add-4086-96d1-06ad1f603a13", "sighting--6656d3c3-a877-4127-a956-c3b4949e9b26", "sighting--dcff19e5-d606-4c8a-be38-8652e5b394a5", "sighting--83f676b3-0194-4d60-a7e6-79c231443f3e", "sighting--f4484de7-b62c-48d7-8443-c1fa89c3ff92", "sighting--930511a5-c1b5-4167-a0e2-7155efd249b1", "sighting--289c65e0-b723-4882-a8f1-2aea5537a188", "sighting--a506cd8e-c4a3-4259-a052-e6a2e8fb8ed5", "sighting--2ff4ea8c-df69-4c4b-a47d-fca5efedab9d", "sighting--56815794-a567-4582-aa31-7cf8e7704099", "sighting--dc79a82f-31a2-4c0e-a9f6-c5f8c304a22a", "sighting--9d819b3f-f609-4b7b-8b72-71527bdc91b5", "sighting--02eed459-88a8-4fe4-9080-4685d5950f5b", "sighting--57e6010a-aa99-4a21-84b6-3c2f3bf8253f", "sighting--8db4d996-225d-4569-8dcb-79f4230ad7e9", "sighting--aa821aaf-9dd7-4d49-889b-bf5a779ce1ee", "sighting--21c1140b-48bf-4ad2-b4e7-b10dfa04ca66", "sighting--1b58419f-cbb5-4505-b1ee-3bfdc7f4e963", "sighting--a1305b9e-140e-4968-a525-699f0ead6c7b", "sighting--78b9fbe8-8357-43ef-a753-e19a12e9e222", "sighting--4084ad87-a346-4f6f-a4f0-bd76fabab54c", "sighting--a04c282d-18c4-4eb4-b663-0b54cfde2174", "sighting--41ba247e-96e9-47b2-af16-151908bdec39", "sighting--3cf116b4-9f52-4f35-8c2f-635c36898122", "sighting--00401ea4-ed77-422b-9fca-1d6aac5d138f", "sighting--50f267f7-af50-4fd3-a189-8c13089b2cd8", "sighting--ee5e644b-0a9c-4a13-9da4-5b4d40b019aa", "sighting--4e575e35-f90a-426c-9176-cf891adb73b5", "sighting--ed293091-bb1c-4ecc-b74f-3887de7f2b44", "sighting--4476cdae-9a56-4857-b42c-c550587bd2fe", "sighting--a44a6365-7566-4261-a3dc-77833c6d385a", "sighting--e5280d0b-1046-4871-a2a4-b011402ef1f3", "sighting--321d3053-d11c-407e-92aa-e8779751f217", "sighting--ace335a2-ed43-4022-a043-58b6bee2db06", "sighting--0330f3bb-4be3-457c-860c-31d7ad38654b", "sighting--c6ddee51-75a3-4ac7-a23f-4011aee84534", "sighting--feb71cb3-73be-40d5-bcd3-f432626d1747", "sighting--dab32444-8175-41ee-b46e-5745c8237269", "sighting--41f92657-866d-4204-b0a9-7d63de761684", "sighting--5126b80b-e5c8-40bb-a9f6-992decc171d5", "sighting--624a67bc-2167-4d6f-8977-812e831237fa", "sighting--8d8a9183-cd9e-4235-954b-90907da04286", "sighting--5acdee13-ca06-4d4a-b1f0-0f4da84ccff0", "sighting--7e8d82e3-aed9-4c78-b9b7-7da8892b25c2", "sighting--fbbf0d04-51a6-4789-8c87-b4740baf4cc7", "sighting--24db0192-ab51-4146-af7e-097f19d7807e", "sighting--3737b9cf-0889-438b-8b58-dc153a837efc", "sighting--827c7993-de27-40de-a5eb-3ad13990bf3f", "sighting--9bea81dc-1a0e-45f4-a28d-a3cc816817b0", "sighting--6ddd7d63-548c-41cf-844b-828211920ac4", "sighting--f96263aa-e7cf-4f75-8c6b-d233970ec021", "sighting--13472c52-0077-481f-ae1e-590ebbddc54d", "sighting--f34d85b5-f235-42c3-af36-ff689fbfa23c", "sighting--d950899c-3e8f-4a77-951c-c353bdc3fb67", "sighting--24592b69-c45c-4c17-8f40-72cef6d2dcb6", "sighting--42cddabb-c02c-4a02-acd0-0a93b7441f6e", "sighting--4e53059d-f40f-41c5-ba99-126e0e5bab28", "sighting--0849bc3f-4655-4e69-82b6-92a21fd4c935", "sighting--36a452cd-dc88-47b8-bd33-6a12855fe1f4", "sighting--f2c948e1-ca6a-4450-bff7-359542a93ee9", "sighting--4a1ca7c5-2754-4f6f-aab9-27874cfa880f", "sighting--61305304-7326-43fd-bd47-8e45cadd002e", "sighting--f1a911f3-25c8-4117-b737-6bfb478cab20", "sighting--62817f92-b3a4-4122-ab39-29753f02c21c", "sighting--d17ba44d-9954-4c4c-9e91-ac28d28dee25", "sighting--79162b6f-89c0-4a30-a376-dc34d4a4f38c", "sighting--4e95fc9e-ecad-4f7c-90b7-adaa3d1b77c4", "sighting--ffdc999f-0cbe-490e-904a-8b439bc65ab8", "sighting--aa1fd9c2-c12a-4c61-b40e-433242678dd6", "sighting--084ec05d-0c4f-4073-9656-1f264b275d58", "sighting--98518feb-66d8-4997-870a-132eaab4e02c", "sighting--724c2487-96ee-459e-bddf-631aba09c029", "sighting--e1338980-57cb-46be-be54-7df5111ea0ea", "sighting--95eb9ab3-633e-4f13-8b9c-35be29f0a816", "sighting--95e38a7f-6067-4622-8c9e-339077d4da54", "sighting--0a2350b4-864f-40cd-9b61-1ded6127ca8b", "sighting--b10912a7-e583-4cd2-a81c-19b99eda55c3", "sighting--93c77578-bda7-4e9e-a85e-52d69eb5b4df", "sighting--5a4a8ed3-dd74-48c6-956c-303832839cf8", "sighting--b20652d7-d627-4bc9-a2cc-85ccfaa15be6", "sighting--4327dc02-e317-41cc-8972-068d73bc6a6e", "sighting--2484b78f-1a73-45b1-a294-d7d54a837963", "sighting--f48362d5-fba6-4c91-bfef-82801aa1eb51", "sighting--3745a122-56d7-4556-9932-89053d404ae8", "sighting--40b5d058-75dc-4ac0-9772-e63f5e1d0638", "sighting--da6036f8-fc7b-44b3-a64a-8f8e7965406b", "sighting--ca307957-a66a-4024-80c4-b29f14b68434", "sighting--a72c7402-2f8c-4a03-a86c-389ad67b5d37", "sighting--97cde3cb-33d2-4145-8361-713f877aca93", "sighting--f1c62245-3d56-4f33-b2d5-9bb98ecab2d7", "sighting--9e453f5c-e7b3-49bb-a921-3a6f178e6615", "sighting--1efcf9cb-5de9-4a87-a772-ce8efbbb69eb", "sighting--490cacb9-9079-4029-9bf8-3be65e67bd64", "sighting--7aba265c-3e1a-419b-856f-ea6640568a55", "sighting--ea4d978f-4ea4-4317-abbe-48f329234a11", "sighting--86cd4129-4e9c-43ac-a05a-f9252e1d09c8", "sighting--c84de66a-d7eb-4f60-b41e-b41533e6baa9", "sighting--0f6d14bb-c02b-4932-89d2-ff4ae1e74db6", "sighting--741bfdf5-8317-4bff-afb6-6c2eae7c15e6", "sighting--3353067b-5bde-481e-bcc5-e5c4d862f11b", "sighting--7680b042-a848-4688-a690-b17f8ae23d49", "sighting--dc86c916-08c5-4915-95da-3953a77e7e9e", "sighting--bd55db74-4b4b-4e53-beb2-869d9b8bd280", "sighting--aadf0c77-f930-4c01-bcce-a8d16dce5bed", "sighting--b4e03b98-624e-4b96-973a-7908cc62a1f6", "sighting--5a275013-66c1-426c-8be6-7ca21b3c0f0b", "sighting--6cdac211-7349-4a35-b6c5-28f0a7b2ce96", "sighting--8fb8044c-043b-4ead-a263-520c2616a8f1", "sighting--312f2017-1fcd-41fa-aaed-82c162a567c8", "sighting--a32f4ec0-b72e-4a19-b91e-e5264cd27123", "sighting--c6f7da9c-6732-4c1d-8924-74d9c108146e", "sighting--dbcce494-4bbf-4ad4-a874-ffd4441d6fca", "sighting--3f04526b-36e2-4409-b445-2f8ca73bc844", "sighting--cf831c44-b2ce-4d1f-b5cd-2eb9732f17f6", "sighting--f44d6241-3968-4159-9767-7a8943a6b6b6", "sighting--bbc42212-332d-4977-90fd-17a56a2c0ba2", "sighting--ed6ea752-1937-485c-b97f-5606b09ebc75", "sighting--dd8b69d6-f093-4041-a852-a784ada39c4e", "sighting--cd688e16-92e3-468c-aba4-f22203854380", "sighting--7e275a63-28c1-4f6e-b1ac-05a420b81f27", "sighting--358ace8e-c32b-4f4d-85a4-f8d11a020594", "sighting--19f5d30b-ce48-4cf6-a69f-7af6b3770da5", "sighting--63df12c5-54e0-4a60-affc-71d7e79021dd", "sighting--6c1211da-59f4-4df3-b6e4-4fa94b798c34", "sighting--ad9719d6-8f41-45fd-8d4b-9d9b6922af8b", "sighting--d0e1c79b-8cab-4b2d-896d-35423144a137", "sighting--9ba225b9-0068-4fdb-a403-c0e8e47f18dc", "sighting--dd42767a-90cc-4dab-86b2-f69efa42d671", "sighting--ae70adb8-295b-45e2-98f4-a28ee0f3d536", "sighting--8333e17e-1b67-4b08-8689-a8a8565bdc61", "sighting--1d0eec23-eeb3-4d6a-a716-a2b146791b8c", "sighting--4538cd2c-1e6e-40ed-b23e-2c4460ad265b", "sighting--c6343ad2-d459-4603-aac1-f89ebe2c745c", "sighting--82c3dbe9-70f0-4273-bccf-efa3bf375427", "sighting--970108b7-ce5b-466b-a172-b45d407ed5aa", "sighting--24a40df6-4553-4976-ba93-16e515c97668", "sighting--5e2c589e-c50e-4ffa-bc53-765ff1823f2a", "sighting--1f731952-dba4-4f7f-b68d-4a5b6ce1fb90", "sighting--c43816dd-1f52-4d7e-a768-45ac970a957a", "sighting--4c0a7359-8483-4331-8f5a-f0d8fa5b2115", "sighting--9f5e6adc-79bb-451b-837e-4e8f257ee50f", "sighting--adf7be16-82fe-4590-84fa-15d07ef303f8", "sighting--2e55d519-6159-4469-a429-b66d6917305d", "sighting--a21c0838-5956-492e-89b5-5ba5939369a0", "sighting--05c87365-7f99-4a32-941e-d49f356e70f8", "sighting--0e84bd28-eb07-4e1a-9bed-aa96b4ae1a30", "sighting--fae5f4fd-8257-4d90-b7e7-e0513bc5551a", "sighting--bd6868e0-1edf-4d0b-a994-be13d461500e", "sighting--6cdeef11-3db2-47f3-8f9a-acf6ae60d89e", "sighting--a05d9d99-4958-4f58-8708-28e875e32688", "sighting--e2e8b4b7-8eae-4734-97dc-de4806733845", "sighting--09139df2-ef7c-4156-bcd8-a153c8dc6660", "sighting--8b288439-ce99-4771-ba0e-9d2775567d30", "sighting--6f7e1b1c-e55d-47d2-85a7-53f46f687040", "sighting--6d4c8f7a-8572-4ab4-8eb9-bbea7f24c099", "sighting--58fb2325-7a7d-479d-b782-3536f69a4159", "sighting--baf191d3-be3e-4382-b567-a98c9a02c7cb", "sighting--83297d22-7540-4305-aa5b-5f7984c1ded6", "sighting--594bc9cd-8d89-4f18-9024-9bc8a17071cc", "sighting--25920f08-b1b3-43d6-9064-e097d607dede", "sighting--7be9eb28-bcf8-42ff-83e7-e899d9b1ae37", "sighting--1ae59271-6bbe-4489-b59e-2b16104beea7", "sighting--95258845-36c6-406a-aa8d-8971009485d5", "sighting--2e4d0c05-37fe-411e-908b-c6e7fc767603", "sighting--eb79a1b2-4c9c-49e3-b03b-ce9b3fc307f4", "sighting--3ec5cb7c-5734-4bc8-ae99-f2b0f18eda19", "sighting--36cd6453-7ab3-4432-a662-bdab0b0e5c5a", "sighting--d51cc143-67f2-41b5-bf60-9139ca9bde94", "sighting--eb707129-e550-429f-a1f2-f736581fbae5", "sighting--1b7bbcb3-3dd7-413f-83d6-ea51b58b9285", "sighting--36a98951-3a7a-4a77-8f29-9e9c0381d1e3", "sighting--d14de97e-7f2a-423a-a484-44274e55c93b", "sighting--af0c75b8-a19a-47d2-ae67-cef556caab5e", "sighting--f6116ba5-ee04-45b0-bc18-ca635b41ed77", "sighting--8b9168ea-6ca2-459c-8ea4-bb1eecf1c324", "sighting--2977c2d8-5c77-4b7e-96bd-8f54539788a3", "sighting--bde11fe4-17c3-4c47-8ff6-560303a09df0", "sighting--dd2ad169-d625-49db-bd77-0b1e61afcec1", "sighting--93857b0e-6241-4e5c-b66a-42e8c9a4fced", "sighting--c3ad1fe7-1b7d-4c29-bb74-671026042b2a", "sighting--932f03c6-2add-4789-a0ab-56cedb4173ea", "sighting--005a01c5-0a50-4c4f-9e07-02b22aa7ef5b", "sighting--92e72065-213e-46f5-bfac-778e8babd693", "sighting--ec685464-d2e2-4d4f-af99-9c8af3afc8c5", "sighting--ce2fab50-491b-4520-8ddf-502e94cca446", "sighting--6e8eb784-cb64-4c41-bd46-a22e0950e1bf", "sighting--4b9d2cb3-ea46-4c25-8211-7c2e5c623de8", "sighting--cffc9180-b1a6-459b-8803-feaaf02ecee3", "sighting--a5a193a6-7873-4d09-bc77-51d9fcafc8bd", "sighting--1f9788e2-4599-46bf-8d03-d9341b67255e", "sighting--18c1cd2f-e276-4432-9017-f08a99aae2aa", "sighting--9a3f127e-663d-47a9-ad57-00d050c324e7", "sighting--dfd95eb7-4f1f-41e7-a0e8-047394be1390", "sighting--14c918eb-71d3-4002-ade6-351341f20e79", "sighting--23284bc5-afd1-4f2d-915d-6265298d2c7b", "sighting--38ab794d-8828-42ac-bf48-e6f8249a14f0", "sighting--7354cc5c-bec8-44cf-aeca-a9258b641f8b", "sighting--0765a8cf-f4c9-4afa-976e-71bd4c64f591", "sighting--4d892686-f36b-40f9-a66b-c145c8bb937c", "sighting--c16f017c-f285-41d8-b0b0-cde8c7472e5c", "sighting--15d8e173-6d5f-4a07-b43c-a313d2f787fd", "sighting--b4a2db0f-2180-4609-b884-8fb672fc6f8e", "sighting--b25b0cf5-4871-4a6b-bca2-b300c5d82b4d", "sighting--a9e1f0b9-b379-4a1e-9ca0-34a420a8fa9a", "sighting--1899de7e-dddb-41c1-979d-0afcdf67e8f3", "sighting--4e8e3690-771a-4969-b37e-cd689f4727c8", "sighting--06e77996-6ddd-4524-a5a1-aa6c70658fa3", "sighting--682f96a9-c617-4dd0-94f0-0548eee2a28c", "sighting--59a5daa6-4ea6-4aef-9852-b42599251896", "sighting--5c642887-d718-4ea6-b130-13aa0398b983", "sighting--b28a2a7c-9813-4277-8a52-b962ea185169", "sighting--31f6fa71-6143-43a6-bf7f-d2093001aca9", "sighting--0cff3da3-f965-420c-b2d6-b3de2f5b2f6a", "sighting--47100ccf-e1de-43bc-a741-6fab94ef4823", "sighting--fc782d15-6ee1-48ec-90f6-8117f861df5a", "sighting--eaf49e7c-e821-4f9b-94c3-0af2dd0692ca", "sighting--53a923d2-9b3b-444d-8db7-7ee793d26673", "sighting--8a95361d-6d85-4e94-b404-1d8e4fd757cd", "sighting--969267a1-7c2b-4083-af54-620080f5df54", "sighting--e75ccb29-d281-43c8-8863-51f011919693", "sighting--9beacf88-1588-48cd-b8b5-71a337ac6e90", "sighting--96580cd1-bbab-45c1-92a5-ae7ff3680c4f", "sighting--a9ccd2c9-2f74-4177-896b-74196be824fd", "sighting--09b066d6-339b-45a1-8100-962bf5eb8f7e", "sighting--bc0a60eb-0709-47e6-a683-6b4cd3d3709e", "sighting--6b4d6161-0e69-4b4b-be5a-a5a3d9ec5559", "sighting--cf81b04b-7f5c-4697-94ed-84d15d3d84fd", "sighting--531fc2b9-9251-4b19-9cbe-93a5074d5dd5", "sighting--0861cb0c-186f-4083-8ec5-eb2b3cf5526d", "sighting--d0274039-f5c3-4f66-a929-2c418f8ad9b8", "sighting--40b087de-46c2-47e0-87e7-c3e8392180a1", "sighting--544f2f3e-825b-4c27-a75e-4af73fa8b027", "sighting--52a81fcb-4e6d-4bc1-99d6-50ec5d8ec619", "sighting--8899c058-b2df-4296-a700-3e14157067b6", "sighting--0501f262-37d7-43df-9347-4644cd623ebd", "sighting--20a080f6-58f1-42ad-8cb0-06efe51ccf9c", "sighting--02b8f763-78b3-45dd-b162-b19e5bfa2093", "sighting--8b1c0b19-a6dd-49db-9720-118dda8c5902", "sighting--55a565be-c376-431f-ad3c-8cb79bc580c7", "sighting--3477c84b-3c42-4b8c-9969-2c5409ddae35", "sighting--b744721e-2a8a-488b-aab1-4916beb66158", "sighting--542b0e84-4f65-4d95-900c-d427611982be", "sighting--b0a1cb8f-2ee4-4d49-bb75-e1b2a9f8ceb9", "sighting--37513634-9e20-44b8-8a56-547797640ca0", "sighting--775b9674-b1df-4c2f-8355-449552793e95", "sighting--0184907b-4622-41af-98f0-e58253285e80", "sighting--61496fca-fb1b-4330-a29b-0dd57df628ab", "sighting--c7c05ae6-ce0c-4ca3-b5e9-b9b57131ed81", "sighting--ba5553df-fbec-4b79-b864-99d1de56f9cb", "sighting--862b6626-57e3-4be0-a938-a3ba9389e69f", "sighting--65bd1c1a-3455-419a-bef1-96da5885bfcd", "sighting--ab44f076-13b5-40a5-9a7b-70ba71802444", "sighting--58d6787e-fd0c-4d1e-bb8a-4c73ee38b205", "sighting--ded2073b-f031-4257-9496-7d022a470a10", "sighting--2d5f0197-a1e8-4159-8505-c9ac070dd92e", "sighting--63633342-1de5-4428-83ae-2472c7c33652", "sighting--eefe735c-8979-4757-b556-aa7f4612f075", "sighting--c2adf415-42c8-475a-86b5-331a4d2964bb", "sighting--cd7a554c-c082-4799-9738-20287dc3aef2", "sighting--3e332d50-ee41-4f3a-a510-c693a6ad2a56", "sighting--604020c3-1ca0-4b2b-a66d-13aaa9627a85", "sighting--9fbc9895-31f2-4f28-b23c-df4cfb03022a", "sighting--91ba06e9-8781-4607-bf1f-15182aaf902c", "sighting--4f51a984-6ca7-4123-8880-6b8de6337393", "sighting--e1f62524-6c9d-4788-ba1e-928ce42b1305", "sighting--eb4654dc-ac53-4cf1-b1a4-a7e2e9ad630f", "sighting--6c4eba05-8b90-46de-9d2e-b06d4d523500", "sighting--7b92a3b5-9cdb-4ac8-b23e-4facae47dbf1", "sighting--825b9821-2892-490b-b7f4-136d61030f6a", "sighting--2ba1dc92-e7a8-4085-8d75-57129c308c36", "sighting--888fa5c2-22af-4094-8473-b16da866a089", "sighting--afdf3953-aeab-45c0-88b9-d3503378145c", "sighting--60a2087e-f4e0-4423-ad4a-7b9ce79f296c", "sighting--56b8147c-9084-4d5c-ae62-dd71a3b002fd", "sighting--88e4572f-e253-49fc-a19a-fc1c82bd439e", "sighting--e51dc5df-2e7a-4f0e-b7fa-d091b99d13fc", "sighting--00595bea-a12c-4729-b81a-f6e117626988", "sighting--01e6c96f-9933-47e7-88bf-7af008258154", "sighting--142e3628-49e7-493f-a856-5035b3d9d6c6", "sighting--86c8fe88-b7c0-494a-a32b-d8bff700cb79", "sighting--3324cb6f-b9d0-4333-a3ca-cdb9b1bacab8", "sighting--6b38c704-77d0-42ce-a83f-5914f385d07a", "sighting--cb067250-5ec7-4b4a-acc8-68037f18ca69", "sighting--535e95d6-9d6f-4cd9-9e80-c4001c58bd5b", "sighting--3a1cf09f-57eb-4674-b03d-4492a656ad2d", "sighting--c4176465-300b-4c64-a3d8-1168e74352a4", "sighting--8cb14df6-de5d-4009-af78-df710b02250f", "sighting--726aaacc-cce1-44b5-9beb-a3c8b6f0da96", "sighting--0960bb52-3837-4a78-b2ed-644349be9048", "sighting--3d70d64a-537a-4845-9e6e-4ac62d17a3e5", "sighting--f514ee57-d3bf-4e9a-ac00-c331f1141d1f", "sighting--84dbcbf6-a566-473e-acbd-eebda1ddbd78", "sighting--795df95f-2d6f-4b32-bc6a-b69a9d9337a1", "sighting--9a0f2995-45b6-4920-b441-c9da30dd35be", "sighting--cd345950-12e6-423f-b200-6d9ab1db5c90", "sighting--b23b1867-7ed4-4d21-8691-0f4f88df5273", "sighting--3b8df45b-e4b0-4f40-bb6b-dc756cea15d0", "sighting--d4f1f199-b4ce-45cb-8b8f-8fe2c9976a57", "sighting--843d21fa-b756-4d97-9b3a-4a4e752d30f5", "sighting--c7608e75-dc58-438f-9a60-3703c4d87597", "sighting--1323959a-bfc3-46c8-8580-5857a664a23f", "sighting--aa94095e-6c59-4838-b302-515441336244", "sighting--f91b97b5-a615-47cb-8b51-285921b273fd", "sighting--5809dd9b-536f-4a5f-9260-5d40e3e2ce29", "sighting--a2c2010b-d06e-402f-8e59-7660f3501888", "sighting--c35c403d-4b0a-4d2f-aac1-5fb76295338b", "sighting--dee5f51f-599e-428b-92a6-40a3c95b51fe", "sighting--feb89350-4406-49ee-b142-bda1276dfeca", "sighting--17fa8042-125b-436c-b072-24ac3ab9bd6f", "sighting--4f231f64-a48a-465e-8add-346557ac4266", "sighting--2911e006-fd08-4b00-8b9e-cfcc38a791bd", "sighting--63882e06-29c2-48c4-b6a6-bb2a89c6748a", "sighting--1d876748-b897-4396-8de1-9558116aad7c", "sighting--cf7a6de0-e9f0-40f5-9e9f-72fd8ef20c09", "sighting--dbf534df-dd24-4efb-bf3e-e670016248bc", "sighting--2d7a6674-2fb1-4eca-bee4-c29f060a0c2d", "sighting--51961f13-a196-4668-b71f-d96fe41acc65", "sighting--6114ff0e-6c49-4675-be81-49c99700644c", "sighting--a56138ab-43cc-4e0b-8d02-5e6c3e002286", "sighting--7699e5e6-da5e-4dfe-b828-8975197ea779", "sighting--e6467b51-de68-4c5e-af76-36462fae8795", "sighting--ed08871b-d655-447e-9dee-b80b199012bf", "sighting--e34008b7-6ec2-4a7a-8227-4492b61d1d5a", "sighting--1598d84d-c6b7-4915-a495-b9d02711dffe", "sighting--f03d8548-4648-47cc-bf59-81a379405599", "sighting--460e3867-a3cf-4754-8bcf-672cdca27b20", "sighting--84081769-1068-4508-997d-d1e99443ad1e", "sighting--5bdcfd4a-fe81-4f35-bcc1-840cc833644c", "sighting--4b22465d-fd90-4c98-931c-3515623ddfa1", "sighting--cfc5a3fb-7202-488d-a9d3-03ea85c2e6d4", "sighting--06e029c5-1856-43a7-9682-6063dd715f25", "sighting--7e5f98d3-6873-405b-a144-64cd510c8122", "sighting--d93e8693-1746-4a38-9bd1-e032b8114b92", "sighting--69dd7faa-2656-42a9-bac1-13e3d5feea77", "sighting--3718a933-0ec2-4266-947b-0dc625013b49", "sighting--566633b7-0799-4c0a-be8f-3d6ec57360f7", "sighting--2a0ca114-1ae3-494d-adb2-3a877e43b049", "sighting--7048d400-de6b-475d-9414-5653e29744a3", "sighting--8ae2031d-362c-4af4-82f8-3ceedb7ebae5", "sighting--9821cf63-0bd5-4a30-810a-762e6e11ddb4", "sighting--16e0aab0-d3de-45cd-96a1-2e1ea4fe72fe", "sighting--e83db40c-01ce-4dc5-9c3f-379a20327fba", "sighting--d95113f6-0a63-4710-ac79-422d3e20932a", "sighting--4f525f08-c94c-4183-9c4d-6636e5582237", "sighting--bbdbd3d8-eb36-471a-87b5-c7716db6318e", "sighting--717bfc3d-79cd-4ee6-aa2e-09c10c1754df", "sighting--ef451fd9-4d9b-4a4d-aa53-2ba334796fd0", "sighting--75323a0c-9801-44b6-a94a-cebb0b3407fd", "sighting--c221d73b-6e78-405d-9362-1542eb002f79", "sighting--9edabacb-b25e-4d3f-ba5b-c0af3dad621b", "sighting--3793ce68-d7f2-441c-a96f-cd1beaff7bf2", "sighting--449b8dbc-24d8-40c5-852c-a1a0904ddb8e", "sighting--ee1827fc-db61-4c1e-81a8-e01e27aedca1", "sighting--38f52cdc-b92a-489f-9376-d0b534841ff2", "sighting--baabba33-bd54-4549-9ce9-464b997dd364", "sighting--754d587d-ed2e-4ab5-b1ed-19cd5e72c792", "sighting--17731c11-7f69-4ace-8e83-60d678ed5f45", "sighting--9dfc74c9-7704-48d7-a196-c527f493a448", "sighting--9f29acdd-4db6-46e9-bf3d-9c31e7105e8e", "sighting--2ee7ff60-8928-4334-b39e-9edf69875500", "sighting--16135d29-624a-476e-a2b0-faa1f9f174a2", "sighting--03601563-f091-4a46-b007-92d316bcfb76", "sighting--2bdd9720-860d-460d-aa03-5a52b8dbf34a", "sighting--54d66732-ed91-49d8-96e0-a8d4bf4a7a4a", "sighting--26ec4b81-537f-4941-aa55-a69dc074face", "sighting--dc56d3ba-75ef-459b-ade8-8cebc5092f03", "sighting--fa9ba565-61a9-4657-b71e-54688aa5f8fe", "sighting--a4af16b3-2026-4ace-81d2-ee7403cccd47", "sighting--d697084b-ef69-408b-8653-6488cc14513e", "sighting--65671363-3d3f-48b3-b346-2e3425cee73f", "sighting--71b098a8-465e-46f4-85f8-cdd90dabeb74", "sighting--220c9d74-b6ce-439f-982b-f244a86b82e4", "sighting--47280a90-16cc-450b-acf4-c3aa1314177b", "sighting--1631999c-83c7-4fc7-8df5-8a4bbca16123", "sighting--2a10e43e-be72-48fe-afdc-925e3d18b089", "sighting--1952d428-326e-4106-83df-752eefa47ec9", "sighting--5833d070-80ca-4ba2-b543-d9fb75994ad9", "sighting--938e76ff-1cf2-4c53-961d-70aa7fda2db7", "sighting--1a3d1b6f-3ee7-411e-9aa6-754466e6c05a", "sighting--fd0ca91c-4fce-4517-8714-b6e3ad39fc2a", "sighting--d4249f63-674b-4ef9-abff-a16a07466336", "sighting--996475bf-4e6e-4d4e-881a-9527d6b4ac0c", "sighting--e2140e80-d207-4ee5-b27d-2d2498931da3", "sighting--007e6491-9f97-457c-a086-d9bc39bb7bac", "sighting--eee167ed-2ab3-43c0-b642-6777f9b104be", "sighting--eb3f0330-f9ac-406c-a7eb-914cd4dbe0de", "sighting--928a0d6e-3146-4887-9fb1-1960375c6667", "sighting--dd5d1acd-949d-41f7-9e8a-956224bb75df", "sighting--1a0befaa-2e1e-40b3-a90c-a0e0927bc59d", "sighting--b59b9baf-f9f4-4241-9ab6-4b1fa8de07d4", "sighting--5e4ee0fd-6330-487f-81f7-c58966c4b0b4", "sighting--6d5b58b2-a848-48fd-96bd-89772eb3d220", "sighting--a5d72d17-b28a-4557-9366-e0ab5546d03a", "sighting--5d967d5c-5a55-4362-964c-c59b98ee6e6b", "sighting--60dffc2c-7f2c-4c0c-9b5d-2186e560c11d", "sighting--82a0c3fa-581f-4173-a800-4bfc40a5ed2e", "sighting--c58b0854-fdf7-41c8-b658-c86722bd064d", "sighting--48a92673-0a2c-4f2e-917f-0ab41970fefb", "sighting--1b7930e5-d352-4ad3-bccc-b4e7895f8c76", "sighting--961e99c9-2619-4653-b360-e017ed8fd503", "sighting--e4a0572c-56ac-4935-ac9c-f2645dacf2cc", "sighting--a4dbc554-b950-40f8-af79-907f1c619fe2", "sighting--2de1b643-ebcd-4d1d-980a-f3de1c00bf2c", "sighting--45e6f829-25fd-4ea2-b613-8cd4db35334a", "sighting--76ae1417-f554-4339-b81e-490218b8e165", "sighting--5f605fa2-f425-4615-acdd-b3fa864379e5", "sighting--bfa0cc1e-0ca9-4b45-a3cf-2652c78e7342", "sighting--6eea10de-00f9-4adc-998b-e089eaa406fc", "sighting--b0e1e7f7-b7a9-487e-a3a4-c297fc449525", "sighting--6c772c13-03cb-4cfc-b812-74be6fc12dcb", "sighting--64870ebc-fedf-4d15-8bfd-98e8f7de6ff9", "sighting--b7e9fa36-d751-418c-a0b6-5758fb2935a9", "sighting--98746ae1-5b52-43a3-90c2-6b380d6402dd", "sighting--d6dc0806-da04-48c9-b20c-35bee5aac4c0", "sighting--a1f0b50a-ac82-4032-995a-9ec6778bc984", "sighting--1b2f4373-e732-4a35-aa62-77bdc960ad02", "sighting--74f983e9-545b-4f3f-9ddb-57e41b4aacc1", "sighting--f19eca3c-9c96-48d5-8a72-63321c8294ac", "sighting--d753c9c8-2d74-4884-afeb-c187745b4044", "sighting--c2facaab-1876-4a5e-b452-7d5afe119902", "sighting--260982d4-e9df-4973-aafc-f2fdddcef8e7", "sighting--6e109ead-16b5-4195-a764-a3b163098811", "sighting--2acb9610-26ac-43a0-b0e5-bdc03eba42d5", "sighting--ad69d2a5-a6b1-4cbc-a47e-b9e88bf53afc", "sighting--8a33b0a0-2e0f-4591-8310-365db1314dbe", "sighting--163d8902-d62a-415d-bc2e-7a5d86815adb", "sighting--77196f69-18af-4e69-bfac-414bb07d4b37", "sighting--9cbf1303-1516-425d-9aa2-add7fe2c8548", "sighting--e09eaaed-12bd-4e7c-8d9e-2d59f13691de", "sighting--a3de20be-65ea-48b2-be8d-ac1431978ee6", "sighting--945a2b09-8f83-426e-b16e-7e2a8d6c3ac6", "sighting--a926c4d6-9819-4553-8031-9aa20f37ce6c", "sighting--28a366a0-2065-4336-80c8-9ea66d117c16", "sighting--a93f4d49-a07d-43b5-8a2e-8050c5f3238c", "sighting--c0201774-7f70-4f63-8e41-e894b6bcdb3a", "sighting--a02db72d-a62c-4d45-9fc8-6778a4c76438", "sighting--5fb4cd21-a8c5-40ba-8287-2fd9deee89d7", "sighting--0d7f5fa3-d871-4878-9fe0-e2af73a4540a", "sighting--2b3bb4fc-b282-43db-9464-3d42a492cf03", "sighting--313ed783-9f6c-4fe6-8b5a-e3bbdae0523d", "sighting--6ba2c019-ce31-47de-b60f-c2a31c58bf73", "sighting--fe4d45a8-17f4-429b-b688-be0fdaa40557", "sighting--36246ef1-ccaa-4b49-9652-33b03e868cd5", "sighting--213e04d4-35ce-4bc3-9547-4499b4c34427", "sighting--0a3d06cb-be6c-4dc1-bd27-01746b367512", "sighting--fde1ebd5-86b4-4568-927c-294b729171cb", "sighting--7147b3d5-c7fc-40be-aebc-c5139ac511fe", "sighting--6018b3ad-0c80-49d9-8c7f-03509081a63e", "sighting--f2aab3a4-1c8c-4174-aab1-c9d5c2551146", "sighting--2811ef48-427b-4d83-a0c7-3abb16fe3345", "sighting--0fa2897f-8fdf-4451-9298-a9965596a1d0", "sighting--8b69106a-bc95-4dd8-a86d-656119a03d24", "sighting--69e42875-114a-4285-a251-5dc1dfbaa11e", "sighting--5ed3c97b-6f6f-4dbf-aa01-193355f80a1c", "sighting--ac1784b0-d7ea-4817-94dd-95fb87ddbb4a", "sighting--29368757-d99d-4a69-9ecc-e999b877d316", "sighting--c1d6382f-7255-47f3-84c6-1346ec244170", "sighting--eb723cd2-bbf3-497e-9342-7b69a853487a", "sighting--4144d4e2-482c-4c23-802e-d79b898102d9", "sighting--5a403677-504c-46cf-b3a4-5eaba7f48bd3", "sighting--18f68f0b-9727-4832-b43f-d8b10ad50f85", "sighting--308e04e7-b6e6-4d06-8baf-3a1941387870", "sighting--ab910b99-9b53-4920-9194-a59dbeca30bf", "sighting--e2af6a9c-3ced-4c0f-a1d9-ce633613e308", "sighting--d8cb647d-0225-486b-a0c6-ca3a0aceb582", "sighting--b02c5417-4096-4b41-9711-325bcfc1d130", "sighting--86c456fd-0ab0-4d63-8419-bff652d01c4c", "sighting--2f16fd92-38d1-428a-a5a3-2e1424bcf44e", "sighting--9f8663c4-82c2-4792-adb5-45ef78318853", "sighting--6e528b9a-43f4-4400-8c6c-15ff4410043e", "sighting--cd425117-2744-46a8-a3b0-73d1c2ee0ff3", "sighting--a40556e7-448e-4c25-b6c9-a7408ded2325", "sighting--c85ba0f5-6557-4add-94fb-280c08511811", "sighting--cfb5e815-4ef4-4772-be70-b743329d9831", "sighting--97aa8e73-ef34-4113-a88c-1024e91086d0", "sighting--0d53c7c1-902f-406f-a2ac-94fb6270e267", "sighting--a65d55c0-4155-4e3e-8100-edf5a6cc9069", "sighting--d45de1dc-9bfb-446e-9e1e-b026219addc7", "sighting--e59b42f8-423b-48d7-a87a-f56929010273", "sighting--c1d57611-373a-4640-a8d0-d1be9e9c94d0", "sighting--4f3429d5-235d-4072-9833-88498c08a2a9", "sighting--19c32fb1-98d0-4330-a33a-a793ab135cab", "sighting--e6c59dc0-cabb-4d71-851b-31a517d08ab5", "sighting--a253f320-7ca7-4b48-83b1-17eb36275237", "sighting--7d4a7f53-e7ca-416c-967f-399fa746295e", "sighting--6b1f4744-500b-46da-83de-ed69353cf2a2", "sighting--af326dab-c769-4999-8d90-4a865d2da98a", "sighting--07b31b51-f6a9-4612-9a28-d25ba4608be2", "sighting--cebc02dd-2818-4968-910e-7d719d154833", "sighting--2ff5855f-2d6c-42fb-85dc-432b372a2aa7", "sighting--7c0d4b3c-5fe9-46a0-987e-ba86b965f775", "sighting--292366fb-596e-4841-a988-2ac7c84c9da1", "sighting--9576ad6a-95d5-46c5-8644-27151d927a4a", "sighting--3cefd961-b9f6-48af-afa0-839b23446664", "sighting--2337f512-afdf-445c-a070-ce8e4bc1c60e", "sighting--26ee4842-7646-4c7a-8234-98ce370d9244", "sighting--b4373997-e8a9-40de-ac13-261969a39747", "sighting--b4f5c71a-80c8-4655-96c8-b2039c947f34", "sighting--79e13ec0-2003-4c38-b738-d382c0262b3d", "sighting--97d9f2ce-edc1-4604-aa68-4657dfeebaaf", "sighting--28ebe175-2b38-4731-a3e2-cf21242a7be0", "sighting--05e72fef-f906-4395-b380-f739fe7ae123", "sighting--54186940-cd43-4567-80d8-0c08a31e0b13", "sighting--8c2e9bed-4fcf-41c1-8f5b-692fc89ae00b", "sighting--7599c27a-e0d2-4731-b93f-78e609cf6bd4", "sighting--58d7d263-19df-480d-a1cd-add6588a7f0f", "sighting--9ecffd6a-54d1-4ad5-a235-f900669c048b", "sighting--075ae0c0-0bfa-4d6c-b515-3647498f6bb1", "sighting--512eb682-5801-4bfd-a1f5-e83eeaf19235", "sighting--85a26e6f-373a-4f5f-8783-ea6d87bb67a6", "sighting--8b428b36-7c02-45af-9290-9a975b07a241", "sighting--839a5e02-755f-4648-81e1-cada5148f1aa", "sighting--33f910d9-8b06-459e-8265-8afd92ced344", "sighting--115d9764-994d-41c2-9098-34af0722db0c", "sighting--d032002e-6b50-4d1c-bd09-11b3bd426a8f", "sighting--e7e43db2-c527-4643-a908-ba67df6c9f15", "sighting--05f5a4a4-b4a3-4491-924d-c825ddd32ed6", "sighting--8c946e0b-1a8d-4b85-a9c1-d1d65021ab20", "sighting--a87bac78-2783-4d03-8956-eea34ed537d1", "sighting--a3e324fe-2788-44fe-a539-8af42bc2108e", "sighting--201d9de6-9f22-4037-89e3-d603b99478ee", "sighting--de922ef3-4c21-4a16-a25a-e3685f6c6705", "sighting--0ac4073b-e0ba-4b76-a699-c22ebf643014", "sighting--1ee3decb-af22-46e2-bc4d-ec89670381fe", "sighting--73fd72ae-8d6d-4e15-91ce-53b4a134befc", "sighting--0a6cc3fe-9ef1-41cf-8f83-84de220bd003", "sighting--ff889f38-e6fc-404b-a6ea-4e7636b00cb2", "sighting--8db9102a-7672-47a8-bb3e-73692e23b201", "sighting--bc05a21d-f8c1-4569-872a-9ca05c7c476c", "sighting--320fcbe1-6edb-4422-979e-9bd97a318560", "sighting--89768afe-cf54-470a-9859-ae49ee6251a2", "sighting--b98df5c7-edb5-44cf-b57a-bb8bf562551e", "sighting--9eeeb469-a104-4dc6-8760-3a72f8e3ba4d", "sighting--945019d4-ebe3-4a8c-a3de-84cc7e20df85", "sighting--7cecb949-0153-4e0a-9a7f-034c29453d84", "sighting--50c4452a-ec33-4992-9513-572d7c3ab7b1", "sighting--cd481da3-cb93-45ee-93ba-f9d60e9c8c7c", "sighting--3ce31fed-3986-4ed8-b198-dec52d626582", "sighting--1be9a8d3-26b0-4d56-b125-87495deca6d3", "sighting--362b7f01-ce11-4fc5-a883-985c987c84db", "sighting--5c51e20c-15cf-48de-8509-206c5759b832", "sighting--6dc71c73-738c-463c-b386-89c733801c68", "sighting--3553e5c2-7fb6-4312-a77b-e60ecb98ed13", "sighting--b2e394f6-ec4c-4b14-8b7d-fd3fc03ab3b1", "sighting--088dada2-cf55-4427-8802-d5b7a9410d19", "sighting--b1e60510-1f8a-403c-b5de-6a19656ec814", "sighting--132025d6-90f9-48f2-bd15-3c561f72e1bd", "sighting--3b690a1f-3c3d-4a7f-809b-fffa21e46761", "sighting--1da4cc64-dc19-4222-8da6-02773c31f26f", "sighting--13b364c6-662c-4611-99d7-b598fe401b02", "sighting--3f55c16e-00a7-4ac2-ad18-55986d235846", "sighting--ffb1c74c-e487-47ab-8e81-049ba4286698", "sighting--1f2bc4b4-49f1-4589-9d8b-ae06aebe1bb2", "sighting--c2e12ae5-b0be-41ec-92d0-50e457b62f3b", "sighting--4a2e2003-b36c-4bcd-9193-b1a21da31d6e", "sighting--388248ac-f4d0-4ba4-b05e-4331299fb400", "sighting--3c29a62e-8f23-402e-813a-d17efdc21cb5", "sighting--69c6cb31-b3cd-4d3c-83cd-9b6a367bb9c9", "sighting--320accd3-77cc-40b0-b401-faae633c2f46", "sighting--947c1118-1ab1-4c2a-8cd8-9379b791a6bd", "sighting--bc41b2aa-feec-4857-9561-10d304ff6d5f", "sighting--a21365dc-2f51-4478-83bb-a3d1b801d7ea", "sighting--ebe34fab-4bf3-4676-95a4-77ff00aa3dd4", "sighting--292d939d-2111-4b2b-9585-03dc8c5515de", "sighting--4612f243-0eca-4c69-b988-1b9a677019a7", "sighting--2eb92459-819f-4533-9e2e-fe9041db4c12", "sighting--6789c01c-e4b7-4688-b57f-7ec7b9359b0a", "sighting--91d637fa-6302-4aab-9ed7-72ce1c6c95a9", "sighting--7f6abb67-3e37-44cc-ac77-ef640cb88437", "sighting--9026bb3a-2a38-4b84-a978-b3f950973b59", "sighting--df04ad69-ccc4-4157-a56d-a8afcc0fe801", "sighting--3880cdd7-55c1-4de0-bc3a-26ff490f59e5", "sighting--148400f0-4bee-409e-b3d9-f1efc25f3b81", "sighting--baf64ed9-c1b5-45b5-8498-bf294d08cae0", "sighting--b7fa4d57-8d91-4efd-97c9-6b53068c7661", "sighting--d948e218-1d26-4846-a1c2-505c08cc3cae", "sighting--5091a7e4-9ea1-4d92-abaa-3bd60d58e2fa", "sighting--fa88f1dd-d0da-4493-b420-9ee5bcc2fb93", "sighting--b3c04e89-769b-4d28-b1f1-285a9efb6fe3", "sighting--27508fa3-ab5f-4c7c-b575-bda5a51bffe0", "sighting--e672e98f-9c80-4e52-ac6b-a4d9395c3f9b", "sighting--f242d2c5-b1c6-4b69-88c0-263ab46edd07", "sighting--c63e302b-054b-4fad-9bc2-6bd2e4751c43", "sighting--119270c6-1d89-431a-9e26-0db249152f6b", "sighting--c07234ff-e7ac-41bc-b0de-31c334600eb1", "sighting--8bc7d956-77fa-4f92-8304-579ce6eb085e", "sighting--c8e1e93c-98e5-403f-ba03-88be58dadcf2", "sighting--67cb81d8-25e8-4eea-85ad-3a244c8d6c50", "sighting--da4f6b30-13b6-468e-bc72-660736565759", "sighting--90fff123-6949-453d-8d3f-7b513d647705", "sighting--127097df-7c2f-497f-8ebd-eae7fc0f9c9b", "sighting--b8332004-d2b8-400b-8f48-c5192a085d2f", "sighting--93ac41f2-9396-4124-b42a-651dda767e91", "sighting--9d3a0d13-059d-479c-b2db-f55dfb8c6221", "sighting--374dcc20-f5f8-4ebd-a6c2-a7634339d723", "sighting--84b91451-ef87-4cd8-8552-745c23d0a93d", "sighting--8fcd5bfb-bfae-43dd-8b41-b145ebf0bc72", "sighting--35e42c38-5bf8-4e38-846d-907af4edc00d", "sighting--54469110-5608-4839-ab1a-dec7032eae6e", "sighting--a4fdd8d3-a31b-4176-bb02-807115117e67", "sighting--648484e1-aafa-4e74-9ce5-858d019ec653", "sighting--d9b0a744-2e75-4294-bb6f-9517bfafd43c", "sighting--b756553d-e18a-468e-ba46-1130915e0545", "sighting--5a6f4edf-70cd-4941-b5ea-c67151b0d7ff", "sighting--cce78e32-91d2-4333-85ae-d171da93050c", "sighting--0079d2a0-2430-4b10-b197-0899c12c5530", "sighting--96b83417-34a5-49af-98ff-c9c6f488a662", "sighting--7f9f0d6b-95ca-4eef-a82c-76284c174fa8", "sighting--11527a22-fe67-49c6-bb9c-68a7a6e9e24d", "sighting--5b24bb98-9983-4a9d-9c32-80eb80430405", "sighting--94a20804-ea17-433a-8c01-653d70cfa26d", "sighting--32877fe3-0081-4e56-85f4-1edb0982bf3f", "sighting--5a1d477e-59a5-417e-9136-cfcfc306fb27", "sighting--351de0f3-8747-41ea-934d-fcaf642278dc", "sighting--77a83e5d-adba-4b3f-813a-0599290e0f2b", "sighting--6b99a1dd-b311-4d8c-9131-640c65c39cea", "sighting--3c3f35f8-8f15-422f-a8f5-a26c694a1f19", "sighting--bd784f20-5640-4a44-b495-09a6b0841171", "sighting--83135419-ce01-4437-ac62-772d8c3738d1", "sighting--c5eb4057-6f2d-4a68-a244-3137ca9e0aad", "sighting--bfb10423-ccdd-493f-8360-67a3363e5bbd", "sighting--9275cc84-8b6f-4a18-83d4-07e5670d31bf", "sighting--848f5699-6f77-4cef-961e-71fe45f74ab0", "sighting--603adb91-352c-4e10-9f85-297affe731ad", "sighting--7232604d-4f2a-4c2e-bf27-73a120605893", "sighting--2d5736c3-96d1-402c-9f56-ba10ae3985ad", "sighting--2ac99b67-24dd-491c-9d29-99d78a857c29", "sighting--ab8f5330-cdec-4e1d-9077-28f219ba22d3", "sighting--90b496d6-150a-4a5b-8be7-98a181e2ea1c", "sighting--02046897-3078-4f1f-a4d6-223f1ac46da4", "sighting--bf8220fc-2527-4fa3-860d-4e3b48ae6567", "sighting--5144bf22-0510-440c-af88-406571793b18", "sighting--be602b81-fef6-4e14-85cf-28cd4055c3f9", "sighting--4ab8b208-e274-4f18-a60b-f151e5bcc25a", "sighting--f491fd2a-0524-42b5-8f9d-a736b2ae1a67", "sighting--173d282e-1c21-4cd0-a53b-9b112c1d7054", "sighting--c1142f96-9099-44f2-8f5f-d1200cd0a80c", "sighting--2f6b178f-0aa6-45ad-a90f-eb6260a415ad", "sighting--9fb116c5-3637-46c1-b97e-6dffc0e29e38", "sighting--6e820cab-f6a0-424d-bbdb-2fa83a398177", "sighting--af6f8d15-454c-4edc-847d-c01ba8fb9017", "sighting--92522ae6-de37-4a38-b8de-5337ec3ed375", "sighting--e6b9099f-843d-4aef-8885-3590ff4513f9", "sighting--5afff282-6c6f-4548-b9c8-9acded9c8300", "sighting--2522ad6a-5ac4-4b86-b94c-9c25657c6432", "sighting--274e8cde-56ea-4d9b-b7c3-96b3751c9877", "sighting--c3ae00d7-9425-4e1f-81fa-eae1356a1876", "sighting--fd1316ab-109b-40eb-84e3-a52e27ec3df5", "sighting--57f7367c-01d5-4ee7-a7b4-257c3e523df8", "sighting--2561dec6-80ba-46f6-8479-ff1dc06afeb2", "sighting--fd5d6cfd-09b9-44d3-8242-9d9a66fbd25d", "sighting--b10a4522-7dd4-48a4-aa67-328eb1db12ce", "sighting--1251c0f8-ba6a-4854-a619-ba0b89424529", "sighting--1d6879a3-38ff-45e0-97a4-c44ba8506ca0", "sighting--ef6d0656-4df0-40ed-98d0-057e4383e4c2", "sighting--6d619e83-0451-4407-aa4c-8f37255f59f4", "sighting--1b19dcde-1f90-4afd-8c03-776958d42d1d", "sighting--edbe7b95-ef4c-482c-a8d0-7e89c67c7dfb", "sighting--2c6aa593-5c1c-41f1-b5b4-a5860cc9f1e4", "sighting--8ac6a093-af6d-44d4-8bc4-f39be2278b40", "sighting--9ef9e2cb-9664-4276-81b3-8bb07a5f7789", "sighting--7c59d0d5-1596-4111-acd6-f9c27219322f", "sighting--60eb2dfa-0f7c-4c52-8f5d-acf443728cd2", "sighting--d0c529f1-a87b-4a14-874f-6e18d818064f", "sighting--d73e12c7-1e5d-4691-b22e-cb7d7c55079f", "sighting--07a9c6e8-7847-4b55-885b-5b7040dea87c", "sighting--480eb76c-6c43-47df-a8aa-85b1d036c358", "sighting--142d2909-6e81-47dc-9a30-ca14f5476a77", "sighting--8fd9ddf5-0850-48ad-97ab-e336474557d9", "sighting--55c3069e-ab9e-4b10-b2db-17cbd7ba559f", "sighting--f3a6b9b7-89b4-4f8b-9cb6-f8d0b7927969", "sighting--370d94e4-41d5-43af-8726-6b82fa9f29df", "sighting--aa55faa4-5a04-4883-971a-84a24d4cb0f5", "sighting--0875e17f-f00a-4130-b429-ec56a6a752dc", "sighting--2b681b78-c3f5-44e4-8b81-196ef880cf6e", "sighting--68648154-26f2-49dc-8cdb-dcab617fff27", "sighting--b8ca6d3e-73ad-4ee5-9fa8-cfb7394a707d", "sighting--4ae6493f-010f-40fe-be17-dd5454293dca", "sighting--07b0c368-856c-45fd-9664-8a79238cd753", "sighting--9c259557-58f8-4f4f-9438-c81c36e56935", "sighting--c8a51791-548b-4d50-973a-5acf6b09d73a", "sighting--f35ef7da-db59-474b-ad14-362170c48aa1", "sighting--abf7d87b-bb3a-4a4d-8e0b-bd99ee355a14", "sighting--e23d5888-0b02-43aa-a102-fe93c25a4d40", "sighting--804c8594-9155-4d54-b902-cab38548c365", "sighting--95556fbf-2623-4a05-b836-273cbaba5bba", "sighting--f36acffe-ea82-4bd8-948e-f73f8a080afd", "sighting--01e903e2-ee32-40b5-9cff-7a48dcd8838a", "sighting--2b304734-6f16-45ee-b512-bf46145e781c", "sighting--33c6bbf2-3949-40b1-9646-124d6ca104e4", "sighting--7b850e3a-e3f6-49ac-9c2b-2f1ebb1b0d80", "sighting--cbae67b5-9b6f-4369-9962-73f9d00889c5", "sighting--b956c4d0-6b1b-4f45-8db0-bd16f2a734f9", "sighting--87311577-a4c2-4f81-ad27-22c6114a346a", "sighting--167b8811-1f81-4aa5-974e-44137f6e9c08", "sighting--4d462796-8dea-47de-9030-7cb575a2c8d9", "sighting--e6530872-a74f-4d90-8ea1-64ffb65d715c", "sighting--441f94d7-deda-49a0-b030-539d985e98fe", "sighting--3cceb469-f421-47c3-be47-16c24d582472", "sighting--6c6e040c-8b78-4aa6-96a0-2dbc63ec2cdc", "sighting--ef840d83-f4b3-4f30-afff-a20bfb3adf17", "sighting--0707e620-937f-493f-bdec-38a5d838712b", "sighting--477423fe-cd58-456f-925a-88b4965fa417", "sighting--d344a1d9-aed9-40b6-8fc3-5a4660ccf637", "sighting--fcefc516-fbce-4d0c-83ec-3b97eb44c94d", "sighting--25418a08-8693-4f93-8f17-b226102f00dd", "sighting--3d962412-2c2f-4f40-9b88-46c37a5dc0ad", "sighting--4551d32a-8359-4c7e-adfc-03a0ed85d179", "sighting--63c75232-3113-40e5-8ec5-f92403b4cfca", "sighting--cc267d84-be30-40e9-bd65-9dcf36bbc877", "sighting--a7bf7cad-42e2-4b82-b6b2-91dfa8f963ca", "sighting--860cbb05-8490-4462-b0d4-a3149e55fcb5", "sighting--fd0d8bad-e4bb-4d33-b5d1-290d1b5cf616", "sighting--aff313e9-f81f-407b-9c84-254c4d8c65b3", "sighting--ce5f6433-8a35-41a2-8a26-ae1640e885a2", "sighting--437a1069-0a85-4116-8822-ee21e065356b", "sighting--905371e2-2a60-4ad2-ab45-0a86c0a03cbb", "sighting--be354702-03bb-41ec-baff-ee51b8c1e6f8", "sighting--fc9591f2-2736-4cc6-a296-3fa31ad1c828", "sighting--fa6d69d3-be79-46b4-9ce5-c1f08c4335ca", "sighting--0757d412-7bb3-40d5-b1a8-d0aa8f4b28df", "sighting--c18a5b00-66a6-4171-bce3-aa4d25b9a136", "sighting--61afbb6f-ec50-4d47-8f46-a311a9690d15", "sighting--c25d5c9e-88b7-46a2-8ba3-70da096aa181", "sighting--561f819d-eb60-4b1a-ba92-192d7097d63b", "sighting--e3493c0d-277c-43a5-ae71-08a41456b205", "sighting--05a61072-891c-43d2-86dc-534053b3a29b", "sighting--23095ab3-1253-4344-b6f5-62c5747b5c5b", "sighting--422fa0f5-3f04-484a-b39c-57c70168aa32", "sighting--47dccbc5-778d-42ca-b69b-45d5e697e657", "sighting--7021e91d-b21a-404d-8756-8fd334a51869", "sighting--58a1aea9-14f3-48ba-ad59-ae46b2ea626f", "sighting--8c87e18f-ceee-4e89-a26b-0f4c47530e12", "sighting--68b6ee9b-f195-4bef-b73b-c7cfc5a983fe", "sighting--accb589c-b032-4828-8909-5c5b71549020", "sighting--dbfa8784-9e27-4a28-8021-50d0d78abba1", "sighting--3dc9f030-31dc-49fe-a943-6046bfa5f970", "sighting--1860a8a9-6a4a-4554-8bac-34fee7d7923f", "sighting--41268133-3cd8-4085-9390-30beaaedba14", "sighting--a2724418-012b-4452-aab0-0d928d0b7529", "sighting--acd00e4b-325f-4d30-9195-5d76a856dedb", "sighting--2d5efaab-1d78-4673-8d1d-6153eae34d69", "sighting--6dd705b1-f5a0-4a22-a27e-861cb03aa4a3", "sighting--eec0ddce-45bb-4266-a0d8-3ebfc855afa4", "sighting--260466cd-03b0-4ee5-a762-e030ac83a25e", "sighting--1948540a-0147-4f25-aaa3-bbbcd4e9cab1", "sighting--9dff0b39-797f-4034-9201-ad0376aec736", "sighting--27e3aea0-8e00-4fcb-9286-ab05569798fc", "sighting--7bab81c1-a608-48d1-9455-8cbb03415ce7", "sighting--3457862b-4f23-44f5-9ccd-cb51fac99739", "sighting--7300d82f-eb42-4d92-bc06-8102b08687c3", "sighting--4d6b059b-46a5-4db1-b655-2702211b793b", "sighting--ed9ae99e-4a70-410a-9a5b-bb410aadaaf5", "sighting--97a0eb7e-ca75-42bc-871c-28ca691a08de", "sighting--14d7669e-2fde-4757-9205-f6a67476e4f5", "sighting--4eeffe3c-7f5b-4a74-8c09-2116742ce07d", "sighting--4a393678-e65c-4d87-94ad-e080f60f3123", "sighting--2232ae40-841e-45dc-bc6b-d08aff1ad117", "sighting--7d62a780-cef3-4eef-8b89-211e299ec15c", "sighting--887247b8-e9ee-4508-94e6-8726979147fa", "sighting--4ede05cb-6ad0-4702-b39c-2521505d3709", "sighting--5aa2712c-826a-4b7d-aa06-e09b7caaa043", "sighting--271cfdd5-23e8-48d2-8232-a6c2cefc75b5", "sighting--d3d86321-9bb8-4f14-8aa0-f72ca65e1ab8", "sighting--4302c654-e310-4e69-9672-d9039820a0a2", "sighting--da9ad787-5753-4d72-81fe-f0fa704f2e53", "sighting--eb5df0f5-6611-4412-a563-f9dca3ed3f35", "sighting--d37a52dc-f84f-4666-a83f-2e79f2f6d16c", "sighting--ed0444a8-9656-4770-bffb-46e9b663e35c", "sighting--e0450900-cd12-4d00-8ad8-c20e9a1cf1c6", "sighting--04ca0a2f-f7df-4784-9755-69e6c05bc6fd", "sighting--caede831-f1cc-4a16-bc47-58e8f330a9b3", "sighting--0a471401-1743-4327-8ba8-54b8e7883c3d", "sighting--cf4d933c-17c4-4daf-82fa-cf875e470c91", "sighting--ff70ddf6-d54c-4725-892c-592601fbb6c7", "sighting--f2689542-8f02-4914-86a2-c345d8add381", "sighting--e308e702-03f9-45de-b9a1-39466c4a6547", "sighting--ea892802-0974-4967-83a1-f8659e1aee79", "sighting--4dc0a320-c511-4f71-a421-519c1ad2ab52", "sighting--8aa2239f-dbfe-4124-aefa-2e91703c786c", "sighting--696d6323-d207-4f6a-a91b-e47d67140d8d", "sighting--f8935c20-13fd-4700-9d85-5701574f9df0", "sighting--c6858f01-3ab1-4935-943a-c0acb6a96efe", "sighting--c58ca434-20d3-4bca-bf95-17d87acb92c5", "sighting--c5c60a87-712e-4ac6-84c6-ebabc16af5c3", "sighting--4f7a4091-60dc-4ab1-955a-c9e4917809c0", "sighting--fb284a9a-2362-4628-b4ef-053a11261276", "sighting--642a3da6-a81e-4d19-a0e2-0cd90c6916f0", "sighting--d2e1ef86-4c37-4770-90b1-6b21a5872732", "sighting--ae4475aa-6b60-4800-82eb-b597e7358bd1", "sighting--35a18a6b-11fe-4f14-b9e6-35831564a1a9", "sighting--43843eb3-a42f-4708-ae61-24a908ce1237", "sighting--48831272-8d4d-4821-90cd-4310ea42d375", "sighting--e48d6a87-fe92-4571-b5b4-61e4eb3be0a4", "sighting--fff95c21-d23f-4629-89c2-62c94934406e", "sighting--5b87f367-3d9e-46b4-b65f-22cbe9678325", "sighting--60de1d5c-d41a-40ed-8ce9-3b3be3e1c645", "sighting--42d2687b-fe76-44bf-a8bd-0af3a8eda6ef", "sighting--1401fdda-f19b-4552-a5ea-e3873d02583f", "sighting--e15c4d3e-088d-49b8-ab82-c0aa44ffdc0f", "sighting--0f1c1e5c-a1a1-46aa-b547-72bf742d4478", "sighting--f9b1c4ce-60b4-4f28-870a-90d494866959", "sighting--953a6e1a-51c1-4cc0-86d2-844b4c5e7028", "sighting--18fcf5ba-eb67-4840-9177-42774a028e69", "sighting--76554576-7f27-4766-9cb8-d50935f36b3e", "sighting--ab0e0d3a-40a7-4bd9-840b-492adc792deb", "sighting--e162c81f-15d3-4fa6-b538-dcba4c1921dd", "sighting--88b6aecc-f1da-4ce5-8d08-cf77ddb27ca8", "sighting--5577d233-2b6d-4cc8-9da2-b9b31e352d8b", "sighting--9b2b5533-4f36-4fd9-a458-0b562a548450", "sighting--1310ed6a-7331-4662-b181-468fe24a67fb", "sighting--0e02041a-bb39-4b52-b8ba-811888388ec1", "sighting--88d59b8f-fa7a-42c1-82e0-4abcea1d3ab6", "sighting--f8a5fa41-1c40-4f4a-98f7-3579f108fb1f", "sighting--ebbc2013-b025-4abb-962c-421e46824a97", "sighting--f5abd565-818a-47da-97e9-e4737d32ae7e", "sighting--859a564d-4f3a-431a-9572-380033ede5e8", "sighting--7764315c-f1fd-4cc9-aaf4-de7a8699fed6", "sighting--7153628d-9927-4396-a746-127e9983dc57", "sighting--7c6d5040-6e72-4c3d-9d4b-5bc09d7efd3a", "sighting--6196aa28-5c3f-4701-9a16-91ac69a180a8", "sighting--dd6b0107-3c92-451d-92ef-37091bfce433", "sighting--cece9649-a865-410f-9cfa-a04e6a9a7827", "sighting--8b826f7e-4e87-44d5-a52b-7819563c2c63", "sighting--7d3b7679-5900-4086-a987-0f0174a4a8ed", "sighting--be1997f0-64ed-482f-830b-0924eb200f98", "sighting--e398045f-7a1c-4ec4-8f4c-a9501b359f70", "sighting--ba6fbd09-9193-4fba-80ce-dbf9b7fc318a", "sighting--f552f015-a113-421a-a10a-e72607604c0a", "sighting--47756d3a-9c2f-40f2-b6dd-fe11d9eedeca", "sighting--dddc13b1-3879-4a04-81ff-98d9aac49127", "sighting--a89826a9-86f4-4f5d-a3b5-8339f54610c7", "sighting--8ce12e57-e592-4228-bad4-2d37fc06ba4e", "sighting--cade1bd8-63a1-49d1-9b7a-ec5004f238df", "sighting--295f5c45-c53c-48a6-b708-67e28b4a721b", "sighting--24654390-79ab-439a-96de-2071b9cdf4d6", "sighting--5632c9e3-ebfe-417d-855f-a418604491e0", "sighting--e75e3e2a-db1b-48d9-8578-8b3471843c93", "sighting--203a40a9-f582-4f7c-a6bc-bfb05bd20bbe", "sighting--2c7d7ff6-121d-4346-9599-f9152da1e9a2", "sighting--6f877747-5784-4d8a-8dbd-29dc3ceada01", "sighting--9b07d037-160d-488a-9374-86781b445e75", "sighting--65c2ee63-b271-4c61-a363-e1304ff4c62f", "sighting--e4f6b4e2-dc4a-4a90-9119-e0f1379b7d54", "sighting--143d0cb8-59f0-4b05-ab90-8de598e71da4", "sighting--9ca0fa17-100e-4526-8d5e-afc2ecad70bb", "sighting--a3e9a1a3-b6ac-4c71-a353-6e65a2428148", "sighting--922e851c-4a6c-416a-99d6-b9f69d427466", "sighting--cf94e635-f066-4041-bdf2-e578a95d568d", "sighting--d55ce4e8-3c7e-4eed-829a-aa79e41dc9c3", "sighting--9bfc55c3-47d6-48f7-babc-1adc2611e754", "sighting--864b1b93-f6eb-4f1a-a0ab-acf0f1aac9b5", "sighting--32cac7b3-5fcd-4503-ba3b-9c1c920745f6", "sighting--22884b3d-5d0f-414f-86d4-29ff8b3f6539", "sighting--eac36f24-aef3-484a-ab23-384052dd7bab", "sighting--462e980e-837f-4f3c-bad4-0bcb9217a6de", "sighting--ae61e7a6-5294-4f26-ae47-adeb6fdcffbc", "sighting--d5ec1be3-4b42-4b38-ac14-122765e56780", "sighting--64c13417-be55-4725-82e7-1ec879a67a7e", "sighting--0aab9ce0-c8d9-414c-9a96-4d19286e26fd", "sighting--8479810e-6269-44f5-a5c8-0e06a8afc488", "sighting--a79ec139-bcf6-4ac2-9637-5fca12b4513a", "sighting--d3131745-a16d-4ac7-9b34-bcad8d20d7b6", "sighting--48d0a54c-e127-4365-a75a-fd7bb27fe876", "sighting--dc82fb62-0007-4479-b65a-b6007b2e44c9", "sighting--a24a3e31-f127-4264-b68e-ba876c292aae", "sighting--a00488bf-d7f2-4f1d-9590-1fce7e1ec5df", "sighting--aafeee20-066c-42f7-b0e4-519b2ec48e7c", "sighting--df7d4d46-e7c0-4a03-8a3f-55327fb3167f", "sighting--e5517662-a7d9-4e4a-9d95-66379b81e96a", "sighting--4e5b070f-15b0-41b9-b818-f8fb21b7bc89", "sighting--6c3036bb-25b2-4a89-b600-f858491a95d6", "sighting--ab991aa1-71fd-49f8-945e-6950cce05d75", "sighting--7d49a82a-7774-467c-9ebb-0d3de2566b66", "sighting--3454da2d-3fa5-48e4-bafe-c4ef5eb96e2d", "sighting--abead3d0-4eca-4525-a17e-9efb71777f73", "sighting--c00eb273-cf69-408a-b5b3-7c0f73c50c90", "sighting--250b108f-2327-41cf-b1fa-5e109ad41279", "sighting--c0246e50-3f21-4a45-8c81-29152ba1843f", "sighting--e747dcb9-0d65-4182-ab06-3868bfbababc", "sighting--fe683793-2236-482f-b5a5-5cf7512b4599", "sighting--a7b830fe-f820-4c52-9868-2b8a8128df6d", "sighting--d1076ed3-d22b-40e9-9270-eb42ea9338b7", "sighting--2161cc7d-c200-4a39-8d2f-d803fe7191c5", "sighting--12c066f1-87e5-490a-8697-6811184a5414", "sighting--bcb5566f-8c95-4af9-b2ea-465723dc93ba", "sighting--5fe58562-368e-4387-ac89-5d49461895e6", "sighting--d53cd8e4-834b-41cc-b0ec-e3dd7dd05c46", "sighting--57d7d658-3e3a-4e55-843f-77e979c82340", "sighting--92baf32a-4f43-4260-be89-2d42ef995999", "sighting--0b02d614-1d38-4fa4-bc03-d23831820038", "sighting--bffe626a-65ff-4363-9134-617fbc45b7b2", "sighting--ccd794c2-c4ff-4cd0-96b2-ac5bd452b2c7", "sighting--0e0df2a2-6921-4b9b-803d-71c692e5f323", "sighting--2905af86-6c0b-493b-b85a-7d65c3ca364f", "sighting--71e605c5-596f-4bcb-be3d-35809d7bfe82", "sighting--5859f821-a26c-4e83-a814-f51f54f7c454", "sighting--f1c5c4f2-cc65-4392-9415-c2ea7194e4ac", "sighting--0a6c53e6-13f5-441c-bf2c-fb0505df4b65", "sighting--7469f752-9b5e-4e57-a91a-673d34a67db5", "sighting--cef725c2-00fb-4573-807b-4a027988adc4", "sighting--10576c5b-b7f6-460b-b53d-d65bda7c9fb7", "sighting--ff68444b-54c9-4fa3-b8e1-f5c843527818", "sighting--98cb67d2-13a7-497d-9851-df48b421d98d", "sighting--062333cb-a63c-4eae-b05f-d53000eaa4d5", "sighting--a60c8911-52a5-40ce-b601-c54cc9514819", "sighting--b503e1ce-ff91-4c4a-a8fe-7eb3ccd99873", "sighting--ab26e9a8-7337-422f-8225-d62567c97954", "sighting--24c026e4-5e52-45ff-ac20-ffa6bd3259c8", "sighting--e7a77b70-2cbb-44cc-8ce8-6300ddeb6296", "sighting--2416891f-1758-4354-9455-134b8f713358", "sighting--f1664ab1-2ee4-4bed-8053-ca51f13b8b7f", "sighting--e0bb15f4-00a1-47f4-b875-463b241f5bc0", "sighting--e524a9af-b43f-4af6-8c45-9bac0cbe2d07", "sighting--e9bde82c-2733-471d-9f4c-b46461d417e7", "sighting--a28239ad-755d-46aa-81f9-64c7b90bfd85", "sighting--508ca9c3-9577-478a-86ac-9947be487115", "sighting--a4c3edbd-cb1d-48ed-bc05-ca307bd58e60", "sighting--1f921c57-e344-4429-ab99-71aa908fb567", "sighting--8774ed1f-9a3e-4b7c-bbc7-2f895d6f2723", "sighting--f6305990-a8f1-465e-b86e-a8cd9ccfeaf0", "sighting--6bae0727-8ddb-4e6a-9986-1ed5f91defec", "sighting--f46c118a-7d81-4d36-8bca-718d0e59fd82", "sighting--642ec215-2af4-46ef-a67b-494c3ad1cb8c", "sighting--f30259e0-7512-41e3-aac5-3f0f33fdf600", "sighting--12849275-a9ce-4af6-89bb-1e402ef1fe19", "sighting--8ffda24e-c532-452a-ab39-b944fa7c6c42", "sighting--c8be7051-aea8-4f6e-91e0-e7594b93c006", "sighting--e07e4115-507b-4c45-84fc-d854e108d899", "sighting--f9d55d20-2514-40bc-a618-be0959d38243", "sighting--afb003b5-d4bf-42e8-bca9-ef8c2d44c500", "sighting--8bea4d33-ffee-4284-b173-274f8f6e3124", "sighting--6eaeb032-90ca-42ca-97af-fc02abaed24e", "sighting--008e3a85-100f-42b0-a903-7ab3243bad72", "sighting--8e76e848-370f-4c4b-b5b5-6f83ee07ab55", "sighting--e9f47fe3-c38d-4dc8-8d2b-a473649f1a4f", "sighting--88fd3768-d8de-49ee-b455-3e57e3d2631f", "sighting--a4abc212-d6e3-4710-97ad-52e2d75929c4", "sighting--060c16f8-14c5-48dd-b185-e20518375a9a", "sighting--63ca15d2-f97f-4f01-a0d9-3313b09755bc", "sighting--8c808b88-ec0b-44fe-99f5-2760eade8265", "sighting--b1265bfe-e635-472d-b0df-325f1374b191", "sighting--a6912c1a-b130-4b93-986e-3ef8eb812666", "sighting--fbfdcefc-50f7-49cb-a758-9d934da65506", "sighting--2c66666d-4253-469c-9245-99e280b569a0", "sighting--17107633-9bf0-46da-aa25-a2144156b72b", "sighting--730d94ee-ce4b-480a-915d-07429e7d50eb", "sighting--6f5daf34-bf2d-40dc-bd4c-b0e7a54ad0d3", "sighting--275cddf8-1347-45f2-930a-3cd0ae9dd017", "sighting--726e509e-b11f-4a15-b798-a7c2766873b4", "sighting--d8aab439-6578-4e33-93aa-310737a74088", "sighting--2518e4f2-af10-44d1-89bb-42413abd0a9c", "sighting--d2200cb0-7485-4f98-9945-44a570985ffc", "sighting--0c7054e4-920f-4287-9d46-7c8a457f4bde", "sighting--5fe8060c-cb58-4892-a1c9-03c7c8166273", "sighting--275c7db7-1b60-4cd6-9aa0-fe7f86517a3f", "sighting--b96237de-22cc-44b6-90bf-9f9ac027dd45", "sighting--4a90f146-1598-4188-844b-e5288cd83402", "sighting--dfba8ad2-3d9e-4638-827b-39316a84467c", "sighting--d49aaed9-f238-425d-98ba-ee606ffccb0a", "sighting--50b4e1c0-6154-410a-aa96-0ac4ebdd801f", "sighting--f29e2c96-644c-452c-b356-9571f9b83d16", "sighting--3166dc0e-fcea-4d98-b89e-45921d1a3dfc", "sighting--9bc83312-3cfc-4406-82b5-fd3c8ddc38e5", "sighting--76861aaa-7684-48f5-896b-26800b231a70", "sighting--4c55a141-6123-4d6c-8354-6d1578758ef1", "sighting--57b391da-6a14-4c2f-8d9d-46ad16eb2d63", "sighting--fa8ca980-a118-478c-8622-77827b6fecc1", "sighting--ecb002ff-1a95-4aeb-bd66-a8e30bd97c31", "sighting--40604625-91c5-4faf-8365-3ade2d4ba42f", "sighting--a3bae863-b73c-4af4-ba57-4a27bac41d5f", "sighting--7e9d92b1-7b86-4c81-b3ba-d37806f959b3", "sighting--9e5513d1-8495-482f-8664-72d483474d64", "sighting--2d5f4f35-377e-47f7-8bea-e80ce6183c20", "sighting--4fb0f7f6-6e06-4339-9c9b-4bd9e91a0707", "sighting--6e1fc024-0615-4a57-afcd-bb7400f22332", "sighting--26518d53-83be-4a04-bcc8-fc085afabac4", "sighting--d149a1d3-5b64-46ae-b4a0-108654a09494", "sighting--891329d6-7351-46b7-8435-6f0bace94e81", "sighting--acd67352-b31a-4b5f-b659-b9655490ee9a", "sighting--1d101b7e-186c-425e-b796-202f94f55075", "sighting--7efc8b17-9da4-40f9-98ce-0220cc381969", "sighting--51262811-9780-46bd-bd2a-f95ed2d1db0c", "sighting--33f408f2-907c-42cc-8947-2aa7d37a9903", "sighting--5d8b0436-6ad4-45e8-a776-2ed30ca46cf5", "sighting--ca0b8494-007a-4e01-8a00-019d0d2db99d", "sighting--6d61a560-9324-457f-886a-142c0b918995", "sighting--245ef0e9-7347-477e-a067-f9dbba0a1a52", "sighting--9f36590e-b6eb-431a-91d9-d4117a29284d", "sighting--59545e53-dc71-45ac-bd1d-053572b1b80c", "sighting--b14e369b-9899-4bcd-abb0-614a56ff5a2f", "sighting--53c2e3b3-ea63-478f-9757-d049aede7e72", "sighting--ebde192c-26c7-42ef-b86a-274b2be4ed95", "sighting--f7e16446-7967-4b2f-a4d1-22931dbb96aa", "sighting--c1727736-50de-4130-b9fe-e01fa9b3508d", "sighting--1a7ac841-20e4-43cc-ab94-7653715cdd4c", "sighting--306d9dbc-e55c-4d95-8e40-32c41b550bbd", "sighting--ec8a46fa-6e16-4d82-8954-cc34604c0da2", "sighting--2e3ca950-49c7-464b-a7cf-46e06f0bf37b", "sighting--9d411bd4-7c57-411a-910a-52ace4d26a2d", "sighting--13bcaa04-2074-4704-ac39-4482476b4581", "sighting--e552eb3b-5a1d-4a1a-877f-6db46c14b6ac", "sighting--394e5294-9a59-431e-ab3c-dde390476fa1", "sighting--dffc1ec4-f5f7-428e-9eba-6476faebc034", "sighting--d56b5ca3-7792-40d7-aa13-88dfee01e258", "sighting--8c7dd987-b999-4aac-8c17-c56ff0cdb09d", "sighting--cb0c0e32-13bb-4166-9cb1-9506e45b173e", "sighting--8af3f202-5a6a-41f4-9ee8-799b3d062110", "sighting--d5afa10c-d3df-436a-993d-c7460b87bf1a", "sighting--e076dda5-2bf4-4889-949b-4bea8ae75646", "sighting--2701a4c0-f5b8-4c50-baa7-b03e301d8188", "sighting--ba2c2116-1928-4e93-b4ba-f60445df89c0", "sighting--57de8c20-b121-47f8-89af-b863267341af", "sighting--e60ee5fd-2042-427f-af96-44a5653d8853", "sighting--04b492ad-3d70-45f0-9cbf-c7c3fd262774", "sighting--386df0c1-ada8-41b1-8e9a-1c3be5f7078e", "sighting--087007a6-98e8-496b-80fd-12d93b994cc6", "sighting--e062748d-8280-4836-a317-8bd4245120e2", "sighting--a8d8bbfc-1d87-4f32-9d44-d2f982c64a38", "sighting--6bed3b8e-2bde-4dc0-82b9-8e2e8023dc28", "sighting--82dc2390-5470-41b5-9c8e-2a1d76804dcb", "sighting--4fe0ff9d-4c43-47c7-b8c0-13b302a323eb", "sighting--cd96278d-1b6c-4004-9590-ec2dbf280d90", "sighting--e6528c7c-427a-47d7-aaa1-0e5669ad07fb", "sighting--709068f5-b74d-4bcb-b3a7-e70416df758e", "sighting--df1e7831-b124-45fe-aec9-af04129a99ff", "sighting--c5fee2f8-253d-4f8d-9fa7-2c85213f1a6c", "sighting--7eb562e0-514b-4b9c-87ea-21d931d233f9", "sighting--f72aea43-89cb-4e16-aa44-70616651c141", "sighting--6ec26316-9622-4f6b-bf8e-f8004af2c8fc", "sighting--8d985c6c-519a-4a35-8a53-a9070e17752e", "sighting--9be983e6-2aed-4043-8aaa-8a6014b7a969", "sighting--12e7b48a-ce95-44fd-898a-7bd5bec641c1", "sighting--c57d1e57-69df-4d29-a9ac-69daa45b2e3f", "sighting--2e96272e-4057-45bd-946f-937d4d477213", "sighting--6c8e237c-75d8-4e57-8895-7cefe8d0fd8e", "sighting--7a6435e4-c80f-4f37-af40-1e10fc100a1a", "sighting--e30c6f10-8922-4192-a448-0f7081dbe7cd", "sighting--6b044323-d879-417f-b309-ba9899d3be71", "sighting--b9225517-498c-4ee4-ac01-c5bbf98f902c", "sighting--3afc42bb-3a0f-4a62-9e83-d5f9626cfe9c", "sighting--7a68928f-4092-443f-9a1b-6bc7f20394e9", "sighting--b7d22ec8-527e-4015-9442-240404100289", "sighting--65719c13-a2a5-40a0-a4ce-f5e63edddeb8", "sighting--35716773-9658-4d26-abf3-97adec3c3069", "sighting--3dfe618a-48de-47fc-873d-192c1e177628", "sighting--fd20e083-ae69-4575-91d1-2bb60b15bef7", "sighting--2659b5ad-3af2-4086-9e85-6a2231dc2719", "sighting--2a641fc4-1d17-4e44-9326-7ee44c0b3c4e", "sighting--fed2ddfb-0491-4d45-9c74-31412e579901", "sighting--98e8d6a2-14ae-4b34-97d8-79fae06a7c34", "sighting--b6c8a704-429e-4d21-a213-ed19a6a1a343", "sighting--952920b2-d539-4d21-a2e0-49688a4c8281", "sighting--d26084a0-a809-4b1a-bc88-2b645f98958e", "sighting--78072e55-550c-4848-a26d-8627d7fb0037", "sighting--83faa651-51b4-4e6b-9ac6-3c9638f2aa3e", "sighting--3d2e8b56-09b5-4e56-ac16-8c41423eca34", "sighting--5c4bbe71-9f4e-49aa-9ff2-4691a111406c", "sighting--c8dfbbba-ba2b-429c-8f10-5cd7a8e50860", "sighting--9aad3e3d-929b-49f4-ab91-3aea360d0f0d", "sighting--9032bd12-1b40-40b8-bce6-4a013f044325", "sighting--d10ea1ad-678a-4400-830e-268840969c8c", "sighting--13ab0bbc-0508-476a-a035-25f290493485", "sighting--76044769-3e11-43c7-947e-d0cd18ddd1dd", "sighting--f0ac4fb6-4655-43e6-98b2-0baeacca0304", "sighting--a0952f43-0ebc-4326-a4d6-a0628800630e", "sighting--1ecd3710-6f3c-412c-ba7b-741b3d6a21db", "sighting--d619dfad-9174-4dc4-9556-46c241def961", "sighting--4b7c7326-5923-40df-93e7-e8eaf21d826a", "sighting--b8dadf38-32e8-4cdd-8c6f-2d0e17a4407b", "sighting--372a6517-36aa-496d-8d87-345f8898e79a", "sighting--4bd5d9dd-7a12-423b-86ea-c4ce25c7f8f3", "sighting--f6bddf81-2c14-4839-ad0f-b9686f32ae50", "sighting--4d0b8989-1b94-4403-8df4-2b3dfc4f9b5d", "sighting--2a5f5195-bcec-4a68-bb20-cf4de73f65bd", "sighting--7a11f82e-bb83-40d9-84d7-a9ee28e69be6", "sighting--b43a910d-8a58-4492-ad39-1e8f6151dfc0", "sighting--2481f928-e8e2-484f-a84e-f69dd1e9ad99", "sighting--94e0c296-49e3-4d15-b6cb-c2fafbf54e4c", "sighting--0675d4a3-4d40-4758-8c9d-3b6f7a3639a8", "sighting--b1179623-c41e-4b68-9152-9c3a57452aac", "sighting--a6664de5-8f01-4bd4-9cf8-0fc61070371c", "sighting--00e11fe8-ac08-4663-8226-c4b9c2c3b835", "sighting--0d623108-ec8b-45b6-9b2b-a2603c7f1468", "sighting--d69394b7-d1eb-457b-be80-70a40fc71dc6", "sighting--13873fdd-c8cc-4629-92bb-7a39902f9040", "sighting--7c915e64-2321-458e-93fe-754409c48cd3", "sighting--9b368aef-c673-4a87-8c5e-0b5dc4dd3b1a", "sighting--a1d9f135-4060-449e-997b-268ae1162957", "sighting--1f886c5c-4d17-41de-bcd2-5c1003701be8", "sighting--274244b6-3dae-498c-b78a-04894a6673d3", "sighting--3aaab3db-e7b3-4bfc-95a7-bc8fea555867", "sighting--b201918e-4e7e-4333-9db2-df58ee4b9a1b", "sighting--c1db94ac-3e4b-403e-b15c-72d5cd0b1d9c", "sighting--79487c3c-3f1e-4001-be06-6e7c96b87b15", "sighting--c585ef12-6fa6-4121-a084-a66a3be5ccf0", "sighting--a2981105-282a-423f-bce1-5178cd52bd2b", "sighting--fc4b2fd8-2e72-45c5-b785-f533b2fa21bb", "sighting--bf024ff4-5a48-42f8-ab4c-2baf16ebb84b", "sighting--7a632d90-ce3e-4626-8124-00824b6bc37e", "sighting--155e5412-dab2-4c97-b103-5b9ada42cba5", "sighting--03824a47-f66c-4135-a389-34badb5103e8", "sighting--c5a0e5b0-d42c-4466-acc5-83da0cad3f7c", "sighting--bc7b90a6-a20b-4007-a434-98884a3e8ec7", "sighting--86e6f2b3-7a46-4f02-9faa-1845ddea6c8c", "sighting--5ed42ac3-93f2-4f0c-b0aa-4d8b4c3c2aad", "sighting--21cf0ae2-f1e8-4a06-b166-392b631fbad9", "sighting--57045fa8-006a-4e9c-a04f-54f4b7f4ad88", "sighting--afdaed35-3627-4952-866b-a714e3c2e9eb", "sighting--5d08f579-4a2b-4ac1-ba26-0d5b67bfc2f1", "sighting--34900092-519c-4203-bdfa-b0dd8b114e55", "sighting--ac0fac1c-7ad7-416c-841a-a2ed16d570cb", "sighting--534fff55-a752-4eb9-b4a3-a2aff0c0c585", "sighting--37f18b80-4283-4759-831e-8570a4cb80d9", "sighting--cb23fbc1-6491-4a32-aac2-4dbed54000f9", "sighting--af763a68-7b33-4309-a2b0-6b9539ee81f4", "sighting--4795b2fc-7bf2-4ce0-afd1-c02c61780d5f", "sighting--a40396d3-52c6-46f9-b654-1f076e4714bb", "sighting--a5e064ee-38e3-473e-8069-3915755b2fc7", "sighting--837577b5-8408-4869-8353-4ea5a7423538", "sighting--097727f3-3636-4b35-b05f-e6923078a4cc", "sighting--93a664dd-9d60-43c3-b583-2babb0558ba8", "sighting--2744c7f7-d8a2-470f-b558-b965ea9231bc", "sighting--0cff444d-482b-4301-887d-1e1ea586cc79", "sighting--285b1276-2a0a-4d25-a2d4-6343dcf184b0", "sighting--72319cf3-b270-4bbe-90cf-6e8d1bf51a67", "sighting--a7f03b2a-16f3-4497-be51-6a1ea1133200", "sighting--bed7fd3b-096f-4dfc-a7fd-928eb47af9f1", "sighting--f4693140-2388-40fd-9a53-7014ee83a44f", "sighting--98d63856-3fb5-4e84-b08b-fba0af25e0f5", "sighting--e22d2d6f-c121-4e70-ac38-067e0b19c204", "sighting--cc9debe0-4151-462c-a30e-fe9c5040c1ac", "sighting--51df6ccb-1d79-4530-9bf1-8cdd8bbdfaaa", "sighting--ceeb7ac9-f745-4c94-9318-8a39682e33a7", "sighting--6ba40e4a-a99d-4688-9c45-1703cdc7dcb5", "sighting--f7c58ed6-19b5-49e7-94d5-bda10917fab4", "sighting--938de09a-6e57-4ac1-8411-4a2b5cd5e961", "sighting--df94c210-9474-44a5-8566-2d21663f17a8", "sighting--6a31091b-ac39-47bf-8950-31427dff356a", "sighting--407d5b7d-9099-4621-a028-a7bc52c50f45", "sighting--51289960-a261-4136-a113-0a6702d4ec25", "sighting--3be1a0d1-72ca-4f42-94a6-a80bc27fc0b5", "sighting--829d19a6-66d8-46ad-8c1d-27a8617fa52f", "sighting--5c12b8c0-1812-410c-bc1c-9258c2b44916", "sighting--b9a59482-ff07-4a11-9384-882c2e173344", "sighting--a75fc5e6-822e-4384-a56d-3bef51c5f972", "sighting--377e0fc5-a731-434e-98b2-8642caaf74e0", "sighting--1036acd3-c53c-4b47-9863-5428b9f797a3", "sighting--cab8f61f-3256-4dc3-9945-da0893d80d39", "sighting--ea099cfc-e842-45d6-8d5c-851f08bb91be", "sighting--556bcd52-d20c-4fbb-a7fe-dc4eabaca790", "sighting--e3857004-4975-4985-896a-0fbdda16422d", "sighting--8535dc66-9cbf-4a3a-97e0-13b4bcd05142", "sighting--bf6ee3e4-1fb3-43d3-95ab-b5010a60f0a8", "sighting--40816d8b-2ad0-4e9d-af0a-280ab0dc1da0", "sighting--47b47cdb-fab5-4ece-83e7-b43b5e5afe2b", "sighting--2752473c-2c84-4e00-b667-0ba05b859679", "sighting--b31a5a26-ff2c-4d9f-8142-28320e295fae", "sighting--349d5767-6f6b-4001-baa2-2901209d1457", "sighting--e7d3c004-0f4c-4efc-a471-69ead11d685e", "sighting--48ee57dc-93b1-4e04-a619-46f3258fd134", "sighting--b2f110c3-12a1-45c7-a7af-196f3f114958", "sighting--3a04e4fa-0208-4871-b632-ce4e89d0fff5", "sighting--224b1c6c-2687-4c79-b8a0-f7282eb3bffb", "sighting--d6b6989f-86f6-4e81-a9a4-7fbfaff22809", "sighting--32b0c1a8-a11e-4685-936a-6883c6470acd", "sighting--806bb3c0-51f8-4de1-abb3-9dc9276bb117", "sighting--2de07aac-3f9e-461b-abae-62c40f04e838", "sighting--eb2ea6e6-3bdc-42c7-87c9-231c1e9c716e", "sighting--0edd57ec-6273-4590-a6a6-f9c2041c016c", "sighting--de04c2a0-b386-442a-ac1d-b9230c094475", "sighting--c7b7de46-36eb-4aca-aa3d-be5936c32b7b", "sighting--752df15b-c485-492f-a296-ff36a5ecf2d5", "sighting--f3f531a1-7690-4780-81c2-517b24ee1584", "sighting--28f96bd5-51ea-45b8-9d6d-5c06b1a0b3f4", "sighting--26e1b643-a317-4537-adfc-16aa9e2d0885", "sighting--b9d32223-4633-4870-ba75-6a84c8697a0a", "sighting--2d48617d-3120-4e88-a073-9ff01c95d57a", "sighting--3e9158db-a59f-4830-aeed-e95490e54d39", "sighting--f2878f29-b7d7-4894-96c9-ac04faa210d6", "sighting--9d3ef0d2-2a84-410f-99ed-8333218acb86", "sighting--8ce5d079-f9bd-4287-990c-0da42e6d0483", "sighting--4705446b-2976-465e-b4e1-8732c6a8fe89", "sighting--13764024-ef91-402c-9008-6b91142820b5", "sighting--60b4778a-c0cc-4b5d-8a40-a4ca7d45dc77", "sighting--c2edfce3-7cba-4fc4-b62d-85126e1db437", "sighting--92e0e188-072f-4d94-a119-2eda23a0fcb3", "sighting--ec9779ce-eeb5-48e1-9df7-c898d6eaeb9c", "sighting--4b6309f8-6a52-43b7-a6b6-2e2f50b3ec40", "sighting--fa9a21ad-2bcd-4bd5-a853-c332684d40c1", "sighting--ace95780-69b0-4284-ab52-8fd7a7c221ab", "sighting--d9bfc805-dd74-40bc-b8a2-5db22e3561fd", "sighting--451ea83f-b105-4cd1-830b-a07225607004", "sighting--8cbff7dd-aba7-44f6-a7e4-cbf9cde28af5", "sighting--d587a8fa-2a83-47ca-af80-9c16d17a3dbb", "sighting--48d6ba22-84d0-41ab-9b27-c618807db13a", "sighting--73dbe203-2484-4417-b5da-a5fa00edcef3", "sighting--02dede4a-9868-4a9e-87b0-8269a34f9d79", "sighting--80b36e02-7f18-4e40-8f10-14dfc7914bff", "sighting--372d17e7-f73b-4fd3-b30f-fcf5006255f7", "sighting--d5b40acd-b189-4547-b147-46a4a15608f5", "sighting--8ad845e1-85c8-44e5-8151-2a4923c52700", "sighting--e12482e4-d831-4ca4-bb3a-b7206dccb217", "sighting--2903990c-f6ca-47ae-b3cc-2a69a77e7512", "sighting--d8d2a7dd-82fb-4b94-b29c-565c0e7e89da", "sighting--1cad5475-3065-4d4c-901e-dfefc6e8d701", "sighting--ad278b8d-155c-477d-b567-f7c8199633c3", "sighting--414b09bf-3163-4b2a-8686-37ca08b10856", "sighting--d991237d-ee5a-48bc-8f7f-22a8a0252c50", "sighting--8691dc8b-dd28-4c44-933b-636056ec24e1", "sighting--1e0dc1e4-6d2c-49e8-b262-ca0c9b5d164a", "sighting--ef2922d5-bd87-47d4-a218-19bc06c534ba", "sighting--d0823ee0-ae0c-4c1f-ac42-bcad91a78848", "sighting--7528f363-a57a-439b-a93b-555b10315086", "sighting--6e7caf0b-60fa-4480-8ea4-1e49fcd25336", "sighting--12a8ebe7-5113-408f-a191-da39fe5ce1a5", "sighting--6bf5ffdd-aea3-4987-8e5f-10241763beeb", "sighting--e7820984-c150-4423-b67d-02db19fb4975", "sighting--c52b8d7e-a5e1-4098-9605-6a7554e44c98", "sighting--2b5ff3e9-8278-49f1-be01-bbd56029d651", "sighting--669a777c-c260-480c-aa34-feebd96fb368", "sighting--b86e1139-e8a3-446e-9c15-c5b6e29e0fe5", "sighting--d0a79b8b-3487-454f-bea2-8c410150c92e", "sighting--c71180fb-3dc0-4963-985e-7a80da29f72c", "sighting--20eac521-9907-48e3-9c0d-6d311381c089", "sighting--fd7bbd69-3881-42cc-b559-6b2478934c9e", "sighting--fa3ecb78-1d6d-4071-8936-00a253dda91e", "sighting--84a0e37d-f22f-4dc6-b90b-09ff9f083eb4", "sighting--60db4047-52b2-4c7f-822e-15e7dba09daa", "sighting--fdf5de58-4b0c-4a76-90ea-18ae6bef1f68", "sighting--be3703bc-4855-40c9-8e3a-ca2063967164", "sighting--954ae8a6-ab2a-46fd-ae60-9e4a7cefd835", "sighting--b40bfea1-2a08-41cf-a685-fc3c68a71979", "sighting--34bd160f-0c92-4211-b9fb-d2569d550efc", "sighting--8e641426-bea0-4cba-8fec-559685227e12", "sighting--8b03a81b-bbb6-4d01-ae51-586224936f5b", "sighting--45a0b6ab-0755-4dd8-adaa-a273e1cc7cb3", "sighting--43fd9801-e6f8-4531-97ff-782b02239e84", "sighting--dc99df86-ea9e-408b-978c-03636e9a64fd", "sighting--a420e299-d3e7-4ce1-9484-b1db6f2c4b2d", "sighting--013ddccc-28fe-4849-b92b-31683d9cc909", "sighting--90312d5c-675e-49f2-a285-78317116eb06", "sighting--d650efe4-311d-440d-8b05-b2678f36a4bd", "sighting--12e0b120-b245-4294-be45-50994d1db273", "sighting--78b2baaf-df4b-4ef7-8af2-645852089297", "sighting--ad67dea1-5afa-46b9-9713-d78a9422a9cd", "sighting--cc51ae3c-261f-465b-9109-ed62f74d86dc", "sighting--7b35ad0b-1979-4f8d-9847-79ccde4f7f38", "sighting--310204b9-069d-4882-880e-13f83dad7e0e", "sighting--766cb69e-883d-4db6-9d04-4b8bf827d07c", "sighting--52f549fa-466a-4b59-b1ff-cdf81a6a1669", "sighting--fbab190e-8879-405e-8c67-2449cc9054d1", "sighting--075d5669-4276-4b81-b8a4-12cd0c288627", "sighting--7d400393-90f4-4921-8669-7222f4a78dd3", "sighting--ffd36aaa-a98f-426d-9854-abba5f35ae79", "sighting--0eb11109-205c-4879-84eb-f81a329dadf5", "sighting--eb85a711-7ee1-4b27-8e5d-7a0a25d07b8d", "sighting--8fb4c413-0cf4-450e-90a4-1cb5c6c4d45a", "sighting--92329379-ff55-4559-9101-db0c5d2f9817", "sighting--00363d01-1c97-47b2-afe3-a9fc2345da5b", "sighting--1e9d7d1a-b7ff-4011-8783-be79094b4e41", "sighting--dc103617-0714-469f-8e04-a8853baffe0c", "sighting--ca202c1d-343c-4ad8-a8a4-2f89c2d40d81", "sighting--2f3c92df-ae80-4590-9958-29ec90cbd30b", "sighting--23f8f0a5-f147-4efb-ad19-f841fde6731c", "sighting--f0f10923-be0f-46d4-99be-05e4eb922a89", "sighting--c13d95a0-a805-4fbe-99b1-1046eb4699dc", "sighting--0af6b304-1d0a-4cab-adcf-8e6d7d3e28f9", "sighting--3719ba1c-a025-4b3a-8f6e-ff5d927dbf7e", "sighting--75570263-bbbc-474e-a059-1f8df52b8c17", "sighting--2784d558-5605-4771-b8cb-9565a25a1c7a", "sighting--8678114c-bdae-4fe1-994c-e78bdfd9dd66", "sighting--679f6523-6e76-4cc6-8222-cdad0d27d2c3", "sighting--aa509303-17e8-4d73-8957-a7d028f897fa", "sighting--5c0a4383-0b8a-4175-bf6d-aee8edc11272", "sighting--990221b5-12b9-4c3f-a527-efa54ff0e53b", "sighting--1a89f707-364f-4a4a-b0f8-2c660f2db586", "sighting--8d1a0a3b-a204-42a6-a4d8-915ca0140d71", "sighting--a05edbf1-4282-453c-b456-dda503200f2b", "sighting--8e574836-1b97-405b-b272-e4728ce238eb", "sighting--2479c807-1e13-41da-8ed1-66451ee120d9", "sighting--476d2af9-7315-4133-822e-62c69d89cb73", "sighting--5184164c-47b0-498a-8ac1-21b9dc8b5125", "sighting--69989838-09b3-4367-9707-775ae7b0b570", "sighting--a3542e98-0176-4bb6-8fc1-fec42e6ba4df", "sighting--ed87a75e-8be5-492e-b33a-f710657d6394", "sighting--4bf71ce4-1c8a-44d1-afae-e1a3cb6ab37a", "sighting--437db2ee-8b7a-40bc-9860-993e04ff381a", "sighting--bfdeb5d2-11a7-44ba-9dd5-38e344356cdd", "sighting--6b55290e-3f2d-4cf3-a78f-f36b40105a70", "sighting--2c0fc936-1516-4ba8-8fc1-d41882964355", "sighting--279fbd0e-6e42-456a-8fc0-29ad084ea70e", "sighting--2dcda891-761e-42c0-ac73-c337a74f4a5d", "sighting--deab7d42-ad6f-4f26-87aa-ff17287b0bf6", "sighting--7d304327-fdbf-4bdc-81f6-a30a556bfe69", "sighting--de471891-d7d1-47a7-b0a4-8a0206f0d7dd", "sighting--72ce742e-1636-4260-a53f-9abf9f70440f", "sighting--b0a02785-8315-4ed7-8c4f-8cb55d45c706", "sighting--766ebd6c-d3c0-4bfc-ab78-976a5716c8f2", "sighting--14b7876b-245a-45f3-a9cd-4a4a7aa30474", "sighting--f7a150c8-d0e3-40b4-8e5e-d7b75fce6d0b", "sighting--972a5f9a-fb76-47d9-b60f-d65686b9bc10", "sighting--8dafda0f-77b9-4d34-9e6a-3d1fbcfbeb4e", "sighting--cb664d0e-3353-44ee-ad34-f28d1b47bb6c", "sighting--518b11e9-be5a-4b05-a640-340d8178f54b", "sighting--27e4c26e-bbaf-43d9-8246-33e472261c04", "sighting--5bb577d4-fc9c-4d21-879d-67204dc86c98", "sighting--9f27b88e-713f-42f7-898f-7a69b318bfd6", "sighting--96af8df1-b8f2-4001-a49f-e3e5c19ca488", "sighting--aa341d63-551b-493b-9e3f-52d60898301f", "sighting--0afbd3a6-0fbe-41d9-abac-b4b96f45986c", "sighting--0e6aad1f-5260-49b4-a80f-4a115f0f2c8f", "sighting--cb183333-31af-4999-8e06-a2dd6185ca55", "sighting--9ceadb69-e2aa-4b11-a5c3-2d0da4146739", "sighting--3611cc27-a4bf-4955-b02c-7a585268a02c", "sighting--b86a6ec6-f736-44c3-9cd0-6ab3a0b9d1c3", "sighting--54ac65f4-f9e1-4801-a9d8-6b0b12bb1076", "sighting--19b0e474-9f73-4848-b391-31fa137fe214", "sighting--a99c4ba5-9a05-4b37-996f-8c0da326cf45", "sighting--c3294b32-7df1-4df2-a354-eaffd67e4bb5", "sighting--43700fa6-d7e8-47fd-9395-f960076d8403", "sighting--1f57ef07-d095-4483-a578-6c554b9e1db5", "sighting--19880caf-50ea-474b-881a-1e88581735c6", "sighting--c4a939f0-d5d0-46b2-8b74-5af8d8072f76", "sighting--47499b54-7ef2-471d-9648-95c8cadc20fc", "sighting--6bd32652-be8c-4255-85b0-ad90bd47659b", "sighting--42583b8d-5145-45b3-a92d-cd492ee5bb34", "sighting--5305c028-d28f-4b0b-b934-cb5de418a7df", "sighting--d6e68b83-bf1f-461b-b502-c8b9f79743bd", "sighting--b3bbc28e-4b72-4bfc-aa3f-9dda8002bb46", "sighting--481053b1-20ac-43a0-8e35-171af218f5df", "sighting--e0771796-0ff2-4259-b675-25b2b90fc71a", "sighting--a6a640b0-3214-4fa4-97d0-a87430a02162", "sighting--711fb39b-97cb-4427-aac6-85b05d55cd05", "sighting--4fced661-be11-4262-aff4-9d58daad75b1", "sighting--668188f0-aec0-4399-adec-51c547877fbe", "sighting--3b718da1-d558-4d0f-a8fd-71f3935adc2d", "sighting--3047c3a0-235c-462c-b08c-5711cf5da41f", "sighting--5d5f6cd0-7443-4c3c-b756-d3164157ccdd", "sighting--63e4c674-60d3-45e0-b5a7-1991dedd26d8", "sighting--6b471c88-5bd0-4b3a-b92c-4f9ce5dbd265", "sighting--d1747534-d844-474b-910d-5e1656a8cd72", "sighting--4034f5a1-6d43-4547-b3ed-ea8f00a99ea6", "sighting--9e741803-e832-4d26-b3dc-a71281c6d3e4", "sighting--d9a7d6ff-82f2-4586-9d92-2abd0c7af806", "sighting--25811eb8-e36e-4452-a598-9c1ba52a5e24", "sighting--de108f36-3ab8-4389-9773-e5aa2f4644e1", "sighting--11e81fde-4e0f-4fe6-97eb-fab4da5101bf", "sighting--88cfc0a6-a167-4845-8aa5-b6f5bda0d1ed", "sighting--4d74edcc-36d6-47a6-9438-9fd4e1646f58", "sighting--e8df6b5c-f842-48fa-89ff-a34e300ca419", "sighting--635169cc-ced8-4603-8383-f85781fa7cec", "sighting--d933f00e-9a22-43c0-bbee-8622eca106b9", "sighting--caf0fba8-e8d1-4e6f-b3ec-0ed4c43af639", "sighting--732b4400-f05c-4243-b896-8a829ed97d70", "sighting--8112399c-c854-4bfa-b279-999c2db1929d", "sighting--c714a686-ce90-4db4-83fe-7d3f8a134af1", "sighting--8722c0ba-be07-44b4-a7f9-e8fc2bb7072a", "sighting--1cbb8e40-3b19-4597-a60b-ec708e5ae231", "sighting--3a97350a-cf0f-40b3-81b6-60dfc7743cb0", "sighting--08d7b575-807f-4389-8630-c06e3b143617", "sighting--0f468799-2934-4568-978c-c116c61bf0e5", "sighting--fff8e52c-f224-4174-a39a-84329b76046a", "sighting--7f87739a-85c4-40dc-a3c2-5b09a2b7304f", "sighting--9cf324ab-814d-49f0-8a8f-bd361a26748e", "sighting--88badbf5-f7f2-470b-b7b3-919587492227", "sighting--ccbaae2c-e18a-4d33-97f1-a0d682bb56ff", "sighting--93c00ede-945b-48bb-8d0b-713eece9412b", "sighting--1214a271-0cee-41de-8235-81170495aa85", "sighting--acf8d2b3-2cd3-4b12-8bce-4ddf6cbbd0fd", "sighting--4e92d0a4-6af5-4831-9e27-a7ab3c7cbe19", "sighting--5cd2a88e-2749-47f1-bfc4-5b4967b4b925", "sighting--c99cb08d-2cd4-477e-ae36-04591c91afb7", "sighting--916c719d-ff6a-4254-bb8b-17ec5a5c65c3", "sighting--f9c1abfc-feae-4dba-8ff8-2a7de44360cf", "sighting--49727657-5c96-430c-97f2-f6dd55f7e737", "sighting--363f62a4-72e5-4db4-8ce7-d8cdc68c10a5", "sighting--b425aa37-f024-4d34-b05c-55a8e6978c8f", "sighting--4671e744-3b1e-4150-beee-16c96ee8e753", "sighting--625680c4-4a01-49c4-b69a-2adc4ce5a014", "sighting--b8b527bc-8734-438b-ad1e-83f28868f628", "sighting--3dc15664-0b7b-4c50-b112-2eecd02526f5", "sighting--cbf45b8e-f1b9-4f5c-8fc7-9a7ee87bb9af", "sighting--7fef2824-0c70-4efd-9129-4cd96edd0cf9", "sighting--4e1dfb75-7764-4a08-b679-74b4374f5d6b", "sighting--b8c289ad-3e96-492b-b230-97b4cb237d75", "sighting--428cc804-1b5d-4e4f-b71d-28a218e77f81", "sighting--19dbf646-b3d2-451f-8b0d-bc81e9a6735b", "sighting--9dcc6867-858e-481b-b3f0-0a3a1ab36c75", "sighting--67667d82-233a-4e74-8c0d-c9ae5bd3a049", "sighting--6fd76d70-ff49-4102-91a8-b52c63697801", "sighting--fdd4d8c5-9403-4552-93d3-9c7416491902", "sighting--101894a0-b8f6-4337-a6b8-f4ddf3af0134", "sighting--168de3eb-32f8-46f6-81b5-86d4e6bcd3e1", "sighting--d83bd1b9-adc3-494d-a7a0-6a9277740757", "sighting--3e45ccd7-59f0-473b-9fd7-ab323fe0f720", "sighting--528289de-5a29-4622-ad7a-87a30b14c680", "sighting--581a4c4b-fa8a-41b0-a059-b3d318f21eca", "sighting--cc17a32c-f6c1-4fee-b59d-a49f17ba7ee6", "sighting--41526b21-9257-4588-b2b6-b950ad4a7ce5", "sighting--0d4a4d55-c318-4469-8816-09b83687b1de", "sighting--da3a72fe-4f41-410d-a2a0-3aae631c102f", "sighting--fa98ab21-8f3b-4d8a-a225-4c97e7caf05f", "sighting--f561b1cd-c43b-4dac-8ff7-01d59c629868", "sighting--8bae098f-a03c-4012-938a-9ed46da22b02", "sighting--080b2d90-5423-4cab-990f-0868a405f6e7", "sighting--291f97e3-5b7d-40c7-81ce-94f23b1913d3", "sighting--100392b2-4b1b-48df-b414-7b9aa6938271", "sighting--69450419-a874-46a9-b1d8-355427432afa", "sighting--f39ce665-7366-498d-b018-ecae47909f77", "sighting--3af29937-64b2-4d7f-b150-25d76b4f1d93", "sighting--d34167b3-4691-4367-b464-8e04c95335c5", "sighting--e374ce9e-a4c9-4691-9afb-043eca173871", "sighting--b63912e8-7673-4c4d-b78b-3ae7b974da45", "sighting--8ad29bdb-cfcd-4c6d-ab00-ecff934a51fc", "sighting--c52a8b62-c08c-4f83-8a34-3c99d9dbae3d", "sighting--4126e5e1-4c49-4f86-a086-86ffbe2948b4", "sighting--ca16f2fc-c8aa-4c6f-bab1-98a0ea6eafaf", "sighting--dba7b9cd-8392-4d78-aba8-95bd56f31c3f", "sighting--a0489fa1-bdea-48e3-93bb-a9101c3b43f6", "sighting--96992597-1ba1-47c7-969e-676b49e356e9", "sighting--3512ffa6-7d26-45f9-a5c7-6c41b98b5944", "sighting--c6007ce4-d84b-4cd4-8479-7b2aa7718dcd", "sighting--6bd47a8e-c512-4b64-a807-5e8d997317fd", "sighting--a7c99c30-2bf3-4d10-ab83-0b15788d629a", "sighting--3652c90d-c457-4b34-83fa-9118b030173f", "sighting--a0f36a01-480c-4162-9c78-af277420ecfe", "sighting--c796994d-315c-4a3d-90a9-2902a37845f2", "sighting--a95a651f-acdf-4985-8fbe-e160f5f3cf62", "sighting--441b98fa-f68b-4199-a550-08725f410900", "sighting--6dae496e-db6f-4da1-b095-c22b301ab459", "sighting--a4f9c90b-6af3-4b84-ab94-efc84d6f0a1a", "sighting--ced7d6f0-3000-422b-ace4-00a35bf9df32", "sighting--df289b33-3dec-4cb5-ba0c-06a84bb42915", "sighting--8c15dad7-257e-4a38-a10c-3b5def7a04b7", "sighting--33ac9887-ac33-4308-abc9-98af70613ef3", "sighting--9c5cc305-f850-412f-9335-cfa91a89b65a", "sighting--62ef06af-90dc-4c3a-b265-55b10b633e80", "sighting--0cdb7608-3355-41ed-a25e-53eb25783d75", "sighting--8c64ff8f-8d41-4cbc-9fcf-3b6a954fac1a", "sighting--6024e1df-5c39-4f70-ace7-aa31c5942832", "sighting--ebc75911-b834-4247-941c-c785f02134b5", "sighting--38a3e21a-44fc-4dc8-9212-fe91232a8a6c", "sighting--28a7e795-c3eb-4a81-96a4-cb1491f52750", "sighting--703a163e-03c0-4471-aa1c-8651be25896a", "sighting--394088f9-30d3-41c0-899d-06687bcefa13", "sighting--6b53bc66-c0ee-4789-8b4d-fcf674a1e4b3", "sighting--e287c619-5f58-45e7-9c79-846f92ae1ca3", "sighting--22314ca8-ddc5-473b-8718-9874d6167eee", "sighting--dff3d818-6616-4222-b2f6-f4cdc56e05cb", "sighting--ff150a48-1597-4bd4-8341-0a247ea6592f", "sighting--644da57d-98c8-415b-9fe0-56ba129d98a1", "sighting--3592d43b-8e03-4750-a71a-cdcff9052f69", "sighting--b9a7e0f6-faba-4c8f-adf1-ceb7d573aebb", "sighting--a2c93a7d-d791-4ce6-9d61-5ec11f6d819e", "sighting--444c3017-c875-40b2-8808-a2bcd5f48ee1", "sighting--a998daba-d374-485d-9705-f066a53c7ff7", "sighting--00879ac6-768f-4972-88d0-165f5725914f", "sighting--63d82431-3e6d-4f67-a4df-ed61b268c44b", "sighting--c5aa5c88-a6d7-4af1-954c-6e5c969327f0", "sighting--9effad8b-ef60-44d5-89b0-61eca063f013", "sighting--6285ff0c-0f4b-49a0-959c-505b500c3c7d", "sighting--19b63c89-545b-4679-a8ea-5e0cec167d19", "sighting--02180c90-6378-4ec1-bf45-0100edc116f8", "sighting--5c959890-1e71-4c3d-a43a-34401ba75aee", "sighting--d878f4ff-0834-45ac-9a90-5efab5354094", "sighting--20bf7c77-df53-431e-ad44-76ca0fb99984", "sighting--01aa6c2e-fbde-4623-abe0-5e092db28840", "sighting--1052933c-8b6c-4709-b2ea-ace89116bad3", "sighting--4973c157-0573-4b3a-8e32-f292f4ab6dd8", "sighting--849a0399-c123-4633-bebc-a49e8ce41bc4", "sighting--39232e88-b448-4ff1-bf4f-dd109e85f65e", "sighting--8da14672-923b-4fe3-bee6-15982b15fa8f", "sighting--9de123be-2de1-4215-986f-df5b1fb4a48e", "sighting--a1ce1922-625a-4f42-8f9d-019f4c66e592", "sighting--e74a506e-bd68-4d84-982e-128af27b4d33", "sighting--6eee8dd8-031a-405f-91fa-b3dee314f568", "sighting--f0c5321d-8e3a-4c16-8d56-96d81c75dd81", "sighting--09c804ca-d570-4065-b1c6-ecbe45743880", "sighting--e127aafd-9bbf-4f40-b347-5d35203479f9", "sighting--195133cb-927a-4e7e-b68e-0d22201f3d5a", "sighting--e1198e76-d969-40ec-9f67-a0c8f2f96e4f", "sighting--ca3b5d9c-781f-4aa4-bbe7-70ce35add4f1", "sighting--f5ebe9a0-4ad6-4f39-bb60-32f0ad614cb0", "sighting--d6d184bc-40ca-46c2-b96f-5d34def84db5", "sighting--2255f318-9999-4a0a-bd83-fbe62f916926", "sighting--e17c229f-3a30-4b3b-9bcd-b8cf404cd464", "sighting--5a364c41-bc3a-4f26-9897-f381e1afa0c4", "sighting--7cf63b1c-e831-46fa-b16b-ffc42da7f9d3", "sighting--dae98099-7522-4a9a-abcd-cafa3b92002d", "sighting--23ddbb16-6317-4898-9c3e-692a617b9e68", "sighting--29f77080-9d0d-44d0-a869-96bc20d22d75", "sighting--1f73503c-6adc-4093-b947-48880a7fa42b", "sighting--8dc9b9d2-5ea5-418a-b63c-edd925e974e5", "sighting--9790c49d-7a24-4ec9-9e3b-091ab024c733", "sighting--cbdbb00d-3aea-4e26-a79f-6b9fc6b46291", "sighting--2c8fb037-bb80-4e37-be6f-498856d57960", "sighting--9cac276c-65a3-4630-a257-91047a7a404f", "sighting--8f39f658-d916-4ce9-8dde-165eea075621", "sighting--e68a7108-0c34-4e0f-a92b-39ee92ba950c", "sighting--c31d0134-1de9-4ce5-b7e9-d4b757b87da4", "sighting--8d93325b-197a-4105-b209-c5e34dd1333a", "sighting--032d06db-ac03-45f2-997b-54d0955fd20f", "sighting--bf767078-48d5-400a-b591-272189e20ca3", "sighting--fccdfc94-0cb2-4774-8dc4-efe0e071eeb6", "sighting--80d074b4-5d37-403c-a179-aecd098a94b7", "sighting--e16c60a4-9e6f-4cf6-a350-48165d5675c4", "sighting--95478018-20b5-49db-bdc1-eda05f826ab0", "sighting--7fb55a9e-a53a-4da1-8a7a-7dfa22c8a438", "sighting--f4fab58f-7257-4fd8-a133-3ef89b834655", "sighting--137a2f86-afa2-47cb-ac8e-a86057e707d2", "sighting--ebf5c5af-bcd8-4677-80cb-648d0f14fec3", "sighting--7b571ef9-2c72-4e2c-a4ce-2932d3294b7b", "sighting--cc590b86-fc99-478f-87aa-f2458825544a", "sighting--96e8aa85-deb8-4944-bec1-669bde6a4629", "sighting--bc0a7bf1-7b5d-41d3-af9c-810b3e08d859", "sighting--ba3b88de-3407-4006-9cdc-2fbcae55fab8", "sighting--481c07a3-0497-440e-9b91-650b2f741d45", "sighting--7af87de4-f038-4529-860a-c9b70bfe9ed1", "sighting--b740239f-478e-46c1-a67f-3e1f013c55d5", "sighting--5d1687c8-66bf-4250-a926-f5181ab6d020", "sighting--60af47ab-37d3-4add-b07e-c54b0415d705", "sighting--26cd1846-91b9-49b7-848e-a069930b9daf", "sighting--4d35c2f5-f9bf-44af-aa24-29f5283e6f63", "sighting--0ab9efa2-9d9b-4c37-a736-863c7b07f518", "sighting--7e2f63b2-6788-48eb-868d-c8b8b803b20f", "sighting--21054bce-74e8-46e2-a6d6-be2bda8a1965", "sighting--900d00e8-98cf-4928-926e-b59b0ed9ff11", "sighting--51afca17-62f3-416c-b4c9-63c888e780e7", "sighting--422d94c0-c32e-4251-b1fb-3426aef03a71", "sighting--2a861244-3633-4b29-8cbd-742bf8ebea52", "sighting--f4843422-02b3-40ba-912f-f05ea0bc7bd2", "sighting--2b6a06e0-240c-4fa5-b8a1-c792b6618e48", "sighting--c38b36ce-7af4-4e34-a931-aadab34c7a1a", "sighting--1c1b1631-aa2a-4a22-b25c-36841ff6a583", "sighting--c3cb9221-2984-4c5d-bee1-ddf238abab74", "sighting--2600f8b0-ee2a-4916-ac16-9d8db14536ad", "sighting--56407788-0de5-4ed0-9997-d0a71a595e5a", "sighting--a5735073-5f55-4440-84a8-324b3f053b72", "sighting--1e436c95-1454-4799-8ad2-d9d3b06b9d4c", "sighting--5ab1bbf1-dbe2-4f7d-9b9f-5cc67b502594", "sighting--24077c18-40ce-410e-a6cc-633a735a4339", "sighting--503897a3-0898-4c3b-a874-1ca317b73eff", "sighting--f7c44051-a40c-4074-bd6d-0d8d36aca553", "sighting--cb2b9d3e-aab4-4534-be88-b1922b292288", "sighting--0cbebf52-e3a5-4dcc-b19f-a478f88095f1", "sighting--d9d4aa5b-cd9c-4680-99b6-df388c28152e", "sighting--eb1fd2c3-81b3-4831-b23d-a79f370a6c35", "sighting--0d2168a0-7523-4598-8aa6-1c1012cf80cb", "sighting--e416fea7-a3ed-4bde-944d-39fb55eea4e9", "sighting--a2a8f468-a1c7-46bd-aba9-33020eea5a7b", "sighting--73d45050-a2ae-4da3-a93b-339af571c067", "sighting--3aa0ef23-6c6e-46db-8b5f-c9906a28c141", "sighting--4a5b148a-ecc6-4515-9a60-49f983513c98", "sighting--187fe3aa-ba88-48f7-8e8f-b705ed6f3aa5", "sighting--62b1650e-9190-4529-9c4a-fbc069c9c79f", "sighting--287f6470-3fcf-4116-9c4e-e54e6c600b05", "sighting--e1dcdc9c-035f-4dc9-83f8-5c9a4b45b0d2", "sighting--c0440105-8c63-40e0-8533-71bd357e63c2", "sighting--c078959f-dd8d-4532-99be-76f4199f8b2e", "sighting--4954b135-c061-4a3b-bac6-b7708b7cc870", "sighting--ce51dc66-aaf8-4865-982a-486e0b358884", "sighting--bd86cf61-6f12-43c0-ad94-1c375fe70c6b", "sighting--6fad73d6-1012-4ed1-b872-63a99a2fe79b", "sighting--a829018b-8d0d-469a-a0c7-c4cc1bdc2512", "sighting--70d84e61-4e00-4a23-84cf-79d10ff3f787", "sighting--eb869afd-6697-404e-835f-c8722622525e", "sighting--682bf245-9daf-497f-a735-9d201d9cf16b", "sighting--08355287-7961-4214-8282-c69b697ec45b", "sighting--ef081e45-af1f-4878-999c-8fe9674ae796", "sighting--f472a421-ae6f-4de0-9c2a-9d0b44632d50", "sighting--5fd6b33a-5034-4267-bf57-5d28c4f701f0", "sighting--97f84bf5-e06e-4657-8586-d1c86f8aabbd", "sighting--dd9adced-2a66-4b66-a9ec-f984929dc409", "sighting--b5a51de3-26f5-4706-963d-dd20ed33f66b", "sighting--3e56e54e-f28c-4cf9-8e2d-839b41967fcd", "sighting--2c1df16c-9087-4995-9048-8789279accb1", "sighting--1715dab6-6a90-495a-8a14-464e1a2cd2ae", "sighting--4a436b33-9e90-43f0-8bed-35be892e654b", "sighting--de07e790-c8c4-4396-9086-5588b635e712", "sighting--53e11bbf-5de9-4bea-a305-bec744ab2a62", "sighting--2d41b567-83d5-41e7-bf77-5ad22c5971d5", "sighting--8ab7f41c-d8e3-4eb7-9be9-4d0df0819e24", "sighting--0f31cf4d-f4cd-49bc-a0e2-82668cb1dec7", "sighting--18c755f5-18fa-4a90-9b57-39a8945bea17", "sighting--faf8f13b-a37f-4ced-8182-80ff85c66a76", "sighting--a33f4d67-76a1-45d8-8e6d-be16d4c4e31d", "sighting--91a6ea7f-adda-42d9-b734-82cf41c4cf95", "sighting--3a669be3-64d9-4bff-85d4-e28c6abfb0ff", "sighting--2a2aa6c1-74ed-4125-a9b5-1bfc11c1418d", "sighting--4e09f520-cbcc-4fc5-9135-5688a0c4d959", "sighting--eb262e94-20f7-4e15-af2a-c3bfa0a0957d", "sighting--6bd24aa8-4f84-47d1-8ac5-1f9da684a180", "sighting--4a815624-16b9-4f1c-9cbc-cd336d98fd26", "sighting--568338e5-9f4f-410e-a94d-6f36061b58c5", "sighting--996ea837-e349-4dcf-9b86-48c40ae18e9d", "sighting--28ecf26f-2d1b-4028-95de-10f05f817092", "sighting--7175bf32-542d-467f-9fe3-f25d70138f03", "sighting--41727248-4d3c-449d-97a5-ff08d17c511b", "sighting--ec49ebe4-cdf3-441c-8201-89f27b17ddba", "sighting--9d468d71-0ec8-4da2-95e0-ed37f307443b", "sighting--2dd79ca2-896d-497d-8315-9220780dbb2d", "sighting--bf954610-3952-4f2a-a2b6-9bb590684825", "sighting--cd3bcd94-5f94-44bc-b138-f433ccc85a89", "sighting--04acd928-ef84-4d9c-a5ad-55ce2390976d", "sighting--05847ce2-0248-4557-8575-8f421f73ee42", "sighting--2c84acd3-f499-4b95-81ab-3184aacc5b56", "sighting--8bdca2ce-0122-42e6-bc65-1c17df8088bb", "sighting--cc55910b-592c-4c8d-b336-0919319fd620", "sighting--0c66a680-f563-4042-9cc7-08be1ca2cb56", "sighting--009640e2-ba98-4e19-b78b-ad9687cd7d08", "sighting--7b414b86-6336-479e-92d7-2ba6c3f5c37a", "sighting--b1a0a15e-dd78-44aa-92ee-4e49f12e666a", "sighting--1d815b78-37dc-478e-80cf-4ff2b017257f", "sighting--555f8fd2-28fb-441d-b3ae-8e0abc1ce93f", "sighting--61388fa0-bf48-408e-bc8f-119818e2cded", "sighting--0846ba27-bdfa-4ed7-ae9f-862dca15cc9f", "sighting--303fb7ce-bdae-49a3-b41e-32e5906f95df", "sighting--8dfa5415-2f3f-4b1e-94dd-9bb720a323c0", "sighting--83df79bd-3837-4a74-af11-434f84143a15", "sighting--db4e1123-e19c-4c54-b46e-f61749af372d", "sighting--5f001e16-c408-4d76-aba2-3c2d88cd3ba2", "sighting--1bbd54c6-d8f8-40e8-88e6-82c33f595361", "sighting--09674bdd-6634-4025-ad20-863939353e24", "sighting--52dcd7e7-261e-47a4-b2e8-c68ef6602a9d", "sighting--8b9468a8-bf11-4064-b099-5960268d8ec1", "sighting--2d985c45-2b16-4e14-8cd2-c0ff773638f8", "sighting--a48ff86d-10d5-418c-aece-00eda0a7450d", "sighting--721ecdef-cf6f-491b-a5bb-7fd48b301bb5", "sighting--d244f333-720e-476c-8a8f-044e529ffd58", "sighting--f3b40b11-47de-460b-ac69-13c33d0c4d17", "sighting--8ba75b55-0a0f-4c7f-b284-b35dccdd5f30", "sighting--95236327-4ab1-452f-b0dd-7b5a6c731523", "sighting--c904b31f-009a-4496-9082-b39a8088c875", "sighting--5f603e12-49a5-425d-9aad-560c17486290", "sighting--be9ad159-4d00-4ada-adee-ce7fbaf135ed", "sighting--00ba95fb-82d1-49c1-8b08-137df59a5429", "sighting--bc4e768b-a5b3-4677-b035-4c2e4bb571e2", "sighting--8a80abb7-a088-49d8-9ebe-0b77b4e81bcc", "sighting--5186d4d7-91cc-472a-8880-6d3c361e50d7", "sighting--c3458f35-18da-4c24-a083-20cbd7c95f75", "sighting--34c87378-2aaa-4688-9635-88087a3e0e09", "sighting--fc548171-6a16-4fc8-befa-4a18f92efdbe", "sighting--e72741a7-e970-497d-8b81-21d561b39f5f", "sighting--8da25cea-b969-40ec-8c2b-4ba0bea6c4cf", "sighting--74363963-3021-4a89-85ea-3cad1c2ca14e", "sighting--0c8e2d6a-b314-4aeb-9147-d78f8adfe2f2", "sighting--0d6d0aa0-64a2-4b06-9146-276038f03c00", "sighting--51ecafad-4b3a-4c44-a983-cbd59efdf744", "sighting--7783518d-1800-4551-b77f-f504da56edc7", "sighting--2443fdf0-1a49-46ce-8f36-f710b93333ae", "sighting--72eb2a9a-b74a-4c02-ab1b-4b1cd4357e64", "sighting--665cfe49-8136-4c5a-924c-722e00468be3", "sighting--8404789b-9f35-4b4d-ab1a-5c4cc022d3cc", "sighting--77b4f208-9b1b-4dba-b997-bb2f4bdcd965", "sighting--9f7f2a1d-67e8-47b6-8df2-fef398e5acaa", "sighting--0f3df089-056d-4d6b-b3f6-a1e5bc7602fd", "sighting--72eee79a-5ad2-44d7-a387-1a8408628c28", "sighting--79c5f416-3308-44c6-9944-865bf09b171a", "sighting--71ba35cb-1d4c-4856-a84c-4b6521ac51d6", "sighting--90531e8f-6382-4c20-bdc3-74378d01eb50", "sighting--597ba55d-72df-4c7c-9fee-082af6949125", "sighting--ba603063-8ad9-43ce-8bab-b575a84ad3c8", "sighting--f22edb2a-64e6-4a69-aaed-dbcfadcf6220", "sighting--a1b85d8a-c076-4306-ba08-c211715430b9", "sighting--de3c1b87-7440-4a95-bda0-1e448ea2c053", "sighting--1f5af9f7-b502-41f1-89fc-83da8d64c094", "sighting--42c22592-4cf9-4dde-96a7-afe199735db4", "sighting--6f16b366-164a-4343-afc9-09387c649d26", "sighting--77f0c13e-2f39-40ad-b080-b1b835048946", "sighting--bc940b1c-7e8a-4783-9cea-104aea6c24c2", "sighting--2298bf36-6a97-4955-9d02-781e2bbf9558", "sighting--d74ba3fb-7953-47ef-8ae1-7ff4ad517c63", "sighting--af098451-0332-4bad-b1db-fe97079c99ad", "sighting--255eb9ef-14ce-4dc5-8607-99861363ec2a", "sighting--b2416424-b684-45bd-b796-a819ff2ff0ff", "sighting--f897b89e-8b71-4e16-b3c7-debe2fda2e9b", "sighting--9d1889b0-19f8-4b1b-8855-ea75ae18f0fc", "sighting--0dd82bf7-c4c7-4239-a1eb-640507c76e78", "sighting--8a4e0fb7-2f0d-434c-a064-7fd38f0ccb46", "sighting--dc51d13b-a923-498c-b005-efcd4840aad3", "sighting--19980fe1-422b-425e-96a7-81e8451b9860", "sighting--542edb3e-c87f-450d-b29e-6a43dfe9b7dd", "sighting--62a94376-2131-40c5-b383-d7e1f827b51c", "sighting--d1c78172-a884-4486-a9db-7fe0edb65357", "sighting--ddb44f61-bc60-49f6-b590-69887068f8be", "sighting--0c40667f-8925-4f8d-a58d-183ae95121f0", "sighting--b27a17db-8107-4128-bebe-4439cbfb45b8", "sighting--20a54978-035c-4562-8d67-1f1dfb3085c0", "sighting--20874d04-062b-402b-b607-c315f2ae488d", "sighting--5338f4b5-eacc-47df-a67c-13d31208ae4c", "sighting--86e08ce0-01b7-45ee-b535-9f99d54a8679", "sighting--71f32ede-8fd3-412a-9221-afedec7ad2f6", "sighting--db937ec5-09d9-4d6c-bf8c-2d415067a972", "sighting--a4676cb8-e42b-4713-80fb-a9ddd614d8c8", "sighting--64d3dc1c-d9ce-4be4-9847-b0b304493074", "sighting--f04bbd91-5aff-4ba3-83c7-ec35a09f1844", "sighting--ee19a6f8-639c-4dc8-b111-2edb8f95c968", "sighting--f606cf7a-e9fb-44f7-8d9c-1c42023513f6", "sighting--48d21a1e-45e2-4382-9254-38f6ebd2590c", "sighting--88e603c9-5360-4eb2-8ab9-1504ea185902", "sighting--93da0b7c-71cf-4524-ab23-f72488dd849c", "sighting--fbfcb942-4e1c-495f-873c-78b0f7d92643", "sighting--c25a84b6-2c7e-41d1-a758-847075738a5c", "sighting--e4138bc5-b1a6-4f71-8aea-0c99e39d0d62", "sighting--21d4a46b-716d-40dd-804b-0536b73e0990", "sighting--be50a90b-230c-4117-b0df-acdf1835c4ab", "sighting--cc75159d-c30b-4124-904a-85243f930942", "sighting--d3137b73-a772-43d5-98c3-fbe2aa408efd", "sighting--8aa4d28d-832d-48d1-b379-55886fa7272b", "sighting--7e605f79-9f54-44c2-8b0d-5c61f756105a", "sighting--160279aa-12f6-4104-8e6d-4a35ca20c002", "sighting--0d4dbdaf-5451-45aa-9e68-d86ee097ddde", "sighting--4bac701c-4e6c-45ed-b7ab-3b9504408b4d", "sighting--aba8eabd-5708-40a2-a500-dbbcc272d3bb", "sighting--da0770d8-8fcc-486d-b268-1aeca90ed613", "sighting--53981bb0-75bf-4f2b-ad37-79ecbc285df5", "sighting--2e368ab8-2376-484e-b7d8-c554e45f7075", "sighting--c36d7250-868f-45ac-b900-03270b5652ca", "sighting--c8448c9d-88f3-4b23-86e1-527767b27280", "sighting--dc42e56e-6e37-41ea-aaab-84f6f3b41858", "sighting--1e566b0a-9aab-4acc-8ec6-36e810897b3a", "sighting--20cc9faa-0c05-4f64-b2b5-50e2c241fd09", "sighting--7a10e717-53a1-4872-a784-7e64a615dfe0", "sighting--a23af192-151b-4ebe-a71d-a5d57c40b499", "sighting--e7246908-2560-4d02-bd86-e4fb84353d7c", "sighting--a1a12a22-c171-466a-80ed-688c89d7a0de", "sighting--75fbb245-adc2-4ba8-b9f6-3fd1ebfdbbf1", "sighting--c3d8597f-0a5c-43b3-abca-9a0b3a7ecbe0", "sighting--5af9ccaa-1795-41ac-85b5-eb4920c02b12", "sighting--5af63152-fe5c-4969-b79f-7f3782a970da", "sighting--6a7a2cc1-2806-48ff-a0e0-f7b50397d991", "sighting--b56e3e86-fb0b-44c5-9014-de670bdbac43", "sighting--a556de2b-6e1c-41be-bd66-d14594cf372c", "sighting--8551a18a-8d0e-4123-91b0-57ad5cba8283", "sighting--34f2cb23-1e6c-427c-81fc-826a06ff13ef", "sighting--590d2f3a-60ff-4941-8d8f-e02bb04277a0", "sighting--9fbed1fd-6e4c-49ce-8e61-f26125f629de", "sighting--7f5acca0-a085-45bd-9bcd-62c5b03d6acf", "sighting--7dc833d5-0a60-4492-818e-b88548a49bb3", "sighting--719c9c00-8c8e-4ee9-a39a-15bbf410f7fa", "sighting--29df00f3-2f7b-4e65-849e-23bffb14df95", "sighting--dc6f1f6d-86a4-4353-a345-e2bbfeed4865", "sighting--ec5e3951-7702-4b02-9f78-18a3d2d5762c", "sighting--34d6893c-b493-4c46-82ba-bed778875fd6", "sighting--d4944d7d-d577-403d-a4a2-8e6203e12323", "sighting--5856a199-db2a-4264-a332-5c6449a8c796", "sighting--f7dd98e5-28a8-4e57-8cc9-00b58f06d30a", "sighting--c09af32b-3ac7-415b-b73b-d6624290fd92", "sighting--673c58af-fb6c-460e-b666-1f9cc77acf71", "sighting--62a0f944-39c7-45eb-a964-70b6c050331b", "sighting--925af148-0269-49a2-9934-2a0eec0c2fb9", "sighting--aee31728-e21b-472a-a78c-aed75018de98", "sighting--cecd8fce-b4f6-476e-a896-5308d04008cf", "sighting--3f89b235-5bb7-41eb-9b1d-12621319072c", "sighting--a35557d8-7814-403a-a377-1319c04f34ca", "sighting--8368f031-5874-4478-8a02-c8598d42ca6b", "sighting--119c92d3-7f35-40f4-a897-98ebe0f46c6c", "sighting--f06ff384-6774-4df2-9d3d-abae2f44d431", "sighting--e7349d84-1542-45f8-8a39-368d5cbc1512", "sighting--090b5577-2e91-4484-ada0-9d423b142718", "sighting--91b7833c-3851-40c6-8c98-036e63005c66", "sighting--ff9920f0-b481-442d-a6fa-830c36b28fac", "sighting--beda0424-b552-49a5-bee9-7de0ad69f61b", "sighting--7df01545-645d-4e85-808f-edf25e01f081", "sighting--0a7435e9-ac44-475e-bc2b-946d55e4b5ed", "sighting--10493c23-1b5a-4d98-85b6-4c4e6e6d87dd", "sighting--ab12564f-9a73-4a59-a182-2b05f85a3d71", "sighting--b7da4c51-d2dd-467d-a916-3e69ca1da553", "sighting--803060c4-4e1a-403b-b82f-cbf9d129daa0", "sighting--e87158da-943b-452d-bf10-02081607ed5c", "sighting--75f85d4e-0deb-4e5c-a591-8749ef5fe961", "sighting--6fa2f919-c5ea-43d7-bdd8-8f812fda2a0e", "sighting--ddac138c-6516-4482-bf0a-b6bf8290a74c", "sighting--2d86a076-c7b4-429b-b72f-dde8376a8b09", "sighting--0409c7ae-f85b-4275-a9b6-002fe3bbbc8d", "sighting--ee81ce04-5374-4c19-958a-df767020cfd1", "sighting--623ae637-0433-454b-ac85-3aceddf62209", "sighting--366b7f53-2279-495b-94b4-76cc19c60aa6", "sighting--2e4abba3-64a7-45e7-95c0-d8c2da8300cb", "sighting--0cec3487-1748-4f13-96b7-2a4be99211bb", "sighting--8c21745f-298d-4036-9707-ca922e164923", "sighting--bbe9e3aa-3b40-419c-94ed-54d5e0f5970d", "sighting--1f042e36-db22-49c5-b129-a4af12f7177f", "sighting--f887c099-a8d5-4e92-aac9-fd62db33ed3a", "sighting--11e95413-e249-45ae-8c2d-b493d3329d4e", "sighting--99b2ddc1-fdcb-4f43-942f-896df5c6ee7b", "sighting--fcbf9025-1381-4a50-a7cf-fecdb1c166a4", "sighting--8080e33c-5c7d-4ce6-be8c-000afebae52b", "sighting--279fe11b-8b6e-4122-9ff4-fffabd15b1ed", "sighting--a46116af-5727-4dbd-8e70-3d25b8fcbcee", "sighting--0e516716-bdae-4477-b172-951c94712afc", "sighting--aa219464-c7cc-48ab-8548-bb98b502c9b8", "sighting--909648b3-3352-4b8f-99a5-9ac80040a71b", "sighting--4d5d6cf6-b2f0-4736-819e-5f15948757d8", "sighting--46fc192b-c8e0-4bb7-8bbe-ee95022e6d9d", "sighting--7b9c5ec2-9128-4526-b1cf-24f8f8d6bc45", "sighting--aa285924-4c66-47be-ba67-36bab70b3f6b", "sighting--57b8ef09-4dbc-4894-b526-8e4065b8b5bc", "sighting--72ebac42-c7d0-4712-9524-9f4a88517c28", "sighting--837c30fa-4703-4988-ab55-ad6a77a35627", "sighting--e8fff18f-1e01-4903-889a-c0080aa31da0", "sighting--954f71b5-a481-443d-881d-d1bc7840dd76", "sighting--34f7e3a3-6f3b-4f56-99ef-47c9f3e967ee", "sighting--3c82b9bf-d6e9-4d2c-9205-e2ef940ef51b", "sighting--30b0a9b4-2f64-4e7e-87d4-d7dd59638984", "sighting--70886b02-95c5-420c-83e6-7f4c9ff356a8", "sighting--6c111cd2-3bac-4c8d-9b31-cb85875cd106", "sighting--ea4355c9-7cd0-42af-bce9-84aea4be0318", "sighting--d78e2c22-f8ca-4922-b69c-20728a2a159f", "sighting--251379f2-d9f8-41bd-9e96-dca4c74a394f", "sighting--e2178b66-1de3-4d7d-9709-39ca53ba9c7f", "sighting--85dbc74d-3e53-4deb-be28-533406e3b422", "sighting--e3cb3423-d8e4-4d82-ad58-99708923a03d", "sighting--51d73381-75ea-4d72-ae9c-77dc8339d36e", "sighting--1c0885c8-77d3-4869-9133-ac1a0d8a407f", "sighting--3460cb9d-e278-41e1-bda5-b47f7bd15eea", "sighting--aa0dd5bc-1182-4f68-a01c-9e84814a2187", "sighting--b9ceddbb-9ffc-49bf-a891-61db445d2f9e", "sighting--4061c283-cece-4395-8267-19ce1f1fbd6e", "sighting--aa76c281-bb38-4898-9ae5-9fce7ebcdd2c", "sighting--c9400f4a-cde1-4d23-93ae-98086fff3e10", "sighting--b8016b2c-05b6-4c2f-bb86-bd273f933586", "sighting--32871ef3-6a0c-463d-9771-c76d4c5b5dac", "sighting--07cf5dab-77a2-4fa2-a205-2254d93638c3", "sighting--4c50b867-876a-46e0-b49c-a1f5ac159226", "sighting--48467654-6a44-46b6-9aba-6e21fc8eb63e", "sighting--b51be16d-315c-45e2-8844-c7d2b739616c", "sighting--87d491d7-d303-475f-b08f-56ee779c80c9", "sighting--259e1533-b259-4bfe-ad4c-841de69113ff", "sighting--b2238eee-8fbd-42d9-b113-53dd0535907e", "sighting--bb9d5de5-2da8-4137-bc11-62efe8b6026c", "sighting--5b618c1a-139c-491b-aeb1-0170cac4f98a", "sighting--b0ac1903-ada5-4bf7-af81-1548c97ab3a9", "sighting--cd58759f-a5a3-4a45-8147-8e4bacacffc3", "sighting--fa40f2f7-2069-4874-8e8e-39a2290f8fc4", "sighting--c081cff0-0ff1-4463-9654-a61d2432c60d", "sighting--9e8f28de-d35a-46b2-be3a-a54fa236772e", "sighting--73529c86-569f-406d-95c8-ef4c65d98f5b", "sighting--6e183a92-82f4-48cf-8ae4-f60af11fb89c", "sighting--41eb1867-11cd-4d96-b9b9-d323f04d4aa9", "sighting--3da60737-41c3-47da-857a-d664811f9d54", "sighting--70e3b1df-cb23-442e-80a5-7cd7421f0227", "sighting--a33aac22-eb4a-4231-bdb9-2dafa0453e48", "sighting--00976d54-5052-41a1-962e-8688ad0a846a", "sighting--ad5a9713-747a-44ca-a87b-4ce3f49c334b", "sighting--b943850d-469a-4d31-a244-f77367e67c16", "sighting--e3896236-b1b4-4a05-a628-722937426109", "sighting--6023ad5d-fa60-4e80-867d-684cb42e06d6", "sighting--b956e0fc-b6f4-47a7-8668-d3ec2de4b7d5", "sighting--b5bf47f1-88ea-434b-a4d8-78c00ea199dd", "sighting--d37396b5-85c5-41f9-ae79-6b64d9cfcef0", "sighting--377e8278-c1cc-468f-982d-b41d3004ee26", "sighting--cbd4e1cb-1cf7-45c7-a52d-e5f435f733c2", "sighting--c815ab5d-99b8-41fb-9256-afb65f4fd478", "sighting--196dafa3-7799-4efc-b5e2-74376e77750c", "sighting--dd3492b0-8ab6-4aaa-a35c-c55b77777bd1", "sighting--0e575ea2-95f2-4d05-86bc-40362eab25ff", "sighting--7b2ba6af-e4ac-4b3a-a9ff-73eb85032892", "sighting--04baed42-e697-460a-9ef8-32143b6db89e", "sighting--23b2437c-5bda-4ec1-b7d6-3d738dee6200", "sighting--a746eb24-1dc2-4692-9171-e0b5a289caba", "sighting--9dd33910-9cee-431c-afff-75c76562f60c", "sighting--3e322a7f-7188-46e3-b0e1-be427c566032", "sighting--9d1f37d7-c710-466f-88ae-3f32d97103e9", "sighting--50208e5e-e164-457f-b48a-3dddb95a3ed8", "sighting--3804b653-b4da-414e-aedb-9cb9f6dacc1a", "sighting--1bda15a7-12a4-4cd2-8a2a-2251e1e43d3a", "sighting--4d9663c5-28e9-4982-b334-48f8cb93b746", "sighting--cf53f622-fa77-4198-9298-cb08244ed057", "sighting--a3ba92fc-469b-4f30-af14-8e09f8b2f38b", "sighting--7a96d8e4-05da-437c-bd00-77c9e630ff2b", "sighting--4265db28-f242-4a82-ad82-7f39e95b57f5", "sighting--1ee3400a-7ed9-47fd-9b21-241a1cd7cf34", "sighting--02c7cff6-4d11-4960-abba-bb1690baeb30", "sighting--888a2df8-194d-4faf-914c-38e9063fb605", "sighting--b776fe6a-c1ee-4eb6-aca4-b790a15d4ed2", "sighting--c6cad0f2-7c98-41ca-8e96-43014929d93f", "sighting--5952c97e-57b9-4524-8ba1-cdeff6aea387", "sighting--25fa8bf2-80db-4956-aad8-51acfef70804", "sighting--eb83eb53-3576-423d-a4ba-77e4c583b39c", "sighting--305d05d3-8f86-4752-b693-42a14b8233c8", "sighting--95fd35e5-2dd2-4f5a-888c-20f4d70961aa", "sighting--114bb7a2-26e7-4a31-a7db-d9ac47d8a6f0", "sighting--ebeffbfb-d81d-4280-95f9-0ff881b8df97", "sighting--71bec767-f312-432d-8b50-751cdb2aafde", "sighting--7ad63a83-2e64-4841-9e47-c556475bd262", "sighting--504afe17-5167-4653-82ea-b2f05550c348", "sighting--37202830-1660-47fc-a35c-db631dab8c16", "sighting--4255bff6-2d3c-45b6-8c35-49dd66e2fc6f", "sighting--d44091d3-f986-4762-8378-42a071fa6d76", "sighting--fc3e7ec1-cf70-43a2-9869-027a80f6f731", "sighting--149e0baa-9587-4e16-9251-7205e1a2a233", "sighting--10451197-0833-48e3-a4a0-6412d7e0295e", "sighting--f9032382-bc34-4596-9dd2-52f68eb52778", "sighting--c707b221-23c7-481c-9449-853907cca9cd", "sighting--2be65122-2537-4f7f-93fe-af7430e1fb1b", "sighting--df8790d0-dd37-45c6-ab86-6ea941818a7f", "sighting--8ec10224-99a3-4bd9-89e2-79af68f5051b", "sighting--ffa91576-72d2-44ee-a4fa-41fe90ec9567", "sighting--38cfce6a-67a4-484a-9dd9-8dd10acddc00", "sighting--ebf19067-61d2-4606-9b67-f41a77a63908", "sighting--5c5ac2e8-35c6-44ca-93ba-e48bc43dd7dd", "sighting--76c40f9f-4f6e-476f-8499-62bd6d90b09f", "sighting--2bc7f94b-c347-46d4-8d27-2f399510bd8c", "sighting--33803f4c-28d1-4725-bfe4-c7fa64694d55", "sighting--dcb63426-1d39-4a4d-99ed-4aa5bf7b06c6", "sighting--68c57260-065e-480d-bb6a-469fcae61a4c", "sighting--df8f456f-984e-41b2-8718-7a42fee1c1c3", "sighting--62a9eb8b-a6b3-4745-9f98-ae50149f508a", "sighting--0e4bafba-b5a0-4690-a863-667e8f879bd1", "sighting--9a77cce9-a7f0-4d85-a3e3-8f302f83375e", "sighting--f88387e1-5b70-49bf-ac5b-68e8e9741c59", "sighting--75286134-ebee-43bf-84ab-4dcdd2b48da1", "sighting--0fcf5eab-cfaf-4f4c-b576-8236dc8016fc", "sighting--988409df-cf2d-44a2-9a0c-2dea47caab27", "sighting--31089786-63c0-43b2-a970-42e389413d48", "sighting--0958b11e-a934-49b4-8401-cbf5b57d6466", "sighting--cdc45572-2e29-4931-92a1-969028f0424f", "sighting--b0fc2717-1200-44f0-8705-da67d8ba1390", "sighting--0a1b17de-c56c-4749-b195-52f2da4eb1cf", "sighting--0dfd3958-a109-4280-83cf-e2eb3ecfac8d", "sighting--01f0166b-6f28-4f97-8a33-8225994594fd", "sighting--5121237c-808d-49bb-84b5-e0492d9c29b5", "sighting--b44ea5ae-8154-4565-96a2-2366d0c02797", "sighting--e93a74df-236f-47e7-b51a-430955f45dc0", "sighting--29d3645f-4197-417f-8ae6-92983bce49f8", "sighting--8e1accee-8be7-4894-99d9-1a4444d0cc9a", "sighting--1c37edf6-21b2-4222-b65d-134048a01b71", "sighting--9836e08f-5893-43ba-9ac5-41b03723cd5f", "sighting--8cb25947-c19b-4bca-829c-9ce514fe632b", "sighting--127d8b12-c20f-46b9-bdd5-b165d2e804e2", "sighting--fef57e9c-b03c-46b2-a62c-2d3c43b5d6f9", "sighting--3ae2646d-c498-4b54-a3cd-cc5e18b7bdff", "sighting--866f1170-b94f-4112-b502-68dd15755d42", "sighting--568a2bd9-23cc-4f15-83b9-5c7ff34b0bc4", "sighting--527a131a-8ce3-4dde-a3f5-ec8301554d66", "sighting--7af65aaa-71fa-4767-9c62-6e2458345a2f", "sighting--b0f32eee-c409-4e2e-9fce-1e72d421f9f4", "sighting--afe75ea6-ef69-43f4-8b6f-6d08df4ed1a0", "sighting--31ab7f2c-10f6-470d-a490-698bc29dce08", "sighting--a25aae4e-13da-4619-bd46-293ccd68f436", "sighting--c2e1887c-8947-401a-900b-876b5c511aa3", "sighting--3cbf3e0e-3f3b-4a1b-9bbd-1fba59a086c7", "sighting--dd5a97ec-73dd-4919-9f19-c40d70bdd84b", "sighting--26cbc17b-54d7-49e3-827a-a93b82b380fc", "sighting--163b9bc4-ce77-4394-a148-733363bc8194", "sighting--b4f0a229-78fe-46ea-b502-d74c5b3f532c", "sighting--2b7d7814-346d-4b4e-b026-7a0f15bcf2e3", "sighting--d21c4aad-e36d-40da-a5f1-2fcfa91141e5", "sighting--898cf672-8fa9-46ab-8457-024c843844f8", "sighting--aad2704f-ba8f-4b70-8f8a-918c5def5380", "sighting--7fe0b9e7-5efc-45f0-b2a1-33f4342d46d9", "sighting--05f9e4af-1aaf-4f89-8d2a-9c59a698e148", "sighting--eccad0f6-9775-48c2-b3bd-a5a57eddcc4b", "sighting--161c9952-685d-4ae5-ba05-c5368c408ae1", "sighting--83638859-2b5c-429f-b4a8-e07cb86a0292", "sighting--365b3c45-4918-4950-9c80-e1bca9713532", "sighting--11d2f25b-cfe6-4a33-91eb-6a8e826ab83b", "sighting--03053905-c71c-4df7-9cb5-ef14dfcce250", "sighting--229524cd-bb0a-45c4-8748-260a1bd13626", "sighting--e0695854-5264-4dbd-8f33-49dd0701eeae", "sighting--725866e8-3ee1-48b9-ae9c-ee02f6e1b3d6", "sighting--a10b82c2-710d-4815-b913-4dc4dec346f1", "sighting--cb8b6eb5-370e-4f08-bd7c-d2cb039932ae", "sighting--bf44119f-8c15-4017-9cbf-9a34983f9def", "sighting--a559d15d-6fc9-4740-a617-d973929b1e3a", "sighting--4becac8c-46f0-49a6-b75a-bb591f81bfb2", "sighting--c9cd662f-d5c2-43aa-9b37-843b186b0016", "sighting--9995444b-7cdc-44b4-b176-cd79362e3205", "sighting--5269c076-75bb-45c7-b639-54fd85203e50", "sighting--b294356a-78b2-4ce3-955e-557e0bc6b4a4", "sighting--ffd2c908-6020-4567-ab5a-1554396fcca6", "sighting--995854ec-37fe-4bb6-88fc-37a73d2e870b", "sighting--36448cc8-7d69-4bb3-adaa-60869415e0f1", "sighting--2958c6e2-b436-47fb-b83c-d66f9c89daa7", "sighting--c80ed853-2103-4457-9305-e23ea5606e5e", "sighting--4317fa2d-a19d-4057-8be1-242f72c0ba5d", "sighting--68f8a620-6b96-49bb-9ff9-c96d21321f1e", "sighting--b24e7b1e-fbef-49dc-af58-3b3d07444347", "sighting--2b8040a2-8766-4b96-8b7b-c9ce1dcdde14", "sighting--7919080c-185c-456e-9ba5-54ebeea9623c", "sighting--7976908d-5fa9-4788-853f-674779ae4e41", "sighting--44be1513-1344-4529-94e0-21a0b5dfaaec", "sighting--4de28e65-730a-40b9-a281-cda20ab7ad7e", "sighting--eca33c00-2927-4a69-a4b9-e083a4bb8af9", "sighting--1fee3f25-147d-46f6-90d6-c32105b041f6", "sighting--30294baa-c6de-4c69-b38a-1649b81576f6", "sighting--7ae0ef01-5594-49d6-8e5f-26cc396be178", "sighting--e6343ca8-2cd1-4259-a90f-871a764d0da5", "sighting--99fcd306-870a-4f7c-a416-842f37b7f5e5", "sighting--ad357bf0-9863-4ed2-8b9d-9824552e5c83", "sighting--e1429f41-dfa3-4cd7-95e2-6441f405279c", "sighting--23f29dce-6755-413f-8c3e-e9d35b1ab8ac", "sighting--3aed464d-7c1e-48cf-89d0-fbec3cd7e87f", "sighting--e4b5961c-37fe-4453-b4cd-0b175f4cd192", "sighting--a0778911-24e6-4a92-98ce-2a950e19291d", "sighting--6626a4a5-3108-4722-bdb6-41c056505302", "sighting--8c3d9026-9787-45a6-ac58-987f337d9e50", "sighting--366e3a5e-8425-45a9-8f76-e0fa3fa8791e", "sighting--3e0561aa-03f2-45fd-b9bd-8858c559c5fb", "sighting--3ffe76f6-04f3-465f-bbc4-2db9cf2b3ef3", "sighting--e3b640b2-4d9a-4c20-baf2-fe8b3e09d2ca", "sighting--2e47b052-750c-43dd-a053-91db31039aff", "sighting--98e7f0e0-9f23-4957-a09c-75ea61225d81", "sighting--1dcaf95a-22ac-4c11-8288-3f791ec89b9f", "sighting--4dced993-dd02-47d9-9751-834c4b487554", "sighting--b265afc2-5538-4b69-9f01-7a2a750f0a55", "sighting--d0edfa48-0d7f-41eb-a6cd-3ab359200858", "sighting--76962124-79f3-4d1d-a7c5-dba5bc970443", "sighting--46729e8b-ca6d-4dae-89cb-8a8dbb10f03f", "sighting--548b3b7c-8d97-49a0-811a-d1165241b2df", "sighting--3ca38a95-f381-44a5-b469-50e5368db241", "sighting--2d172a8a-2fd3-46ff-8490-cdce74158661", "sighting--d32b2c00-c5c3-4b56-a70a-1ae09c85a717", "sighting--696ffe75-462c-45f6-ac5f-cd2153335dee", "sighting--990b2f31-fb08-451c-af2e-9ae565b69f58", "sighting--3705bfdf-96d3-4c35-b8e5-c96dc3b791e0", "sighting--d05fe421-da30-46b5-a503-809ad22afbf1", "sighting--ab4f074d-aadf-4ced-9811-d26296e60a85", "sighting--8132a881-7fdf-4314-af94-c6697cdd0574", "sighting--5fd0ce1d-ff55-4180-aa9f-193b65efeb4b", "sighting--9624b2a0-2d32-4985-a59a-0ee9dc100fc3", "sighting--3844a00d-8462-4b82-9cb1-16faf4e4fe63", "sighting--02350046-e0be-40e7-a1b7-a485854d0bee", "sighting--9dc6c044-bad3-4957-9dfc-83d37c2db136", "sighting--1eedd97b-db3b-48ef-9c79-39bb3ac84a07", "sighting--caaa7822-d73a-4f59-ae83-e6a209b0a513", "sighting--c7c06f29-1843-4962-8ee7-7b87b6d2ae1c", "sighting--be7e4e8e-4bb6-4e59-8f12-f756112e5db3", "sighting--5d5246a7-b57e-4137-9d4f-ba7d38f19c2a", "sighting--975f6517-85f1-4668-9de3-f32ec3aed1f1", "sighting--3629ce00-ce63-4473-b680-a66816234b82", "sighting--741f50a5-283c-4150-a3dd-2340b00912a5", "sighting--31626563-65f4-44b6-89f0-8e926797af3b", "sighting--82937ae1-bd70-42b1-9bae-3ab780a10471", "sighting--965f6450-2aa8-4161-b7a6-2c5eebb1531f", "sighting--8fced54f-f580-45a3-84d7-b99e983e72b5", "sighting--64225265-71a4-4f4a-b624-5f4055985fc8", "sighting--e0622d55-4236-4b93-93af-82f52d633da9", "sighting--ab00e171-b437-488e-863e-a0a90edccc40", "sighting--69220dd7-0522-4ad1-84ff-d8b6ce6da559", "sighting--a3460738-6a00-4dab-87a4-c65acaab2c76", "sighting--955ea1eb-afef-4409-9463-f2d5d650a219", "sighting--f1937ab9-56e3-44d3-8b7b-6d4bbe58e7f9", "sighting--0e988435-3724-4c6c-89af-0fef35be52f6", "sighting--c836c519-8bfd-4c03-8686-9809e579086f", "sighting--e6ffa8ff-ca4d-431a-94e3-98885a6d2309", "sighting--9ec681d7-cc41-40e2-af41-8c665c604b47", "sighting--499f39a4-f2d5-4f2e-a404-89e55e778454", "sighting--ab1a2696-e54e-45d5-8ead-d9f44f221c54", "sighting--1881e387-27b2-44ff-b490-b4fdaee50766", "sighting--be2c26f1-04dc-4046-befa-a103062f3837", "sighting--72bdae9b-44fd-4b6d-86af-40f26ccac9f9", "sighting--3b67fea5-701e-4dbc-b499-57d3e8760209", "sighting--5d5c8c73-4c1e-4fc4-8cea-2efb95b3999a", "sighting--20c87dd8-4a72-4fee-8111-1d82c0c85f12", "sighting--3d53ae86-bca7-4902-b57f-d28604d08156", "sighting--b8d94c38-b541-40e3-8479-f41371d99cda", "sighting--ea0749e7-1326-448d-b931-ef171e49b441", "sighting--e2572dae-752d-4ecb-9a49-7252d6037ec5", "sighting--806a3635-88c9-4b53-8cc9-891a14ee6013", "sighting--ecc09af8-de4d-43c6-9398-82c91718fde8", "sighting--3ce1e60a-8e2d-4ec1-a022-7b49d2112d8c", "sighting--51c79c4d-eaf7-47a6-ae8f-3359e6e46949", "sighting--1f340e07-5060-49c1-b5f7-6373c4240440", "sighting--d95d0c67-83e6-4991-a870-5854b19b3b44", "sighting--fac7e29c-76e0-43a2-80fe-127de3dd02f9", "sighting--c167b016-14b7-4b30-8175-39033569e422", "sighting--df2d5f03-5c9e-4ef0-9347-827f7d6634be", "sighting--b789029f-4799-4e3a-bf27-8ea006d394d5", "sighting--9dfa0123-8b8c-4ec6-90c3-aa0ac0de4c18", "sighting--e998fe5d-ef19-48c1-a858-f2a60a245c19", "sighting--4814bb0b-5870-4ef2-b379-42d8e3384b3b", "sighting--b317d994-36c2-4f64-9ed0-54e449051bc4", "sighting--796f664f-ee82-4725-9cf6-3e4467d10b0c", "sighting--102fcbe8-564c-44d4-b848-5f3d61c4c6a2", "sighting--7a3cfafd-abc4-42cf-b83f-b559498a1804", "sighting--48706aea-8f49-4d13-8097-9d405c95a909", "sighting--741fecc6-5e7e-4bf3-bcaf-58d189c888d8", "sighting--2e12c213-0852-4c06-a614-afb36cb7d4cb", "sighting--cc1ff108-895f-4382-b6a2-f03ba04afdbd", "sighting--271f55bb-0e79-4e67-8b62-1ab588d71913", "sighting--1c9f082f-79a4-4d8e-8720-4a36c17e835b", "sighting--800abe07-b1bb-4cd8-b984-68262eba7e34", "sighting--de9fd427-0025-4693-857c-4eef9808fdb3", "sighting--076e5fc1-3dc3-450a-af21-575e5ca4f8c8", "sighting--4b8dcf37-1d4d-4198-a1c6-1d3e4f03460d", "sighting--3b1e36ea-9c34-4208-9679-7465941cb14b", "sighting--676a6e5b-0a90-42fb-989f-c03cfafd1396", "sighting--ab7c9002-6702-43fa-8671-d098b4b02ebc", "sighting--5aea7212-88b7-4a5c-be7d-40672fd5b224", "sighting--c9f31123-c498-40df-b014-20c88a173d39", "sighting--45fa3767-b919-43ef-a6c9-156605337401", "sighting--2ea5cd30-0b12-46cb-9618-e6f2b86f8627", "sighting--f066b63a-6000-4cbd-88a4-d7f310c5166c", "sighting--6b9e8de7-5e9f-4d0c-aa48-c9db8c442663", "sighting--13bd6a67-d6c6-4e3e-a78d-5978085e148c", "sighting--173422f4-2099-45c0-a831-a841cfe692b6", "sighting--3e5c3633-52bc-41e2-9805-3b7ad6427f89", "sighting--4b1962eb-1b7f-4743-b634-06e66fc0bd4b", "sighting--9fd70d0b-35a4-4908-984a-2d88b2b47617", "sighting--16a2ab06-7504-4114-89dd-b246608140c9", "sighting--02c1055d-eac6-49b8-9b92-92ea83c6aa0e", "sighting--b835e848-15b0-480c-bafb-5417961168b9", "sighting--db558765-fe6c-4381-b659-899a1d644300", "sighting--f92b738b-bab9-4985-8397-2ebf671af8bd", "sighting--643a31d8-fcc5-4f62-8aa6-453381ab8dbd", "sighting--8bfc52e6-292d-4300-a758-b00ba470f1c2", "sighting--ce301abc-e299-4198-b796-381015b740ee", "sighting--6e71b8ce-b99a-48a7-b8fc-802d137ebaf9", "sighting--479d3f68-8a43-413f-8ccd-4b12e7965b56", "sighting--71c14680-a879-4025-8ab6-d3b7201b9511", "sighting--4d3ed6bd-d60a-44e3-b4ed-b996ab2a23f2", "sighting--7566eecd-5439-4568-a90b-b2227af2a193", "sighting--7e58ea35-def8-4632-a87c-d8149d96484d", "sighting--d7e75ec5-0dbd-4d14-9d4b-30d457e9959f", "sighting--e56eca18-985d-4f4a-8f64-34aa78694048", "sighting--17769baf-e1f5-4a6e-9d68-28bafdaf7660", "sighting--991c8d70-cfb1-4a3f-9593-29d6b4b89722", "sighting--a92c2cd1-84d8-4eab-b58b-4f160cfea4bf", "sighting--8fbcfcba-5ffd-499c-b11c-fc96ef2c8a1c", "sighting--8c1a6135-78e2-4705-b554-9f91be612bf1", "sighting--473f195b-1c3e-492a-8b49-fddf46af9fbf", "sighting--db5628f9-cf12-4cab-892e-2cc05aaf9d73", "sighting--318d788c-9bd0-4e0d-b9e1-cb1bc3b346e8", "sighting--039d2c2c-5b9d-43d3-b166-199a8536d7f3", "sighting--603a797e-3394-493d-a034-a2d5ec87b775", "sighting--8cf5c4a1-34db-4a76-a255-8444f5195c71", "sighting--0698492e-dfe6-4931-a42b-178ff8be040d", "sighting--cd855f26-b09b-4069-a548-f67b6040ffa9", "sighting--6dc33d6b-64bd-4e11-923e-08757d9f1e84", "sighting--fe619638-5e65-4e69-83d4-c2939624ad5f", "sighting--b13b35ba-0fa1-4784-a17a-28bc95e6d176", "sighting--6939dbb1-d292-465e-8711-5a0ac08c6408", "sighting--4fbc626a-2158-49a2-9741-2a8fc4b9aa75", "sighting--a40298ff-85e7-4305-af98-705978b9042c", "sighting--de74e2ca-79a8-4fac-9fbd-fe3d3abfb45c", "sighting--c38bc506-0c53-4b0c-9206-4781be1a0994", "sighting--22f4df34-3f75-48d4-817d-623590271b06", "sighting--4fc85af4-28db-4739-82f0-3851cbf9df92", "sighting--73c8065c-b3bd-48df-a2da-edd9a3f39ce1", "sighting--25730bb0-ca6b-46bc-8669-6573da2c74f5", "sighting--547603a2-7ea6-4621-b990-57f7b1ef0f92", "sighting--4a5a3e12-ab01-4d36-a4b3-f06366a8a583", "sighting--d0b92d91-b969-4157-9455-5be177363c64", "sighting--129a8164-8f94-4337-8566-6aa863056d02", "sighting--445bb864-48ae-40c0-a496-4770d9372e81", "sighting--6d7b1b85-50c5-4528-891a-12ab0c2f1345", "sighting--cc2a93a0-0505-4554-aabe-b856d465bc23", "sighting--339eafb6-798c-4b03-8c0b-9b6f6e1bf8f3", "sighting--c0196a1e-6e6a-4688-95b8-426582fe0abf", "sighting--e8f49b2c-0ada-418e-889b-98476fe5b9e2", "sighting--0830c079-8261-4624-8920-995611dfbadb", "sighting--01c2eefc-6c15-4c92-8c88-99465eb36017", "sighting--170c4161-1766-434e-b637-5542a2836e6d", "sighting--264fbb52-4d97-4664-b5b8-9d457f462e63", "sighting--e5c35fb8-527f-45e5-b8e4-22872bbbc656", "sighting--128e3b9a-a1e5-4ae0-9d77-3ba253b0cfbe", "sighting--a2bc4b40-1314-4218-b0da-a627856daa03", "sighting--b86b9815-3dc9-46e5-aa4c-a654f244169b", "sighting--8514dd2d-fb88-46e4-aea0-c796a0aa2c9d", "sighting--27d4dc8b-ead2-4ab0-a7bd-faa092ae07cc", "sighting--c7c48878-9342-4fb0-b355-5c04dbc1c36b", "sighting--765dad3b-157b-4b7f-ac43-381e2c7890b7", "sighting--6194d9ed-fef6-4862-a3aa-f69748f913c8", "sighting--5455109d-1988-47f0-a8b1-aa663f19d4f2", "sighting--a593ca70-f2af-4e82-8ba8-0c083e3e3c1e", "sighting--2c8518ee-c16d-462b-9f2b-3e43b8872887", "sighting--d51ac354-302b-4f64-8fd7-9e9655f1668d", "sighting--2575955f-fcff-48e7-a5b8-a534c4c221fc", "sighting--6e159825-cf2f-4389-ac52-a361a1444e0b", "sighting--a45a48ef-7c1e-469f-b26f-aaf25f54f655", "sighting--9dffafaf-fdc8-4f26-894c-5602e47167c5", "sighting--3008b327-e98d-4baf-9352-28ae9cfd303f", "sighting--1e28a4b2-ddc2-4c30-bd3a-0d83eacf4d1b", "sighting--ea4bf875-0b76-42a7-8c3d-959436c91550", "sighting--93766328-86d4-49a8-b547-b96972d9ec4d", "sighting--acce0f99-8e08-44d8-bbf1-21d016abbedc", "sighting--a687c098-20e7-40bc-83f4-3e829ce296eb", "sighting--800bde65-3d19-4b04-9319-e352cfac8e77", "sighting--431007e0-c643-478a-bbec-bda3f6b1ac10", "sighting--859fd696-a960-48f4-8afa-b527f07e171b", "sighting--5e4e09ed-75ce-41c1-a9cb-5aee74dabaa5", "sighting--18eac5bc-eae1-484a-b965-1749986cb285", "sighting--bffe1bcf-d0c7-4014-a9f5-ff6e22111360", "sighting--33187a7d-9291-44b0-844a-4a0eef256718", "sighting--b5a515ed-4d7a-41e5-b2bc-2cfe41794876", "sighting--177b71d7-d0b0-44b3-bd93-e70f8ae007ff", "sighting--1caad128-4191-451e-a950-ce221678eda6", "sighting--ef7be849-71a0-4073-9cc8-f74defacce48", "sighting--73aa791c-f9c8-4825-ad82-62be22485956", "sighting--b8cb9317-53d1-47a8-b326-9b331d9fdcc2", "sighting--a3a6e784-aa7c-4996-96a2-5cf7a8dab23a", "sighting--03df5953-0167-4209-89d8-6a9ea9da3555", "sighting--efb7107a-461b-48a9-9d08-6bb1ac47477c", "sighting--1ff607c6-1ec2-4bbe-b4a2-af9911067897", "sighting--8d76c529-d3d8-44dc-b227-92c8b3529159", "sighting--60f85127-67b3-4646-a1b9-dd283a6d8a9f", "sighting--940b2017-df0e-4b43-a83b-ff59b8634aeb", "sighting--9f95a25c-bb44-4a1c-8c9c-4da2aa813a12", "sighting--864aa658-1950-4f18-8af3-5dfeb6fe4253", "sighting--4ec7da82-ec8c-4baf-9abf-84345d9b79f5", "sighting--face8af2-1296-4550-a2b4-560792126c05", "sighting--e61f91dd-b52b-4f0c-9e38-7360dbf9cd8f", "sighting--6224ac55-577c-4f63-8f56-367f5654f4bc", "sighting--214dd221-8e88-4e3f-a508-aec08396715e", "sighting--e1971b43-2e7a-49cd-9799-14f54f9103ec", "sighting--e874258c-6b04-4517-8b6d-1c39305165e0", "sighting--55c6ee28-9069-43f5-8323-6c24471cf5ac", "sighting--8bc5d1a7-23e4-4fd4-b439-bb921af9c693", "sighting--193710d6-a482-4004-ac46-042f522b46e9", "sighting--a59288d4-de5d-4648-a0ec-8ad42ebbca95", "sighting--b6a74697-bc44-4d83-9253-a3638f6e8dd5", "sighting--7df11871-adaf-411a-ac3b-af94cecaf552", "sighting--51ce7e32-cbe4-476d-a994-4b11c78ab73c", "sighting--1e3a37cf-0b83-4a36-9603-39ec6d73a4d8", "sighting--d50fddcf-b7a6-4504-b2ef-1369f2f2e288", "sighting--1326cf6a-9e83-4d85-a038-118404b24fc5", "sighting--028987e9-b883-4856-99a4-e8b48f81b650", "sighting--e1136857-b5fa-4013-9ddb-44da6bee6b11", "sighting--d6ca7edf-b1e5-4c19-8a7c-b694e5e211a9", "sighting--95a69442-024d-4f18-855a-76df5856ac82", "sighting--6fdf8899-2ec1-493f-85dd-29dd1003b6ec", "sighting--bac24250-5bd6-4f8d-b0f2-ff8d62cd6479", "sighting--5011c278-fab9-4b5b-8636-b7b8c157ef88", "sighting--dc2acc87-1fbb-4a64-b245-3e7d94ba0266", "sighting--f7867807-4e9d-4451-9f64-1c213d138717", "sighting--1f397123-47aa-48e3-b20e-a4866dfc9538", "sighting--06d98be4-a72c-4936-8f94-f7f86cd2624f", "sighting--70e39895-cf93-4b3c-a912-6afe364d11ea", "sighting--afb49f21-4d1b-449a-a399-b8f707ff67df", "sighting--a9435798-0dd3-4543-89de-b6ba2cce9408", "sighting--e63c1ff2-5c63-4558-95d4-550b3dec8f41", "sighting--483ceaef-6db3-424f-95f7-c90ffb8c0321", "sighting--3ac21880-2015-4161-af62-2006d9328f06", "sighting--d967d376-2cec-49c8-b223-710a83dbd233", "sighting--062f5843-b1b0-45b6-8778-0bacac8b9837", "sighting--4302b20c-4729-429a-b27b-22402d1e4b27", "sighting--1965827a-5e31-4403-be8e-52ea3a3e1396", "sighting--a2355fe2-82f6-4ba4-8578-f5d0fcd91143", "sighting--05c339fd-2d6a-4798-82ad-014a17cb9b0e", "sighting--a410d40a-cb5b-417d-b999-b6b15fa4e144", "sighting--e86b4f94-e548-47f5-a01d-f053c94125d4", "sighting--1f04df28-0c59-445c-a6cb-77634da6144d", "sighting--b8d260a0-8ed2-4dc3-be3f-f0aee9815425", "sighting--93c6493b-810a-4ca1-876f-3baf4b1eaeed", "sighting--b57a2481-f1d0-44d7-8c57-c6024a775ca3", "sighting--d09f9d6d-2e2b-4d57-922d-5f19cc55f48f", "sighting--e71034ec-20ee-4a9a-9acf-0dec970e6dbf", "sighting--f9a40036-012d-456e-b913-6ccb814cc4be", "sighting--bd3afc7c-0b24-4479-a4e6-0a9410048aef", "sighting--21092acc-6827-4470-8cf1-8d3aac47e2d2", "sighting--91c94e14-20d5-49fe-8ebf-3bb297703ac3", "sighting--c2116e22-34f1-4119-a0fd-08167864e2a2", "sighting--124d9d6a-02ae-47f9-8dcd-1b2964098f82", "sighting--5ca9fe08-43ab-47a7-a177-4ae74802f96d", "sighting--3a6cfda9-5999-41e8-98ba-0d851db53c6e", "sighting--405dd458-05b7-457d-9848-635ba8847b0c", "sighting--40a67764-b533-42bf-b8fc-34fd93d0cddc", "sighting--a0cbb4d0-7d1f-4af9-9850-91cb69ec59c5", "sighting--af588812-5613-4ef4-a2f0-fddfba394f1a", "sighting--b1e01721-2792-414f-95e4-43f7b32eae5d", "sighting--eef2a49a-edba-4667-adfe-5bbd260ac0b9", "sighting--a5514290-b11c-4509-930f-8018a91fb835", "sighting--dd97b9b5-94ea-40c8-a26a-6e6cc0ccda73", "sighting--5a06f09b-bfe4-4969-a083-b32ca260fe5b", "sighting--20ed1cf4-4979-49a1-9462-9d75eb4f796f", "sighting--82fb4222-80b5-4aeb-80e5-4e70b9a19931", "sighting--06f58e5a-1901-43f0-86c5-42b17668c038", "sighting--4a0441c7-d210-4012-9c84-c4f23c598ef2", "sighting--da664e3c-d95b-45c5-bc03-b52b1e8f56d4", "sighting--46918225-ea76-4f3c-92e9-a78c0bd445cf", "sighting--fc6534c6-88c2-42d7-b1fd-38b221ff5c47", "sighting--560e2367-9bc7-4a11-a143-5d0746c34e6d", "sighting--9d40c63c-8d63-470c-ab83-dcc48b4c919c", "sighting--51572daf-cc67-4260-80a3-320bc4a43c1e", "sighting--28d1ed92-5c0c-4ade-bd1e-973e9d094e81", "sighting--24403c05-5c5e-4af1-ba0b-f628becce518", "sighting--82e17bec-1269-468c-9334-de6cd0fa7ca9", "sighting--e2e580ae-98e5-47f8-b10d-f7d40e2dc0ee", "sighting--fc78ce76-89ad-4f5f-ae63-296b5418ef45", "sighting--5a3e6a25-d6c3-49f9-93ac-57560ce04769", "sighting--398e0340-e74a-4482-b93c-b5832acd555f", "sighting--b39e6c14-3a07-4aee-909e-cf14d033a4d8", "sighting--ab926014-9481-4c3b-805a-c2b8c3ade39b", "sighting--78dcd53e-c39f-49e6-82e0-b953239976d2", "sighting--0e4c114c-5220-43ae-8b36-6be4996ab3fe", "sighting--c91244a3-e763-4a23-a9df-e250b38fc2af", "sighting--13e8da1c-872b-4293-87e5-e9791fd01d20", "sighting--19108719-1c98-4915-ab8d-69999bc36f99", "sighting--c92558a4-ea22-4433-a308-e6dffb1a2876", "sighting--1a81d70e-31e9-4c80-be71-c0265d22c17c", "sighting--ea86f7b3-8e89-4da3-980d-05b66c4353c2", "sighting--a6b15088-161a-4c3d-aca4-bb7dd776886a", "sighting--676d7de1-9d45-4862-8a9a-4dad539cff73", "sighting--cdd0f025-eba0-4a90-bfc6-066de64a30fc", "sighting--9a800a10-6884-43a5-9761-8a7dda92d645", "sighting--d2f7b007-fcd9-42f4-8d20-6891d6eb0c42", "sighting--d528b1d4-0b40-404d-9dbe-555ca9feec0c", "sighting--ac985ef3-8d25-4444-a980-4ee3ad5783da", "sighting--47bcf8f5-32ed-4a74-a971-3694191c6ed2", "sighting--909d0a13-9360-4092-bb5e-11be445c1b3f", "sighting--492fb616-f2a7-4172-9e89-f8dcf02f3d1d", "sighting--15e00b7e-dabf-41a5-98a2-1103fe232a38", "sighting--6bb6d6d7-82ec-4050-9d0d-8804e61fd15b", "sighting--922cc026-0746-4da5-be93-2652e289698a", "sighting--dfe47ded-c584-4565-949c-f49c5c794683", "sighting--db529861-8660-4f4e-ae1c-2dc280686045", "sighting--941a646a-08c2-4995-9377-5520ad81a34a", "sighting--cb471d83-69c5-40a9-a477-ed2361c40cdf", "sighting--a1526e0f-6107-46f0-9602-688a5a7625f1", "sighting--25f48799-7cf5-4515-9d82-72863a584fbf", "sighting--8e35f697-6a47-4e48-b26e-ff322c68a77b", "sighting--02f3aa32-76a8-4ba5-9365-5a91d754803a", "sighting--3c984f37-cf2a-49b9-b434-6140ba9480ac", "sighting--23bd4a59-8b8a-4ae6-a95c-cb73e8836958", "sighting--cd3746eb-7155-4a4b-81f2-497d21aae555", "sighting--8e30bbc9-3468-446b-917d-f55391e416a6", "sighting--46f16f40-fa67-48c1-82f5-0c3345698400", "sighting--d6ff83f7-2a4b-4580-a36f-c44efaf370c6", "sighting--996b3287-d6f7-4274-9020-506d0d8528d1", "sighting--5bd80425-006a-4e1f-b611-e0678c2ef613", "sighting--f535bdb5-df97-4ab6-837f-bd3f424361c7", "sighting--27f06bbf-602f-4c29-b96f-55f7c4184109", "sighting--5f1f35d3-105e-4665-a47b-bd8fe38172d5", "sighting--7561efe4-b23c-438d-b561-f393343ee2ae", "sighting--ab1717e6-47f7-4710-8cfb-329cb4a795a4", "sighting--38a1b06b-a6b9-4dba-93ce-6b4f03b508a3", "sighting--fbab3010-497b-48a0-934b-48c9216068cd", "sighting--f5893671-1084-4302-b4bd-da55cc6491cf", "sighting--0a9de51e-0e57-4f21-ac91-9e0f527e1d7a", "sighting--baa51cd6-2cb6-4cdf-8219-fb1785eab9b3", "sighting--fc0c3683-ee72-4971-948d-409a26654fe3", "sighting--5c29839d-8b1e-4322-ad8e-0640f0f31fac", "sighting--11e09e82-cbb1-4227-8a93-83c83185e8cc", "sighting--7c461be6-c44e-4eaa-b0b1-38259e5a0842", "sighting--01928681-046f-4dcf-a90e-09f5322d1168", "sighting--c5546329-0367-40d1-8089-67af78d1f99b", "sighting--3f6b2cef-657a-452b-960e-c9fdfe222abd", "sighting--353f5032-63c2-4ff5-b932-044fc1fa11b5", "sighting--e4468b55-c95e-4bcb-8a8f-8b20975b95a1", "sighting--cc98e09a-cbb8-4a3f-a359-447c46680319", "sighting--aeb6eeda-320d-4263-ab03-326aef52d058", "sighting--ff0b24cc-da69-48d6-bef8-d4c33231f010", "sighting--e1953cb5-8b91-4334-8700-24c9292690bd", "sighting--8fd80628-5d2d-4e27-8421-d2ae031b8ec0", "sighting--81fafb51-e24f-48d4-a434-aa52278c9ab2", "sighting--b398b82f-1d69-4b57-be77-a5d098bd18b0", "sighting--77b5e5be-5989-418e-a51b-d8d185b586c3", "sighting--b5782d8c-3bb5-4765-8a30-e6922cf98f25", "sighting--178862d4-114c-4f8a-935f-a8f97a39c63d", "sighting--34f9952c-f2cb-467f-84d3-60b199723e64", "sighting--b2b738b6-718d-4386-b33b-578c3f1282ad", "sighting--3445951f-99a6-4b7e-9be9-06750b3d9677", "sighting--4f25a607-93d3-4fd5-89a2-dcddb3ace908", "sighting--6906cb80-4f77-4dcd-a1de-22da77ebc467", "sighting--ed32deec-ee89-4804-b39b-f492013ad06b", "sighting--cf372c37-84b3-4071-b6a0-5ed6d21a731b", "sighting--4f0071c1-3f1e-4688-9c1b-29b26db64718", "sighting--db09046a-f3f1-44f3-9c71-a8eaa79f8827", "sighting--37a5f7aa-0699-43ce-97f8-70c1ae6fbcc8", "sighting--1d2fe57a-eee4-4bde-b918-c02ebc3b3b6b", "sighting--7e5bd815-e249-44c3-8de9-9d64a1c69f75", "sighting--0d8e2a68-2e86-4b45-b60b-cf0e96aab240", "sighting--c8c6fa93-7a83-48bc-b6f9-e2a69c92ad5d", "sighting--d0f187d9-e1a1-421b-900d-9ae0df3090c1", "sighting--db149b3c-7464-4742-bb92-234a603339cf", "sighting--c40ae2e4-1f6e-489a-b721-5115dbd310fe", "sighting--066f6631-344e-4ee0-a039-95c42f8edbe0", "sighting--da88b39a-4643-419a-bb54-474d2e498f5d", "sighting--480f575e-c31a-4d39-81d9-a56bba6b079a", "sighting--827a04aa-4845-47df-b1c4-7195d406fe4d", "sighting--087e9a49-2361-4cef-9de2-2c81562f6284", "sighting--92d9873d-b708-4159-b2b0-ef7065da4b77", "sighting--369db450-e07e-4d8a-a9a4-3e5f90ea3570", "sighting--8b5ecb83-baf5-4d2a-b52a-d74a5993197f", "sighting--45301a5e-bc27-4e0b-9eff-7a859c2828f3", "sighting--0844601f-a87b-4943-b913-9d7cb4aedee5", "sighting--38916b7f-382f-414d-a722-0201ac81339f", "sighting--9314036f-bbd6-4c09-9f08-20cb6e0a51c4", "sighting--6d66b766-cbb2-4fc2-9b4f-cbdd5d0634ba", "sighting--3e51ea5d-4de9-4d6c-a4b8-7d9e4e06270a", "sighting--ac0b305d-b1e2-409c-8afd-8f220a1dbb7a", "sighting--c26b012d-1174-4b06-9421-e8ac2bd975a4", "sighting--c9606570-5b78-4457-bff7-d119c665b4ab", "sighting--b33ad8a1-a03b-48ac-ba8c-8ffb9c0efdf8", "sighting--262c213f-0874-4e36-ae23-d93c0191182c", "sighting--e5d5ee82-fc73-4a16-885a-e2034b9561a6", "sighting--5ce51f87-6375-4a40-8135-5f334cc49b83", "sighting--d555e147-ff80-495d-a81f-925b71568c20", "sighting--cfacdc0f-84c5-46d0-bb63-7ab91d1be2a6", "sighting--3ef20f92-3b43-4b60-891e-628578abf08f", "sighting--9b4857e0-703f-4b17-8460-a8974c6c698a", "sighting--83f67fe4-41bf-41e5-8030-bd35a24b4a19", "sighting--1da46064-f74a-4976-8b5c-d1a654a15cbe", "sighting--bdde6bc2-cb19-478a-b559-61dea70d40b5", "sighting--51de551d-b43f-4e32-a81c-3dd3aa69339a", "sighting--7bcdd714-6d89-4773-9af3-e741cfe4dde8", "sighting--d95c3516-9682-45c2-8aa4-0f5c3b48602c", "sighting--f3aacca3-8814-4476-b544-d416957dea78", "sighting--7ade2bc9-fa04-4a9a-8b59-b56afa7bd12b", "sighting--c835fd84-f4da-48b1-a64f-ee9ec7215358", "sighting--37161eb3-9c4c-4f69-bd79-e00f20c9270f", "sighting--67a9796f-09d8-4e66-958e-d10f33486d7f", "sighting--0133bf71-90f8-44a6-9596-926082c21ccd", "sighting--7bee969b-5697-4400-8e32-00da629de5d2", "sighting--a16baaf0-03c2-43f6-bb96-9b62e6a01623", "sighting--1a493a87-560e-4e18-86ee-d20b8be957d1", "sighting--d8c23125-0f54-4ee0-9ec1-ef56d58fa135", "sighting--608c2903-5e80-4cee-8a47-c610a2924305", "sighting--3b2c5608-6db3-4904-8adf-ae2054207ce4", "sighting--54fc3f5c-3e8a-4a94-9a36-3f7ad4669300", "sighting--e98b3d10-ac4e-4a75-9d9e-f3db2228430d", "sighting--077fb807-a934-480b-833d-8cbcfb60a926", "sighting--dc794426-8a50-4499-b319-c086e7c3d4e7", "sighting--e3ddabfd-e947-41e0-9830-288b80846970", "sighting--74ec0ec5-df53-4b8d-a0cc-c1259bd49992", "sighting--7225ab18-2f42-4f38-8c09-3ed68ab54aa6", "sighting--a79b3094-1dc9-46fa-9d57-0415e153e821", "sighting--642268e1-d081-47f6-9d11-1f9f4647725d", "sighting--3f90b438-80de-4f22-bdad-11d30fb9a17a", "sighting--5826ae7e-1d7c-43fb-a8df-1f6c930f54be", "sighting--cef023bc-b1e7-4dfd-99ff-227019a433f7", "sighting--5c338c33-4d6a-4c8c-8d0b-3dec32197e53", "sighting--b92a41bd-8c1a-481e-ae99-ade45e24d468", "sighting--6b29f9c6-63a9-4923-b724-cf51ac2ee945", "sighting--c1e2f70e-4d88-46b8-baa8-7bf778cd8f5e", "sighting--d1d0b560-c1cf-408a-ba7d-7e15497c1983", "sighting--b8e648ca-8211-4abd-ab0f-b21640e6e6be", "sighting--a1853d58-1f46-4912-8cfc-456291f8ee3a", "sighting--bf01f8b3-8a15-4793-b169-3e3388b61e51", "sighting--8bae9b86-2f0e-4e4b-9e7d-2f182176474f", "sighting--bdfcc047-3973-460d-b57a-3bbc62a40216", "sighting--681907ee-e221-4f40-9374-8a85c70f3ffc", "sighting--412f1e61-01d0-484e-a2c9-386ac1f9a432", "sighting--fb5dde47-eac0-47db-bfe9-f6059bbb2ce6", "sighting--6db1b45e-70b4-4a60-acd5-be9751d6f59d", "sighting--1b4be8f3-f23e-42be-828c-6000943ed510", "sighting--38ad36e0-07d5-436a-8f2a-92e68f92c9a6", "sighting--92ce5e41-02d7-487a-ac14-1d4f19141eed", "sighting--56c4a289-c422-4f10-84a1-0768e195170e", "sighting--07427d4e-9c9e-4d16-b868-a81c905152e7", "sighting--c1d5f30e-9797-4fae-b471-10cc62b6f878", "sighting--b53047df-09c0-4a07-b56a-90e0c3b2e011", "sighting--14e5e1f8-3ad9-4120-9e03-55846f65867a", "sighting--c530f0d9-9c4c-425e-ab4f-dd3733ef594d", "sighting--3bb2355a-797a-4395-8d63-a2ec561ecbd1", "sighting--0a267808-1a08-423c-a219-62892564d55d", "sighting--723f5717-5008-48ed-902d-2015cbc372c1", "sighting--d91f6f7f-a14a-4535-a137-48b6133f1d67", "sighting--a6855f40-ae54-483e-822f-7fac0abb751e", "sighting--ab9cb879-1bb4-4e01-8933-c066f80c2816", "sighting--36377e98-18b7-45f2-95f0-e5cda5c3d836", "sighting--ffe76ec8-7ac9-4159-b478-3070aa96ce9c", "sighting--5bb759cf-7626-458e-9fbe-049c160d353c", "sighting--1d8dfb5a-ac7b-404e-ba92-b3abea23f6bd", "sighting--2c66282d-52e6-4e02-97df-9f39542f56af", "sighting--49538525-34eb-4875-aba0-e479a6fe5f91", "sighting--7f1f9ca0-d8fc-4bc7-814d-4cf6156a151c", "sighting--964de919-eed1-488c-8ad9-2bb539569a36", "sighting--5c808817-d113-45e8-9b85-2a406054029a", "sighting--b8990221-7155-40a9-a8e5-61a338e6e40b", "sighting--20ec0991-ac2c-4d32-9685-52b0925da2a8", "sighting--835850a0-6cbe-4950-8057-2ecba052dc0e", "sighting--85c5b9a1-b939-4f8a-a205-d04b428183cd", "sighting--378d6caa-ddc2-42cb-8ad6-db969de444ca", "sighting--e6a2e294-c131-4bbc-abe1-0f79e891d993", "sighting--e31c177d-2022-4472-9039-3b3aaac32614", "sighting--d9ec9430-8dd6-4acf-b843-e328643ff4ec", "sighting--e4398437-2c17-4646-a99e-db350564841b", "sighting--cd08571b-e073-4d00-b39c-c58b94c6c09f", "sighting--01ba0cf3-a0ee-4e04-854f-0c2166fc788f", "sighting--962acda3-2699-4a76-b2d6-3decda9fcb4a", "sighting--237394b5-2d0b-4a13-b125-ca4f1ff530e8", "sighting--18928835-516a-433a-97c9-866354a5edd3", "sighting--9e9b1b75-8787-4945-a3ff-9c5628771221", "sighting--e14007ef-b1f6-4c49-88d6-872a0225c742", "sighting--e5dfba13-45f4-42b3-bfef-8a381c5608e8", "sighting--f3f59f52-8d41-4138-a2be-5a81e023c0fe", "sighting--b46042e3-0f2b-43eb-a030-a048275fae77", "sighting--652c80cf-a9f2-4a1b-9b16-b50b87c077b2", "sighting--564d60f4-f836-4390-9bb1-75c7521de920", "sighting--d7d12aa1-cc27-4caa-90e3-ffa66a6cb6fa", "sighting--832bdf32-6568-413c-a9c1-0f21a643be2b", "sighting--afaa9a95-942e-4093-8e55-f9e202ceda69", "sighting--5cfbd20c-3b7b-40b4-b252-b2b331694de5", "sighting--b7ff58de-26d2-4bcb-95d6-8b5657fa9384", "sighting--2c6be0da-7f6c-4022-8499-63d3dee06322", "sighting--a9dbf171-03ce-4c75-a927-bd992047be0d", "sighting--1c78513e-77ed-4cb9-a64c-06bd3c6e3215", "sighting--51174021-c121-4826-af57-f084d8c1f99d", "sighting--c431f6e7-9e76-4175-a7e8-b20b730e1950", "sighting--e26d40af-be0c-4f91-ad91-2c8dcfa84fe4", "sighting--0dc52056-fe8d-49bd-aada-1a5023195a6e", "sighting--f317b57f-01ef-4e7b-a399-96cdb20b15a4", "sighting--a3ce24b5-5b8e-4231-b2a0-1f642c1dd125", "sighting--31fd4877-f167-42ad-8954-8ec56e99f9d6", "sighting--d7cf7d73-142f-41c3-9a69-ce2072f91b3d", "sighting--00ce8459-36fe-4617-b9e5-d70fab75ef15", "sighting--dcd09b7e-2552-4101-86b1-4d7f3dc1c15e", "sighting--7526eb43-387b-440e-a23d-84fdc5982a5c", "sighting--330b41eb-9dc6-41bd-9595-96b741e50a67", "sighting--adb2ac65-064a-46f4-a185-a8ed4255c2c7", "sighting--dc30f07d-f2ca-4b4a-8737-93bf3bd08093", "sighting--8ce68ae3-8a05-4c59-a4f7-5f960580daa9", "sighting--ecf173ae-e296-40a3-bc7d-c88749554afb", "sighting--ff68225a-dcb1-45da-85ad-800484d58ef1", "sighting--716938f3-51c9-4d78-900f-11ef1a2843b0", "sighting--d88ad338-d8ae-4878-82f3-7a1294fdfcee", "sighting--a5a1e975-5c9f-4ea4-ae30-43b1e0fae11d", "sighting--56169c69-dfad-4d97-b4be-03b235e65bff", "sighting--5156f4ef-c405-4681-89f8-85b51e773432", "sighting--983aa32d-226d-416d-a810-c452820b6d58", "sighting--6c4db18c-bf8c-4327-a1a1-516357386103", "sighting--efc93a6f-4cb9-4cb0-837a-b042e659c4d9", "sighting--4830f43b-2384-4fe0-9ed7-fa8bec75b3fb", "sighting--22d1d6e1-0e28-4485-949b-a3fd8e639bff", "sighting--bd37f85e-4734-4e03-8be8-cbbfd146b0af", "sighting--aaf963ef-9887-49e6-988a-2a9479b5b4b4", "sighting--725e7f00-43cf-4d51-8546-45ab1e954aa8", "sighting--0a64ad16-8b20-4484-a80f-529ce49bea03", "sighting--5f2350d6-c2cd-47ed-a205-12c2b0cb9236", "sighting--2564151d-c639-45a5-becf-b067db155426", "sighting--71d2b8bd-9361-457d-9d0d-21b6d4e39d84", "sighting--a11c799b-76e0-43c0-89e1-57c352c78df9", "sighting--e2f5be35-2a4c-4f98-b8ea-5bfa917070e7", "sighting--4cc59fdb-d916-4a48-926b-38c637f98bbe", "sighting--086c9b9d-f7e0-4575-a681-c2965ee1b036", "sighting--1e3abe0c-7858-488e-82c5-4546d9774eca", "sighting--66119585-30dd-4df3-a243-1ee61659bcb6", "sighting--2dee46f9-5abe-4a32-8352-2dc3e8dde95e", "sighting--0c166c3a-5615-473c-ac22-ea5d81b53fd6", "sighting--56ed231e-5b6c-4dac-b537-46327d2ff08b", "sighting--4768e12b-1a95-4a58-95a6-7a085396bcbe", "sighting--8ea520c3-9dc8-44ba-82b9-fcfe260668d6", "sighting--5224fbdb-e9df-4c7b-aa8c-aaf7f7eb12d1", "sighting--6550fc8f-5213-4bb2-bd5b-af3a69d5a411", "sighting--db4691e1-5bcf-4f66-8919-211017a23da6", "sighting--79d97259-2e81-4cca-833a-932e81d19e95", "sighting--ef3651c6-471d-4c01-8b1e-f19297792f7f", "sighting--bdb0a0b4-8668-4bbd-b75e-d4b7dcb2e36a", "sighting--c6200678-a41a-4306-a346-fc5674b80206", "sighting--246e6b4c-5ba4-40ab-ac0f-d0976d6e3af4", "sighting--07948ee0-fa68-4423-bfc6-0ec895020ea8", "sighting--9105e9f3-45ee-4e7d-9881-b7ae2fda5094", "sighting--65a90ef7-0396-4bba-81d6-e552bebc32ce", "sighting--6682a631-8504-435d-aa26-be9ad824819d", "sighting--696cfefb-99f9-45d7-8456-4b9ffe4a1766", "sighting--adabb01c-4cbc-4b75-be38-b7146407a445", "sighting--40f7c4bc-169a-4eb1-986d-4577559938a5", "sighting--ebe7f2fc-a435-4bfe-a647-c54a7777de6e", "sighting--7dcce102-4928-43c4-a2ab-c8c71c030d2a", "sighting--0dac3025-92ea-4cec-bce8-82d0b42c7cc9", "sighting--b223deb4-a1c1-4229-a992-b1a8dcaaf1a6", "sighting--856bd9b1-62fa-469a-b507-1e900ab07591", "sighting--b36a16bb-b2cf-4f04-bad0-afc4baa603d4", "sighting--5b9413f6-55aa-453a-a06d-97bfc0403c2b", "sighting--310c6e0e-30e7-4c2c-b0d7-1c86f4a19686", "sighting--81a86460-aadd-47fe-84b7-76850325b6ff", "sighting--a50f5570-a7f7-49a9-a242-f1627067103e", "sighting--38d12851-622e-436e-8d74-affbad0314ae", "sighting--70bdfbf0-d797-406d-87f5-9751f50197bc", "sighting--20d36708-c2f4-40f0-a892-4210e4c5cada", "sighting--b81384d9-8255-4748-9758-2ca6214a93bc", "sighting--d20dfe94-c955-4d76-bd20-dba2555db027", "sighting--21cac3e1-f3fb-43f0-95ab-63e30aa46c76", "sighting--7a4a17da-e1e6-4825-978f-2c1b1abc1325", "sighting--76728ba4-3612-4923-9389-6db784771f75", "sighting--224b4c3c-7513-49fa-97fe-0343bf092152", "sighting--3862875e-c62a-489f-aad9-5db55f4d85b3", "sighting--80839d3b-05d6-4861-adec-66cd3a7f54fc", "sighting--51ab95cb-38bc-437b-a758-e2ed0a601859", "sighting--ca3b9c68-963a-429a-a8e9-77e002c91741", "sighting--058b31c1-8507-4bce-87f6-57e6b4011ec1", "sighting--4024e53c-4496-4e38-9802-18108f4aad3b", "sighting--993c2210-f5ee-4815-ab39-644d4742d1cd", "sighting--666df609-94f8-4d27-8acf-719fca6fae5f", "sighting--f6fc2994-671a-459c-9494-6626d9120afc", "sighting--18a4538a-5879-4cf4-932e-c5f65b7cbd9f", "sighting--6dc10876-7ba9-426d-b4e7-49ee283815d5", "sighting--3cec5d40-f995-48e7-afea-80c963f03926", "sighting--6971bc68-6f75-447c-87aa-236bf3919700", "sighting--af192212-18f2-47b6-8e10-f51681ada495", "sighting--debdc2c8-bcbc-4a3c-88da-9748da2a0524", "sighting--657256ae-e6a8-48ec-a820-b841ed085171", "sighting--51d1be60-15ed-438a-8ec3-e348c6e84fb9", "sighting--77dcae09-a200-4536-a6c1-b4942b57194f", "sighting--45b9d2b0-4b7d-48b9-8866-3e70b3be9e7a", "sighting--00b5a076-c3e4-420f-b2bd-90945c5c4446", "sighting--1991ce3b-b407-4af3-bc12-9633824b2604", "sighting--157cebbb-33db-4455-9188-58b7ad541756", "sighting--0e9745d5-a30b-417b-b741-13d7a36f9428", "sighting--248bbcc2-f764-4f4a-86a1-1be28bb7ff79", "sighting--59300046-ee29-40b2-9d77-e82bb18f4b0a", "sighting--e24e6ed2-78b5-41c0-bd52-3d38f7ea7323", "sighting--6af76e66-f0a3-4451-8e9a-c1c17cb14953", "sighting--79864f7b-d5ce-4657-9caf-564cf3fdaecd", "sighting--b4e2bbea-d813-4c15-b351-357ee26b4fd0", "sighting--eb1290e4-aa6f-4da0-813d-31223152fbdd", "sighting--8aeb5ca2-ff78-44bc-a15a-cb8184073f4e", "sighting--31502cf5-6c98-4aac-8e51-554e15e051a7", "sighting--012796e1-1bb5-40f9-8ed9-9224a3d1e546", "sighting--2f91fff5-e70a-4538-8e45-c0130219e175", "sighting--f4593582-9203-40de-a976-b85b09ecdbc8", "sighting--c13a9a03-4ee7-437f-a0a9-b83eac127916", "sighting--cd097a3e-68b0-4dd8-9da2-eed731b31939", "sighting--35ad3f04-931f-4269-ab27-fc7a4b2f1beb", "sighting--b6c7af14-108a-4fdd-9fdf-a3a2faa2e911", "sighting--aaa4e805-1088-4bb8-9a9a-42d7ce834775", "sighting--2efe1d93-e0f2-4249-98a9-8a6dce8b4430", "sighting--4f6bca54-c932-463b-95b0-588c53cb1870", "sighting--da451612-2d1a-437a-8c04-a8bf40eb15e0", "sighting--4382226e-b21e-4818-95da-b2ee7dc01107", "sighting--7d0ead09-1f30-4f34-b720-f6a1f4cf2c67", "sighting--3d297d0f-8047-4096-85c0-373620bc644f", "sighting--72d39c59-e5d7-4d31-bf00-f67679e5bccd", "sighting--aa606660-a790-417e-820c-e6c9864e184d", "sighting--0ac522d4-d060-405c-8eda-bf8af08fe4e2", "sighting--a23e9b25-df79-47ba-a2aa-dca59ffd7cb0", "sighting--b6858bd8-94c0-4b2f-9ec6-df63d2c23693", "sighting--64352c63-bc1d-4b34-904f-2acc44e10ade", "sighting--fe0bf777-a157-450c-b278-7d92eb38dff0", "sighting--3a681eee-8014-4c3a-8e68-480eb4c8e08b", "sighting--6edcde10-c913-4298-909f-eee60d711670", "sighting--12f2a8ac-ce1b-456f-81b1-8176916c4afa", "sighting--348fd136-8cf8-4f76-9756-140b1213724f", "sighting--81285e2d-e7a4-42a8-80a0-e33bc0d96c1f", "sighting--896dd45f-7194-4058-9cf9-5cc29cbcdc20", "sighting--c2e3b11c-905a-45e0-9da7-627aab44bbd4", "sighting--c6aefc29-2592-41b5-b9a7-758d2a5c54e3", "sighting--3d71d8e2-1a4b-442d-8c7e-9bc2ee79a303", "sighting--7b5435cd-f36e-4aa0-aae9-e98b3619f15e", "sighting--1359087e-61e8-4c7f-9bcf-96d5caa211b7", "sighting--0b2768ca-0a9e-428a-a385-819ec00db8ab", "sighting--92fedb37-07aa-4334-8737-478f1fa8c2c1", "sighting--eeeac668-42f2-41a5-82a4-b5534bbef999", "sighting--68750554-4c28-4822-b04b-c445468b4310", "sighting--a83c4432-70b2-4d90-acd8-432da2ee360d", "sighting--a3da70d1-dcb6-4dc8-9854-77b806a1652a", "sighting--a28064b2-f7e8-48b1-8238-48344485c918", "sighting--4ce7bf4b-5f02-4f92-8c56-44c2ca437f39", "sighting--a39c0ae6-59e0-407e-b37f-b1da40872d29", "sighting--88863558-5cfc-4c97-8e45-15ee721546e8", "sighting--d370f590-8b3b-431c-be89-fb2bc2146aa9", "sighting--c46edb7f-bc25-4544-a612-fcfd91361890", "sighting--5a658fad-69fd-42fc-8af2-c3f3dd8261c9", "sighting--d792be80-2948-44ff-9821-b0cca7c4c6db", "sighting--1099187d-5533-4d82-9ac7-7a2dfea9cd3c", "sighting--f3a69a43-f68c-457f-9603-598d6c40bec3", "sighting--dcc89184-2b0e-4775-88ba-abf6b18580b7", "sighting--88b201d6-c8b2-4429-a88a-998a1c96d71b", "sighting--a395696d-a5a1-4a61-bfe1-f5a37a5d1c7a", "sighting--260afd2f-d11f-4979-a8e9-40716ceb1da9", "sighting--1e76e016-24df-4985-a60a-fde8d7db9a3a", "sighting--3737086c-22aa-4de4-9984-308904417e98", "sighting--042b46d9-83eb-495f-a44a-96b328adab47", "sighting--551ef3bc-59a8-4bcb-b3fd-d3959b3879d6", "sighting--b743f0ff-8c0d-44aa-a95f-5e7baea69129", "sighting--70d7565e-6b91-4b48-bb0b-e55a106d84f3", "sighting--a98bb34a-7048-453b-83d6-b7ee31514cd4", "sighting--ea2147cd-7f54-45d2-817d-78ee19819401", "sighting--41040ee0-c72a-41e6-843b-47fe1a055c67", "sighting--42befb74-207d-415d-92de-739f5e0b0d36", "sighting--ccf7a5c2-72c3-483c-b9ff-d1354ffd8ca2", "sighting--7bee9cfc-58ca-4aaf-928f-26eadbdb654c", "sighting--bec5ccc5-c849-4606-8aae-2b046a965e33", "sighting--afbac92c-2c1b-43ef-b2d9-403d4c4695e3", "sighting--a441931f-46ee-4fbf-8114-4f351775e76f", "sighting--30660e31-fbf6-44cc-8cf1-cd8b4a0f1ad9", "sighting--ed46bd51-4ffc-4c84-a51c-2856a8a6dbd4", "sighting--5c892c36-43d1-46e4-82cb-c70510bb21ae", "sighting--f236f703-abb0-456f-9924-9e1fb3c8aa57", "sighting--8459ca04-1099-497d-8ec2-d1c27920caab", "sighting--5c243bfc-7f8c-4ab0-bb5d-71c437f9e3dd", "sighting--cd81ee73-42f6-4d27-8a5e-63f8523374cd", "sighting--2a4b8ae5-23c6-41b2-9ef3-29bf3e11df68", "sighting--43ceceac-d158-4637-8e95-3c330a894c3b", "sighting--faa79090-defa-430d-a815-ba2c1fcb0a12", "sighting--2da7160b-b480-4ff8-bf13-58f90914f287", "sighting--517543b7-af99-4996-952a-bee71d245cbf", "sighting--6e0ef274-be6d-4067-8fcd-d424c6848a93", "sighting--d384b78b-a25d-4aa6-980c-eaf4a033efe5", "sighting--b73705ce-2891-4975-84c1-4d0496c0ab6f", "sighting--ad54e86a-6636-4f36-96cd-f761b0dd1693", "sighting--8ca94d78-3e1b-4c4a-9c93-4492d2c28fc3", "sighting--0c58b2cc-62d8-441f-a344-0a4e3d482475", "sighting--3bf15f69-30ba-42e2-a6c9-945f7a3f6228", "sighting--cfa691f4-cb21-4f27-bc56-aaf105797223", "sighting--4ac5a0f8-b96f-406c-bb0d-dd7468429576", "sighting--127bb08b-64c4-486e-ad49-815e5a8bafa6", "sighting--7ef9ff1e-c7bf-4fad-bf69-9cb66e010184", "sighting--4d04b2eb-514a-4b76-b636-7f9adb5f5938", "sighting--25258b33-01fd-4350-82e6-421f6a4792cc", "sighting--0f310a4d-c3d1-4375-a319-274ab01b4cc8", "sighting--800a6cd0-c928-40b4-9870-22c0f51c7180", "sighting--d84ed534-9457-45f0-902f-53bdd2110d23", "sighting--c0b47454-2857-4acd-a2aa-e25116ae440b", "sighting--c9d5aeb4-552c-47fd-aa6d-d4eb5202da21", "sighting--403252bf-8ad6-4f33-91be-fd18a4ce93ec", "sighting--843fed9a-9422-437c-a2ed-9b0b48e1015c", "sighting--c800f946-48ec-47b2-abee-8240149da5a8", "sighting--297d14b3-89fd-4d9b-ab67-e0259260c9bb", "sighting--19c88271-29ac-4cdc-adc0-bf5445dce99c", "sighting--e5ecfa02-5211-477c-8deb-b51845529cba", "sighting--d779ff8a-b950-4221-bee5-9eb0d7447424", "sighting--24ef0e7c-18af-4c92-9073-6884caf1bbcb", "sighting--2510f480-5801-4d73-9a72-3f45931dba06", "sighting--12ce1927-9313-41db-9495-2b11467a23bb", "sighting--9ec08f59-e8e7-4f6d-a7ad-8420d93e7356", "sighting--3899ab3d-ebf7-40e7-80a7-7ab7b8b6c618", "sighting--dad81b77-2e85-4224-aec4-cf39ef4ad8c8", "sighting--c4b6a2a6-8dd5-41c8-aa54-3d0dd7801e78", "sighting--41e6ddac-3d5c-4622-b3e4-95d6ae425a3e", "sighting--a53f9066-c1bb-43b9-b97d-959015780785", "sighting--af800898-0f5d-43e2-9dd3-889be1fb77fb", "sighting--d698209a-6dd8-44e9-a4f7-abcde55c3ca5", "sighting--56da0800-72c3-49c9-af86-32db99a7211e", "sighting--d9f516ba-6279-4a51-9061-875005d3498d", "sighting--00829bb9-41b3-4d80-93f4-98c4295d60b8", "sighting--7abb86d1-6aab-462d-bd72-d43ce95ea2d6", "sighting--93b51de5-49e3-4fb7-82df-2845fed53b3e", "sighting--72c5bf61-b058-42df-a539-47dfe534062f", "sighting--9a86f3f7-dbb2-45ae-8998-d7e2d6904bd2", "sighting--e63d2b02-ffd4-4e07-a72d-29e7939a84b6", "sighting--7019f6e7-6036-4d54-8aff-385ff5ee312a", "sighting--b4805f10-8a33-426f-b375-a9378df4e4d3", "sighting--391ade95-e306-4c0d-97c2-ba5c91fa0b08", "sighting--2f322ca9-d692-42c0-b667-94b737054051", "sighting--d5c5cdb3-40a4-4fc3-88fb-3e6787ce16e7", "sighting--6ec20660-92ae-4dc0-b83b-6d241a76ffd4", "sighting--cfed75fe-517c-4960-bb4d-79d70d043c17", "sighting--999698cc-8651-46b2-9612-16a31e0ef9fa", "sighting--93d1fb66-d4ba-492b-ad84-88e8d2fd1d2c", "sighting--a0a4706d-3775-4ed4-ad6c-56f69ac3af70", "sighting--f3984230-6278-45ee-8ce4-4ed15c00590b", "sighting--4e3f6346-e82f-4364-86aa-7d96da7f911d", "sighting--d0ca1ee6-4d07-4147-93c3-3410f409b1b1", "sighting--869d4b97-3460-4ba8-be10-569fa6d45c30", "sighting--1caa9dff-ffa0-4eb2-97f2-14decf8ce13c", "sighting--881c9c38-d1ff-4ee4-8fdb-a2b1c2e27f10", "sighting--5dbc855d-549d-4a8b-94c7-06611ed5d58a", "sighting--c70a3196-8136-41ea-8e4d-51d770ad002c", "sighting--2deea3f7-6e92-4b21-bfd9-bb0314460725", "sighting--945f5c20-e80a-4f99-9a6a-928004491ff6", "sighting--481c54a0-7680-470e-ae86-67ba5524e042", "sighting--16d7572d-bb09-4fe9-9ea6-6fcc27e9f50d", "sighting--dee58258-822e-43ee-899d-d879365a37fe", "sighting--a3afa492-431a-460a-b34b-be4eafba4a89", "sighting--f802c041-9adc-4f63-92bf-a89dabc8f568", "sighting--4d66ef46-fdba-41c2-94c8-d993ade7318d", "sighting--fed3d87a-f561-404e-8f09-0c1ce32ddfa4", "sighting--dcd4b6e8-3d21-47cc-9856-8133b8e1467b", "sighting--dd702f45-db4d-437a-8235-446d8dee8bd8", "sighting--a9e6f470-9b3e-4a7a-8d4e-78255c89143a", "sighting--bfda8b66-7bba-477d-b13f-5aee5a70bdf0", "sighting--ed5745cf-3912-4306-9ed5-62437556468f", "sighting--e6bfb4f4-6855-47d3-a3f3-01a4e7c268c1", "sighting--b4a8b231-faf3-4d35-87d0-f80ef3175680", "sighting--e96810bb-5a3c-42cb-be67-afda5b764131", "sighting--ce928058-9c21-425e-8b6e-78dca05a1e50", "sighting--3e897e63-2c07-4e76-ad6d-be7feae3eaf3", "sighting--160b4a03-c7f6-45d1-b115-68dfb2c95a34", "sighting--7665aac6-a5e1-4b0e-8b7c-4da5e542634f", "sighting--2c7be051-b40c-458d-beb0-37606f4295a1", "sighting--00ef9f52-420a-42c6-9f4d-d67825a71a48", "sighting--4f77447e-46e7-4210-96e0-fe399a68881c", "sighting--b9424dde-bbc4-494c-9d37-ed74320c9049", "sighting--465e56c4-4dd0-49e4-baf5-ddd366021203", "sighting--450bec04-aaf4-4dd0-b9b5-317f99193cbd", "sighting--5ddd6b42-6f55-40b8-b225-a9c81982b295", "sighting--2962c5ea-46b8-4f19-a2da-8786c4e11c98", "sighting--31d2c990-9a52-49ca-8922-1a3bf40d2338", "sighting--8c08c81e-ea8e-464f-b017-e5123f312125", "sighting--2835022f-b05d-48cf-8494-4c92c1d27f19", "sighting--7c44be48-7408-4f2b-8041-c1982f0d224b", "sighting--74cc5629-a455-4f42-b0de-eb3478d57eb8", "sighting--ddb91975-41f2-4889-8ea9-e66ac17e16f7", "sighting--ecdd5761-6615-49d7-bccd-76e1606fc381", "sighting--042519b4-0e1f-4ecb-9132-246543430f47", "sighting--4858e2f6-84b1-487d-bbb9-08e7c702c4ec", "sighting--89ce4cf6-ebf2-477e-9385-21b9cc3fd5ce", "sighting--aa2522f5-6150-4961-9844-4dbdb0e95d52", "sighting--cae96c0f-3a34-4eb2-b2f4-367e41349609", "sighting--60bef08b-7a36-4547-bc23-f504fd0f22f2", "sighting--6b9f4c25-07b8-4cc6-b69e-5c4408b8fbae", "sighting--e6ce464f-53e8-4847-ad79-2353fe2c8f93", "sighting--d49d2007-860f-4392-b832-9d40718f5863", "sighting--ca9c81f9-2b2f-41ab-b459-2d3da16ce829", "sighting--10c4c6b5-5ef0-4830-ac78-457a1aa83f2e", "sighting--21118272-9abb-4999-83f5-4e9da2302910", "sighting--4a42e1d1-ba10-4c78-860c-3a81c8e12449", "sighting--e294d2d5-4f46-42d8-b3b1-92e782faa91a", "sighting--b1622c86-9a98-4f3f-a73c-c24ba8d34c57", "sighting--6b053703-1836-431f-b27f-562f9e7b4c3b", "sighting--bc1651b2-7e96-4907-88f8-464b3f0ce7b0", "sighting--4ab144dc-4918-4ac9-88c7-18ca8a1c525f", "sighting--ebe5e9e4-95fe-4170-b693-c4a6770cca56", "sighting--b0fdb6e0-d7f4-429a-9622-97d6bcf66757", "sighting--733cf19e-6dac-4f72-b746-1510d7df839a", "sighting--9b4c9e20-a52b-4b41-be2a-28b52d69d8c0", "sighting--6cd843e2-da56-4735-ab25-7525bc47736d", "sighting--24ddd6b1-45ef-43ed-976a-ce4e98f99623", "sighting--97e1e3aa-eea8-4892-8b2e-05d084bd82e6", "sighting--76065c2e-8cab-4575-8ae8-c6364960d1d3", "sighting--ebb1d511-e441-4287-bc0f-18275e4dd41d", "sighting--c86f1f53-ed40-40d6-82b8-2e412e7adc22", "sighting--42bd6199-1244-422c-8e08-873669813f62", "sighting--34281baf-1546-4adc-85ba-eeca2568530d", "sighting--15d42ca5-a800-4156-886d-2e0cd765053e", "sighting--3c559561-c290-4c15-b735-501fd5edd0da", "sighting--fe96ddce-261a-4783-8bb3-e80c50aed435", "sighting--02d952d7-f83a-422d-bed6-5362e907ead6", "sighting--c19663a3-dedc-411c-9773-a2271a2df4d7", "sighting--73ee32bc-73c9-4855-9dcc-cc8fc46d27b7", "sighting--b7589cd1-ee28-48b2-920a-fcf3f8d080df", "sighting--66175ca1-380a-437a-b947-a479d0f73d7a", "sighting--9e98ca53-55b2-4583-a5ed-25e1dc4a453c", "sighting--3567666a-7ec0-4391-8da7-1e4670e51ed1", "sighting--3eecc2ef-2240-466d-a14a-0603792300fb", "sighting--78a00b3f-f7c1-4e6c-a0e9-afae3c561c69", "sighting--8efa22be-7302-4612-996a-400e49c5c06a", "sighting--25fdd625-f584-49c2-a44b-36c0acd6ad89", "sighting--21576441-dca9-427e-8b52-c038f2335880", "sighting--1de40290-6453-4a3e-a049-eb4c940e1937", "sighting--935133dd-78b9-4a25-b797-9f6a8516f988", "sighting--ccb8dd92-31f5-4f33-b5db-19553533ab29", "sighting--d14726d2-461c-4afd-8f42-39808854e365", "sighting--809e1611-beec-4693-8211-4aefba3dd7f7", "sighting--137e2850-4859-4711-8586-ceca7a93f63f", "sighting--33851f1c-9ff1-450d-9f1e-3fdccb833a30", "sighting--d41d34f2-6bca-4e6a-8610-3f4c574cfc8e", "sighting--565117b1-685d-4dcb-99d1-8a10b9ddd71b", "sighting--4c9a62cc-bfb9-4567-aa7b-a9be6ef59fcb", "sighting--7039bcca-9292-4c0c-a486-43eb63a09a55", "sighting--ca3188b8-5cd5-48ce-9928-19687007c796", "sighting--445994fd-3727-44e9-b4f7-afed399d47d5", "sighting--6a014280-5384-40da-8fb7-59340438996d", "sighting--42c5ba8a-3089-4f54-862e-41cc73bf559b", "sighting--b91e88c4-6916-4627-8ab8-a090a9362c77", "sighting--2af4456d-e095-4d97-ae78-7d8a660254e6", "sighting--d072c65c-a862-474a-8de2-c264fb3d4cb1", "sighting--aae01fcc-ce93-41a9-947d-f37c97fc8860", "sighting--0ea3a2b7-a519-4340-8da9-8f1035b0209a", "sighting--d1baa602-e4af-4c12-b460-7231e75034e9", "sighting--0c7326a0-fdff-43f7-9b41-d0ed1ed05ded", "sighting--a4aa376a-ff23-4d4f-bcf2-8d7c0b09ba3a", "sighting--416d7bce-cc5a-490d-9465-a955be02a599", "sighting--9a62587f-ff70-4790-afb4-ef80fc62cda9", "sighting--020d9665-96ee-457b-abcd-9d006047ca80", "sighting--f62babca-eef4-4565-b6e2-685ee5c5fe78", "sighting--081c81fd-9b2c-400c-84d4-3153d90284c0", "sighting--90e920e7-4636-4d66-82e2-04012afed66f", "sighting--f010a72c-8af1-44a3-8f2f-681790b85d9b", "sighting--12e0d782-0dcb-4c72-ad9d-d4138e8c160a", "sighting--c5ac0b01-fc84-4502-988c-cdd7efbdcb0b", "sighting--3fb91b0e-6f97-401a-ace0-fa85b5b73110", "sighting--b116d8f6-87fa-4031-9eab-eedacf78df8a", "sighting--56f8aa01-0e1c-4fe7-93e3-f750172e9725", "sighting--0b08174c-a95b-4128-8f8b-06814e94841e", "sighting--1720f0ba-694c-47f3-acd3-b953e34537bd", "sighting--89b1c394-1180-4fcc-9ced-94d0c4aecbda", "sighting--6f2133a9-2771-40b2-8b3a-075031b57631", "sighting--70620f1a-9a74-49ee-b78b-723708fd6bb0", "sighting--bb11eb64-5dbd-4e15-be65-8faa110e0821", "sighting--1fee248b-373c-4d20-8e00-52f564d4eace", "sighting--85281022-b113-410d-a1b9-8cb8039ed247", "sighting--152d7551-bb23-4d96-b19c-f0777f6c21cf", "sighting--7f921008-d49e-4629-a651-d60adfbfd8b4", "sighting--da1d97b1-dcdb-4248-9188-8c57993adab0", "sighting--5cb81641-b2fd-42a1-afe4-43f60f4e0765", "sighting--cf6095c7-f6ef-4fc7-8649-9fbf31cce801", "sighting--188d47f7-5839-455f-8284-f946886d495e", "sighting--1786f0ad-ba15-4996-940f-870a9bb7313d", "sighting--7ee3c1f8-2069-42a6-8aa2-620ea3080e76", "sighting--3c1fea10-b013-4b4c-8772-c7a4941d06ce", "sighting--19876bba-7763-4d7e-8849-5bb955520f8e", "sighting--171f36ec-1c0e-4576-8755-469053aa63bc", "sighting--09bf3a72-4b20-46f8-81f8-a2331c4fdbc8", "sighting--a4eb7009-00d7-4796-a83f-15fc68289df1", "sighting--7f63e407-6809-40a8-ab0d-ceb29d9946b7", "sighting--92b757b6-e8e1-4659-9099-b947d5f04849", "sighting--2d5fda0d-93b4-4a24-911e-27fe57ff57e2", "sighting--684652ee-9e63-4a07-9fda-2e813afeb7fa", "sighting--819e6432-b190-4217-8e3a-74e50937a952", "sighting--a1574088-995a-452e-917a-ee3032063ac4", "sighting--5195c96f-9277-4d4f-b4fe-4f3b92a44417", "sighting--a3effdd4-e2ee-4eaf-b5aa-6f2560251108", "sighting--ff7ae14b-e4e2-4fd5-a612-c6bbe7856391", "sighting--947df6aa-49b2-400b-afb8-c9504ba7b9f2", "sighting--d8372aac-7f9c-498c-8fcf-57af54aebef5", "sighting--8d56e0a0-5c69-4b7e-9015-43286c8db16a", "sighting--d4b16b35-d7e2-4262-9642-3324cc49fc27", "sighting--7050b7af-a7cb-4a2b-bf07-23f9e724beee", "sighting--fc771b8c-0f6b-47ab-bbaa-e3438091cdd0", "sighting--3a34d150-731e-4257-97f5-845d34ed0dc7", "sighting--82e0874d-fadf-4be0-872b-e24407c77788", "sighting--3c0d7252-92dc-4ff9-be73-6015dcf4b3f7", "sighting--2552922b-bd12-4aa2-a8b8-3a46584b3d8d", "sighting--b41d1a02-5d5c-4b5e-a4e1-e4d5bb88ea1c", "sighting--9b52f417-d881-4428-ac32-d36002855539", "sighting--ece99658-4a3a-43f5-8398-6373282d3242", "sighting--a483a34b-1ae4-465c-9b47-3c9895064773", "sighting--6a4d4ae5-5a63-4030-92ab-bcd4b368f47c", "sighting--a3850ac7-c02b-493c-b072-ae96e53897ef", "sighting--a3b38f95-aae6-4c46-9e5a-5526f0aa854c", "sighting--e77a4e37-5042-4be2-8ad7-2f0f5707f13d", "sighting--23659b07-1e20-4d65-b87d-276a98d65e84", "sighting--9b3876ab-5168-45b9-801a-48acdfd5381a", "sighting--ace009d4-e023-4402-ab61-096c0ee14c86", "sighting--1d771738-74ab-4720-9616-e7b1ce9f8922", "sighting--89a0f68d-a60a-4418-8b3a-8083c82ac8b4", "sighting--91482211-ed00-405b-9901-f04287b0ce8a", "sighting--20786250-28ef-4743-89a5-a52c268b8d5a", "sighting--eb97375e-6e90-473b-b1af-a62c9f84f3c2", "sighting--895562d7-6918-4ab7-9086-003031bf7926", "sighting--1bdaddce-9ea3-4958-8cc4-a6893c9ae7e5", "sighting--02b44712-304d-48b8-8618-7e0a92a862f4", "sighting--4f88763d-f1fb-48ba-a05d-4ab189935d71", "sighting--c0712d23-3a95-48ac-aaf4-42174ca5c53b", "sighting--77d5bf54-d6fd-4cc4-a737-adf4d1053134", "sighting--e195dbe9-8aca-41ae-b976-901f83b0b6f3", "sighting--34ae5c47-3748-41ef-acba-b2c134bd341f", "sighting--ff10494b-b61e-4ffd-9125-7d8f4804e127", "sighting--436defc6-564e-46bf-8a9a-22a1c5996b13", "sighting--2b4e00ba-2422-4d83-a1bd-65fbd0c513a2", "sighting--cca92208-7f5d-4b56-922b-98c53828da34", "sighting--42913444-f95a-485d-a473-84aaff1a443c", "sighting--12eb1b54-6198-47c5-bb31-1747b1d76be7", "sighting--c42ee963-9ec7-41b4-a715-057ae3f2ec10", "sighting--d7eb9270-6d8b-4750-9d82-5c40bbae6eaa", "sighting--3c4affcf-d329-4d67-9a2d-29c579a5d2dc", "sighting--20d5d6b4-439c-4e2f-8679-a0f5c841a561", "sighting--857a0284-5ea8-4173-b24d-0a6658943e52", "sighting--88f37a44-7f60-4066-9a3b-83e866024115", "sighting--e83a9e40-0add-478a-a72c-f8b004644593", "sighting--7ad74850-b218-43c0-9831-67b04bc88eec", "sighting--61b43102-3c20-476a-944a-efd8447745a0", "sighting--156ee7d7-84b8-47a0-86be-82151cf0249a", "sighting--79c47c07-bd51-4baf-8706-da8c18730338", "sighting--cb039a5b-be38-479d-bb96-a50343c3015a", "sighting--aed86e3e-cbb6-42e7-a737-32aff9d03c34", "sighting--61ddb8dd-5865-4b83-91fe-ed4e4a2e7202", "sighting--15a50b70-52be-471f-a637-402d887768e6", "sighting--8ab4fd87-52d7-42e2-bb54-893201a10dd6", "sighting--f4d64358-3317-4152-834a-dbf82bfb30ce", "sighting--3f7bd4b0-5876-41da-aa09-1439a5ea8726", "sighting--c4b03c76-0221-4682-bc83-463d3d01398a", "sighting--f8443e79-d174-47b5-b46d-b47eee65b954", "sighting--5d82f763-61a7-424c-8eeb-3cd06f9f8c54", "sighting--54588b8f-f133-4fc5-8f11-4ae64d6d986d", "sighting--6b598f61-b60a-4ea9-a221-922f33792b0f", "sighting--54daceba-796d-4ed1-ae87-171e2c1cefd1", "sighting--93cee8d6-3364-465a-9d2c-e31641f58610", "sighting--d1576b8b-a9cb-4e98-8bf3-8f1e78859875", "sighting--db3748d6-b60e-4f0a-ba4c-4640bf1205f3", "sighting--924e8175-af37-4b2c-9795-8cd3b8a2788e", "sighting--e4de880f-7c7c-49b0-9975-8986e7fffaeb", "sighting--677da964-2ddb-4e8b-b504-34d04474d578", "sighting--80a54566-da10-4be1-bf03-0da974c216f4", "sighting--1920d46e-1554-4127-9886-407a9a075f4a", "sighting--5734894b-485b-4fad-b8d7-2568351a4dbc", "sighting--8e121893-99b4-4c63-92be-7778c8829591", "sighting--e5758adf-4c24-4ef7-9d61-ba378522a9d5", "sighting--b1eb3cce-0db0-422c-9b8f-7ebad2ab21ae", "sighting--54530317-e5e0-4712-ae28-8c92c4c8632b", "sighting--516eb8f9-dc5a-4ae2-b398-fc2b6a960890", "sighting--73b297f1-2e13-4d87-8e2c-95df2b593dc7", "sighting--871cfdfb-6904-41fb-b761-3e563f7a260b", "sighting--c1b4baa7-92c8-490a-ae9e-c4a9e6a7b791", "sighting--98e46a01-afc3-4361-ae11-163c8d279dd8", "sighting--569b943d-4285-4c66-8867-e95e351daa79", "sighting--64ebf8e2-3b00-4171-8970-572dd2126d3c", "sighting--83186faa-37fb-4228-8e13-3f2c6b6447a9", "sighting--9744dab7-bbfa-4613-a737-df3194de8c98", "sighting--e3241f42-8b3d-4956-ab29-8e3264df777a", "sighting--54cf54ba-0cf8-45fb-993c-fc1c2798be6f", "sighting--1fac27d0-f0b4-4f4c-bb08-e46a2e254a11", "sighting--badcffe1-cff1-4e5f-a3d3-f7189875e3e1", "sighting--eaacb7e9-64b8-4391-bbcd-a59e25c16290", "sighting--60c570cb-e6ed-4d0d-951b-fbf2a3ec99dc", "sighting--6e62095f-bfc8-44ee-9076-a328ae37172c", "sighting--8aa6ad15-7bf1-4115-a6d4-5075d0bd716e", "sighting--b722eab3-7a12-4a14-b61f-850e11e32c20", "sighting--ef8316f7-0223-46f3-9ed1-684640e3a358", "sighting--7935766e-0b6c-4e4b-8512-493e0e7bc228", "sighting--95bdbcd1-8d07-4565-853a-ecc6540ff328", "sighting--4c2d5866-8b94-493e-bfaa-b14cac773070", "sighting--067f2cab-1e8c-42ea-8992-75db73b17c40", "sighting--2185abed-0f14-485b-a4a8-51d9bee890e4", "sighting--ab24e2e3-6413-45bf-9d59-b9ec53cb4110", "sighting--e74c82af-388b-4050-b27d-95c7923ad8fd", "sighting--92c3de2f-76e6-4a67-8a8d-94a46ec52eaa", "sighting--3e6738b8-b41e-498e-b9c5-f89fdfa523b6", "sighting--22821c31-e724-4e97-b222-5410f4bcac7b", "sighting--fd944534-f058-4a39-b976-64017ab2c191", "sighting--8c95bfdc-f271-4f28-9866-c76bdeab4775", "sighting--4c77f89c-732e-4e97-b3e3-3ddeea2ba581", "sighting--9ba59f6a-0a4a-4fe3-b40a-17082cc7719c", "sighting--f9ee48fd-3d31-4917-8d1d-50347958ff30", "sighting--09e720c2-a789-40b5-a8ea-188a9b19ae1f", "sighting--3093d2f4-5e36-4db1-9fd7-44578964e7d4", "sighting--5e382562-cec3-46ae-b46e-93faa6a32d1f", "sighting--37d8e4b4-e90e-4aca-b1eb-e6e5e7c8bd32", "sighting--5f3f7c10-3cfe-4b48-bd3c-52d2d37c7191", "sighting--5952b711-364d-4ac0-b853-e8d9de0e03bf", "sighting--666c1e2f-36b7-49ed-9fb5-c6d266b1f969", "sighting--266da12b-cdda-4a4c-966d-0ee33303c279", "sighting--7e180a38-f281-4155-8bc2-c589b78bb35a", "sighting--fa12a890-51e1-4c17-9ab3-61d101c529d2", "sighting--49c7ac11-1880-40fa-a497-73b6a41fed8d", "sighting--da7695d7-7cf8-4cad-b06c-b0a172dd9004", "sighting--fd743d04-8dd0-4a96-91c7-ea379b49b57b", "sighting--1804f4ce-23fd-4632-a779-cd26bcdebe9d", "sighting--49588d65-2d56-4230-b2a1-166b50c87b00", "sighting--e3ca4377-f68d-4bb8-b676-cb149cb56bd6", "sighting--a6ecffd0-5843-48c8-8eed-bf95fefdd518", "sighting--8e67f1c6-61b3-422f-aec5-d7ab7dbc397d", "sighting--a1f77643-13a5-463c-894b-395080dbdcab", "sighting--b3dde382-86a1-46f3-b1ab-4c6daa0106c5", "sighting--884a03ad-8b77-4ed5-880f-84d8a6be94b6", "sighting--97de3410-58e3-4869-95c9-a8b7bed3003b", "sighting--a9ed028d-13c2-4ce0-bc32-346fbe92624d", "sighting--71817a3b-ad81-4ad9-884f-4990a3ceff1e", "sighting--3d16d01e-1c29-4515-8e69-30ff84d97f8f", "sighting--6af1dd7a-9429-4f8d-96a2-c6dcd8fcaae0", "sighting--f3e6176f-7a11-4391-a2cf-2f300a2f62c4", "sighting--5ae31538-6513-46c1-83cd-a6db47e69b93", "sighting--f3b150c6-de01-45ba-a8ff-19825c3d8f45", "sighting--3e6ba746-7ff9-4b48-a965-6053ec134b8a", "sighting--c2766777-32c1-492f-9e2b-0a570c0e03a3", "sighting--1c396b80-b301-47ca-bf7a-b93650afaf76", "sighting--98fc2c1a-0054-4926-b255-d02b2daebcca", "sighting--eb599cff-d162-4dce-bfef-e8d476b03c66", "sighting--d14fe36a-c1d6-470b-aabd-34b1d7031b32", "sighting--8752e8f1-7326-4278-b35e-acd4f7b4ac86", "sighting--b00b3b52-b744-4740-927b-053134bda3b1", "sighting--10183ffc-a71a-4db1-be82-0fee3a35aee8", "sighting--daf210fe-17b5-4352-9c06-be5ee6932751", "sighting--2f322506-e6c8-4e0e-9b2b-304d13338eaa", "sighting--93c1387d-27fd-4288-9c8e-6ad1743988d8", "sighting--d5a9a3c4-a0dc-4558-be59-90351acda020", "sighting--1cd9ea9c-c1d6-4705-a3bb-34deada500cb", "sighting--ecc5e58e-a741-4d84-bd0d-7a2f66b05962", "sighting--2d026209-b459-4513-8641-34918f972735", "sighting--190dc9d1-92dd-4a53-9f40-81f2872c3427", "sighting--145c9789-81cb-49f3-b06d-6574d74e7191", "sighting--082799b3-190e-4166-9237-7d67a69e376e", "sighting--16962f9c-3052-4695-8d10-a944eca5ec88", "sighting--f41a9b5f-a78b-4738-a278-e746dfe4eb34", "sighting--78545980-ca96-4a62-8124-ab74116d71e9", "sighting--4bee1989-23e8-4931-b2da-88999b7adef6", "sighting--ccd0519d-7838-4be5-85a4-e5a3a2b1efab", "sighting--41c97f3c-228e-4b8a-826c-327af4039bd1", "sighting--7f9c735f-534b-45c1-a021-9bce2b74e4ff", "sighting--768b8268-f44a-4c53-ba30-ebfb61ca2a51", "sighting--891331f2-fa2b-44c1-bedd-0cce95c7017a", "sighting--c4aca69d-cad9-4278-8cb2-935cf09bb0ac", "sighting--2c6d43fc-bf3b-4c27-8af2-29cf01a654dc", "sighting--dfdb7dcb-7901-4c3e-be37-30a01c12d9fc", "sighting--7509678c-e2cd-421a-a11d-c38dcc9ae966", "sighting--7f171b87-d7d7-425e-9cc9-4e30d6e90b23", "sighting--326ee4a9-f9a7-443a-a984-a389befe9262", "sighting--eedafc99-89a9-4cc9-b1ad-d7f6bebcb363", "sighting--0f06a2d1-cfdb-418d-a91c-7aabf0867738", "sighting--ab7e3e19-e6fa-4b4b-af84-a0d0654ff257", "sighting--67c93902-3142-44bc-bcbd-37e42cd87a07", "sighting--aea20207-341d-40bd-a30b-8e3399b0172c", "sighting--e295f4a3-7d14-4249-b27d-64f82b563ddc", "sighting--8aa8d0d2-7659-4c63-b839-97af6e876cd9", "sighting--631fb9ed-f303-4815-8e7a-c1bd415ea45d", "sighting--1a67ee46-b127-4920-9565-e3f3bdad3f78", "sighting--a82ea26c-194f-4580-a2d6-8629fba96d08", "sighting--dbc82e97-eb70-4d3b-8556-2192ac075227", "sighting--58b809d5-6ee0-493f-9533-83726d9d3c1e", "sighting--115d4fdc-3d27-4871-82dd-2d2b486da8f7", "sighting--83763121-b3f5-40db-a3fd-fcbfac4054c2", "sighting--45efb54b-1e62-46c0-9389-b28ef8f855ef", "sighting--04e413e8-876d-4a15-929e-069ccbb74d16", "sighting--16b18401-98f4-4681-aa0c-086708c07b4e", "sighting--ca018f3d-4080-4190-b1fb-dc0dd4768fff", "sighting--4071e672-adff-4010-9eff-195fa2bbc11a", "sighting--82ab5036-ee4f-4c14-bbe3-99c4cb120bc4", "sighting--77caa87b-44c1-4db4-a537-3f3a1c65d680", "sighting--da1c0ea4-c3b3-4f1b-a9be-b3c34e73a77f", "sighting--fc386eef-2ca2-4a8a-899f-371cc6b6dd40", "sighting--0a081f78-2c98-4278-a3b3-808e3f94e181", "sighting--e62cd56b-2777-49e0-b8d9-37c5dbce6931", "sighting--03e01648-6db4-4c51-a028-62c41f64bcd0", "sighting--b4a9f892-71cb-467e-a1d6-c1358db321aa", "sighting--43c0f1d4-3c05-4a53-8375-c6378ccf60bc", "sighting--b186be06-c711-4729-b1f9-0112deb749ef", "sighting--816943d2-28fd-4416-85b5-2bbc9a0088bb", "sighting--2b4eb284-d0b2-4f3e-b694-d1cc286e4a62", "sighting--d690824f-d743-4f5f-87a2-9ab8b935ed0d", "sighting--0489d108-4a74-4878-93ac-680a8e9ba362", "sighting--0113400f-e98b-4898-b897-e0f09363578e", "sighting--9f65eaf6-b0b8-4b28-bca4-6a411a7295e1", "sighting--f6999de5-bf7f-4172-aa49-706552e29f43", "sighting--ca30d654-7cf3-4da4-a249-30a1f797a46e", "sighting--93ffdc72-6a57-4cdd-968a-75fa66841013", "sighting--8c2e9f69-757a-4d6d-8e17-e80c567bd99c", "sighting--77d3b101-5088-4e9b-a3ee-980f08346775", "sighting--9d742766-4595-4355-b702-ccc12d9218d7", "sighting--2ad3f71b-f40c-425c-9749-7c778d4aa5a1", "sighting--019adbb0-b2d0-49ca-8883-d4fb3e08f798", "sighting--ac116158-308c-44e1-bfbd-a65678e26d97", "sighting--df7fda5e-b10e-485a-ac90-f9fd585abc80", "sighting--73a8a756-5176-4d5a-8931-55cf8b4ba3e8", "sighting--d07fab19-a0c8-47c7-81ce-934470767f67", "sighting--f1d1a2e1-8931-469e-a2f1-d63fc48ff484", "sighting--54fe1c0f-1440-4e33-8cd8-0c07aab2baa4", "sighting--0c606a15-0502-4fa9-9a39-a2632c967163", "sighting--34dc006e-f620-4b06-8347-7e4d8b400223", "sighting--77fdd434-0421-4380-a96f-fb2746897db0", "sighting--2a5e2967-6382-4fa4-a52e-877247be2378", "sighting--8bf57782-001c-4edc-9ba0-31c7dbae49f5", "sighting--c38b3dae-d2ec-4d12-ba86-9103e3e9bdd8", "sighting--60d6ca02-ea12-4eda-94ca-2a84144d7f49", "sighting--1acd75ea-2c93-40ca-bbf7-a3419689fe22", "sighting--1cf1951d-bb10-4eb5-ad30-532e870ac53f", "sighting--01ddea46-44c4-4b58-b3b1-f1ce9d6c756a", "sighting--aa858378-2c0b-4218-a268-ba52522a2332", "sighting--ff08a6d6-8c79-4025-b038-8eff3d500449", "sighting--f1b24fde-a9fa-40f9-9951-9e8ecab1215b", "sighting--465ba17f-ca8b-4021-9811-f23fa5cd3212", "sighting--39c05f92-2ba1-472d-a4df-29f0f4e857fd", "sighting--e2c57041-91f8-4ec2-a499-5081fd5c687f", "sighting--d7de41c2-0ef0-4e99-9002-b96f07f2f9d9", "sighting--db1e1971-83ae-4f20-acf7-3f730dfa70fd", "sighting--359d8592-5b5a-4777-827e-b86d159bc554", "sighting--46e1a32c-8873-4358-94bf-dbf01b602c58", "sighting--c9073864-6b0f-4273-9813-1e17ded924e7", "sighting--a1f72ff1-5cc3-4475-ac4c-7312062eb7f4", "sighting--c985bc4c-824d-4869-9a78-b5419405a281", "sighting--c30ecb58-e250-49f5-a953-50d7b542d3ab", "sighting--9dfe7439-c809-4d36-9641-de9ca3cdb831", "sighting--1e2dd060-1bf5-41a4-9767-f29a7afdd7d1", "sighting--e59ed08f-b289-4cea-a265-0556cbe03381", "sighting--3052844c-317c-44da-9e2f-6d5ca03a2b7d", "sighting--b1f5b0b0-17d1-44ce-9fb1-7cc033e54a4e", "sighting--f53e0baa-f553-4a28-83ee-cc8e8a37b4d8", "sighting--472a2480-831a-4db6-af49-72cf6d905383", "sighting--ff7c03d1-13a4-4915-a05f-d84aff0e3b75", "sighting--84c3c7c5-cfb9-419b-ab83-15f46b58be2b", "sighting--0cb3cf28-2ed8-4966-afa2-82615b3225da", "sighting--7beba898-9381-4363-acda-d3bd5912f0e1", "sighting--d03d1133-e5bb-4db4-849c-ac03e8869ba5", "sighting--38e2399e-326a-4fef-a158-7b231a5e1222", "sighting--984c5b57-ee89-47e0-b8f5-7d1380c7b14f", "sighting--c89f0076-591f-44ea-81ab-6daa14350fea", "sighting--62ab10a7-5a04-4bef-b4bc-31110292d2bf", "sighting--8f90c90b-6471-4956-b93a-2b541f1e442c", "sighting--e3bed0eb-bf7a-4bf1-9f63-35bb6ca1b30b", "sighting--ca249ccc-a30a-4933-8fc8-951fdd8c2be9", "sighting--ffa901ed-ae41-49c2-a160-d8b923fea5ca", "sighting--d338314c-8f3e-4302-91ca-a94ac685163d", "sighting--437ea289-93dc-427b-9b09-d9eaf6b11c8a", "sighting--6d639796-1298-4e4f-afaa-3dec957f15d6", "sighting--aabb8f40-dcca-45e1-ba83-9e063fdda978", "sighting--a514ffe5-24fc-4fa2-ae8e-2651333fc46a", "sighting--1185db4f-9706-45aa-ad20-46596892f614", "sighting--ce528124-9b3c-41ce-9e92-a59cb6a2e5b3", "sighting--b2f17e07-8cca-40af-a370-37f8c0a98bf1", "sighting--d32a337d-5b4a-4084-bdb6-9fd7f99944c5", "sighting--a40b1611-9567-4ecc-94a9-b13e72a7edcb", "sighting--33e254aa-c897-4393-b7fa-62311338e345", "sighting--2b66c8c2-9f37-4fc5-827e-eff3521f786f", "sighting--c8d3ee19-5e8b-4398-8141-7a69c87e3df8", "sighting--4023dbf7-9d82-4eef-857f-5963c8033590", "sighting--c7ad73bd-28e5-4c71-b833-3fdbfadab50b", "sighting--9881bffe-0d19-4445-a1b9-183238371857", "sighting--65c26f68-33e9-469b-8722-78ce4beff39e", "sighting--1744f72e-f085-42af-852b-83cd8e20b74c", "sighting--9fdd5722-0bed-43f9-9f9a-8a6e0ab08a23", "sighting--d2d62aa3-32c5-4898-8213-64d88a6b0ae2", "sighting--c27ca25a-444e-45dc-b4ef-70341a544ca9", "sighting--622c2b3f-3210-4590-930a-f7d6fbbc8342", "sighting--b2676acf-56c8-47e0-88f9-b1c89b6fae4f", "sighting--74a9f550-9341-4202-9ac0-8cc005efb88d", "sighting--b4ebc022-e5b8-405c-9bea-00ed95ae3890", "sighting--641a4d6a-d661-4f06-9cf2-8ca107d68da2", "sighting--daf8cb8a-bfd2-4af5-9fbb-ae593ce8d236", "sighting--b3dabd6a-2499-43bc-bc97-7f7b78f190a7", "sighting--164d618a-e8c2-4b1f-b544-1184ea3e999e", "sighting--b4ddbee6-d0f1-4b4e-9f26-dead00b55210", "sighting--53084d93-9c49-4c9c-894b-a39d7f3850db", "sighting--77c34ed8-348e-4823-8f0e-1a8fad9ba291", "sighting--47f4d37d-1bd6-4c82-bc70-6436fc53d8eb", "sighting--4d44ea9f-c00c-489e-8ca2-08a12474a434", "sighting--2f1b3bcf-6dad-4e07-9a02-c628fb29ed58", "sighting--e73e15cb-a2f2-49d1-9bf8-4a9fe1f566dd", "sighting--0855cef7-0ba4-4232-9834-6e765e93dd58", "sighting--1b66a1f1-19b0-4660-bf4c-314e6195f9d2", "sighting--4f2084b2-2b1c-4ec5-b54a-d26f32c1ce59", "sighting--f2acba52-4a38-46af-afa9-8823d86ec89b", "sighting--e9ed9844-4532-4bf1-87bc-8637a05fda4d", "sighting--d13e834f-bbd8-402e-bd89-15132fde4209", "sighting--436c8d28-1353-4463-94b9-5db4219e0e27", "sighting--19cbd606-a82b-4a11-8e51-d4a52fe3bdf3", "sighting--60341d83-cf81-46db-90c5-79aa6415211e", "sighting--792dce81-5ab7-4d36-b9fc-0113d1c8c4b8", "sighting--074f6f5c-7748-4d73-b78c-ab2864a49bb3", "sighting--399a9a1b-458b-41be-a839-3d2f07b14d90", "sighting--03da20b1-be9b-4430-9247-c75418cf54c4", "sighting--1d07a70a-3d5d-4bac-aa1c-d04feb1cbae1", "sighting--e8901dd6-a70a-4711-aaf6-4da1d8a92ea5", "sighting--338d8643-cd36-481e-b3c2-8fd894db7d4e", "sighting--612fe2bb-fb21-456b-80dd-e9db734d3503", "sighting--bcf66871-2d60-4297-8bf0-7f0de3e668e8", "sighting--9874222a-640d-48c6-91e9-44ee599860be", "sighting--b9a904af-c131-4383-bfdd-59de152a541a", "sighting--7bc44478-9352-4249-84b3-c2d3b5641389", "sighting--06a97ddf-f9c9-4018-b45d-e07f811ded18", "sighting--6a6df2a8-3dc2-4e84-b1ca-0cff56833fa3", "sighting--05ccdc05-d460-4df6-9b2a-fe7a134d12dc", "sighting--00c2ec73-68f4-4535-bff4-29f6a09a77c1", "sighting--646b8feb-b854-4c32-be09-53c922b069da", "sighting--49f64364-d6dd-453a-ba92-5affc5683297", "sighting--4dfea868-ada1-421d-a963-21db3259c5c2", "sighting--792562b8-1b1e-4c91-9bce-2a7934188f7e", "sighting--c3d8732e-fb52-496d-8c1d-6cb8a03d6918", "sighting--20349e4b-a167-40a9-aaac-b629e1642b4c", "sighting--0441edbf-0fec-4f0a-b528-69aa17f171ab", "sighting--924ecb72-8cc3-4ecb-845c-d6f7d8acb645", "sighting--f8a9510f-2a50-45b1-83c3-cf5e44525b5f", "sighting--478f1fdb-73ce-4783-bc36-ba173d29566f", "sighting--10a8a623-a281-463c-89e0-56c7a956f73f", "sighting--14923f3f-12f8-4e97-a465-5a432399cb45", "sighting--12a5556d-1877-45b7-b539-c4fa9181d424", "sighting--a18a2359-562f-45b5-9a3d-d75e8b0e3635", "sighting--4d86f4b4-a8cd-48ba-b1b7-817b6b7aa178", "sighting--ed3ca96f-3e07-4777-b387-354201ae916a", "sighting--ed978400-8025-4be5-b4e8-f723b9f3d4eb", "sighting--424e1858-1a19-43c3-b026-43637ef7fa85", "sighting--ea6e1485-b08e-4915-aba7-c4239b1da179", "sighting--5b263d07-33ce-4123-ae63-41487341c5ae", "sighting--d31fca73-0c95-4cdc-8158-72d92a98cdc1", "sighting--5e5dd545-7cb6-4adf-9cfa-3bb399093a4b", "sighting--e8010c60-211a-4556-b47b-3df71f273fc4", "sighting--ae2d89e0-7c71-4d4a-bba3-f559b6f528ef", "sighting--7afd6501-d4a8-4a61-baf9-4d92ad513b44", "sighting--74e76deb-d97e-4258-bfae-cd4bf705df0a", "sighting--3232a95b-1681-4cf9-9533-e76d858ac262", "sighting--9c14247d-f6b8-4196-803b-f56ce212a032", "sighting--740ebdf0-f276-4d61-aaa1-cd5eaa78e257", "sighting--51eeb23e-ad44-471e-88fd-41ea26489c8e", "sighting--d747dbae-3a84-423a-bf7c-ef4b040b50f5", "sighting--b16cf072-1954-4c0a-b51c-a2cf16b8c7fc", "sighting--29371420-1205-456f-9a16-2ae3636cab17", "sighting--c902dab5-75b4-4b7c-99b3-e1c516455134", "sighting--3656c726-e229-4917-a10c-c5395001caeb", "sighting--e8e44f49-8aec-4e29-b28a-07d740aaac4f", "sighting--ce1e943f-2243-4e57-88c3-a65292070fd8", "sighting--cb83397a-35dd-469c-9929-cd447b9d6b71", "sighting--ef64c2fc-2097-4ff9-8c30-068e372be118", "sighting--d98a7bb6-deb2-4bb5-9adb-cfdf0916dce3", "sighting--364bbcbe-0a53-411b-a2ec-f918b62e8920", "sighting--b1c29b9e-8ba2-4ccc-bac8-26db0621f55a", "sighting--bbdae865-940a-464c-bc5e-e0e2e7ca7e3f", "sighting--2df4980d-c449-4aa6-9c63-b48484e1416d", "sighting--b46b0269-17fc-4d3b-8163-e219b8c21410", "sighting--b45c22fd-b493-41ca-9b21-e932335b83f4", "sighting--0f3a1f06-36fb-48db-941a-cd2169dfdd91", "sighting--bab7d847-6cae-400c-b012-48b906091dd3", "sighting--d2951d91-f65b-4e9d-bdbc-b62717e4243e", "sighting--6b15f762-a9f7-449f-94c3-3b3385c23e45", "sighting--226d1340-172a-4daa-baaf-aecc1533f606", "sighting--e2180ee4-5b4c-4685-838b-0c33f5eaa9a3", "sighting--bc9671fa-6e65-419b-83d2-52de59fc32b4", "sighting--99ce407b-b537-48dd-9770-3c4a87c70aac", "sighting--a7c2006b-a805-4290-8c72-d31426e9778f", "sighting--2ce36bee-90a5-431c-a382-6ba95dd5039f", "sighting--10f0d1c9-24e6-47f0-ae84-c388ab4ac087", "sighting--56803377-ac00-410d-8746-a34d0bc3f488", "sighting--0145d199-6720-45c4-ade7-45539a0943fe", "sighting--43d81adf-c70b-4bdf-8e23-8071a3692795", "sighting--8632fbc1-dad5-4a69-9512-089c1ea92117", "sighting--a2a37b84-063a-44ca-ab81-dfe3a35b65ce", "sighting--4e21c1f1-bafb-455d-8b63-2a738c8c5d73", "sighting--0a91b1f7-129f-4f4c-9e0d-e328138db4fd", "sighting--9d7c67d5-be07-4b3e-a165-6fc24d6a4a4c", "sighting--0e0a4d7a-6f06-4c16-8714-f5ccbb2f3526", "sighting--727b7148-4c12-4daf-916f-d112b4563256", "sighting--ca067880-cf74-437c-bf26-7727c3af20d1", "sighting--91034ff8-53a5-4de2-b484-01a0b5496c26", "sighting--550337dd-2475-4342-8927-812d1954ba88", "sighting--6f074af7-ae36-4045-a37e-7ade80276de3", "sighting--537714b9-ec71-4025-b5a9-566939abe29c", "sighting--ac3c27fc-67e8-4de4-a40d-7b4eec428294", "sighting--dcf7e8e8-4e07-4c8c-a117-200cf5fb323a", "sighting--a4272df5-71fc-4e96-8049-0a4867f3dc5e", "sighting--24860f30-87c0-4340-928e-054290002ec2", "sighting--b94c25da-2ba2-48a2-bee2-fa4168be0b4b", "sighting--cb6e4dbc-fd82-45f6-afdc-5f292be27302", "sighting--a3688bf5-f76e-494e-8caf-b74dd19f705d", "sighting--58b57d9e-75da-48dd-8371-ebf0e7c6519e", "sighting--ed93cea2-8e93-4308-b965-90811923fb60", "sighting--fed5c5d7-d2c5-45b1-a494-affd4d6ff9c0", "sighting--a795c35c-3004-4ef1-88ac-e24462110486", "sighting--c9b62d96-76d2-4abb-a03c-000bd342417a", "sighting--f86520ce-5fbe-45b4-8f20-282f4b724efd", "sighting--291775cf-9dd5-4ce5-bab7-b22e8135eaac", "sighting--c536e311-a4f6-4bb2-9977-7ad62fc4c08b", "sighting--235bd26f-67aa-4e34-8ea9-ad176fe7f18d", "sighting--188314d7-0c49-4959-9ed2-1a78a0c22dc4", "sighting--f97ecc45-4589-457f-b451-394b67333ecd", "sighting--a899ee9f-99a4-4b3a-8f18-714eee2106c7", "sighting--38cb61b5-21cc-4768-bc97-51206aecbc82", "sighting--1912ac41-433a-45e0-bba1-d0f6ca9213e9", "sighting--73b9f34e-88e9-4ed1-b7dd-354ada1a09f8", "sighting--9266006f-b147-478a-9fea-d3dceb91381b", "sighting--c2d5dc59-a20f-4ba3-939f-0948d9c4372f", "sighting--f9ebecad-65ae-448a-ae2b-5a0391d2d77a", "sighting--157b2b88-1535-4d3e-a271-cf7f2fc1bccd", "sighting--f3853aaa-a5f5-4832-93d8-6434ea7a916e", "sighting--846b52f7-c974-48c6-afcd-28e758f3fdb9", "sighting--d8c47aa1-f83d-46ed-9bb7-51d7f69c72ff", "sighting--8d8498a1-324e-4df0-8c47-f8414daedbbd", "sighting--b54bb47f-54da-43ac-a73c-201494fcc1d7", "sighting--d0f3429b-228c-4166-a9a9-094275d62889", "sighting--6fa9acc3-2c6b-49f9-90bb-8452839c176b", "sighting--38372496-7e32-4341-ad36-c66a51b19aba", "sighting--c62d9767-da10-48e1-8d45-17de9816766a", "sighting--429d81eb-6d25-4a3c-81aa-1f488b003b66", "sighting--52bc04aa-4a11-4274-9a1e-317ecb4f1001", "sighting--6d8febd3-2ad3-4d2b-b5a4-c76d0e368e0a", "sighting--f1ac4eb7-d28b-45db-9811-2f6319d7a41f", "sighting--2066b11b-638c-4af3-9eae-868f1d0052d5", "sighting--313b00ef-774b-4b10-8b04-81720f288185", "sighting--e486e80d-18fc-481e-b22f-36ad3c20a561", "sighting--08202764-278d-451d-a060-702f8b13e61b", "sighting--e0e7c749-7805-4d13-97b5-9a7f21c6b9ee", "sighting--1e2f9659-45f4-4f56-9f84-6adbf8f26998", "sighting--c7b56f88-99cd-42db-ba2a-db658a6f62bd", "sighting--634500c9-604c-4171-8304-aebe2fdec287", "sighting--702037a0-6fe3-4d17-a2f9-86fdac533787", "sighting--128d5216-76ae-4298-980a-375c6f10276e", "sighting--e30c0888-6b30-497f-956e-f10449a52343", "sighting--31ab39ef-551f-450a-94c7-bc7a460ddac1", "sighting--48322b18-a330-4dda-b81c-1e9320dab895", "sighting--d58aaf48-d20a-43f6-bec6-c19c0e504241", "sighting--340f664c-4f69-4375-8ec7-8f0f74993974", "sighting--f307779d-f41e-4f88-ae72-04d2dcc0cef2", "sighting--fb55dcbb-3915-4a04-8038-0a625898ecc5", "sighting--c9b368a9-32b5-4f58-8193-737f01e70fad", "sighting--10508e4e-0a01-49fe-942e-353c807bbcbc", "sighting--0b85bbf2-946b-421f-82f7-8f751f73b4db", "sighting--dd1583a4-1ec6-44df-8f54-6dee40ce2cad", "sighting--358ceebf-c077-4510-b9a7-7f3bf47b4ab4", "sighting--683757d4-214a-4062-93a7-189a71535671", "sighting--d04eae9b-a876-43f0-82e2-9a8c7497cfc4", "sighting--cc4ce865-86c4-4640-975a-1dcf51d172df", "sighting--28fe072a-f6f7-4feb-872b-ea7662a66555", "sighting--8c1582bc-6f14-4888-b21c-7f3c2a79f483", "sighting--54a9f54f-97b8-4a5a-9f65-1897336fdc96", "sighting--682eb429-e434-440b-970b-3f173e217f6f", "sighting--4b4f10a1-1aed-4bb5-856b-71bfc75dd86f", "sighting--96484b25-8293-4307-adf0-09dc8c6817d0", "sighting--0d27b8be-12e9-4856-97f9-5a83b07a9bc5", "sighting--0ecf5df1-79ec-4037-8f3f-6bf49b5c2049", "sighting--a91a6d26-7a49-4d41-b906-7b744947087e", "sighting--d01d920c-20f1-4bf2-8bc2-b3f8ddab939a", "sighting--dee25248-f3ed-4619-9dfa-51440b2728fd", "sighting--9dcd93f2-8d2a-4bc2-b049-f309f688c6d2", "sighting--0f957ff7-0767-4158-be7e-1114372f5c47", "sighting--d41f9ced-3814-4a02-b0ef-47847757870f", "sighting--3f147ca8-a71c-4795-b9f5-7b7c5031bc2d", "sighting--9135371c-cd36-435b-a121-c3de22403be0", "sighting--57fda23c-40d3-47ff-a879-8e2a844f9e01", "sighting--d3e20782-be2b-48fd-a92a-4b3604ebcf70", "sighting--b5911cb1-7ace-48e2-83da-92077f611362", "sighting--e9a74fc7-1632-445e-9de0-84c8921f3e13", "sighting--ed5d14b7-0f54-4d94-9467-7cb109e6698d", "sighting--70d4584b-83a4-4f79-a6bc-ec257d1e8888", "sighting--ccea722b-0c4f-4d3a-8039-ba7a9fb3681d", "sighting--73963ea5-b8ce-4160-b877-6514b0f0f793", "sighting--0d194afa-fc9f-4142-baab-54c1e0b9bdfe", "sighting--29a3f48e-093c-4cb9-ad23-635299febb03", "sighting--02a8bcae-6e2c-4ec8-9e25-712b31d3ebf3", "sighting--26516ab3-9fee-462f-94e8-a05aae430f73", "sighting--15e0989c-d5a9-46ba-8716-83c4c530eec2", "sighting--ad3ba318-7f92-431b-9bda-f832bc73e959", "sighting--8dc32da5-609c-4572-996e-b4107f9dee07", "sighting--5c0b657e-410a-4a72-9e95-a904e720d974", "sighting--264d3814-e068-43ac-9544-8c824b53f374", "sighting--1468e383-26be-467d-abc0-6002b682658b", "sighting--6312e30b-9c66-494a-9402-c45faf009c2e", "sighting--bd936cdc-9f95-4eb3-a448-8b524a945b58", "sighting--fca27487-9f2a-4eb9-92d7-11b08834ecf4", "sighting--80ac4f03-5832-416e-94b2-e2825bdb82de", "sighting--9f84f66a-ec5b-450a-82d9-d24201eb1867", "sighting--0b8ec083-373e-4d4c-9c25-e1d4fc9b15d9", "sighting--d6d4d2d8-0189-4681-86b1-1ef9bc2eb378", "sighting--379ef704-a6cc-4f13-a5d5-43590ba6cf4d", "sighting--d298cc5c-9cf8-4e99-8bcf-337eee5d834c", "sighting--8e0b4b05-8b7a-4d9a-bb89-5497f67e8554", "sighting--0bb0f1d2-4964-4189-a8f4-2e372aca6266", "sighting--0d88f6e3-b393-4d8b-a755-5b88b7fcd8ea", "sighting--4d387ad2-59ec-4961-add8-e93f2f207fd0", "sighting--873fe20c-8858-4aab-9e96-29e2bd9003f5", "sighting--d6590f9a-f487-441a-9fbe-601c40a0462a", "sighting--3e128eae-b9c4-428b-a89e-e0831a4afb92", "sighting--87248490-1721-42cf-aac7-a526bf76b829", "sighting--90797a34-3a99-4af6-a9f0-39506e5552bd", "sighting--d83b306a-d9de-4ed2-9f17-c68e0ca984d4", "sighting--73f252ba-c0e3-46c5-8f10-1a602753c689", "sighting--0c8203ff-f39c-4149-9bdc-4c4d24a695f1", "sighting--8e6ec7ef-45ab-4c30-acf8-da151d7b9d0c", "sighting--311e2343-6c3b-41e6-bd3b-8075dce66aa5", "sighting--6574ca3e-dbe2-42c8-b44b-f821185d02bb", "sighting--24d27bb8-71b3-45bf-b5da-e477b71340e5", "sighting--055018a6-4b0c-4f98-80f3-0a3a1a3d9805", "sighting--60a4d4db-1344-4c51-85d1-6820758f82a4", "sighting--33c03295-e24d-40a1-b1a9-d9c9193e5b23", "sighting--b6f755b6-c95e-444f-8c07-1cefedf86581", "sighting--d2d7eea2-595f-4194-b928-5c299a23454c", "sighting--77e7dcee-bc5b-43a3-bb82-da84bcea4f4a", "sighting--f79406b7-0d63-453e-bbc4-b082e953cc59", "sighting--fce99114-5be9-432c-8a32-c02dd81fe861", "sighting--98878a6b-6228-4331-a7ec-453ed515b71e", "sighting--16966627-0c0c-4795-95e5-e52a8fa6acf3", "sighting--bf96f699-36ee-43c6-930b-4fee3a1c10a2", "sighting--51e35ad4-392d-41af-a579-dd49017504c4", "sighting--44dbcabd-7d1c-45a1-8730-42b9968e1299", "sighting--e453859d-935d-4995-88c2-a22dae169dfd", "sighting--12530e1c-7687-4b11-809c-a67bfcb3698b", "sighting--ebfb8397-e2ed-40cf-8c09-e8ed7ee3be22", "sighting--e758ed38-db5b-44f8-9d3d-a1ffd4c5fc99", "sighting--39f131e5-1ae8-4f8b-a4ee-a050c47aed95", "sighting--e6461fb0-aa29-47e9-b9b3-d35f95f1ff51", "sighting--2e1df8ee-a747-4841-89fa-70f55c3985a7", "sighting--5929e659-2a62-4968-98e9-25b3844d1f6a", "sighting--57e5733c-2d58-4775-94ba-1c74024451e4", "sighting--6f68ca19-761d-42d8-82cb-564dd99651cd", "sighting--5ce95d1d-b634-4baf-85fb-e4fc1dd8d9c8", "sighting--bc30242b-64df-41b3-a04f-bc1bb7f9a938", "sighting--1ad212dc-157c-4c19-981b-c67cd200ded2", "sighting--e9d19f58-60a5-4c45-8081-868b0ed7e5cc", "sighting--1af6eace-3e1f-4db2-86a9-7232f4b91ecc", "sighting--e3c18c1e-64d1-4675-830b-076b90929831", "sighting--2c728805-d442-430d-8b8f-ab5c58f50e38", "sighting--1a291f58-50c0-4d92-afe9-4f6e18de2f17", "sighting--14f5a517-d4b1-4160-8ceb-50922a29441c", "sighting--cab9e5cf-ca2a-4d9c-9013-1ae262932937", "sighting--cf61a5a5-f5d7-450b-8fd5-564d67483066", "sighting--9124b58b-aba8-4af4-bb72-5a39a3ac5e01", "sighting--3fab0cac-00de-42f8-aaa9-7664738b4bec", "sighting--369b0eaf-649a-4690-a3fd-2fa8c3f58e77", "sighting--c4c3ed8d-94d0-470e-b066-8acef36df8c9", "sighting--2ba30e5d-1a8b-467e-9475-fa43a60e1fcc", "sighting--d454b2a2-fe05-4a65-9519-1d428dbcfa72", "sighting--fd3f19e0-d237-422b-b0bd-e31119275515", "sighting--ccb9e878-8613-4b0f-8ef7-56ac925f1cff", "sighting--b074efec-112a-4a85-9493-e3397aad9b1b", "sighting--d2fb0443-9db4-4d53-a89c-2e94e164503d", "sighting--34f8b795-2a41-495f-b14e-b14d735f4f58", "sighting--a3ef1e9d-012a-4547-9900-689dbaa168f0", "sighting--5fc810db-5d15-462a-b613-8603ddd1b57c", "sighting--fcbf7f5c-956f-46f5-844a-3b7481d62fe0", "sighting--c832f03b-ee2c-417f-9a03-36c6fd921cd8", "sighting--0c8b5924-6371-4211-ac9a-adbde3a57d4d", "sighting--d955743e-14d9-4cba-b98a-125fe2ce07af", "sighting--c43793a6-3be3-4d87-9a2a-43b9c4683adb", "sighting--ca55c33a-cd63-419a-99ed-88f8c396eabd", "sighting--000d69b5-ec30-40a3-8ec8-02e143cbe6ef", "sighting--b4f07343-055f-4b79-8423-41e9e463fb9e", "sighting--6721b8b5-c059-4eb1-a9f0-3c193c30208f", "sighting--42827111-0b08-4c4d-9a2c-4bdb8635b79f", "sighting--325a2e13-9df8-4511-ad5f-4aa28a51defa", "sighting--e3ad81a9-632b-4e72-92a9-189777dbed81", "sighting--94117f8f-0034-4a4f-80a2-d8abc04cc99e", "sighting--89fa554c-45c3-47c3-a762-c73cf28701fe", "sighting--4f35822f-5508-4b58-a998-3d95910537c8", "sighting--2c2e89de-476d-490d-bcc0-210e98c396ba", "sighting--72fd48be-abaa-4870-bb72-f01e19fdf342", "sighting--641e29c2-1769-4716-ac1a-2f1bae641850", "sighting--abba4fd1-c042-43ed-b8e8-188d51def97d", "sighting--a65d8bc3-436d-4f04-9eb7-89763ec562ee", "sighting--9ea16dc0-087e-4463-8ea0-ff6835f75a49", "sighting--1983aee8-cd6c-4d47-88e1-f440596e8521", "sighting--3611a364-48a9-45b8-b1a4-2b8f77581f5d", "sighting--8fd7cf36-adf9-444d-88b5-b4e07c08f512", "sighting--662a7302-b841-4fbb-9ec1-d4c984e1177f", "sighting--0142f7ec-8159-429f-b24f-24d83ee0a887", "sighting--8d1a8274-65dc-49a5-9d4f-8ca765bfac44", "sighting--af307ad6-c9aa-48e5-9b10-0d53c1ecb5bd", "sighting--de02a6aa-e733-408c-9f3e-1012f58aa32d", "sighting--59053e6c-b000-4c72-bacb-524a9e4f5580", "sighting--66a57630-a3f9-4594-936d-aec3710de2f4", "sighting--1197e10d-7126-45ca-a6bb-4664f6dbb10d", "sighting--b131830c-5e76-4c60-9783-0482a45698aa", "sighting--68a773bd-d3e3-425f-82ae-1829e3e5dfcd", "sighting--d383d741-65ef-414a-8dc3-ed06fbc9443f", "sighting--ea1b0ce5-dc54-4749-bea9-c991f52f5977", "sighting--5ae1fd3c-4adf-43bf-9c55-0b97dade7766", "sighting--0142ef72-3859-4183-8637-a9619dee5454", "sighting--b6b52a98-be20-4373-8cea-0a2f7beefd8c", "sighting--78ce4991-f572-4c02-920a-03087a2efc98", "sighting--553b9f8d-6ce9-4ea0-b9a6-34d1e739c843", "sighting--7f86470f-df57-43c6-9f47-0b65d51fc5c1", "sighting--569fd13b-ec8e-4135-8194-6c7448f7c303", "sighting--f49961e7-c283-4621-afaf-fae5c38205b6", "sighting--08503e5b-d7ae-437a-b763-2295189de79a", "sighting--a1b59b9c-5cf5-4125-8b94-c8cdaac9d2c0", "sighting--400939fd-ce4e-4021-80dd-ab47f7ed4e87", "sighting--d13a686c-003c-44b7-b3b8-e5f26607f938", "sighting--fd94cdf0-9530-473b-89ce-7c53ca4b75a1", "sighting--0028f4c9-6570-49c8-a10c-fb07e4d247e3", "sighting--e6fabe82-d0de-4059-8246-e06c0e03ec08", "sighting--ae97210f-80f5-48f2-a0be-a021dc11fb4b", "sighting--b03e9be3-3ab3-4940-abea-b225ac3734ca", "sighting--c8ae9bac-d6ef-4a2d-97b0-20cfd86d3ac0", "sighting--7c7711d9-4513-433f-bd37-c81da641433b", "sighting--ec3eb233-0771-429c-9f34-99a5ac88d253", "sighting--54ceebe1-12b8-47d4-b508-d06d62627793", "sighting--688dae7a-8913-4432-8ca3-8f83a0f733ce", "sighting--8ae7826a-66a4-4f77-9a9c-cfb093f87379", "sighting--025d7df4-0b6d-414c-befc-9c6ee064c37b", "sighting--58d88ed3-e5a9-4754-89f5-03cf5930f72c", "sighting--f4e49524-5d88-4987-af6b-765baf7840e7", "sighting--79d72ab8-9241-40a5-9bb2-ebddf5984afa", "sighting--1fd6ead5-da99-4349-8f64-cc7a0c1e8cb4", "sighting--c4f971ae-cf61-40da-9716-91d523a3ec88", "sighting--22acdb81-040c-4246-b43f-da24018be1ad", "sighting--aa22ead4-1c5c-4fa2-84c7-42cc40bc27e7", "sighting--99fdfa1c-e5c0-41c1-9d7b-6e447655fae5", "sighting--e9bf032f-e328-4c1e-a460-92c3cb96678a", "sighting--8de2516d-25a0-4d1b-9b67-74233d751196", "sighting--fea56513-6f51-4075-878e-21bfb386be20", "sighting--cc01f242-c1d1-4704-b6ee-7ffb3248775d", "sighting--b575fe26-9093-4568-b073-d73cd4845ec4", "sighting--863f86b9-0c27-4de9-8943-02e0779b8951", "sighting--4f9fef4d-b55d-4054-8a97-c912ed2aaa5e", "sighting--2655c37c-18a1-4cff-b9f5-c53f714dbcbc", "sighting--5d92828c-346f-42c0-ae50-011cf3204b8e", "sighting--e860b5a9-56b5-4a62-9ef1-dee49387a2ff", "sighting--7389fa23-a660-4cc2-9166-3153416095c7", "sighting--c9e5f7e8-6baa-4c78-abd9-7448fc142e4f", "sighting--39e3d18c-c69d-476c-a9c2-d935b7fcdf0f", "sighting--a34cc688-86d7-4bbc-b1aa-ab84b8e3e663", "sighting--f7471732-c244-48da-903f-f5f64adea36f", "sighting--9b9c9a72-9534-4995-bf25-1f4fc692a202", "sighting--033202db-9f00-4bc5-a23f-6d5d4e8800c5", "sighting--5ca15547-b652-4535-8e2e-e4d0c7a354e0", "sighting--0fa932dc-6235-4ad7-989a-81ec4a8b586e", "sighting--613aaa11-79d0-4eab-8032-bc343eb12902", "sighting--9806b77e-b849-4778-93b6-acaaf6a54016", "sighting--c474dc57-2fc1-450c-a917-8c0043abcfae", "sighting--8daf3cd4-fb9f-4692-b6b8-ca1948d1b173", "sighting--7654e741-b7de-4986-8a50-0deb228ce960", "sighting--04e5699d-a814-49f7-89f3-2ab4324cc469", "sighting--093872fb-2b1b-45b6-9942-f5947a2076d3", "sighting--428c47f6-65b3-4aab-ae1b-21fc36c7f47c", "sighting--8d4f2f7e-b2f2-4c6b-bb18-7edf0a8377f7", "sighting--19bcdd47-a9eb-446a-804c-8fd2e4415525", "sighting--12b7beb6-d6e1-47ff-87f5-e0fb6b2ed80d", "sighting--08bdc6b2-d426-41ef-abbc-c60b84faa0ba", "sighting--b0bfb3ee-ed7a-46e9-85b3-1f5b36ddc4af", "sighting--52c022c1-d885-4bad-a93f-5a8b9a823e87", "sighting--1e22324d-db44-4d17-b0f8-f6145c26aef2", "sighting--69c7cc44-20d5-434c-807b-09c225c57c71", "sighting--938ae0ef-186c-4fa7-b12f-6006df99eb1d", "sighting--ae3d98a7-af33-4db2-914c-781da6580ff6", "sighting--2a113c3a-4e8b-4731-982e-c0d490bcc5e1", "sighting--c0ce82db-1e27-4a57-89ec-ea263ba1f755", "sighting--1f213678-3b1d-4ac5-93e9-07328393b9de", "sighting--a65b125f-d1be-4734-a5f0-2716b030b258", "sighting--8e476b8a-545d-498a-b8da-51b6858d3e97", "sighting--a58daf56-d2a5-4f47-a584-a93c641f6415", "sighting--c3a6e9df-4e33-4842-9010-26cf4e5243fd", "sighting--e80068b1-6c20-49e0-a159-30a1272697af", "sighting--10c8c060-90c9-4e87-a92c-da01311ab259", "sighting--35199fe3-003b-41e0-bc4e-f120661afe14", "sighting--a06a1589-1d4b-45c5-a915-f01730362799", "sighting--92bfe127-c888-4768-a69e-351ded48c269", "sighting--aebc152d-4482-46d6-a82b-ff22af23a599", "sighting--fff67a1d-1589-4228-bfb8-aeaa3856be3b", "sighting--94b7334f-1740-406b-8830-fc97f73c227f", "sighting--e06104dd-3df8-4594-bdb9-c57d27c9d303", "sighting--4cea559d-46d8-4dda-b778-8b2ffab98802", "sighting--1187f62d-1e13-4ce7-9938-89e480860354", "sighting--612fe439-b06f-49d0-a685-9a555ce14c98", "sighting--9ffd9cec-81b8-47d1-ae9b-ed1dfe0eb340", "sighting--e819c8d5-504f-431b-b290-dcd23ea7885a", "sighting--d6b309c1-df06-45f8-bf40-62f6e5160932", "sighting--61cba965-b90b-4eb5-ba89-c8a7eac547cf", "sighting--9a5d9552-c0f9-4f41-aa5a-b542c24c0476", "sighting--23a4fc40-f2de-4200-a22c-745d2d0eecb8", "sighting--0026ba51-1e67-4d01-8886-56b3fdf20354", "sighting--ec8e002e-bc4f-4bc8-acd7-68cf5f4914e3", "sighting--c686b1ce-7f02-4b07-b02c-a53258874c70", "sighting--983340c0-e678-4a0c-a83c-d46d1165d932", "sighting--328c0020-567b-4948-b407-4f938ef777ab", "sighting--29cd6deb-301c-40e0-b7ea-d0be35191e23", "sighting--71eeff39-42d6-4eca-b205-ef254bcdfb9e", "sighting--016cfe7d-7ed0-4f8a-b106-e697a0be60ee", "sighting--4366f833-3e34-41ee-8d62-531b7c82ecb7", "sighting--4379371c-5e45-4c0e-b994-4351c95e9e58", "sighting--8b349895-e581-4833-806e-8ae1e40c0146", "sighting--86611685-6e10-4af4-831d-78bb1d3fbe1d", "sighting--2cee01fc-53d1-4681-b017-558ba8d736cd", "sighting--c940b213-9217-4224-9f4d-0ef2e6bfc171", "sighting--d432841b-29ad-490e-a91e-3382ce149653", "sighting--cabcb637-f004-410f-8426-46276feb0186", "sighting--14f46128-c63b-4cb6-90fc-34c6d41168a9", "sighting--0b916b7e-a5ac-4b46-b731-b410478d9e8b", "sighting--01529cb1-7834-4be6-8960-e1e9e7862398", "sighting--114c3c9b-59f1-42db-a9ea-ae1654da7a8f", "sighting--ccd042c7-d617-405c-863e-92b1fc6b7ccf", "sighting--bda2e4f9-82b1-4627-9c03-598d5d7c45c1", "sighting--efca9e7f-3015-49fc-85d5-a54977d3e48e", "sighting--32c42bda-a74b-4285-bfa7-ea863bf60796", "sighting--1ecbaabf-b349-419c-bf6a-98f64a3ea9e4", "sighting--1f56678a-2bf0-4e80-8ffb-18c7dfb6dfc5", "sighting--67ef3056-3b24-4f9a-8dfa-c463688b0a36", "sighting--907c2f84-f1f5-4ced-b93e-2f199e163aad", "sighting--3eb67ba6-a9a6-4f25-b369-6e36f941810a", "sighting--d79f6a50-2274-45e9-93fb-eaf26e26ea61", "sighting--46775f2f-f35c-4ec5-b38b-4573101443f2", "sighting--151671df-187c-4887-897a-54f2f75e2c57", "sighting--8c6c760f-4b22-4e6c-b370-a2e29eb328f6", "sighting--2adf03ea-603e-4605-9d80-c3dbbe9c671e", "sighting--191707c7-671f-4c76-9c11-16efff5d0b00", "sighting--551f0931-d9e4-4cdf-b08b-b5316282ab57", "sighting--b8f7edcc-a64c-4320-9cb0-b3fff91714de", "sighting--2ca33f20-5458-4a09-aadc-a04c0b842bfd", "sighting--876769e7-c1dd-42ae-8c03-13c3e944dbf2", "sighting--f7cba9ae-601c-4d3a-9c26-7f14869b24e5", "sighting--8bd9d757-ad76-4394-b34a-71dd6abfe5e7", "sighting--ec4cddf2-a726-41ac-8824-b4bb48f9ca2e", "sighting--d8ffaf6e-3a96-4287-8061-163186d849a2", "sighting--775be200-5377-414a-80c4-ec31b5f664e2", "sighting--c98dcb14-9227-4abe-95b2-39a53faf7a8a", "sighting--16e7b623-0bcc-46ac-acd9-95fbb9e50763", "sighting--baec2876-053a-4cc7-b55c-1780b026327f", "sighting--5fb8a96f-0600-4a6c-b41c-ed639b8fe887", "sighting--269758e6-e412-4d52-a945-7403a2bd8ab2", "sighting--9c86fb18-ba07-4014-8357-300e199c73af", "sighting--2479970f-9868-422b-88f5-f31db760e50f", "sighting--1847efcd-aade-4d0a-91b6-55800505f9ae", "sighting--878c80e5-0f1f-4126-b5a0-32ec21c48417", "sighting--52d3b33b-9a7a-47e1-bd4c-883ab48c40e3", "sighting--87e1135d-5a2b-46f0-b220-11d00a8ee397", "sighting--46a785f2-737b-4f97-aa70-e2834b642682", "sighting--1bdeb413-f69f-4e65-9904-1561f414ede6", "sighting--6d40c73f-f890-4eda-9757-524359d272bf", "sighting--4df26854-5d10-4bed-84ab-1767711c0d7b", "sighting--2545d959-f038-4254-bdc6-92c81fdbf378", "sighting--cc4d155e-630b-4fc3-8c65-de0724c73981", "sighting--a69fd0cd-6caa-41d9-a93a-3f82ea3cd4dc", "sighting--57c62a7a-cdfb-4121-9f98-67be772c9b07", "sighting--c55126e8-40c0-4872-85c5-d2ce98ae17cf", "sighting--27c6a409-d631-488c-a1d2-8e1565b56141", "sighting--ab5bbae4-6a1e-460f-ba65-afe3caaa8b58", "sighting--44b7724d-57db-40ce-8e30-3b10a93c759d", "sighting--92450110-fc74-4900-84a4-71a4246d3e86", "sighting--83ab6c28-bb8c-447e-8d57-c9017112f1b0", "sighting--9413e28e-766a-4192-8fb1-71bcf1eede1f", "sighting--c4e4d406-8d38-414f-a8c7-752c3434c1ce", "sighting--d0318c17-f420-4282-affd-9cb1f0c2ee64", "sighting--15c4c9b2-0403-429d-8fec-561ee4b0ef93", "sighting--b87ebf7a-3fc4-4e63-a3a9-e33129a695e0", "sighting--c367a334-818e-445f-a810-3a675fa59a39", "sighting--13b73af2-614c-4cae-94b5-540dc3f76f34", "sighting--f28fc10a-6dfe-4bd4-a957-c4561faead18", "sighting--275b533a-61ba-4a42-8c6c-b06240ba6bd3", "sighting--3df3d0af-105c-47f9-b2a6-ef0c4b9ad2b2", "sighting--c83cafe0-cf0c-473a-8824-0cc6fa61683e", "sighting--58b28c85-4929-4e16-af4f-8e043326ba83", "sighting--577a6257-5242-4255-885b-9bed135c35c5", "sighting--57e78ba0-22e2-48f7-ad4d-88a8052b76e1", "sighting--ad0844cb-65e1-402f-83da-8080153d10c2", "sighting--faa4e7aa-c977-4a48-a154-ca111ff6ee7c", "sighting--f603678b-c6aa-4ea4-898a-cb657dcfe6ef", "sighting--fa6bcd9f-e702-4f2c-aa59-661f624fc79c", "sighting--56a86ce6-8bb3-40e8-acda-0294778eb06e", "sighting--deb7cbb5-bde8-4413-a129-d51f10f4aae1", "sighting--d9f799aa-7385-4303-b1f0-2672243cc6a6", "sighting--223b3543-e518-4dbc-8914-2a8f8a70a246", "sighting--cb198088-0f13-4dc9-afc4-7fe8fc6bf949", "sighting--ece6abc4-175c-4ead-b017-d5cb8f176553", "sighting--de0ed043-21e3-4755-813a-50a0bb4b66a0", "sighting--044522c4-2b1b-4372-9576-db8dd33c7b4f", "sighting--f2269b90-83f3-4225-b8a8-46f9eef8100f", "sighting--f9405a8b-9406-4ef7-915a-bf7bd3d9f6fc", "sighting--56add27e-fcbb-4f6e-b9f8-3488f5aaf630", "sighting--54ae2f79-f763-42f2-9564-6b75ed4d4be9", "sighting--683d1d26-f390-4154-94fd-e240f1126c01", "sighting--77d50979-124a-4c5b-aa25-cf4374e03712", "sighting--1cefecbd-5aa8-438a-a43b-220cf673f977", "sighting--775cb43f-e21d-4e3a-9883-7d8cfd9db4cf", "sighting--24e96632-70e0-45d8-9a79-407764d26abb", "sighting--51a0edef-bd72-4650-9d9b-496490041323", "sighting--7aa261fe-77ee-4cf4-802f-2241fceb5255", "sighting--cae3e7ca-20b7-4986-8a77-a60e93fcd8db", "sighting--d0ccb93e-ac4a-44c8-9096-cbf3ddf71f8b", "sighting--3ee3357b-b730-4e4e-8179-4e91065e32fe", "sighting--775891a8-9c18-40e1-b599-e9dafe4c93fa", "sighting--598ebdb5-060d-4a1c-aa60-423dcf1fcf93", "sighting--e5f6744e-166a-4056-8272-b7eca8f3f9b2", "sighting--af5c17c9-aa96-4b4f-9785-f3f1dc201fa3", "sighting--50e7cdb4-5cf8-4322-8b68-095c789227e8", "sighting--c510b7eb-9e8a-4f15-b142-fe59b748107c", "sighting--ca9945f8-fc7c-4fd6-9ad0-d4db5f6f7f71", "sighting--3a931601-121c-451b-a424-70b383444d67", "sighting--eaaaec6f-6eef-4432-8dac-6fe0e9507e6a", "sighting--ef878abb-d65a-4540-a19b-f6351e735ce6", "sighting--4660c04b-471f-4842-b254-713917f6dd42", "sighting--879047a5-440b-4be2-90ca-f0414916941f", "sighting--93fbc76b-a561-4582-8bcc-51c906763f60", "sighting--cb824676-9913-4b09-bb62-3b8d05fc9db3", "sighting--633b3439-33f5-496f-94c0-47fe2032435f", "sighting--ec56ec30-5773-462b-b945-f0d97a10b4ba", "sighting--e2dcf06f-9769-4257-9cc8-7d2fe013f8aa", "sighting--881b7f94-1db7-4765-8bdb-dcddf275ca61", "sighting--50a8baf1-b989-4504-86bf-08b3baaaff1a", "sighting--7bec009c-f581-4fc3-81e0-a6de278287c2", "sighting--102a27e3-f201-41fe-b801-abfdab584825", "sighting--3d979349-45c1-4f8c-900b-468527eac8aa", "sighting--c221095a-a09c-4971-a48f-b148b9d5b796", "sighting--be1434a0-d765-4935-bd22-ee1c7f045a5a", "sighting--71268927-255e-4028-8b8b-00becb8071da", "sighting--2fd75000-36c3-4001-8cdf-ec82b63eeb83", "sighting--83f8d79d-474c-4abd-870d-547e600e8b3e", "sighting--f88a4809-e244-4487-a638-c8c31688da34", "sighting--a2e8351f-95f5-42c8-8265-b09234e0bff6", "sighting--10932fbe-00b3-4b8a-94be-9f1ee146c277", "sighting--829faa95-42e4-404d-bf2b-facb2248ee7c", "sighting--8c598977-9811-4efd-94e8-b21367384b6c", "sighting--6818afe7-7b3e-4dad-8766-34d8d30b67cd", "sighting--39d99bfe-b6ea-44c6-a7a4-d881a14f2a1c", "sighting--452f2bae-7d7b-4d88-86a9-dfb9f903ebac", "sighting--2dcb8855-f62e-4bb6-9603-098a1b1c29c6", "sighting--81b7d44f-8f8e-46aa-b087-56aeee5e7b34", "sighting--66245d5b-c803-4ec8-bd37-f5b6281dfd76", "sighting--789baf1c-2f57-4101-8e40-a967898ea1d9", "sighting--75d89b64-a0bb-49ec-b7dc-d8e3dfae46d9", "sighting--615c604a-2e6d-48bc-99e2-b2dae6e4927d", "sighting--28255b89-6c2e-4de6-8ec5-cf7268038b6d", "sighting--f1a72d52-d394-4fba-8b27-9ba3832fa805", "sighting--ba5d3544-a318-4b1a-83ed-0d42ef8d95cb", "sighting--9ba63b69-3231-4c1a-a2f0-25297e473156", "sighting--850c23a6-4e83-4557-8afa-43bb6cb5ec24", "sighting--0a72bb0a-e9e5-43df-b8da-e6250b093901", "sighting--640cda2d-14c1-475f-abeb-718f90d295b2", "sighting--1d717b9e-a1e4-4702-a1b8-81e244860bbf", "sighting--d70f70c5-1378-408f-a0bc-c4db3f2e2112", "sighting--8c66b2be-58b3-4b06-9d0e-6d18043fa615", "sighting--72110f72-ef22-44dd-800a-dd38e64b8e28", "sighting--1c4ea8e0-1266-45d3-b860-2126517ee09b", "sighting--6128bc9d-90a3-49bd-93d3-8b2384d61c98", "sighting--4cfed53e-6f22-4caa-bbdf-6c3f3a80a9d7", "sighting--ca0d16ae-7d30-412a-ba15-e8d9532a6a96", "sighting--44fb3d7c-3142-4326-bfad-d19c60d9d0a2", "sighting--87b0dcc3-a46e-4444-81e9-5655c78de2fa", "sighting--b5f8fddc-889f-4e18-bc86-02fe9452d9a1", "sighting--71f04ace-9a59-45df-9b4c-96747bf70980", "sighting--e7eb332c-e1ed-4e26-b241-e0fe6e9d0ee5", "sighting--0329608a-b3e8-4e9e-a0a8-6c2b1eb17ef9", "sighting--e330d1c2-0886-4611-89f5-559069be93c8", "sighting--8ef0d805-ce23-43c6-9177-f3d7b448a0d9", "sighting--96c93cb8-cb98-450f-adc0-2904aef1e026", "sighting--4c60e199-45a3-43cb-a9e5-0caef76204e2", "sighting--e7c8107e-06d3-455c-980b-3a483ac53ce5", "sighting--c77d3618-d910-4e1d-88ed-13a3aed29989", "sighting--94bca319-bb4c-4d00-bb22-8f006c46bf87", "sighting--18b27f7f-31d6-4eee-a5fb-95d33bf48c5b", "sighting--53b6cc9b-b756-42b5-a52e-a886ec9b0c58", "sighting--6b8c7e70-6be9-42c2-a7ed-737615b57ed8", "sighting--31fba092-6a12-4bc3-9266-a1acabed6276", "sighting--dfefe38b-7a10-4a79-a034-c6ecab7744b2", "sighting--4633fc19-37f6-4ed7-b651-529183f8973c", "sighting--6150ca7a-f0f7-4050-a544-c694b3407f48", "sighting--803b762d-07b4-47da-ad99-ddf8635840b6", "sighting--8dc011de-2b29-4490-ac13-51d39f050449", "sighting--c92af15c-5e30-4d54-97c3-33b44c6a7a96", "sighting--b5d9e945-3a50-4364-aabe-28cdbd0fb105", "sighting--7f6ef4c9-0971-45c3-9c3e-e2ca61a0d1c6", "sighting--d31aa129-6ceb-4d7b-b345-02b53840e413", "sighting--598f3a4a-6b41-4eac-8a8a-d1326d3559e9", "sighting--8146349d-d9ab-49ad-885c-1489a926ebc5", "sighting--66441fe6-b6e5-4a3d-986b-a9ce1334043d", "sighting--005ff6bb-40e5-4e98-8585-7e1cf8d26d18", "sighting--a41a3fec-8d02-47f9-a86e-d19837d3b240", "sighting--0fe7b5ec-f27c-46d0-85ce-209a0612d5e3", "sighting--62d7aa3f-76fc-4326-828f-25686ac5e835", "sighting--a0795c61-3f82-4b15-959b-a95ee5e38f3c", "sighting--56f91896-ee5f-4570-b94c-23a615e440e3", "sighting--ac82466b-c58a-4312-ac14-df04f50374e9", "sighting--c2ed359b-5b3c-440d-a3b3-023030f99a4a", "sighting--6cac296a-76f1-42c4-bea2-6d4f63c9b9dd", "sighting--af410992-ba40-46a3-b588-422ac32c0ce7", "sighting--c8b32919-46a7-4913-8947-629a11a4cd00", "sighting--189bf143-385c-4a69-b34d-397f6a51efcd", "sighting--be4b3580-7c97-43a4-b66a-4a43ddc35cfb", "sighting--d6abb2d4-f04d-41f0-8120-baa54c0882bc", "sighting--76953f16-e9a3-4322-8547-b649a2bd0153", "sighting--4c45596b-b826-44bb-91e4-52b27c5252b3", "sighting--91db7ae5-ab95-4b6b-adda-b52b2ab5cf7d", "sighting--2ef9802d-19f1-48cb-bc1d-e6b7f0bade6f", "sighting--9557cfe7-96bd-4d98-8627-a4f878c15254", "sighting--4dca098f-bc81-49f5-9528-1d4051114f6f", "sighting--5c9d95f9-7ce9-49cc-8c53-390a263d2747", "sighting--2b94590d-6f8b-40dc-8a43-9b861373267f", "sighting--f2825c7a-7f33-4480-82af-4f5b413e57c5", "sighting--0178339f-e3ff-42b9-ac72-fea9f7073fc1", "sighting--e5e16479-8ef3-42da-8dc2-dd3eabb4bb1b", "sighting--b5e25211-9bec-45ee-879a-011f26775969", "sighting--edd38257-4368-43c7-94dd-8be2f1c5060d", "sighting--ea4fefe0-4b0b-45da-82b1-949b7a3d1e35", "sighting--39fe2d27-b7f2-4e5b-82b5-93f8460a04b7", "sighting--4862b2e8-2c3d-47b4-b7a8-096239f7be12", "sighting--a203640a-66d3-48ed-8ab8-04b9a065738d", "sighting--aad35726-8bc8-4cb8-a8e9-5f0a02abfe21", "sighting--f7189ae2-05cb-450e-ab42-fa3ca82a9fa8", "sighting--756c96d4-b88f-44e5-9a4d-4d54731c9d28", "sighting--86a6b7b3-628b-4b0c-a30b-c7daf7538442", "sighting--38f29788-af74-4521-a418-64baadf0978c", "sighting--95f4dac0-6dfd-4a7f-8c5c-c105f02bc3ae", "sighting--d32cbcde-a8e8-43b8-a0fd-fb7f43d9ab9d", "sighting--82eac422-1a90-4a6f-81e3-77ee645c7032", "sighting--33cd06bc-ef19-4e3b-aee2-0662358195b2", "sighting--4ab3f5ad-73df-4a2f-968c-a2fac2e0fd64", "sighting--fe7eca56-6cf2-4400-9df6-1cda6b070c9f", "sighting--4b676afa-3fbe-41f4-bca9-da637cbc2231", "sighting--8e9b363c-f404-40da-8030-4a560b115ce0", "sighting--76371bb3-4964-4e35-b02f-c02ca3d015da", "sighting--fa5136ce-c937-4ff9-ae94-09d2f13c1ffd", "sighting--a946ef42-fef4-4773-bd13-cafd5c8a7dc9", "sighting--90f6904a-0084-4e55-a349-fd133445a700", "sighting--9e30d34e-ac69-4b2c-9015-9f1fcc306474", "sighting--00d3332e-f257-4719-a4a8-778614ac08d6", "sighting--1e372a24-0627-4e7c-a8cc-dd73ff5247da", "sighting--9f33dec2-f533-4512-b672-82871c332214", "sighting--328bdcfe-de35-4416-b9e3-b7fd1c48e843", "sighting--acbff6e5-3651-4361-998b-5fac033e6f19", "sighting--462753bf-203d-4568-8580-bc9c25688fb9", "sighting--9be48acc-e2f8-4bec-a3ec-f0f1881b5c43", "sighting--0e3456b9-e785-4f47-9664-3bff0310eb1c", "sighting--0b69b5b6-fa92-4e58-8af9-e0eeac09fdb0", "sighting--de3aa7bd-6d76-433b-9a8b-6ab97ef73256", "sighting--44bbb794-8295-43d6-8cb8-72d9ca588cde", "sighting--6465c25f-3863-4f26-ab65-81eef14ab4f0", "sighting--89a207a0-5a3e-4fe6-b7c5-d8ac21335d93", "sighting--9e55ba92-3647-490c-a9c9-5e58db0b2ac9", "sighting--0069ba6a-51fb-4c5b-9a10-f95b5ec985f0", "sighting--50694d05-d39d-4a7a-a86c-d19b53e4f798", "sighting--7e8704ee-411f-4ce8-82e6-455c23663c26", "sighting--7e0742f4-66dc-4b2d-8452-7a11d053adca", "sighting--68264d8e-6c49-4e25-bb9d-1e6cb1a177f8", "sighting--3e20810c-2ea2-473c-8904-e0778f27652d", "sighting--e37e79cc-294b-4cc6-934c-c2c2a6a85398", "sighting--32f33797-ad5a-4a3b-952c-38a294b69a2d", "sighting--cb07c45b-1490-4109-8127-2d7a14f2e4ce", "sighting--4d801a7f-74d5-478d-9d61-8701e623d3e0", "sighting--7d9c4a08-98a0-4866-b459-c1f5e65f507c", "sighting--7d080368-450c-4f05-b0d4-bdfce807fcfc", "sighting--ebb45aca-4092-4d24-859f-f78827bce9c6", "sighting--260a2c1b-7e30-4350-bf88-ab83672b1e49", "sighting--d614a788-ee74-412d-aa6e-1b5df7da56a0", "sighting--9ee881bb-99bf-4558-a86f-da5ce7356408", "sighting--dce56ea6-b71a-45b6-9355-caa3ed923f68", "sighting--e7094fb3-97ce-4c00-aa47-a7b2980db24f", "sighting--2362a00f-1252-48ab-b974-1e2a0bbcab76", "sighting--1b8994eb-ae3f-46d9-bcb9-4d753ad101c7", "sighting--1823390e-3b75-4366-a702-c119d01ff784", "sighting--19ec0a59-c56d-498a-b818-70ab911bcc04", "sighting--591506c9-e180-4f3e-b500-2cb8c1e94700", "sighting--7206b361-7a33-4786-bd3a-7cdcf40db9e4", "sighting--b1f8eb72-af75-4111-a940-1b9fac2ee0d3", "sighting--c459bb7a-7b78-4afc-8b42-e1795bc2d8c0", "sighting--f62e628c-f43f-4497-805a-9588ac2c5d7a", "sighting--ee1e3a6e-b3af-49b2-bbcd-34bcc2206fdb", "sighting--8d8b218c-5231-47c7-9318-caf56ba360fa", "sighting--6576dabf-11d9-4542-8f8f-7d782dae09a9", "sighting--14599c8b-4eca-4e8e-818a-ddffd284c658", "sighting--00777f7b-5697-4181-8a76-6351bc536002", "sighting--c48371d0-eeed-41f6-a04e-ff3a712c73a2", "sighting--e9a737f7-cd07-4835-a8a2-22f00aa6d75a", "sighting--a5f1200d-df6a-4131-9ed9-128f389614aa", "sighting--548879a9-049e-4ddd-ae54-aa780f2a6d02", "sighting--55002c72-6be4-450c-af71-2a020bf3d7da", "sighting--524c808e-ae4c-47b1-9574-ae600b9b8c3e", "sighting--2c586604-b8ec-4ffb-aa11-5ddbf77e93ca", "sighting--eddaf227-b35b-4998-a910-88b3db3a11d2", "sighting--ebe75d25-9987-4ff6-be42-9951351d6eb1", "sighting--54a4aba9-d837-4ca2-a453-070631e5ce20", "sighting--b6cb9716-5bea-4d68-99a0-20190785bc15", "sighting--e99e06c2-28e2-40bf-b6bc-b8f10b1ea559", "sighting--43bf9ea2-83c3-48c2-b163-4645f801edb8", "sighting--008e0667-a923-484c-a5ee-2f8f62aa4b81", "sighting--32f3c39a-c37e-4512-b4c2-ddc276463f9b", "sighting--f07d36ac-757e-4a95-8075-b7588ce3d258", "sighting--1906033f-2e25-470f-a1d8-3a2e2e6dc083", "sighting--b94f51a1-c3bd-456f-a1fc-2dd34a5aac03", "sighting--48475876-fdec-47d3-92d2-d7e5b8e89f82", "sighting--f78c2509-49f6-4570-8be9-c4cb4743bd4f", "sighting--7811b3e3-b897-4143-b868-80dc17341d70", "sighting--e4f34655-21cd-4e97-8b8c-68e47f44a11f", "sighting--ac1c797d-cd1e-4d44-a9a0-d2545a143f33", "sighting--400bc89c-1428-464e-8b32-e0ea7666526e", "sighting--baa88b2e-d8eb-40a5-95dd-b0715971d89f", "sighting--1a215947-a8a6-45b3-9408-f2227e438f6c", "sighting--ddb46718-31b7-4f91-ad12-823484da467b", "sighting--2ce171dd-f266-4848-adfb-3502097f600c", "sighting--3c99af8f-0b55-47e4-9e18-6ab6074e9a78", "sighting--b3ce31ed-039e-4cbf-ba17-6bf7eab908f4", "sighting--d3504212-575f-483d-b52b-b9e31a44be1f", "sighting--19793152-4dc7-4fb2-89b5-817b22dadc83", "sighting--f0a1cd02-cc30-4b7a-bafd-31f42bf011ad", "sighting--7a46ad92-15be-4ca0-aeb6-52fb0a34d1c5", "sighting--d64bda46-0dcc-46b6-82d4-a3c928a1ae59", "sighting--9c3c585f-76dc-42c1-a377-57c6e44a6df5", "sighting--94d06fba-cdc4-42b8-92a4-90f2f0e00a88", "sighting--d869c78a-5735-411b-83f2-2baf620c5bd2", "sighting--7b537d4c-fb43-478c-9ba8-859b9afcc526", "sighting--5a7cb264-1f8a-4a0b-bd91-ec69e09e2cab", "sighting--cd49c294-c138-49f8-a9c9-ef773c792600", "sighting--849035e7-8751-4553-b526-6c51dcd615e6", "sighting--bb439e5a-6e3a-4e0e-9b38-870781e468b9", "sighting--299aae1a-d91e-4062-8df1-5945a7b18e62", "sighting--11aa3b9b-dad5-403c-b693-dc067d1c6013", "sighting--d27c272f-f7f2-43f1-a859-c783c6131bc5", "sighting--141f3244-232d-489b-aa68-0f87802b3a17", "sighting--6d0e9a52-7d5d-4fe4-a233-f0bd10d00e65", "sighting--837b5192-5b35-4165-bc93-47eb5ea7ee52", "sighting--36eb5b7b-b3e8-418b-a6e3-97835a85a497", "sighting--52b930e1-742c-4b25-ae10-ed62650739f2", "sighting--4cb4e6fc-d640-4331-a86c-bd18dbf29591", "sighting--b924a3b8-0ec1-4d29-8092-31af53632021", "sighting--b4e1891e-3b3a-4e52-858b-480cee6962fb", "sighting--909ce5b9-14c2-4dcb-bbe2-3c83c72927f4", "sighting--1cb99672-b261-4c0c-8d9e-81f58a5d687b", "sighting--134a4787-f527-4bba-a4f2-64909300ece7", "sighting--ed438fb0-ebcc-4338-b8b0-1509fc6cd991", "sighting--987531a5-16ce-488e-af85-110b0869dc8c", "sighting--9c129077-5d69-482e-a423-67f1fa1e8cc7", "sighting--78fa9019-eb00-413e-b1de-2774fffe1dd4", "sighting--2fd99cf5-8642-4e9b-a13a-d5e0eef7744a", "sighting--0581cfe6-b4a2-4dde-84d6-e0e4479b2b3b", "sighting--06c32b34-b73e-4f79-bd6c-67e7a8e42153", "sighting--34b69d91-6a60-4022-abd7-75742d64e3fa", "sighting--d7af119e-95cf-4d7e-aad2-a6ccf8ceedee", "sighting--2851b4b9-3f23-4bfd-9d10-146aee06104d", "sighting--64515b59-4d90-4c3f-9914-291387f7215f", "sighting--11660917-a425-4f72-891e-b2508a5a65e2", "sighting--6dec0de2-1609-4ef4-853b-2d9c4908e436", "sighting--d047c511-8dfe-42bd-8afe-4053d5db7eec", "sighting--c4cbae5b-73ca-4e9e-98de-8b5a926dfaf3", "sighting--3be0a11e-060a-4174-b292-c8bbb7ea30aa", "sighting--8a4d09ec-1a18-498d-85b8-4aa5ca0b6cfb", "sighting--b7b0d68c-1dfc-4113-8f62-b121210606e3", "sighting--b922fc8c-02f0-49a7-8d50-d1e532b678b0", "sighting--8460396c-e0c3-4aea-84b9-fff690128ab0", "sighting--46d144ab-ef26-44f5-8dd4-c089682d2d31", "sighting--d3c04f0c-4408-4b9a-87d6-078ba799984d", "sighting--cfdfb999-68fe-4afc-8f4f-196db5329d53", "sighting--840e549d-d119-4d08-bb8e-68abba640f95", "sighting--7abe9d6c-777f-4f06-a2b9-0dbf7914ef6a", "sighting--13d11f0b-8b06-400e-9c84-1d8963bbcb3e", "sighting--52c995d3-c2f4-4260-9fa0-e05c7698eddb", "sighting--36b45745-ac94-409f-93da-a2d01add9365", "sighting--08bf6698-2953-40ce-bb32-b2b125fb310d", "sighting--6b2c65c7-dbaa-497f-92ad-dbc62712e886", "sighting--2b1a0a9b-c2fe-4478-8413-40c91ea0ceb9", "sighting--2589cf77-d549-4234-bde6-27f4bd2c2d1a", "sighting--3f4a8992-3886-473b-a319-b3114b005328", "sighting--c9310870-d9f9-4754-bc70-1f68c188326a", "sighting--0d7485cd-8086-4c09-b2d2-3b936f94e52d", "sighting--811c52bd-999c-4b6d-8666-8a8bed0419ba", "sighting--74629488-fef6-4f18-8704-7cccb31c4ece", "sighting--a455b305-c13d-4c64-b44c-7211726c413f", "sighting--f8d85fb2-5025-44db-9b99-b65466f9dcd7", "sighting--72cf879d-31a4-4c3d-976d-0b8b955216f7", "sighting--88e50d0a-5b25-4b25-8e45-db16d3db5680", "sighting--fdc7b286-245d-4189-8f5d-25f73df7a099", "sighting--d56414eb-7c85-4e4a-b4ab-1246d291f96a", "sighting--31e2ab37-d5a8-4b22-8a21-257fbd7ad411", "sighting--655026e2-aa00-423b-8aed-bc19097d614a", "sighting--4b0c03b0-642f-4b1a-9efe-0ff8047f4778", "sighting--acd69ed1-941a-4236-8004-ecb630f016c4", "sighting--17686c82-b5c8-4736-b8e9-7b5acd5c780a", "sighting--9ba76499-dda7-465c-8c99-90eabac4a6f5", "sighting--d6c9d976-3ec4-448a-b4b4-693d96737c10", "sighting--a18956c9-fbdf-4afe-9000-a33df4e44b6c", "sighting--d147cb27-a806-4c1d-9dee-900631cc4cd5", "sighting--93057554-3072-4ef2-95b1-363d956a3fa7", "sighting--5b560c40-69d3-43ec-acc1-147237e6a185", "sighting--67f1de23-eaab-426c-93f3-1d03e6a4f16a", "sighting--45f0b1a2-8a07-4e83-9dbf-324dd6080922", "sighting--89a4eeb5-b0cb-4537-b7ce-9ce6d540dc50", "sighting--c1bcf7a6-9614-4ddd-81e6-3ccecff60f8d", "sighting--1f9fd206-b76d-422d-9839-239126de5d32", "sighting--f6b629c7-725e-4334-9356-d5354baba032", "sighting--9d66bd52-c2c5-467a-bd77-a4259d7f98aa", "sighting--8dde80d1-15d2-48ac-b4bc-24c84dc5a09e", "sighting--55b9c6ce-17f2-4919-9c1f-c8c151f85ee4", "sighting--c80ec061-cd6f-427f-9c47-e902a6e4a883", "sighting--051c3435-7412-47ca-8dfb-2c797f853d5e", "sighting--c6461b01-0c24-4d0c-b8cc-7d6d6f424e45", "sighting--8df5ce4a-1242-43d0-8003-8da5bb51c36f", "sighting--25bfdfe5-3f12-4437-ac96-39b19b7d6ac2", "sighting--48670cb3-d809-4c4a-8c4a-694778fa74d7", "sighting--87182790-07fb-497f-a6f1-4c739ca1c843", "sighting--8d682994-de1d-46db-9664-7e888198e915", "sighting--4330b129-8cef-4782-8243-08696fbaf938", "sighting--6097e224-5b52-4c96-985a-de4dc6e51748", "sighting--530b6ee5-550c-48ba-b8d1-c6debb096b13", "sighting--446ead8e-83c1-4406-b97b-bd982b01bf1a", "sighting--1a8f2afb-5cb4-4938-8369-25ec6ec3bf88", "sighting--1af38626-0a9f-4c85-8231-bd815a381268", "sighting--234c8a47-a2e2-40b6-97d8-e51532d94198", "sighting--bf692ade-d3d5-4cc5-8864-d545c7e29e8b", "sighting--a0bb2984-4d0d-4e26-bbc5-3d29b496f19e", "sighting--39898033-a471-4e84-9902-8aa36b709c82", "sighting--35e5c52e-ebfb-4d88-a4b7-fe59ccb9b278", "sighting--94cf568b-0ac8-4f24-b88c-22771bfaed32", "sighting--74f06d1a-a1b8-42b9-bd36-b7e00e2a403a", "sighting--418c17f1-fb25-4bcb-947a-0f4d240b4f90", "sighting--fe2e5ab1-2915-407d-abbb-bc6e39479f80", "sighting--36cc0d42-8bfa-4db8-95e8-90d1210d001c", "sighting--ebf444c6-32aa-425f-8628-f0d0cbbf9de8", "sighting--c41e7dc9-8cf6-4cf5-9889-a887ba6f06af", "sighting--fd725062-a81d-4463-8714-82173c9983d2", "sighting--0a4cceb0-5d00-464b-b62e-4ca9e14d6402", "sighting--9a7c37aa-a6ff-4a05-8b24-bf75caa725fc", "sighting--73c82f33-39cb-416b-aab7-7ff193c3b90d", "sighting--7068b700-2f44-4743-8a84-53722fcc2862", "sighting--aa2bc915-4033-456a-a6e1-c3f955804cc9", "sighting--e12b06ff-99f1-4e2b-9d84-474256aa294e", "sighting--03bb4bf7-f458-467b-b68e-dd0f755df107", "sighting--7d65a8b2-0c15-4e44-87fe-4ff88a7ed35d", "sighting--0582aa8a-4d0d-40af-a062-cc96f16545c3", "sighting--1f58fc8d-9bc9-4a68-a642-5281433492a3", "sighting--9b4dbd41-6752-4107-8a03-03ef45481c01", "sighting--ab7acd43-13e7-437f-9725-5dad00e87f63", "sighting--ecf672b2-7747-45ad-a5c6-ec81d1c4048e", "sighting--ef60b906-de26-4f72-8551-37a5254bd2e7", "sighting--f864dcfe-a7d7-4e24-98c0-ec3f517154bc", "sighting--1bb9c0ff-0020-4a2d-8921-713d8affa11a", "sighting--24d8564e-c77b-4b95-9a38-f9b790ec2baf", "sighting--8c8dd2ee-d1ab-4181-8a34-1381a3cf1088", "sighting--3d1dbf89-198d-4718-ae55-59caa7954a2e", "sighting--6f6a3768-57f6-4445-af6a-a5c04fbc6043", "sighting--0d4fa0e6-55d4-4152-b3f1-d9ce0aa91c27", "sighting--bfbe3ca9-37e6-432e-80af-e80ac825285a", "sighting--8a925841-3030-4f27-8308-a9d140000bbf", "sighting--5acbaf74-677f-40a8-98e4-e048c6269db9", "sighting--c53a4303-aa27-4655-855a-141ff6bb5947", "sighting--68af918f-210d-45cb-ae3c-3fb629cdc75f", "sighting--e22eee4b-94a1-4d0b-ba25-da799097087a", "sighting--656d29c5-ad11-4544-9315-445dbd549f08", "sighting--8c269589-a9e7-49e9-8841-85ad5baa4351", "sighting--e077328a-d168-4643-be00-86f6350831ae", "sighting--6cc328ab-e3cb-48ad-8a91-642b450bc9fe", "sighting--b00258dc-3a05-4a95-aeb4-99e4a494fdb0", "sighting--6aa7bc2f-233c-4b40-a256-fa82a88d2948", "sighting--1de4ac3a-04b9-4251-8a55-06f6e732f7f2", "sighting--e9dc2b00-ed64-4dc2-839a-2f9e46596e2d", "sighting--d2c932da-24d0-499b-9aad-4e666dc095ea", "sighting--e758bfc9-f9cb-4525-b920-ddee60b53ad3", "sighting--a9770148-93d9-4ed3-b296-a7b91aeed7d3", "sighting--8669e951-1c51-4812-af47-389302dec8a6", "sighting--8283fc98-c835-4738-9b5c-4b699d0047a4", "sighting--ef50c0c7-4fcc-40a9-8b4b-8dc28ee03501", "sighting--54bbd711-24fb-4763-9192-167441ef3e5b", "sighting--069e1663-6a75-42b0-b424-53f3bcdd368d", "sighting--a8e807e9-7b57-4229-a680-360fe41ad28c", "sighting--4c5784af-7ebd-437d-ae5f-333b8e9cc639", "sighting--a6dd643f-3cd7-4a24-abba-ad3c8721098f", "sighting--5a9e4446-3288-48e1-aef0-c80a95971776", "sighting--9004cb9f-c223-4afe-81b2-2e0566828479", "sighting--e8b9d874-1077-4725-a001-b4fe3541cd66", "sighting--41405953-9994-4e9a-a2c2-171ac4f2b497", "sighting--ce4e893f-d39d-4c79-84a4-a63e7d515fe6", "sighting--df92b85b-ccf7-4e23-a227-d982b96f194c", "sighting--b87cd9e7-fb9d-433a-87ea-85abd9975c0c", "sighting--aea1f1f7-faae-4638-b48e-145766f6530d", "sighting--620dd487-e4bb-48e8-8a32-fa70630bc579", "sighting--c5eb494d-be3e-4ee8-90b9-aac7f5efd62e", "sighting--fc31fa11-ce63-4e48-9ade-19c4622ac03c", "sighting--ebf6736d-667e-4e70-abf4-29063840bbc2", "sighting--557b0362-3d25-4f62-b5d2-1c2aa769c30b", "sighting--46a7d4b4-f461-4002-8fd0-ee938a6d9e98", "sighting--be4e9e2d-d17b-46be-a943-9ee01ede2325", "sighting--3a19e071-fafe-4509-a00f-1700dbd19f01", "sighting--7a3a6597-35a0-4914-98b2-40810f6559f6", "sighting--a073d46d-92ec-4db3-99c3-5921957854e9", "sighting--1c371a23-8466-465b-8dae-f08dcf364b3f", "sighting--46588f56-a622-4a3e-920b-57bf743d1272", "sighting--319a4f43-f26c-4281-8948-e88e62551364", "sighting--ad2d3541-0dbe-4cd4-bf12-429f98c137be", "sighting--61501cbb-d7a3-4f87-ab87-3d091a22ce79", "sighting--98fbe987-f7b3-4bbd-a3d6-c3daa7bf100a", "sighting--26ad83f8-9daa-4b87-a510-b8b6e24c24dc", "sighting--5475b46a-83ff-4564-a27d-4fd9976a436e", "sighting--a6727679-0195-4ba6-9f0e-9ea99d2c2868", "sighting--c38b57dc-d226-4850-b444-5f177b49d74a", "sighting--1326636a-eec9-4e9b-bb33-79323c29e7d8", "sighting--05180a86-217c-468f-bbf0-f307549f47c2", "sighting--b88321e2-457f-4d86-a6c1-5b9736d924dc", "sighting--e23ce4da-0b18-4e00-94a7-d726393c5498", "sighting--2f27d084-9900-44a0-8422-3c2b36fb4462", "sighting--5cb4b52f-6456-4340-bf44-41a02e2ff8a1", "sighting--f005719a-2cc4-478e-91c3-e7b72b0cf51d", "sighting--feca39c0-de5f-4793-a3ee-23f6f1bf6cb4", "sighting--799b9683-5707-42be-8ee6-a9fb499f61b3", "sighting--bb1156c2-ef93-4c64-97e4-ce7158832b82", "sighting--27f20d5e-9f5b-4b3b-9497-6601af0a5ae3", "sighting--fd08c2ef-088b-4a2c-a995-67939665fa21", "sighting--5fd77989-f4f7-42e1-abb7-1eb7166a9365", "sighting--c031ec21-9651-46ff-9e18-11ed7554b6c7", "sighting--147a0f19-1796-473d-8146-5c3f7d0716c4", "sighting--843f6086-f599-47dd-929b-a1d0ec6913cd", "sighting--8744760e-b1fd-4578-a33f-6a94c7c391ba", "sighting--ca05a46a-1bc1-4a07-b9e5-53a7d7188818", "sighting--ec803cef-2982-470e-a916-ead1eb9bb6d5", "sighting--3dab195c-5283-4605-9ead-98fb9711f5c2", "sighting--7bb7324f-d168-405f-bc21-756093d0595b", "sighting--141738cc-e1e0-49b4-a708-68e5370d5a92", "sighting--756d6956-0e0b-42e0-a53b-6fec2718ff5d", "sighting--f077a9c3-607e-4c76-8c6c-552c0df67a90", "sighting--e914c5d7-ecbb-41ea-a61e-0ed6167bcf9c", "sighting--15660ee9-4fa5-4732-9808-7f0d9cc4eb43", "sighting--4cc1a58a-f221-42de-836f-e0aab7c5687a", "sighting--06e5597f-abaa-46f2-b160-b12229d36799", "sighting--8d936ff6-6f08-4d09-88fe-54edcb235877", "sighting--dc917355-5a62-4065-975a-c73b5cc95d15", "sighting--3ed52560-7fc8-4a5f-b721-e908bcc1988a", "sighting--1587dbcc-f916-44a5-9cd9-0b4458245016", "sighting--a529aba6-0fe2-49e7-ac6b-79dcb03c0f16", "sighting--d0f7bbaf-ca40-41c4-9047-0620716ab6db", "sighting--9de5aa55-6e37-4f69-a89d-4bba09d108d5", "sighting--4b76134d-2270-4210-b599-93fa6292aec8", "sighting--adde934c-4170-4a95-b1c9-8166f59b2cc5", "sighting--9c4d980e-82b3-4fae-b868-bd05a555d3f0", "sighting--5a545377-9f6b-49da-aac2-f77c8e29341f", "sighting--47c97d46-ec4f-4e1a-934a-ac0afb752e3a", "sighting--1f72a8d1-dfdd-4194-a3d3-cc026fd87632", "sighting--b0f7781f-c0d8-461d-9ff2-0dd708dc387c", "sighting--21af7b74-df51-4c86-9c97-414f90826ce0", "sighting--f79ff831-10f8-45b6-b9ec-0604d1b861c5", "sighting--61676343-a399-4664-b01f-21480c149d82", "sighting--b3f74927-2b9c-4e7e-a6d4-02d9666deb93", "sighting--0dae4cdd-647c-4949-918c-486e78a6fde8", "sighting--ac1db2ba-1a6a-44cb-aaab-3414ae27f952", "sighting--a6201850-d803-446a-b918-715b4a7f329b", "sighting--6e7ded23-d1df-4c88-a101-2c961ede4b0f", "sighting--064db05b-2a54-4179-910b-0d64757bd4b5", "sighting--1ef2fce3-7128-475f-92d9-4b9176b069c0", "sighting--d7bab2a0-c5bb-46b5-8b8e-83aeab2df7a5", "sighting--1f9a9c81-ed48-427c-ab32-ce8304283025", "sighting--210b6ff9-f24f-47a6-bf55-3388cd0d6a09", "sighting--d8038939-6390-4894-ac00-0f49504f648a", "sighting--7a0e437d-d11c-4167-8e80-82bb31aa7ddd", "sighting--44ff314b-dd56-4e74-9921-aabceb1d99a0", "sighting--722c1014-f48a-4800-870d-6566772f5027", "sighting--80d74061-fb72-4708-82ed-9bc6ea5e6a68", "sighting--523e758f-92dd-4c4c-9de4-d9343ea67bb7", "sighting--86ed91ad-81c1-43c6-8233-8b8a604462a0", "sighting--e879ac52-8609-47c5-a70a-072fa143025a", "sighting--549e4384-a044-46c8-8799-c4ba42becaf2", "sighting--9f4eef14-b873-4a4c-a24b-becee73f38ac", "sighting--2d959050-47c3-4f8d-8ac6-63c8bbc0cb7b", "sighting--060a7989-8708-4375-a679-c75feeb57c70", "sighting--96d4150f-e196-4516-8fab-a35d85c0d759", "sighting--3b26ddfe-b258-423f-bae4-355ab32b6a35", "sighting--b0612393-0835-4100-9583-543a02c594da", "sighting--5788386d-8419-4737-8f1a-6a49445a0b92", "sighting--5f5d5689-765f-4355-8517-bab59abf67cd", "sighting--b1454f09-9b6c-4eb9-9b54-aa5044781384", "sighting--2c25b688-cc02-4673-b24c-8626fc8d5fba", "sighting--a8552d04-92a6-45fb-b820-7d1b778db4ff", "sighting--ec59c1c0-8d7f-4439-a864-4db2a6e238e0", "sighting--9dca4c95-fb92-423d-a70a-0ba53f1c2cb1", "sighting--84269107-1ad6-49f3-a4f7-37bb5ce376fa", "sighting--909eab94-dd2d-4f54-86ef-9bc8d276e47c", "sighting--3271fd3e-ce7d-4a0d-a8d7-61e06d52639a", "sighting--54f82346-f560-47c8-b4dd-3eedd89ba307", "sighting--5d4d6645-bdae-4308-beeb-0f97fd4641e5", "sighting--d0d3073b-60d8-406f-ae14-d964a17044aa", "sighting--f06f559a-9a31-4396-8d01-a16a6f214588", "sighting--80243cef-c5b1-4ef1-87d5-e72585d304d7", "sighting--a774aeb8-7f5e-4a36-9a20-3408946ace55", "sighting--6b55a39c-a9e8-49fe-a6c8-691755fc6ee7", "sighting--6982ee00-777c-409c-a6d8-4335889c9860", "sighting--5df00ab6-4c6d-4dbc-a0f6-aced5d9fa754", "sighting--ec63081c-12d4-41c8-ab71-9a4296c68595", "sighting--73ef0a84-777c-4b4a-b909-aa3f76ca814c", "sighting--f073808c-6f77-41cc-9588-b19dd4a4f78f", "sighting--1a4a771f-62eb-43e9-9b6b-0836a76bbe0b", "sighting--929e321d-880c-4d71-b931-42a488685550", "sighting--84306b66-bdef-4d6f-9dbe-80d1db844f29", "sighting--b92d449a-c2e8-4022-bf61-eb42955fbcc5", "sighting--151708e0-1265-48e5-beda-09fb34dd9efd", "sighting--f815db21-fbaf-4230-9643-a3a13dab223e", "sighting--ebfeb383-17ec-4e99-87cd-e40e8c0a1845", "sighting--07fe45f1-70c9-48be-b013-33c80e27046b", "sighting--ca69717a-1bd6-46d6-a8a5-279b53d21740", "sighting--027bb427-4f82-4d3f-b801-2fe4a0b52c19", "sighting--8a34afb8-d766-4635-8da9-87aab00d1dd6", "sighting--28952586-f201-479c-b02a-1e6609716459", "sighting--3f206aea-cb02-4012-8e99-79697bb9baaf", "sighting--62681e19-8af6-4a80-aa84-27625b144543", "sighting--e358116c-03ab-44e8-ad53-bae72f74f242", "sighting--039936b4-74d1-45c5-8c7d-4e5f530c168f", "sighting--cb0d6e13-0a5c-4fdf-8e0f-8e3e23779b5b", "sighting--16bcec11-7d1f-4cea-af81-6c4763dc345c", "sighting--12297092-b295-4150-a8d0-c9e158a93131", "sighting--34e4211a-fdfb-40b7-9b31-fa0b8fe3d725", "sighting--8a011865-7109-4a58-b465-a660712ec455", "sighting--e38bbad3-ca65-4b33-81a8-f959ecfc2217", "sighting--4651b728-ddfc-4c59-9e13-298629b1941c", "sighting--ffe18645-bf90-46ea-9f62-d403386e79f7", "sighting--348e85dc-78ec-4212-a722-c7b7ec942998", "sighting--0a576f53-d8ef-4f39-9098-dd24746a8d13", "sighting--77fd98b2-2268-44ca-9941-f3b2de800609", "sighting--2a3289aa-a169-4dfc-ab35-06bcadc60b8c", "sighting--1766624c-f1e3-4103-b017-541137cd5db4", "sighting--53e453c3-a361-4dcb-8d41-3a5a86aea515", "sighting--14e2c865-73b3-44f0-b85a-450cd4d5866a", "sighting--c280d524-76f0-4ed4-a25e-ba8c1edcb9f8", "sighting--468abf2d-f57b-469b-8217-c4e6fdd702c9", "sighting--49e438db-cfec-4f81-8357-7a8deb625f90", "sighting--a9a30f2b-d5cb-449a-a052-3f061388bffd", "sighting--cd5b84af-72d3-4240-bdb2-2df9a52a4118", "sighting--cf733eda-68a7-40aa-a0dd-86e7632e023b", "sighting--bffd2715-95bf-4b34-80b3-b107a0b61117", "sighting--3b7d68ef-3d50-4fe0-8d1f-c008c56ef5b4", "sighting--2f167814-afc2-4ecf-a30f-258cf189fc5c", "sighting--b8449949-e292-440f-9e1b-96e579809cf8", "sighting--61d8d22b-3437-41b3-b164-3cfdf287d7b5", "sighting--e1530e72-2031-42b2-8803-d758d6f866b3", "sighting--367e71ab-4dbb-4b7f-9d7b-3bcf9044f679", "sighting--9a3eef13-f2f7-4210-ba10-504238184444", "sighting--1f30f2ef-cea7-4159-9a30-e9ed4902eff1", "sighting--592be58a-0ae4-4cfc-a7b1-e7abecfb695b", "sighting--d3516ffb-f26b-461a-95a2-d3937e0f85bc", "sighting--3f7c0c56-be05-4a6f-b7f1-b4314a478ad9", "sighting--5c79f5d2-60e3-4b55-a5f5-51d1272cd2dd", "sighting--01f15310-d87c-4646-a463-483b50011fd2", "sighting--b7240bab-a2e0-4c23-a5d8-9530a1b768d3", "sighting--436a160f-1adc-4da7-a1a9-1705ff2e6517", "sighting--93758915-c411-437b-bc82-d2480547095a", "sighting--1ce8cb5a-ed8c-428f-9d67-f12dc4b308ca", "sighting--d50bd02f-f0c3-429b-b303-2654d59bf6b3", "sighting--d88c2feb-b446-4099-8069-9140f2174c1d", "sighting--b6d021ba-763f-4acc-920e-730db1c0eee9", "sighting--a386f2b0-396a-4c87-a59f-3d5a67010f51", "sighting--1a7a3d21-3bb1-460e-ad88-66f51f0b6357", "sighting--609844e8-55c8-4f67-bc8a-018e4267c757", "sighting--5f1d77f0-6471-4bf3-98d3-0dd356e58050", "sighting--9ed16e7f-c276-4e57-a631-f037d2af51f9", "sighting--9a23c445-42e2-49ed-874e-708e860e266c", "sighting--b3c56da4-efda-4c3d-9fcd-ad5a093b7fc7", "sighting--cb4825fd-1c46-41a7-96c7-e5127444f24f", "sighting--4bdac689-2208-4749-bf99-83aa7fa0b102", "sighting--f3b6bff7-40c7-43ec-a177-d15e070160e3", "sighting--b47dfb2d-7225-45bc-b391-74a494dff69e", "sighting--b14ee064-8374-42cf-89f1-3c1625422341", "sighting--dc3ac0c5-5207-46d7-9bd4-4cd55f6105da", "sighting--c61a159d-8f6f-4978-a599-83ac35de4341", "sighting--9daff1a4-730a-4a73-b6cc-1cd4d7bfbdf4", "sighting--9d046522-ef66-4251-8c7e-c038226e5f6d", "sighting--f14e3b3c-3596-471b-85c2-a05d7c266ba0", "sighting--3ea47229-9576-4a63-bbd9-0d072457d6f7", "sighting--fd2456c6-a527-4780-9f3c-c6b6259be88e", "sighting--8d81d017-cb8b-48da-a33e-fcb816a6b6a3", "sighting--fbf426d6-1333-47bd-b330-5fb3fdda203e", "sighting--28861fa2-aa91-407d-bb97-c1fb08f27c61", "sighting--fbf81d3c-f204-4e4a-9f10-26b71e3e7eaa", "sighting--e7f56ec6-32bb-47bd-9b01-2cb094935b3c", "sighting--5a4d8343-82f9-4746-829e-0af224e58d61", "sighting--887d769c-4c87-4a04-bef2-1d2b75ffde0b", "sighting--d2d5d0a0-89ef-464f-9f36-62be7a271b3a", "sighting--804ed6ba-a231-4855-8cd9-d947780e6ffb", "sighting--095ee612-82af-4841-8c05-d21465f9ec3a", "sighting--13b90d89-bff3-4528-ad41-0932967803d1", "sighting--52cd33d3-4269-4cd2-8324-bc1f99116052", "sighting--d6ac13d3-8708-409e-920b-e464bcaf74de", "sighting--b861da37-c5c5-42a1-9d47-d5aae4b4bd99", "sighting--c9404e0b-9e74-4c52-9012-4cc35d3caee3", "sighting--64fa6111-12c1-4a27-b93a-0b8e830929fd", "sighting--9c2dd7e5-1421-4244-a5b7-0811f5809eaa", "sighting--60467fe9-cf34-4cab-9cdf-69023980905b", "sighting--0cd68e0c-d669-41a7-9d53-14ca2074a710", "sighting--2dca5e14-b64b-4e7b-bb7d-3e84e4cab426", "sighting--0ee887ea-9e01-4fa2-9d66-70bc965c1adb", "sighting--0d32d2e3-41c2-4ddd-b963-19050b26de16", "sighting--0cdd2b5e-0acd-47a9-bc58-bb644b47d1f6", "sighting--9a6c9019-3913-45e9-9040-7eead55ec33c", "sighting--5402ff99-087b-4adf-8093-9e6fb43eee33", "sighting--a857ae72-af27-4702-9a85-48f43de7a293", "sighting--e034a4d0-8ded-49c7-9ec8-ebbba1ecd9b9", "sighting--2240b95a-95b8-44b8-b8be-1d4f0b2d8566", "sighting--acb7d505-7f3b-48c3-a198-92bfc34290cd", "sighting--d4a9625b-3b98-432b-8190-449eb36a48b6", "sighting--a37850bb-93b5-4cac-8522-dc3c3d817e51", "sighting--16f89d4c-d6e7-489e-8215-5a22ebc274b3", "sighting--0d3aceaa-1f55-48c7-babd-b7c9c3cee60a", "sighting--31e35c96-e590-4859-b4c1-1f8b9f4f985e", "sighting--6be5d242-c2a0-41f0-849a-8587c02acb18", "sighting--9b2ff157-2b0e-4ada-b9ce-4ba837ce0d09", "sighting--2c6571a1-3f0b-41c2-b246-475946510ff2", "sighting--4a84f099-7d87-4106-912c-b120ed549eb2", "sighting--e41f3548-4e29-4332-9824-e279f4ce4634", "sighting--0b79014a-ff1c-4eac-8a83-5600f8ff3441", "sighting--b22e8fd6-2796-4aa6-973f-0578b5641a59", "sighting--76abd087-417b-400f-84da-833774f9aabb", "sighting--b83bb705-bb26-449a-80d7-987d33d792d3", "sighting--4304c19c-6d74-47fb-854b-785b1ad6025d", "sighting--6b0f032f-9dd9-4933-8cc2-9ff77c9ead20", "sighting--2033a97d-94a4-47c5-9472-02bb1e14c5f6", "sighting--7902bb33-a1bd-4481-8b23-9d49c7c1a05a", "sighting--21b1a112-e5d4-4386-afe7-9d54b979bdaf", "sighting--51239fe8-028f-4f9a-865e-98024be449a4", "sighting--e0788eb5-9b3d-4d83-94c8-6955560fc81a", "sighting--cec160b4-00aa-4f96-8967-ac5c6dd1090b", "sighting--9280ba50-f2ba-480f-8ffa-6b9912432ccf", "sighting--d532f43b-1eaf-49b0-a942-fbc7a73da050", "sighting--f308c2e6-e12f-4476-b3e7-e7395cd11b6b", "sighting--ba9a3092-fde6-4dc6-b97b-5311322a7fae", "sighting--60e7bfbd-b4bd-4077-afc0-6dcf25fb63a4", "sighting--db159a93-3feb-4e82-8027-fd7f89775d16", "sighting--4922bf89-c8c8-440e-b7e4-227ef80dcb86", "sighting--1a1f1a65-6b63-4712-b55c-57f120e9484c", "sighting--7c1604d0-3e50-4267-b99a-29b3e0fce3e7", "sighting--b4de886f-d27b-4bea-9918-d36bd2acca70", "sighting--e7032760-6841-44c4-8ae5-6b5ad2a9d40b", "sighting--886492cd-e036-45a9-83a4-285d36e86acd", "sighting--f36ee358-cbb6-4224-a545-6c06d83c07d6", "sighting--c3832eed-1c20-4f16-b1a6-2fb97eb1dc6a", "sighting--e444a585-705a-4844-9735-f13cc31184c3", "sighting--c24fcd33-b23a-45c3-a8be-596263a13dd9", "sighting--c71d1b21-bfa1-4e9b-a585-8234f2a38e69", "sighting--4a97acc2-c814-4a65-837d-b36be4f14ef1", "sighting--d1ee6337-7124-4fae-a3ef-978886723520", "sighting--61f6e549-d935-4dac-af18-b36f8427adeb", "sighting--d06cbc83-3591-4d95-b025-32ed04a0bca9", "sighting--dff914d7-16a7-4b8d-8296-94c8c22c2ebb", "sighting--0374a56f-973a-4f7f-8570-7a20c6c25988", "sighting--45a6d496-2ccc-4192-a337-722ef4970964", "sighting--6477cb88-52e3-48c3-80d5-8c6108b5677c", "sighting--32adc959-e0d7-422c-8148-cb2fa5ef528a", "sighting--09683e3c-f427-4198-a459-131e1e9cf4c7", "sighting--e5d13a42-3b46-4ef8-8bda-10b2244d5208", "sighting--e4f8edf7-5c62-499b-bbb3-b887e2096640", "sighting--9eb3a046-7a17-4091-8279-f518566a434f", "sighting--85641c57-b9d4-4a74-be4a-e47200740a72", "sighting--33843d79-8775-4b12-9f7f-d7a4b14cc370", "sighting--bfc17277-2901-4efb-8f42-bcf36efbcf4f", "sighting--841de3f8-40d4-4c64-9494-a02deaa2849a", "sighting--9e120f67-4622-4f3a-9f0a-36a6532d85ed", "sighting--b731162b-ff42-47c6-b703-8efe7fcd86c0", "sighting--03bcb7bd-7aa3-40dc-9ee7-2b957d7d7fcc", "sighting--63c02432-4b45-4c56-a304-d490bd20bc66", "sighting--3c634d31-b4c5-4670-a790-d932ee18622e", "sighting--f26fbb4d-01d0-4780-adc2-e999df85cce3", "sighting--a8b6ee7b-9d8d-44c7-9348-21e3c1914293", "sighting--3793abcc-6a7b-49fd-9938-5b594d337997", "sighting--2ccd0d00-90f9-4361-b481-ac8370a217e5", "sighting--19dc4a15-431d-4798-855b-1229979ae332", "sighting--fe2019e6-7bbb-4791-9266-83d5a53a4294", "sighting--d73c707a-99db-4c65-bf71-8570ead625a4", "sighting--e616eb9d-27eb-4242-98ba-1892888930f7", "sighting--b2298dbb-a86a-4cd7-8da1-626bcc55a1f5", "sighting--af1d5df7-e7c6-4222-b417-6383d1158138", "sighting--9ce2f984-7b5b-4ab6-b8c3-9071e76db1a1", "sighting--3eaef125-f5c4-4fb0-8e18-51ed1d328af7", "sighting--36ff855b-2bb8-42ff-a065-02938ea590dc", "sighting--051976d1-7f5e-448d-a8df-b9caeb231176", "sighting--09c68b25-cacd-4206-9dbd-d80735f9b3c6", "sighting--9c9c4a89-4b7e-432a-ac9d-85cc9940b3a6", "sighting--829dd5be-f501-40e5-afa9-98e8b0e27ba8", "sighting--7f614674-6419-418c-8fa4-8b5fb6241268", "sighting--1422e9cc-7352-4a50-8ba2-df179789f0a6", "sighting--5243cca4-524a-4916-a6a3-739aeb5fa182", "sighting--da573fcc-6471-4468-9155-de76fbe09dfb", "sighting--9810873b-752a-4296-8c51-b1c35d5fd721", "sighting--b317caf6-d402-4af4-be9a-f267b4ae27bc", "sighting--de6ad078-736b-4c1b-b7ee-8e38a414a7eb", "sighting--58f36698-b0d7-46a5-ada4-55d68894f38f", "sighting--6c04798a-4c38-4cf1-922b-5f437e205f42", "sighting--b54e8d28-a252-47ae-9e55-59f3f9f1510e", "sighting--e1b7cdc9-d57a-4376-8134-b930f504809b", "sighting--07ae20f4-8653-45d6-908d-99d4c1febf1b", "sighting--4380012a-b03d-4fa6-a489-52fd9e10fce3", "sighting--d585d02d-d759-41f2-a6a0-a5c90f122c2a", "sighting--0c69ead4-95c8-4f6f-aa40-30581ca14e42", "sighting--bea30bbc-0898-4bac-ad01-19a64ea68be7", "sighting--c2f86eb1-ec29-40a4-9e67-dbd605542dbb", "sighting--b299ed0c-fe58-47d8-850f-4c8d5643090f", "sighting--e192c11f-58de-471c-8867-7f1c66fbac2c", "sighting--f04b2bf6-cfa0-4e64-a90a-f91052767f54", "sighting--9f78e336-c627-40ef-97c3-9c5e140a895c", "sighting--227c716c-5384-4c63-8147-cb8252b63b2e", "sighting--08fd8d55-5b92-43c1-8b95-c9e95a00292f", "sighting--4d4e3bf9-d657-44b8-a49d-2d6713bb58e6", "sighting--b8923091-b496-4df6-8a3e-bfa9b76583c9", "sighting--73e9a338-b197-4351-a8ec-a29886d57363", "sighting--1ff91bbc-83d0-4651-bce9-f6b00a519cf6", "sighting--1074bb2f-2d97-44a2-98dc-c118dd986c44", "sighting--e7a0f51e-e3a3-4ca7-910e-5674b450fb40", "sighting--140a85d5-2eb6-42de-9150-37a794566642", "sighting--33bc59df-e02f-40d2-a47e-da4572f5cd34", "sighting--b93f23ac-0224-4481-8a4f-a0dedb719da0", "sighting--244eb276-a07c-4d87-a96a-6d11cb9d47d2", "sighting--08f0085a-ae2f-4220-99f6-156ba496550a", "sighting--94e6a83b-9c16-4b4f-911a-5be786177f2d", "sighting--185a6415-e243-4413-b211-3b91a2229d07", "sighting--f6b910dd-9285-4621-8425-3ec0d7580121", "sighting--47a43f37-047a-43e7-ba1d-7b8c7bc45624", "sighting--df03d2cc-3c12-4f14-ad92-90677ea4e623", "sighting--1923f715-c4f8-40c5-977e-5d043f007093", "sighting--59d73620-411c-4874-8dcb-b496f160dc63", "sighting--9a4caad8-c219-4b20-98df-91d762b553da", "sighting--43cf0508-7d10-4172-86f1-bc3e34328d51", "sighting--bca41d29-ec57-410f-a75a-25aa55f45ca9", "sighting--482271fe-eada-48f8-ba71-91d3029a8f28", "sighting--32836299-6d2b-47e6-b721-1b29e0d2bfc7", "sighting--b09887a5-30bc-4925-a950-2d7c289ea1e8", "sighting--368384d4-467e-4dee-84c9-84b9005c400b", "sighting--75d211b5-5a83-4d5b-9fea-a4c59d56cb73", "sighting--9a8167aa-4df8-4f3b-ae91-117ff7aedb7b", "sighting--6404b40d-d2b1-4e96-946f-cec829eded4d", "sighting--c6ca41d2-49e5-431d-b176-ab689e989246", "sighting--b3780039-883e-45c2-b05f-8755af6db847", "sighting--f015c671-4821-426f-8887-bf4e5c12b2f9", "sighting--e6efb79b-1c26-4aa9-abca-05d46bfbd51f", "sighting--72a6c92e-3b60-48ed-8063-77d4a9a6b5c8", "sighting--11022a36-b10b-4871-b874-1c078c817479", "sighting--2512c324-9dba-47e3-99c3-c7af7786c843", "sighting--67ef9f19-0416-4d15-a716-164e89bd8a37", "sighting--26b42aa7-fb4d-4091-b000-604a65d8b7a8", "sighting--25db9631-7df7-4c7c-bd0d-eea3d6840f72", "sighting--e805a808-cdb1-4b07-b5e0-250750b37299", "sighting--128bf0bd-6e46-461e-b1cb-bdc4c3493a8e", "sighting--b207330a-67f7-4aab-bf51-ff625d66afa5", "sighting--1738ca0e-5b64-4463-8b86-bcb69ac6c6e6", "sighting--bb659452-2b74-4c3d-8c03-23d14a8616eb", "sighting--ce97bc98-5fbb-4940-9aa7-841b58be275d", "sighting--88e4f1d2-abea-4be1-9198-c807bf2f4f2c", "sighting--fdc73a01-8f78-4573-988b-55d42b040eba", "sighting--440dca6f-f5b3-4247-8790-cc66e14ab8be", "sighting--ead9656c-b01d-41e5-b6be-a82bcb781a9d", "sighting--0f652f1a-bc45-419a-a304-899c078f2316", "sighting--bf72c874-46b2-472b-b09c-032c2032d455", "sighting--18e1de51-b6f6-4727-a6ed-0b17099ff6b0", "sighting--2329afe4-adeb-4404-a7d4-739a0dc104eb", "sighting--2c874b11-4e62-42b2-b226-e7c208a48f37", "sighting--c6c7e510-192f-4415-8573-80a2777944d0", "sighting--c50eda77-97b9-4ada-8c51-959e11880448", "sighting--e1892d72-603d-49bd-ba19-5e359d707f66", "sighting--4bba13d5-6a6c-4106-b574-bea3a4db971a", "sighting--a81f7a55-312c-4fc3-8a12-550e2f1b5c2f", "sighting--f4c27035-1a7f-4794-a956-64986d11b525", "sighting--8dc05b29-80e4-4ff1-b0ea-e29154de2265", "sighting--909161b3-17a7-46a8-a36a-3a2e3a7e9610", "sighting--60d56693-0b65-4e27-9a8d-a621ec393355", "sighting--694e4b7d-e578-465c-83df-85e5e720dd00", "sighting--67afaa94-4fd5-4f3b-b157-f9c905cea0c3", "sighting--788f1877-2f9f-4878-97e9-3b7b510f2023", "sighting--a11887b6-f509-487e-a3bd-ad7c424c5a6c", "sighting--5502aa80-8e03-4e0d-b17b-c8fb0ae74a9f", "sighting--f4fb8e0b-b3d6-4af1-8dd7-749efdfd68b9", "sighting--acf5d615-b1a1-4bd4-9ec9-9d310c80076c", "sighting--a7c43af1-49a8-4744-b8c9-9c09e089d105", "sighting--c3630c96-2a07-4c72-a74d-79503d341186", "sighting--8c5e2ecd-427e-49b8-8981-0f362d41836e", "sighting--311e7c23-9daa-4fb1-b15e-73a652d35999", "sighting--b2dd6ff2-fe12-4245-a7f9-948eb816e290", "sighting--28b7d614-4ede-46da-9ecf-5b5762bec623", "sighting--2cbeb3b4-c748-4634-bd85-2160bb0533b9", "sighting--2d52b4ef-0a74-4d25-bdbe-0f55a0d0f531", "sighting--307deb73-82f0-4c66-81c7-051a0cd004f5", "sighting--36ec44a7-4953-4b0d-a017-52cc1e32ad28", "sighting--98746ff3-a6b5-4f41-a4e2-a2a9f711ffee", "sighting--e588e9f0-2c29-4e73-9112-60001707f1ad", "sighting--e4ff4492-3828-4fbb-b579-c5aed03ccb6b", "sighting--07ca8e35-55c2-40f6-bcf3-df18cb7cda4c", "sighting--6c0f2784-34d8-420f-98e2-51266f4e087d", "sighting--4b009467-88e4-432a-96d1-1cfa399e67f6", "sighting--adb726b9-736a-44c3-82b1-227c2023314c", "sighting--e317de3a-bebb-4c25-b83a-f283c6fb0e2f", "sighting--ef8f2675-b818-4237-9962-261bd5f9d3f5", "sighting--f1e30e8b-5dd1-47f4-a748-4b2559275941", "sighting--b655ba02-db23-4cec-8750-8d678dc1f532", "sighting--b0fd4621-f761-42ac-b090-92644476fa17", "sighting--633abc24-bae2-4caa-9f4c-6073f4868f8d", "sighting--533a0f08-fb6d-4b5d-b68e-7093028c13d7", "sighting--463c4c37-562e-4de2-b230-f6ab1b303430", "sighting--0451af27-0bce-43bb-bdde-3b8c20aa2221", "sighting--814639c1-2f99-4465-a00d-601cd489a94b", "sighting--218c0235-f1b4-4450-a511-0e4c4182ac26", "sighting--f2ba4620-1dd2-4f5c-b82e-4f1d5b6bdcbb", "sighting--bdca3aae-a9a8-4c33-bb61-6052472415d0", "sighting--deee0f6a-bef3-4f6e-aacc-e6c3efeca59f", "sighting--da4822b2-13da-4871-a568-d7bbe1e85c74", "sighting--ee906057-5c31-4e1f-bcf1-105287e5adb5", "sighting--f9bca011-dc20-466e-8b73-84aa6107d873", "sighting--4043dec0-4288-4d0e-a632-7577dd76e660", "sighting--2a6b939a-b926-4078-b4ff-95d2142e8a97", "sighting--b2a6b0d1-f566-4f4e-b68d-fae5065f206a", "sighting--23267112-21dc-4f0f-b093-5a38e090838e", "sighting--6cade620-649f-429e-84aa-98df9bd3b8e5", "sighting--8a764d7d-460b-421e-8ec5-7f04e0787ed2", "sighting--c8da281c-d40b-4352-8786-bf645bc54938", "sighting--8d5b6559-c971-4c33-9463-b486dd3ba612", "sighting--f5bcce6a-8750-4d51-8a28-adac69070da3", "sighting--ab904605-1e16-4641-81b6-d5c6934f8411", "sighting--067958e3-4b2e-4d5e-8b92-ce75f7de9351", "sighting--d23ea931-b19c-4e6b-bc6a-9fbec6a26604", "sighting--225d081b-e901-440c-9380-08c25e096bdf", "sighting--73023da2-d60e-40c0-bdb6-e145197fc116", "sighting--dacf36ba-b22b-4cbe-8c10-7264aa9f7101", "sighting--ef02a1bc-2e87-4ca0-b127-f4c459e2ce2d", "sighting--3e361e6d-6357-4b7d-aabc-986cd1c4a951", "sighting--f3b62490-ee7f-4122-9a95-ef862967a715", "sighting--9abce59f-73b6-42aa-a59c-ffb43be5cabf", "sighting--7776391a-a6a1-4753-9ef0-8c27a75de496", "sighting--1b00dccd-c309-4b21-a042-9f8058bb6d8f", "sighting--f4fca5bd-380c-475e-b471-c2e99cc095c2", "sighting--d1093400-ce37-4266-b57b-865babb214c0", "sighting--7d5c372e-4946-4bac-80f6-346e7c91b595", "sighting--40769e44-55c7-4ee4-b013-d780e5cb5eb6", "sighting--0092104a-ed88-4daa-b7eb-b8d46d986c79", "sighting--a6e7ee73-4fb4-4fe9-816f-f8b079c25119", "sighting--99db0b76-f384-41ea-a5b9-d0ca612eb0e0", "sighting--f023977a-9c39-4f65-a941-14cd4fa6e2e8", "sighting--d5bdbb76-7b71-4d89-ada0-d23d42347609", "sighting--98b941dc-07c0-45af-b638-0e2b7d348847", "sighting--4156339c-c5c9-40c0-9bdb-5980f3aa00ad", "sighting--b7ef35da-0907-4913-ade3-6dac3b4bd455", "sighting--ea0aa3c2-cc03-4f94-9142-2bb3e65d8eb0", "sighting--7c552592-dd44-4ed2-b8d8-33021d03f733", "sighting--b0d46f17-c1dd-45f6-99fa-02184e3adbec", "sighting--94f1fec1-7806-42ba-b66a-f96b2549b34e", "sighting--02d58c90-8276-4dd0-a50e-ae2de06a1cf7", "sighting--eafb9e7d-7d68-4b13-aaed-6e1a4276f795", "sighting--0f07b4ae-956c-4bcb-beab-5400d1e6d2c8", "sighting--616793d2-1754-4ce4-b0eb-f6e18b599f7d", "sighting--6c32bfcf-670b-4482-9363-e49347e5840f", "sighting--7660c98d-8d2a-4485-9aff-d2cc4e222aec", "sighting--6299ad06-ec76-4830-97d1-17ec9b846371", "sighting--26a8316b-6b7d-4ea2-b42b-ce3611e598b6", "sighting--46699987-06e1-4cea-bde9-b74251df1f80", "sighting--2d802865-483f-44f8-9408-c475a6acc596", "sighting--a900c138-1ab1-42d7-896e-d697852f7107", "sighting--b5caabea-8dc9-46ee-a1c1-39c256890f42", "sighting--3e4846be-a5b6-4189-9178-5f04e6371226", "sighting--ebe26bad-1780-43a2-a119-e05b5a4db47a", "sighting--8be75484-faae-4284-b00f-80940da9ac1e", "sighting--aea2524b-e09b-4c15-b994-737175f9b9e7", "sighting--21267e19-7bc4-46b1-a2a2-df3b6b7f2b56", "sighting--0a8def16-e666-415c-9e9b-c1c366db2de7", "sighting--e8415d48-0a9c-4bdb-883f-acb4bbbbc9e8", "sighting--9800294a-03de-4a48-a379-0916e4d7d9f9", "sighting--256f2966-ce47-46eb-9a85-f05eb3ff72cb", "sighting--c4fae27b-9a8c-4e02-a41e-b9938dd46c7e", "sighting--fe4e8c06-0ab2-448c-9539-8b873ecbb9d3", "sighting--93e7e9b8-c0a1-4bf0-9f00-b843e2a3e673", "sighting--e0395617-b36f-48b6-bd15-712dd629e882", "sighting--837fa35a-c567-4cf7-ba37-9b19c1572f26", "sighting--924bb938-de71-4a8c-964d-42a21a6baac9", "sighting--a242697f-1784-42bd-b438-84d817272943", "sighting--d4dd7675-203e-4e8d-85d5-0f36e33d30e3", "sighting--f352825e-5739-4729-a27a-628d65f2dfa7", "sighting--6263ecc0-43eb-4307-87eb-8c3c2cd5f284", "sighting--9e2d1112-77c0-4cdf-85f0-ed5dea20ea70", "sighting--c6f76106-258d-47fd-b3d4-128df06d3d0e", "sighting--db77ecb0-721c-4392-9ce4-a7fac5989dea", "sighting--1c91d2d9-a474-42c0-960b-65a96a6029e3", "sighting--a342e0b3-52e4-4665-8de6-74362702a63f", "sighting--0f9b715f-66cb-4c89-96fc-0127f7e66d59", "sighting--94413ca3-9078-41a7-a419-e197f1ebd0f3", "sighting--10961115-af70-459f-acfc-eec71c5bd32f", "sighting--d9432b1b-1211-4fd2-a9b5-a7dd21811ffe", "sighting--67e2246a-fe4d-4723-96e5-d0415912d239", "sighting--ab93ee24-092f-4467-8f03-a376e77d9f53", "sighting--0c1a7954-eddc-412d-a939-1034b1be05bd", "sighting--78559574-cc7b-4555-9220-6e82f2512064", "sighting--12e96349-9642-4142-bb92-21d3d21f4b07", "sighting--9ba956b6-d32b-42e4-8806-ac1ba97a496a", "sighting--99384e2e-97f6-4c14-bccb-b5ced956c510", "sighting--73e98acb-38dc-4d1e-9b3f-cc453e8d0bb3", "sighting--21f00f36-04fb-43a4-9e41-2bd6e24c4d5f", "sighting--ff194dcb-955a-4da9-8a3b-bccad151110e", "sighting--93b4924a-4d72-4124-974c-a7676ec704f7", "sighting--510b737c-45c9-44c2-9888-df85a186389c", "sighting--ab16af75-cf5c-4743-bee3-ae31e33ed01e", "sighting--ce2fa0fe-68ac-4a81-8570-e226f30b5e06", "sighting--033c2169-8ff9-496d-9290-509f801915cb", "sighting--0716b113-663e-4ad0-9c2f-9840344e5ef3", "sighting--5f486005-49ca-433b-a127-8b47dc3dbe72", "sighting--ea83c520-e8f3-4317-9c15-d4a6204fc282", "sighting--99842b62-971f-492f-b5f9-507cfea3dfb8", "sighting--55e5d762-3bb6-4ff1-80a3-1144cfa8661b", "sighting--629e315e-6165-45a4-8c85-eaf60dfbbe75", "sighting--6423d98a-e49f-43b6-92da-534c1fc9f306", "sighting--8d27008b-7450-48b8-ae75-ee60f1bb7bfa", "sighting--93572287-2970-4f2a-aa0e-d36df8438f94", "sighting--bab1d9c3-9bb9-429a-abbf-87b73f35bda4", "sighting--7898605e-9b28-4b55-8c7f-823d0342ce62", "sighting--cca9445d-c03d-491f-b033-c53416832be6", "sighting--af64f464-b0e2-450c-b4af-53ccfe7d57fc", "sighting--289f36df-b558-4076-9784-ce7316772422", "sighting--85e66ef0-a183-449e-9165-7e9341c5e4f8", "sighting--6e1d1cbd-6ebd-4e01-a7e1-f5af353c1779", "sighting--7821cb81-4dbd-4bd6-9480-a2422689f535", "sighting--b89c7a65-c89d-41df-a171-73898b54dde6", "sighting--33ed609d-6052-4cdf-826a-5796464f5aad", "sighting--1b0699a5-8431-46e8-80e5-85375e283089", "sighting--b6a1a665-10ee-4eb9-ac88-0fb44c82501f", "sighting--cd00a1d4-e649-4c63-9598-6d8d1e602239", "sighting--689dff4e-3778-4cfa-ba24-eadc7a439967", "sighting--58f8634f-8700-456c-9a97-284605da065c", "sighting--7a217d54-d2a0-45b5-9f0e-b431db523d65", "sighting--b130812b-173c-4aaf-b4ef-aac869c1bcb6", "sighting--3af001e0-8c5e-43f4-b066-3ef5665ad4f9", "sighting--6ce649ee-eee0-4b51-8937-82ffdd3b2791", "sighting--a088e557-d018-428d-9c3a-f26c67eb8d67", "sighting--54b777a8-cab4-4d32-91d7-8592a3218fc1", "sighting--64e5520e-a4c5-4159-a9ea-3b4103b8d01b", "sighting--f3b63bda-3645-46cc-b08d-11f6e041e673", "sighting--a0cba873-abf8-4725-ad2e-422aed82577c", "sighting--de5c32f9-0375-4f1f-b0b9-e641c31b40db", "sighting--55b180b7-2c46-4c15-8460-0dea612ea24d", "sighting--6f072b99-1076-46ac-b8c6-45303ccff7f9", "sighting--e113885f-140b-42ed-99df-69f7a0f147f0", "sighting--bdf14dc3-6a6c-4ff9-a7f6-69c4d2c015f1", "sighting--d195a502-5f64-4bc7-815d-7af53e5bbb3b", "sighting--908dff4e-287d-4b78-9b7e-92ed1b329145", "sighting--fe5af993-5bd9-4b40-8df0-d1281ba9635d", "sighting--476e5f0d-d7fb-40e9-9cb8-8d1254c2c494", "sighting--45213106-3241-407b-8ffd-c903628e40bc", "sighting--1c2fa70e-5804-41c9-9093-e0ebf3643792", "sighting--82d805b4-8fe6-4057-9a66-c8ad6bcb3718", "sighting--b5d1c01b-c5a4-4ca7-93c1-0c2f15eff188", "sighting--c6b3a215-991a-4161-9aec-e4b2eef4b920", "sighting--0833bd9c-140f-453c-98ca-7b9812a1c3e8", "sighting--cfde823a-b472-4675-82c7-6c826e4caa9f", "sighting--073e1ce4-e3cf-427a-ac60-2d1415a454cd", "sighting--64eeb297-2747-4b5f-bb39-c565e0b609be", "sighting--8e735a22-b6a7-4f6a-902f-6f07538a9d93", "sighting--09e8fc8c-ac30-49c1-99bb-f1d686037e2d", "sighting--ea2f21c7-e87e-414c-82c4-7eb789f211cc", "sighting--6514ffdb-0502-45af-81c8-635b7363e3bd", "sighting--ffb3d568-074d-4bf9-9f2f-f8c2ba399c41", "sighting--d04b3f8c-adb5-451d-b5e0-b27875b85cdc", "sighting--37c2953a-e615-4e57-8791-850b258fe553", "sighting--be14bf7c-00e9-471a-9da3-1508226e87c8", "sighting--8f7ba855-d5b7-49ce-becb-7cf61e695382", "sighting--e12649a4-5345-4a79-b7b0-9469a5f0e51e", "sighting--1c7ca964-4008-4725-b129-05e577bdb319", "sighting--c6ad3268-9435-4994-84bd-f1a0cf075d89", "sighting--ec63b31c-12b5-45d7-87fc-810274307cc9", "sighting--f704a432-549b-4258-9a9b-06e736a65122", "sighting--b16fe665-8c84-4cd9-921c-b702b96e7629", "sighting--d4560c3c-a302-4f2d-90f4-69a7c7f97902", "sighting--a5201e50-eb92-48e1-b443-884e10b154d1", "sighting--da49dd55-f7fe-4c99-b7b2-e5f5ee2758c9", "sighting--f927c248-3ea3-46a5-9e4f-ef7da3f4c44a", "sighting--5387f0a5-e353-4516-90f8-e50186d14a1b", "sighting--c9d20e1c-3c09-41ea-85ca-97b70b188304", "sighting--9013b184-65d5-4ebd-9791-9f83e9a9b1ce", "sighting--6a95008a-0e17-4209-b271-665f73fabbe2", "sighting--7843fd75-1019-4e62-91e0-2f6d1d17a063", "sighting--0e01e732-88e2-4625-9c67-fbb7141cfd89", "sighting--7f9e8b6a-6f46-4348-b2c6-851a52a7ee65", "sighting--81ef490b-ceb3-4fba-9329-7eddb03fa7cc", "sighting--83e8ecad-24d5-4bc8-bdbd-717a010e4354", "sighting--eb94d41f-728a-4cf7-9e0f-0b6d21f2b29f", "sighting--f4166cac-c98c-40f9-a6f2-d1f4fb6b5743", "sighting--e1867cb3-d03d-4470-87d7-2e87d68c7309", "sighting--4b3985ac-3e6d-40f5-898f-06254840e718", "sighting--bba699aa-ccaa-49fe-a3bf-433b5c5a3fff", "sighting--4eba6c82-4c37-4355-be10-85f21d988866", "sighting--3d82d111-d049-42f7-82ba-e0a14df19344", "sighting--772eac12-4313-44f8-968e-e5cf57a13033", "sighting--c8f62407-9307-4b41-a8b0-0235244e4927", "sighting--b32a80b0-0672-4971-a089-50715b121988", "sighting--a33700cb-dfdc-47cd-a4af-d80d718cb8c2", "sighting--d8912504-4c2e-4832-9c95-38b618e7e976", "sighting--2d1654b7-151d-4c40-84e4-a5a91c589455", "sighting--3b96ff65-eb44-40ca-b360-f0b370b772c8", "sighting--e3f6dac2-aca7-4e81-86bb-bc14012fab59", "sighting--47b8d7c6-1e48-4e4e-8679-5f8fce56c371", "sighting--3f60c1d1-6e78-4760-9cc4-0a4bb6123670", "sighting--49f3295a-3542-4f00-b180-13a2eba9d1ce", "sighting--c53de139-de7e-4044-82f9-9b3a9edd8fa9", "sighting--ea69f6c4-bb6d-49eb-a5d7-cbdcc69913a0", "sighting--4e1d647b-b88b-4b60-bb8b-43d41fcf5a79", "sighting--69f2083b-4285-4baa-b8d2-7fd0fbf49790", "sighting--313fa6f7-8179-4083-b616-41d26bcf3868", "sighting--00979d61-4b87-47dc-a160-35ca894f8fb6", "sighting--aaeddf50-33f6-4295-b86b-b91e84b4042d", "sighting--d6556c18-fdc1-4044-977e-9a4ceb9bdb9c", "sighting--3d8919de-ea6d-4cc7-bd90-eb8e3db97c74", "sighting--bbd0b95a-bd71-48c5-8aa8-5dff7409237c", "sighting--a660a50b-c306-47d3-b448-39bcaa9c648c", "sighting--868b8e29-6a10-4890-9f38-8b41b6ac246c", "sighting--4b3345d2-451f-46aa-b864-4665ff9b4499", "sighting--5f527ec2-726b-436c-812a-f8bd1ea891cc", "sighting--947cf6ee-960a-4e28-8ec2-e28c516a064c", "sighting--61a6629d-722d-4c63-9569-af9393e76963", "sighting--598cad98-356a-4a10-a1ae-b49e970eb0a4", "sighting--31a3f780-0b40-4fe3-aba5-2d3653b65a90", "sighting--f89d134a-85a2-4953-8c5c-9988c8b9ced6", "sighting--c77d08fd-cb53-4f6b-99ab-f9fb93fd8518", "sighting--4600361e-1252-4488-ba28-180a73eeaa4b", "sighting--66e36f89-c3f9-4c7c-a1b8-df42fbe0b712", "sighting--631a5255-f74e-4e82-ad09-19102d5b1a6c", "sighting--228da243-fa6b-47ae-8b97-0cf99c9c7afe", "sighting--1858331a-f6a6-4777-a206-bc73ee5a8f52", "sighting--d1e9fde3-f9c3-4180-8b8d-d3dac34ed7ef", "sighting--c1148ecc-b0a0-4c67-8d12-eba9589e0227", "sighting--1c7efd6f-15f9-47cb-a76d-0baa069ddc69", "sighting--6f8b7d71-1a88-43d9-9f4c-dcd7ca67ad93", "sighting--409d77c7-e704-4019-9f72-821dbda18a34", "sighting--a24362a1-ebc8-4399-9d92-0f756f22e4e9", "sighting--ddb40418-039e-491e-8838-2b7d8613bccb", "sighting--fcdfc08f-6d2c-4fc0-89be-ee23f2c271ee", "sighting--25899bc1-3f72-437c-a0f2-9fcf5d63d3f8", "sighting--473d66ff-12b0-4f45-905c-555ca2297070", "sighting--cc14cf78-aa3e-4efb-ad03-c13cb6da6bb0", "sighting--5eb7d04f-7e76-4241-9f9b-ef9087d32245", "sighting--17ec4e6b-7dc3-49bf-9105-e6eadeb4bf46", "sighting--2ad70204-4bf9-4a91-8a17-df004068d32f", "sighting--fd26c34a-1566-4691-8291-797dc89203a1", "sighting--b85cdfbd-207c-49b6-99f2-d82559d3d247", "sighting--7c31cd17-7890-46ab-b9e3-25d5b1c70c52", "sighting--e7fcd6d6-8868-4b96-90c1-8ebc5f12328b", "sighting--3d198630-8940-4ad4-87f3-6aff8df10c57", "sighting--7eac998e-7fb0-47d0-b49c-314d6228408a", "sighting--21add726-f04e-48f6-bc31-59df463832ad", "sighting--62a69a40-bc47-4a65-a320-d1e612244ca2", "sighting--1a1dbc8f-963f-487a-909b-8816eeab1ef9", "sighting--d227270a-2d0d-4bdb-ace8-0c766af22406", "sighting--3d89eec1-d5e4-4552-a6c4-f83211a187f1", "sighting--85dfe047-5610-46ed-adbb-b1b4d95ba516", "sighting--ae6c12f2-cf71-4e60-9545-bfdb555b34e5", "sighting--90d310be-4203-4262-a78a-5509e1de2e51", "sighting--1ccdc2b9-b251-4a96-8593-12ce00ebee05", "sighting--32f18b2e-21ee-415e-a71e-8e670028b17f", "sighting--5206edd4-31dd-43c9-ae16-245992c76483", "sighting--78d4a9c0-6bb0-4681-9d09-30e108ed78aa", "sighting--cb89e763-680a-4653-a0fd-9106ff64fbcc", "sighting--140bc179-a2f6-43d6-9646-f77faa05a989", "sighting--2c74bf12-bb25-4899-98c7-6b365d5341fc", "sighting--33af7bc9-63c3-4a94-816a-fe788fe25fa7", "sighting--9c9e931e-d9c2-4f4b-a120-be92abbf5fa5", "sighting--82ba5e44-1d6d-44ea-ae32-db38751251ba", "sighting--7835a095-2fbe-4083-94aa-095a2e58a843", "sighting--f486da6a-7686-4c13-9687-2ef97c08869f", "sighting--fd5c435b-8371-4f9c-b4f5-71db329c11a4", "sighting--0aed3d2a-64e1-4db0-9252-20f6c1565a36", "sighting--246dfade-fb87-44b3-a67b-fe075d737b8c", "sighting--388a408c-c481-4218-b35c-62386527f6be", "sighting--5c633ef0-f165-492a-85d0-52422f949bb4", "sighting--5a1a95cc-4d83-452e-a335-68dee99969c3", "sighting--fbdc456f-5244-45d4-8fc6-3a2feb5042e8", "sighting--fc36a8e5-d1ee-40fb-bec2-44f031160b60", "sighting--f0448d2a-65c1-4940-a3e8-230bec28721d", "sighting--46071072-6087-4207-83c1-2b1aee8fea7e", "sighting--94f25b2b-94ca-4535-a37f-bd59f42a037f", "sighting--1f54e78b-8e98-458d-8f9f-4c711bdbd5f3", "sighting--d1f5f024-dddb-4716-b71d-a17b24623fbd", "sighting--203f2181-eee6-4dd6-9264-0cb5f3fe2a40", "sighting--02a1375d-e7c9-49cf-bde0-2852fc66cb9c", "sighting--3b9ae66a-f241-4cbe-abba-e10ed1776096", "sighting--4fd7ecd2-ce7c-42b5-8ec5-223150fa5e77", "sighting--bca59e20-9cb9-4d65-b90a-bf125380b710", "sighting--70b84c8a-17cf-4e76-a61f-f5e8f4172665", "sighting--415c8ab9-675b-47d6-ac27-e9c75ee15b64", "sighting--7a30efe4-1da4-4bb2-8e64-1bd1d7d7efbb", "sighting--086d4cc7-d0f9-42a6-823b-525f411fb8c0", "sighting--bcbb942a-4ec3-4281-9368-b79a59a5cbc5", "sighting--9f8a31d7-e75e-4b45-b19a-0486808e1968", "sighting--bce65b98-7432-4dd7-be18-a3634bdf0842", "sighting--861d9d38-f525-443a-a717-aff7021cbe33", "sighting--01ac3c1a-467f-41ca-a699-aa077b5bf089", "sighting--8f0d3216-a190-4543-86f5-ad16ccbd4d49", "sighting--d1a452c7-2584-461a-a31a-20c62015edc0", "sighting--e4282b71-f4d1-4f80-bde2-45bcadef1b2e", "sighting--f0f350a5-9f6f-4c77-a672-33131e166f49", "sighting--c297f2d5-03de-4be6-a3d6-2f240e02f4e0", "sighting--e273646b-00c7-416d-aa51-7835238134f2", "sighting--6b495c52-b7e4-47c8-b5cc-f275c1b70800", "sighting--915fc86a-a4e5-4e4a-869e-d0337451deeb", "sighting--055ca4cf-246a-4367-b8f4-46c1885a1771", "sighting--395032c5-0d2d-4f59-87cf-49ecb5810368", "sighting--c64e213f-5bb6-45fe-82a2-c9574529ce19", "sighting--86f0d8a5-3ada-4936-b7b1-f7f2fd051b86", "sighting--a68d319f-5630-4fd9-978a-9f844e376374", "sighting--1e5ac4aa-fcf0-4294-a586-ed3698b819d3", "sighting--e55af381-755d-4ca0-9a60-1689f3fe9e81", "sighting--29e1331d-0605-4ab4-9232-ccd523878e2d", "sighting--d0781822-0ffb-45b9-8e78-aef2424cde98", "sighting--c74b69db-91f4-493a-868d-de8dac3046c7", "sighting--7a54f4d1-6bf7-46ee-b738-fd2da754595c", "sighting--ed548313-0223-4403-afb2-18913e51e74c", "sighting--247ad4ac-1b5c-42e3-8b01-89b8f2e5a121", "sighting--a53d430c-3618-4295-b022-cba99682e22d", "sighting--c71b7760-e5ab-4a0d-9c72-7eb86b36fae3", "sighting--fb86442c-c1f0-4045-a1d7-3c60d8352953", "sighting--64ae1f2f-642d-47dd-bf6d-12715fa02181", "sighting--ff0e5133-c3c0-448e-8a11-cd27cee6620c", "sighting--75bc45dc-8aa3-4e62-b1f9-9df7e925ba00", "sighting--69549d80-0292-4cdf-81ce-9965bfc3e1c8", "sighting--1a632c4b-9511-463f-8c67-159aaed6d047", "sighting--fdbe426c-73bb-489a-be68-3519796ec847", "sighting--fb743059-967f-4768-83e4-26ce50149b0c", "sighting--b689aa78-ebf2-4868-8dfb-c9a961a03897", "sighting--26ed0ed4-ebfd-46a7-a590-ed7a3e98cd81", "sighting--75fec616-1b50-4a76-9070-45396d90aec7", "sighting--faff64d2-cec9-4757-b0df-727efe178ec9", "sighting--ba449231-0126-4924-a044-26a10bb132fe", "sighting--600e0a0f-98b4-4685-a6d1-e6328c780773", "sighting--570c1559-f102-4aa8-842e-078277366bf9", "sighting--184472bf-b793-48b3-9de8-ea7370ee47f4", "sighting--f8b44e86-ebc5-4d5e-8f33-34d9dc47a836", "sighting--5b27a30f-dd86-4362-871f-97d9e88fce27", "sighting--3caa3595-03cf-47f3-a299-715d3e709524", "sighting--039221ed-c0b6-4991-b39d-0d075166d928", "sighting--dc9ae959-4d87-4167-89a1-303bbedcc8b9", "sighting--a8c1417c-767e-49ad-9092-c90cb70d92f8", "sighting--b5f590b7-fdbf-4d02-a380-e853f35b7cee", "sighting--b4cebcf7-9c5a-4f09-bdbe-31fe349decfc", "sighting--3be22b92-6122-4f65-a3a5-b3b6659774ce", "sighting--30f71de5-859b-4766-a48e-66227d827d0c", "sighting--3a3dc1d1-e3ef-45df-b228-bee7ae797863", "sighting--19fd3bff-2f69-45a3-8ac8-0f565108a27b", "sighting--47edf2c6-eeb3-4ec4-b6aa-20b90c462460", "sighting--a3097987-9837-4904-8534-0ef686132f5e", "sighting--94ab3f98-66e4-42b6-88b8-1dbe3c450114", "sighting--94448ce7-96e2-47ae-8330-88d212ef569b", "sighting--18eafb28-5fc1-4359-bec1-85465a92fef8", "sighting--8985db20-fd4a-4b09-bd4c-fded5b61b110", "sighting--4f886fef-f02e-4f2b-aacc-0b439c6a4022", "sighting--79464266-987f-496d-b920-dbbaba37503a", "sighting--a0fda1a2-65f9-4ed6-9bc3-684fd183da31", "sighting--daf62940-9473-4fac-ba5e-9c998c4d109b", "sighting--0055b9b0-24dc-4949-8c5a-11fc822b898d", "sighting--e8da7d77-b5a0-43ee-9a6a-e86d588ed378", "sighting--5cca0aea-726b-4b0a-a079-de93a5494d19", "sighting--c1800005-1ee8-4ad8-b2c0-3e68b3f06459", "sighting--ec5b4568-d6d5-406d-b619-4078074a0445", "sighting--a9fc600d-e410-4da5-b774-c46c42fdc88a", "sighting--479412ac-b279-48c3-ae39-31f57dc2f772", "sighting--5c4d733e-6cde-4694-bbfc-a278ff67fb35", "sighting--e5bdd9ed-46e8-441e-aa99-ececa326f58d", "sighting--0f28ae4a-2d0a-4492-88f1-0b75081ffc99", "sighting--7e64b66b-bdd6-44bc-8521-3812cfa179ea", "sighting--c8994c07-9333-449c-9290-b68c6fe75d21", "sighting--ef33f588-000b-4922-b010-37a8e17d3747", "sighting--6f156211-9a76-4180-9cfc-80d516be6fda", "sighting--79390d65-e347-422f-895e-adb1c228959e", "sighting--9f93e9fa-f0df-47a3-b186-8766275c8180", "sighting--aada8f2c-9e8f-44c5-8d3f-4fcb7de77606", "sighting--8d65fe9f-1abd-490c-8e2d-dcc4c2fa60d1", "sighting--b18b0430-9514-4614-9721-59d9e94e10c5", "sighting--f280699c-df28-4ec2-8fcd-3b468f8e963a", "sighting--401fd0e0-cd7e-4fcb-86d2-5a317a6c0bb6", "sighting--d2ae812e-7751-4434-a696-8650dab32e64", "sighting--ec22d41c-1ece-488b-aace-1e7320577109", "sighting--e6824cdd-4d00-4435-b5e1-ec9a3ed2b324", "sighting--c5bc4262-f02f-40f1-ad88-d692a3d75a55", "sighting--8a936b1c-305b-415e-85b8-ab4bc3b2bdef", "sighting--0d2bdb58-5b60-4a1d-86f8-038e193f518e", "sighting--a66fbe49-769a-45f0-a855-0590d14fc684", "sighting--acd73928-d271-4b31-9504-ce3901bb5666", "sighting--fce88538-5c62-4770-b770-cef741d5ff70", "sighting--713bc59f-42ca-4cd2-9424-6319d54933c4", "sighting--9091cc0c-8d54-4612-b53d-8ca0b072c248", "sighting--26948acf-2377-4cfe-b79d-5e5d90bc1d49", "sighting--f84e7dfb-c771-4114-b6cf-c4c88e96d8a9", "sighting--e39cc83b-c07b-47a9-a9a6-4c85d50844a1", "sighting--7f7a13f3-ba3d-49f9-a2ef-259ea26ecd9d", "sighting--4c9af350-e3ce-4d59-83b5-a9ac0844ce0e", "sighting--eb5b9a3f-7f7b-4d6a-9dfb-514d8afc7687", "sighting--b040a8bc-7a17-4d60-bf45-95d933f9fae6", "sighting--bea52c2b-0ed3-4ea1-a1df-f156521b6f1d", "sighting--cf31cf79-9c4c-4b23-9457-c3c9f349a879", "sighting--b789648c-c1c8-4917-8527-0908375b3769", "sighting--01bc0325-480b-4993-9181-dcc74c0bb8b3", "sighting--045e727e-258d-4713-8d6e-680cc0e87ab6", "sighting--d2db9cb2-301f-4229-9da0-8aefb264135a", "sighting--05defc09-915a-4c4f-ade0-9a13ecdcb11c", "sighting--31d265f9-fdf0-4154-bf73-36f3e2cf1d3b", "sighting--5e864b77-a30f-421e-91ad-ad48877f9f73", "sighting--9f6a2352-1c3f-423a-8b3e-aed4f570ca07", "sighting--2ae95d17-a646-4884-bf58-38a5049e72f8", "sighting--3eb29928-7130-4f1a-a7b8-bdc1b816cfca", "sighting--2c47b83a-5279-421d-aa5f-3fabdaba1907", "sighting--04368c9d-f884-4ef2-a634-956060325b5e", "sighting--6c51d5e8-1267-4e51-b229-557b0bf81277", "sighting--5596258b-ff1c-435b-9606-5623ed7f4877", "sighting--4186ae47-bee6-46e6-933c-b970df8a6ee7", "sighting--72671f4e-a49b-4b1f-b9a1-bbb9fc89db16", "sighting--ef772bed-399d-4acc-9516-458c0391e333", "sighting--32c89687-abbe-4311-b993-523bb7b46ab5", "sighting--d5ce4785-e047-46cd-8bdd-a1e7541da787", "sighting--cd42ac1e-e11e-4b68-b767-0dec60d7e131", "sighting--59062495-99a7-40e6-aa1c-efb15a292594", "sighting--11d80e21-3cac-4095-92f5-1716b280cd10", "sighting--8215fa23-255c-4977-a137-ffa8fdec202d", "sighting--8258e89c-24cd-488d-8002-16558c970d6d", "sighting--3da37c94-1729-40e2-be24-baf498bf5276", "sighting--983efee2-021d-4135-bb7c-0de81355a907", "sighting--bf101c62-3f8f-4961-9f98-d38562378db9", "sighting--1b37cd9a-dbea-4298-9c18-ea66b39910c2", "sighting--72d98e43-61e5-4bd5-acec-3c355b5232c5", "sighting--951ba6b8-0422-4a20-b1c6-faa66887316e", "sighting--03612dd1-5d1e-46ae-ab3b-e91b25bcb7e3", "sighting--c89f2561-86a3-4b98-9832-77ba089381d1", "sighting--9e77efd8-2ae2-486a-b58d-3c632dad14d9", "sighting--3389b892-8987-422d-8e36-cae6ba76eb00", "sighting--7d0fd982-915f-487e-8d11-fe7000a8b78f", "sighting--bd1cf400-9e49-4bca-8631-fc1955d623d7", "sighting--adefab09-c7ad-410f-838b-0408899ed39e", "sighting--9bad6a05-b772-420a-8c16-6e85de83d9e4", "sighting--c19a1778-86e1-440f-aea8-be1abdbc5f85", "sighting--3169328a-9152-4981-9a8e-9b7b07a1ab47", "sighting--674b36e7-154c-4ebc-adf1-75a8268917a5", "sighting--b19ee775-0a1a-413e-96b0-529ce941dfb3", "sighting--9c85b254-9879-4893-9774-7a788772efc7", "sighting--67035eac-d21a-4aea-be4b-8cf4d7268ebe", "sighting--c43e2fc1-6b6b-4f56-b528-9e1ea7cf0bc3", "sighting--6251f129-e449-433c-a833-9b227b79f058", "sighting--0f5ff397-5f4b-44ce-98a1-26bc230f8250", "sighting--fdfc246d-f1ee-48f6-9d64-683dec9f5d6f", "sighting--3a5109aa-b966-4b09-9d72-a5a2b274207e", "sighting--72e4c371-0092-4789-888a-a24804f28366", "sighting--9b1150a3-0d7c-4532-b116-3746bb7534a1", "sighting--44dc77b7-edd4-44fa-aa4f-492ec604987d", "sighting--e5c2c25b-e896-4219-a43a-15bf25976f47", "sighting--acd5478f-4ac7-4b3c-9c57-783b47caa46a", "sighting--150a95d2-18fe-4d8d-a388-1a210a858f22", "sighting--c07636c8-6571-430b-9b4e-6ccf9469e47c", "sighting--95849ad5-902a-43fb-8750-f8498581b88f", "sighting--762b0c32-9d16-4391-b266-0bbe0cb85c19", "sighting--805dc17c-21d4-4dbf-9c25-a833a4a42e13", "sighting--1fb14a6a-2902-435f-be19-270f129cf74c", "sighting--44f1a8ee-ecdc-42e3-92fa-dfe04db937a4", "sighting--830ce155-be6d-4c41-9c5a-4a04df2dbd07", "sighting--de6eee41-c129-4f4c-ae7e-83245b187474", "sighting--b448a1c0-52a9-4f92-a2cf-d66cb60c9a14", "sighting--905e70b2-f2e8-4985-8542-e0992e046033", "sighting--71ce05d9-5e8e-4125-91ea-28683f4de150", "sighting--3b461445-c6df-4c50-bec7-3f14924bd92a", "sighting--f124c1a3-06bd-47f6-a157-2adff478ab04", "sighting--3713fc08-050f-4373-9683-0455d6dd47d9", "sighting--2b483b9a-1042-406f-87b1-7176029c3acd", "sighting--e34adbd2-45b0-4ea1-a981-4c3b857655a2", "sighting--5ce7b09a-f7c2-4224-8b1b-be5b5b6331c2", "sighting--2c56b5b0-8d8c-4872-bb93-7659e3d6431e", "sighting--2293ea05-2514-437a-840d-8b1d169bbd70", "sighting--8d780fc2-c05b-40fc-b0be-6fd865f3b04a", "sighting--923d1cd6-ee5c-4fcd-ba51-ce368f9c52c2", "sighting--0083b396-59e7-487f-b492-f95699a98cab", "sighting--801a1b14-5c12-4ef7-9b39-65b8df2dddb0", "sighting--d37ac78f-3c67-4268-a248-cdfdc12c71a9", "sighting--1e7e3899-d4b5-4653-9782-93f565daa696", "sighting--51d8c460-9e04-42d7-9526-d532ad5ff8ee", "sighting--e4b90cf2-4abe-4c87-9e6c-6134dd8d9108", "sighting--8f8b5646-b384-4504-9b0c-b7bd39a74fb9", "sighting--06f5f63a-f96e-41eb-96cc-7855a292de76", "sighting--8289b5ba-a64a-4d8d-874c-1f2a07d90f2e", "sighting--3012d57b-a411-4429-b1fe-3f42f3b07c02", "sighting--9e69186c-8c5a-4743-8c39-3a01d8547df4", "sighting--c549e28f-5900-40e8-80d7-f90c3fa1bd84", "sighting--0eacc8bb-b86f-43b7-85eb-4dcc34ea273e", "sighting--7c275099-c415-46f3-aa9d-b272fbbe647e", "sighting--2fdf9464-86f2-4c64-bfdf-ce1a108272db", "sighting--058ad99b-9cd6-424e-bfe0-3ed1667a5382", "sighting--6aef5aab-a2fb-4da9-8ff0-a1a0fe055813", "sighting--d2e23131-0e09-40a4-a967-67c84b6b6a76", "sighting--c2d865bd-8806-4c8c-a417-550c2e3ee157", "sighting--e0d43a40-c2c5-4475-8468-6460b3ea9b58", "sighting--70740031-300e-47da-85ae-dddcf6b50a31", "sighting--e381233a-65e3-4a03-ad6d-afd48c4f2a08", "sighting--c95a5fee-5ea9-49a1-9a77-2986adab5667", "sighting--60983710-7843-4547-adbc-7b9c33ab042b", "sighting--9b4d8207-ca5a-46c7-8ed3-aaebe9a2e5bf", "sighting--67da8c6a-49ba-4e62-b176-5e21a4699a38", "sighting--caf168fb-418e-4079-9cb9-83513cc9cad2", "sighting--a9d027b9-74c7-4a8b-ae7e-e127e17392ff", "sighting--32ffcf81-a8f0-4819-8c14-71f8f9a0b565", "sighting--37152bf3-0e4c-4f15-80c2-6bf7846cea89", "sighting--23f596ac-a4e2-46ec-b8bc-d95e164e1d96", "sighting--807acbcb-53de-4a57-b40d-7833afd0e1ed", "sighting--99cae418-a771-48d6-9118-c3e1b814090b", "sighting--b679661e-7861-4a9d-afd3-1ec19daeeb4f", "sighting--57bc18e8-7a54-4cea-aec0-a3e82305e107", "sighting--86f4cde3-fe51-4d81-89cd-c15b72610b60", "sighting--9012534f-1eeb-482f-b5a6-22f4c9ab7cae", "sighting--77c64ed3-c8c3-4d73-8bfb-fe01c837f339", "sighting--4f1a6900-ea9f-4cd5-a2fa-598ffd2c9600", "sighting--333e7741-e7a6-458b-831a-66ba8ab322f7", "sighting--eeb77b42-b5c5-452a-8a50-ee54c8d2a514", "sighting--a364f1d7-7b81-4f27-9920-60ca20d11aef", "sighting--c28b200e-5d79-4692-b652-b059e328cdd5", "sighting--2302b7d9-6d0c-4bc0-8678-c2838cacd1b5", "sighting--2bd8448b-770a-408b-b721-178b79322666", "sighting--981941cb-d9cb-4386-84b6-d5fcc1730bef", "sighting--a63d8a86-25a4-4f8e-84bf-4ccd9af90bb2", "sighting--ef44d7f2-22dc-4244-92b7-3cc1243f81e3", "sighting--7db5b63c-95c3-40ae-b173-a3f8b2735d95", "sighting--bab37ca8-686e-423b-8e1a-6ee2fbec1d24", "sighting--8235f2b8-e2b9-4a58-9099-398ca0ff6a83", "sighting--2640fb47-453a-46b8-a136-9932170b5682", "sighting--7a087074-7ed4-4f8e-8aba-f2c52c92e05d", "sighting--4aa12e72-be6b-4e8b-947f-dcb3b7ef0f6d", "sighting--5e5a8251-4718-4c14-ba0b-e838d3461072", "sighting--7dd95c6e-da64-4af3-96f7-b58470a4d068", "sighting--96c48f28-cacb-451b-af67-0377396baffb", "sighting--0f9b3b64-9925-429f-a81d-79eb30359eec", "sighting--f6b2a6fd-6ed4-4618-8509-e75e7c31ceb9", "sighting--3b1eed52-cdee-4a3b-91cc-1acb30778c6c", "sighting--65c12499-da95-400b-b52c-04a6254f6026", "sighting--e532366b-b1a5-4234-a122-c99649bdd513", "sighting--59c19fa3-b8cf-46cb-83ac-a6626c4c2f6d", "sighting--07295c57-fc48-4f8a-b544-211432323416", "sighting--bad73834-20a0-4369-bd0f-90db9ad042d5", "sighting--9886e8c8-7f74-4134-acf0-5cfe7e68583f", "sighting--8ec749f4-c838-48db-9e8b-ecd8f1e2056c", "sighting--f54c26b2-192e-4332-811c-0a9232865dac", "sighting--227643ff-9f0b-498a-9f25-210fbb5f04a5", "sighting--882aec44-149d-4a17-b012-4b021b7935fe", "sighting--06519a28-2b67-4f83-9958-2699589237d2", "sighting--e5b0b932-deae-4219-a9cc-1bc9431c5abe", "sighting--979753be-a453-473b-b13d-141c6d9fec98", "sighting--949106c8-f37e-4ed1-893b-478027c76049", "sighting--7d6f4340-a818-4a86-bb81-5a0cdc507939", "sighting--d4da30ca-c15b-4c52-b4fe-f421747c3c65", "sighting--76ee7ea5-b40d-40bc-b47c-1b0a79d6c3b1", "sighting--63aac941-e94b-4c9d-946a-594e506c7d91", "sighting--52953e10-72ed-4f51-880a-1fb032738f2b", "sighting--1f8c214b-7fc2-4a39-ab6a-b5f13256c444", "sighting--dd05cf0f-0907-48d7-bb26-53a754abab8e", "sighting--cd0b862f-03c4-4536-88b2-5cca5da1bf39", "sighting--d7ecd77a-3312-4c6c-854c-49ea257e30e7", "sighting--112fd6a7-74a4-4086-b9aa-0a8004cdfbf4", "sighting--e872bf01-f944-4b30-9685-b8c686b0b954", "sighting--95da2e40-3d2f-46e1-850d-c2fa365084be", "sighting--7af31bb3-2a1c-482d-9c75-69aa770dfedd", "sighting--40217374-80fa-4713-a74d-5db57bd33347", "sighting--e2e7f004-7327-420f-99f7-e6e7d3716144", "sighting--36bc30c7-3489-4be4-b9bb-b93d5446d5da", "sighting--38fa77fe-57e8-45ab-925c-798a682e059e", "sighting--9483d741-197f-4a4c-825a-fd37aa9b7559", "sighting--c5c08215-4a3a-4af8-bbf1-aba2144d05ef", "sighting--9f468e8d-f43f-4b1a-8d16-307b9c0f6ec1", "sighting--095f7be5-f575-4904-9a95-6fca57aac6e3", "sighting--1aa58431-9aee-48a3-9df1-20d34ceb1ea3", "sighting--1d9cad02-f50f-47c2-8c8a-93318628a0c7", "sighting--7624c8d3-405c-465a-a1df-d0b8a5c4ae33", "sighting--12c5633d-cf88-406f-b621-57615f2db249", "sighting--2d02196f-b847-4aa3-9b45-fb1c36790758", "sighting--de9b6c76-1133-4069-8708-a825e4a57ec5", "sighting--3471aa4b-4351-485c-90c1-5a6c2d606fef", "sighting--262d1c95-1068-4cd8-b0d9-d55d05f04427", "sighting--ee7145d3-5f19-402c-9ab6-1fd2b5ca4c13", "sighting--aa21a7ce-6909-4c3d-a041-1b24df93b603", "sighting--f2703e34-75fb-479a-be1b-f043af506da0", "sighting--66e7f309-abc1-4ce4-96f9-f3361fd29828", "sighting--eba6077a-c58f-4561-bd62-9bb35b9f9665", "sighting--3d2e021a-454c-4652-8eef-96c779a67c88", "sighting--634ee037-4bb7-483c-8456-e3edc116167d", "sighting--3c8067e6-c148-417e-b7af-fe6d6baaf2a2", "sighting--ca7da29b-c12f-4363-b116-fb689c1ae68c", "sighting--b89cf538-2db2-4b22-922a-dcd0de2db654", "sighting--87c0674e-3f2e-4b9a-8ccf-c292bb201692", "sighting--3da1c7b3-ac1d-44e6-9e6d-929e901f2797", "sighting--d82f6b5e-02dc-4644-aedf-8c13af0cf463", "sighting--9abc963a-5d87-460a-aa70-02fb66fd1d3a", "sighting--40fa1796-0eb5-42b7-9310-f678f3a7d692", "sighting--26f8f74e-1ca5-40de-87da-fb81a5973137", "sighting--96123ea3-9a86-4b24-bb7e-1064ae9e6f4b", "sighting--1e37d87f-6d18-494b-b2a5-03ac2259973a", "sighting--84157440-f99d-4b7b-abc6-2e5591d00b10", "sighting--fa8c3e5f-b1e6-49db-b9da-e9a4f1d45140", "sighting--b97e5839-bd52-4891-92bc-7a48b6033d99", "sighting--c69f08ef-211d-4dff-95f3-683d9bf0e78e", "sighting--a89dc18a-8026-4d98-bf65-681a5b3da9c6", "sighting--e69b34d3-6c89-47f1-88f7-d284e72b3c96", "sighting--9cb6b654-0af5-42ec-9512-4e3584037022", "sighting--0c22c481-7a23-4652-bd03-e8e5fe5a0ed7", "sighting--ce468352-071b-4060-a07d-6d1ea4171bcb", "sighting--c5f5d489-8aed-42ed-ac6c-321e20864951", "sighting--83a969df-19ad-42e4-9d88-e2f094a2d343", "sighting--282b6ba9-6631-40f5-8f66-df0d12654ca3", "sighting--9324f1e5-ee42-4d62-8136-2788a23c42e4", "sighting--423685c4-702c-4ec6-8265-28e28964ed0c", "sighting--4313f4af-65f2-4276-ada9-844114cecd93", "sighting--c6ee4f17-95c8-46d6-8300-b47540ae10d7", "sighting--6a8b494d-f8a8-4c27-9d12-0cd2ac13569a", "sighting--c878126e-beca-4108-b5c1-71fa991e110b", "sighting--68ed241c-4320-4e2e-a458-2ecd6e399f09", "sighting--8aadfc3a-4890-4862-bb39-b4ffe0e34af6", "sighting--1479c9ce-d190-4787-a50a-8736553cafae", "sighting--f4c1254c-1e24-4679-933b-ac8563b8081c", "sighting--ceabc5f0-77e0-47ce-b3d8-3778c20e0fd7", "sighting--c28c9fd8-f548-4aeb-8c61-fc40ec018952", "sighting--6382b018-970e-4706-bd4f-8d8c47c94ae7", "sighting--aeb84ad3-18bb-4f33-ad30-ed5ede995022", "sighting--8b3a9fca-315a-4035-900a-46f6663ff7ae", "sighting--6a8c74a6-6181-41a3-8192-1060c9601f43", "sighting--42aebdfe-8b60-4cff-bb46-f9992b4a5755", "sighting--e37dcd44-0138-4e14-af64-722429e6d67b", "sighting--97aa73da-7a27-4263-9565-3b033a82f19d", "sighting--e3d1edc5-6bf1-4ad1-87d7-b0e012664bdb", "sighting--70549ac5-6e01-465d-b0cd-8159b09fe067", "sighting--be009e4c-efd8-4b80-903a-1c556f60d49f", "sighting--9b3fc883-6d8a-4077-a804-fb1544a29a4a", "sighting--c1f18caa-cea3-4286-8b19-13391d42f1e7", "sighting--33212322-ab9e-4b10-b967-a5166cc3f897", "sighting--5cf44b8d-1bb3-4392-a720-154dd08520a1", "sighting--02ac8e35-5584-4ec4-b02b-3b21985e384b", "sighting--1d4b026e-fc80-407a-b8dd-e951c3f4f9ba", "sighting--9827df7c-413e-457b-9c0e-bb3c437d9fc3", "sighting--bb94365f-e1ab-4e7b-948d-685b65904be2", "sighting--8211f666-b1c8-4822-9361-eb4ea32b2b22", "sighting--1a7b1ecf-5040-4d64-8d87-96a923ab1841", "sighting--38fb045d-595f-4e97-afe3-dab9b1460a8e", "sighting--7666c301-6022-4c8c-89c6-41aecf4a1e02", "sighting--ab03e7f9-0744-43eb-836d-da9d0207103c", "sighting--8962acaf-5e83-4a16-94ec-1ec8fe9ddb84", "sighting--e2f21cf2-1914-465c-b62d-9a3e49417fd7", "sighting--73c900ab-bcc6-49f4-96be-8be1781153f2", "sighting--0d8e5fdd-78d7-4355-946c-3f5d03b729e4", "sighting--7a2877df-31da-42d2-915a-8a61eb8940dc", "sighting--02dc9419-567e-41ec-91a2-c964005ccacd", "sighting--9231a390-7e1c-4448-9215-b69c74c56bd2", "sighting--4de9e835-cc28-4595-904f-4d5160adc1f4", "sighting--89453ba5-aca6-4ae7-a432-0f999946a841", "sighting--b4b24d1b-269d-4c6a-8378-e179bd6de768", "sighting--a4231328-6bfd-4298-bf97-cf57bf7d4554", "sighting--2a092887-785f-498d-bb6f-f0882746ec7a", "sighting--762c8cea-c3fe-49bf-8012-541b69cc6f9b", "sighting--bc89629c-388c-4c6a-a00c-c78452d99558", "sighting--8d83d603-aa21-4852-a2a3-ce14d0ca9ae8", "sighting--bb665308-84c5-404c-a40a-d6aff7e33d31", "sighting--89eed358-74b0-4c11-aabe-0814e8ad66fb", "sighting--eda00dd4-6f5c-408d-ae9a-accb3690766c", "sighting--d5330ed0-1755-48f9-bef6-4d35d8712a2c", "sighting--257a00e5-4618-4c45-ba84-a1dd9569f7d5", "sighting--3c5cd6e7-47a3-4826-9b03-faf941c6a221", "sighting--b209c33d-c58a-4fb8-a38f-02f5224b65c5", "sighting--ed5e3c7b-d9c9-4b8f-843d-f97ba693cc61", "sighting--c70ff371-85d8-44b2-bb2a-028d6f904096", "sighting--71ab6cee-1ccb-49b7-a59b-d9e33114f0cd", "sighting--3b8d900e-54a0-4eca-9db9-7282cccce5d9", "sighting--600e2afc-8fd5-4a99-ac78-5bc0666c9aa8", "sighting--ef67faa6-a1a9-416f-b19a-9a7e12c5b85f", "sighting--441ee2f1-0912-4188-8a3b-9c0f8e95e662", "sighting--047e3fb8-59bd-489c-9e1e-810d6c1c9714", "sighting--5aab233f-906a-436a-8282-79897251503b", "sighting--e672bcfe-ed9a-439d-83c6-66d7dae45860", "sighting--24bc9e72-bd9f-4c7f-8735-00a642a4afb5", "sighting--ed6ad327-498b-4e7e-82d5-483755c3a10d", "sighting--ebe75a9a-56e2-4129-82c4-538ca8c2863e", "sighting--7c477d40-9efd-4a46-bf7c-3650f9b69177", "sighting--a8bebb94-a9f6-4b0b-9022-fe263c9a29ff", "sighting--d8fa26a3-3ade-44e4-9e76-665b0ca6526a", "sighting--19b2eac4-ed15-43ed-b0c4-9d61ce5d33d2", "sighting--6598b7cc-0f84-4f23-a6f2-e5df72c17194", "sighting--46182226-58f0-4895-81d2-84dd204b1373", "sighting--3eabba37-4ea8-4a57-aaf3-b28073043132", "sighting--a3fb61de-a52d-42ae-ba37-0b6123fb08bb", "sighting--8ea35da8-f8dc-44c8-a8f3-bef60711c287", "sighting--6d847878-ef08-401c-925f-c87c77375d51", "sighting--2bdfc81c-cb7f-404c-b6fa-d90b32104536", "sighting--bbfb1072-61be-4332-83f4-fef0ff064526", "sighting--ea1bb048-1b75-445e-b5ae-9e1edf971bde", "sighting--f7f2c2c3-184a-4d19-bb79-81f3208afd3a", "sighting--979b88a5-e2b7-4e28-b6a6-3fd522d362e7", "sighting--dbd84a53-6db0-45cd-af32-a652bae88519", "sighting--973555fa-6e1b-4183-8e88-c6ce11db3942", "sighting--ff716c4c-4435-488e-9e0a-c2273b8621df", "sighting--a3f3305c-8eab-42b0-80ad-6b0f0590e638", "sighting--b698c803-bfc1-4608-abd0-41732ceb55b9", "sighting--43bb427a-fb25-4075-9858-eac1e8e452f9", "sighting--e565822b-6ebd-4661-961a-d4bf1a3decad", "sighting--6c2b52b3-f188-4365-8720-1eafa45e968f", "sighting--43384a1e-ac88-490d-81b3-105522e58a73", "sighting--4b914e07-02d7-46e8-a295-8f165d8eaf35", "sighting--7bbb8aca-0e13-4930-928a-d414038247eb", "sighting--e51f892c-7f85-4849-a324-8111919ebda3", "sighting--5e570ed4-9417-4f88-a60e-c7496b690ee8", "sighting--463ff5a5-c25d-4545-b4b4-0bacf0ec39a1", "sighting--119e1898-8ea3-4866-ae55-32700399a4b8", "sighting--9d2e5bab-8f37-4b09-bba9-46952de67bdd", "sighting--a4cb028f-9cb6-44ed-8e79-de9eb88458c8", "sighting--5826de9e-a317-4ce8-9f61-4212c3415c9f", "sighting--759e0384-f94f-4da8-a236-afdccab536ad", "sighting--ef33dd78-970b-4d58-85ba-d13441e823a9", "sighting--914eee70-0cd6-495a-9ffb-b222f3134ef2", "sighting--cc962b4d-a164-48bc-9507-595d27bbc882", "sighting--68c20c30-e8cf-496a-8bc5-00ff0951691c", "sighting--031a97ae-0720-4c21-9a29-599306552e80", "sighting--f3132acb-14d8-4511-9f7e-f52edf688bdd", "sighting--fcfc4df1-3c53-47d5-93d5-2fdfb59d30de", "sighting--27f95dea-6f41-4a95-a7d1-eeabcfd05da6", "sighting--b61a15ce-97ea-4505-9ee6-443d23b60e99", "sighting--a3fbc95a-2e8e-4116-ae57-f1a0a963d843", "sighting--38c15846-fc9e-4f98-b681-58d212cd1358", "sighting--514ef1b7-a68d-4ae2-a6bf-e6c41116c515", "sighting--a862780c-358d-431a-9420-61621f3620c1", "sighting--98b9285a-210b-4ceb-89c3-365da40779f3", "sighting--da56309b-6866-474a-9325-3ab5d88bae42", "sighting--2bcbbd7c-5a7d-4ae8-959b-38f9c62de85e", "sighting--c52986da-e7fa-4f45-8399-bb16199bd7bd", "sighting--9542443f-4d5d-42d0-91b0-672e8c8c9b47", "sighting--87efb506-9053-431f-83e4-bfda8b169700", "sighting--5e3399e9-76c4-4784-ae67-ef601e7d22c1", "sighting--b651b376-3a3c-4ad2-986d-875b24813707", "sighting--dbea80fd-326d-4ffc-a8f0-85c049a9386a", "sighting--b987431d-2d95-4129-bfa0-f8b52ad7fb19", "sighting--754a9b6d-10be-486c-b7b0-e28f82785587", "sighting--865955f5-7448-4239-a418-26d6ac3fe94e", "sighting--686f19e8-f98c-4f6c-95ad-9c50533cb978", "sighting--5d074fba-eb1f-465a-b8e6-93ffc604d6d0", "sighting--cd228398-0a95-4a86-9185-c4ccc241cca8", "sighting--82ec3b84-772c-4e89-b809-686e5eb05fff", "sighting--912b1b83-29cb-4226-860f-9cb546728faa", "sighting--ee072889-68ba-4eb6-8ba0-02846eb869c5", "sighting--dec3b33a-38b7-4833-bdf4-0d55918dfdef", "sighting--2beecf77-54fb-4b1e-8b02-3d92f222111c", "sighting--3265a512-aa9c-4495-96f9-1c838339a475", "sighting--d43147c4-48b7-4f20-aa44-c2ea258b3d3b", "sighting--6992c484-d7d4-4817-8770-622adcb3ee29", "sighting--8803f988-16e8-42ef-9dfb-ba8e4ec2d0df", "sighting--5ca57337-2319-44b5-9427-eec3fca89813", "sighting--2afd8efa-26be-4224-9c23-ee43492ead18", "sighting--ee6bae93-b0cc-4af0-8dae-f1d6f34fa8dc", "sighting--03a33ed5-2f4d-48b6-9164-f7d6ab73cc32", "sighting--4494570d-f8e1-4082-a96c-93185a1bb186", "sighting--e52da20a-7c17-4887-8452-8fdc4a46802d", "sighting--f157b476-0539-44c8-9b71-12d6d9b50d13", "sighting--1ed21b78-57e6-4433-9fd9-1ab7c81eec2d", "sighting--bf505c6d-7ab8-49c8-8c4f-a3c26bae2a4b", "sighting--964c7fb4-cb8b-451c-878e-4995d103d44d", "sighting--ce6650fb-7592-436e-b82f-f2731cfe3fa4", "sighting--2b8ac1e5-7dce-47e2-a781-8d3a70bd2a11", "sighting--060ad324-f14b-40d0-b1d3-10c43049f9fe", "sighting--71d33265-522c-4eea-a06e-6e5ce14102a5", "sighting--23381d31-7cd5-4b6f-bffe-e028a6e5ebb3", "sighting--b5cedfea-0bb1-4a59-ad5e-b5b06535c080", "sighting--6461ae7a-5fae-45d1-a42e-0eea8eeea89c", "sighting--ced6fd7f-8734-4240-813c-54a871e49129", "sighting--5534a5f0-4153-46b6-8e3b-b33078dc0aba", "sighting--4563f832-3409-42ab-b915-4cde9b9013a7", "sighting--b353b1c7-7dde-450e-b89b-459febd7cd1f", "sighting--c0397d78-ec51-4349-b0d5-d4916bc0a99e", "sighting--5ee7ea6d-2d2c-4753-877e-95521eca6168", "sighting--2a8283b5-6a88-4c1a-86b2-599e4928202d", "sighting--ba10c66e-1850-44eb-a1d3-f59f4676ffb7", "sighting--fd2e22aa-9764-44c1-b028-95d2bfe5deb0", "sighting--b3946089-d914-4f60-89e1-d2f48127c111", "sighting--399d94f6-f281-4486-9c5f-caf6bd6e6224", "sighting--1a9f02c1-6dbd-4764-970a-ae4543570670", "sighting--8f900727-e930-4cb1-9e14-3b667c736929", "sighting--82a8f958-e667-42ec-95d9-dcb5a7fef046", "sighting--cf1d29b6-cdd7-48d0-ac0b-27403e919c91", "sighting--ed277236-dd4d-47e1-bceb-a5161e8e56d8", "sighting--b4dfe382-2861-40bf-a8ed-de776177f399", "sighting--d1665242-7eb4-4b15-9642-9fdbda0813c6", "sighting--59f5952a-d716-411f-abf3-96d7371e3e19", "sighting--938da4b4-8d4d-4be1-946a-256fc65bbe72", "sighting--05b3774c-6c94-47d5-ab65-6b709c469cc1", "sighting--29cddf1c-59f5-4b58-ac26-537e8a1da5b3", "sighting--2234643f-a456-48c7-a41c-08295b6fea2f", "sighting--490862f7-9281-44b4-bca6-132d4b761cae", "sighting--0dc29e85-a6c6-48fb-a18a-eba5a0a52924", "sighting--fc34a1fa-14ad-4cbd-a581-c51329d9d0ac", "sighting--358d0ebc-00b2-4fb8-818f-8e5cd3824fdc", "sighting--6e9330b3-4131-41d2-a743-7732a4468113", "sighting--98c18430-b454-417f-b4dd-e5f9a981f858", "sighting--321e8123-c23c-4ae7-9273-94ba22deefb8", "sighting--348187e4-e8ea-44a9-967a-e8b56c66d7d4", "sighting--f323a057-7b8b-4dbd-b652-b67422270f0f", "sighting--a692e7c0-48e8-4c05-9d8a-e65ac20fa914", "sighting--63ba1f4b-65b5-4533-8c6a-b63357fcf270", "sighting--acd1d951-047a-4f9b-b9d5-a86814d974b6", "sighting--0c8fc1c9-cd00-486e-ae50-7440e7a3957c", "sighting--e760c173-041a-4518-8ab5-599a0551b61e", "sighting--1af9b80e-1c58-469d-8e9d-4af73cfb63af", "sighting--71e841a4-adf7-48cb-baa5-4c833626dbf9", "sighting--7982acbe-578a-45ec-8d84-62e8f05901f9", "sighting--a8480e77-6ea3-4699-8dae-d98a726c1f75", "sighting--92d949f0-5095-413a-9fb5-d2ae37691691", "sighting--e7c89233-7803-4f6f-8ae6-29334fe8c5ae", "sighting--622fcfd0-0325-4538-a6af-430b0e994893", "sighting--68b11162-e61a-4f55-9791-8212df6d9419", "sighting--16fae1ea-ab9a-4d81-8e12-0cc8e5baf651", "sighting--2b05070a-0eff-4beb-b63a-cee7ff5fb33d", "sighting--cc9160f8-f78a-4487-a972-ffc6892ec7b8", "sighting--da57a833-3dda-412c-a6b3-5de42684ce54", "sighting--85d57f9f-f6d2-40b1-a96f-a77d871021b6", "sighting--8d85390b-6839-47cd-8680-d30b8ee2c13c", "sighting--a0f08754-fba4-4a81-a93f-94990596171d", "sighting--f221ffab-80f9-4423-afb1-cad617d03b47", "sighting--058ca670-2be9-4d0d-9e27-f655fb163280", "sighting--e5c617ea-5741-49ab-a278-e72aa87084ff", "sighting--e4d2253a-2d15-4771-b5c0-914ce025e3b4", "sighting--dd6a51f5-52c3-4060-83e2-78f69cf9c701", "sighting--cd45eba4-c923-4060-98c6-e114fd85ad1d", "sighting--13086902-c0b8-4765-b423-e257ca7f4c00", "sighting--b61330a8-fb09-4494-ae29-a536a9829edb", "sighting--8fb5d402-cee6-4f77-99e6-c3bd581668c3", "sighting--9c134c2f-cd36-463b-9af1-620fa128e874", "sighting--c51af078-2027-4099-86a9-b23787802d5d", "sighting--03a9b87b-e21f-4f78-9cc8-cbd5d2bb5981", "sighting--71d62a90-6de3-4a92-ba03-f401954a236a", "sighting--0f76be84-3298-4aee-9dc9-642afc9666dc", "sighting--e8cda0e3-f47b-4eff-8f3a-7a51761b02a6", "sighting--918d587b-78d7-42f4-8ffb-0204825eca02", "sighting--ba97faf6-56b7-45cc-8b14-de70628de256", "sighting--51946707-dd48-4ff0-bd8e-f4303433b06c", "sighting--50233bdc-f221-4aa0-a756-2ca9b8081091", "sighting--3b463f8b-05f9-42f6-b9e3-e9b4953ae570", "sighting--8e70a113-3b8d-4151-9c31-4b475cf50e79", "sighting--046550c3-3ee4-49a7-b9ae-13ace34e2035", "sighting--bfed4c5e-3a82-4a3e-b1ee-b15f6082a54f", "sighting--1f8d78ae-a3c9-46db-aeb8-33758483b2bc", "sighting--7365eadb-e5a8-4ab7-af09-bfc1b4eed4be", "sighting--6aff18c3-2395-4e58-bf5c-de8e96a9e057", "sighting--42f4b6af-e487-4836-a7af-d11d0d960951", "sighting--fcb8618e-eb4a-498c-94d7-bf47ee607093", "sighting--754ff320-1bf4-47ca-9688-93886698fa8b", "sighting--9f6cfa36-ad13-4969-95d9-b42b3cfe40fa", "sighting--65fe0826-d25b-4fa3-91c7-6878edcb090d", "sighting--ddeaa4c7-8677-4a79-8d32-79638341fd37", "sighting--377f63f1-3cb8-4633-971e-27e18470b3b3", "sighting--c056970a-6885-4679-b341-395aeb2dabff", "sighting--5516171e-67bc-460b-9d7b-f518e2e49a58", "sighting--5ce948d1-8219-46d5-8056-fd0bdf9ca4ac", "sighting--dcda2147-1f26-4e82-b35c-ef9d91736d50", "sighting--486688a8-0c15-47ef-95ff-bf43f68c8f63", "sighting--8816b27b-d458-46e8-827d-77a35ef9b54b", "sighting--43f7cd98-846b-4889-a484-ab39867118ae", "sighting--64ad9558-f440-433e-a856-09b909d810cd", "sighting--8e480124-2a5b-4918-a0d8-64f0d591e686", "sighting--ff34f8a2-f9d6-4eee-856e-ba376f7a7fc9", "sighting--c12cc792-9992-4a3e-9072-4be7cf59b840", "sighting--d785f0b4-a15f-4162-ab41-0936af246fab", "sighting--2de9a5b8-01de-4b54-82e1-fa22a3ff26dd", "sighting--0a17b6c3-d3a8-4486-9a53-06f299545181", "sighting--6205b320-e14f-4c70-9e2d-9fa33a8c7f11", "sighting--54680d7e-ae63-49f5-8646-acbabc3b119f", "sighting--1acd602c-1ed2-4d87-9747-bbb02d59ee52", "sighting--65c382a9-f212-4ca0-b843-8eb89bfb93de", "sighting--e1a03eca-47ea-4d33-ae12-558f3399fa39", "sighting--49a9d4f1-f4e5-4fa8-86aa-5fda0b8303fe", "sighting--fe6b6754-746c-4228-b833-98c7cff36efd", "sighting--ec07ebfd-d1b2-4483-92ef-f9b456580af5", "sighting--a329c169-1be6-4af8-94d4-e493a65f7451", "sighting--44a7a66e-24c4-4225-b9c1-5ab39fe88a1f", "sighting--1673a94b-efd0-425c-90d2-a254130871bb", "sighting--67b276fa-3d1c-48cb-ae34-c196e6b01768", "sighting--a13d6ead-019e-4c5f-8041-c75609ee5e1d", "sighting--aa7ca754-558a-46d7-9624-e9a2e3bb29ad", "sighting--9da77a5b-bf5d-4b57-9410-38c69e9b89c1", "sighting--38a7562b-61db-4953-a492-8aa416329a8b", "sighting--2d38b6fe-8073-4b7c-bcb5-0706da7da27e", "sighting--f9a58767-17a9-4d87-98ef-1c67f7f5adf3", "sighting--662df5c4-c8fd-47dc-a494-c4fd78568da8", "sighting--d7a26f49-321a-4a99-bc8a-1664352690a6", "sighting--03c7b58d-1319-48da-a9a0-576532a786fa", "sighting--98704786-a0c7-4b2b-bbf0-29a1a6f3063d", "sighting--a27e8d60-d16e-4f04-be96-a28091d96c6e", "sighting--873765a9-8a73-4b77-bf67-5e594bd24a59", "sighting--0db00fb5-d558-4b0b-a939-39ca0b2b210f", "sighting--1e96c342-2e84-4e86-a18a-7250001cd0a7", "sighting--a6392d74-346a-4601-aff3-c89a5b079993", "sighting--aa101d37-b418-453b-9424-85cd9cb94973", "sighting--3d19cae7-8e46-48c5-8a61-1824c2f9b9b4", "sighting--70c06b31-dcab-4e90-8c3f-4811ba3885e2", "sighting--e5e2466f-c69e-43ce-9db8-3e3cff016c30", "sighting--8662f79f-7428-43c4-8a0f-86e3d4a74594", "sighting--75e4cd96-b532-49cc-9a47-fe3b32a04d48", "sighting--02021896-bcb6-4f4b-8ac6-a30f01157498", "sighting--6dca52e7-e8f3-4623-a063-3412017dd85d", "sighting--b2e433ba-4498-43b7-b48b-cb8473fb4ec8", "sighting--1cce2a09-d960-4b9c-90a1-065ecbcd2c03", "sighting--9eb04b6f-79de-49e6-a2b8-106f57cfe1d1", "sighting--df7f6aba-9661-47fb-acc9-2fe19d997246", "sighting--f9986a86-d26b-4042-a7f0-26f8ce6942ca", "sighting--c6688fe1-861f-47f2-aee3-d66cd5ee12ca", "sighting--31ff85c9-3f51-4da2-864a-33dbd75f91c7", "sighting--1048a585-da22-453b-a54f-9c0c401aaca6", "sighting--d2b4a672-bda0-4ef5-809f-bd30f00462ff", "sighting--e8390178-a52e-480d-b144-a366053a58a3", "sighting--496fa97f-40cb-4dc6-b06e-69fc60336477", "sighting--b69fad78-3a71-4895-abba-7f4cf50e65d2", "sighting--8f15bc04-0508-4883-b619-ae55b0b8dce8", "sighting--9b8388e5-161f-4008-b6b9-453363b46f91", "sighting--96b222c2-15df-4aab-b274-4c6e5c705976", "sighting--d3f0eeb7-f658-4de6-88cc-370a608e68f7", "sighting--800e23da-bc39-425a-8951-71e757cf9506", "sighting--9c4673f6-3bb0-4c65-b008-1a28c9fa67cc", "sighting--3e655dc3-716d-4b70-99d6-623870193368", "sighting--2d2eef5c-07b1-4b8a-b8ab-d938e961ff42", "sighting--ce09b7cb-3291-46b0-a28f-8999a438fc2f", "sighting--3e9a7c14-2872-4210-83a3-f37e89318814", "sighting--9e646d0b-3f32-4adf-9e6b-90ed3c9b9e4a", "sighting--4bb2b208-1dfa-4598-8559-6aaa3ca1d1e0", "sighting--d4a8e626-78b0-4781-ab78-6a0c0e917da0", "sighting--890574d5-f604-4b5c-87a2-01c0b3a94047", "sighting--41f0b890-379b-4bb5-b892-dabc46ab2771", "sighting--741bcf4c-7351-4c1e-8e83-0189c0f1cc1c", "sighting--ba121bc2-2fe9-48ef-a5dd-f6d173f7e264", "sighting--6b1712ee-81ca-4fb2-8cf6-1bc012aa18bb", "sighting--558e3f62-9c40-4bba-ab8d-2a85fa92d284", "sighting--56431432-e4c2-4dc9-9148-b1957308f800", "sighting--bf0e9104-e67e-42a1-8c9c-85f7253f13fc", "sighting--a77fce84-e4c4-4a4c-af6b-84654b39f766", "sighting--09f66de7-ac41-403e-a83b-465981dd1e70", "sighting--822a29b0-6069-4921-a89e-db611c1d5d89", "sighting--985a6937-05ca-45fd-ab36-580617aeb23c", "sighting--b8e7009f-caae-439e-8f3b-b43968d28e5d", "sighting--528e3e16-9ac6-4cbe-a522-5314a6b05731", "sighting--163b0e5d-be39-45e7-9edc-c82f84d3d0de", "sighting--54cba6c1-1cd3-486d-9ea0-5d7b61c458fa", "sighting--29d9c3b2-213f-4907-a623-95b5ed72ff6a", "sighting--202fd0ef-e3df-4c2b-8be0-fe674973ceb9", "sighting--79a8e228-31bb-4166-9e04-c9199965cef2", "sighting--8603c428-01e0-4cee-9992-7261499f9425", "sighting--b61a5b46-be02-48d2-bbc7-4c878a00cb47", "sighting--dab988a5-7c98-4881-b51e-e99fca8650e1", "sighting--22a08a0e-ee6d-452f-a77d-ab29208b50e8", "sighting--9cbf223d-1b64-46ad-9c69-034fed732437", "sighting--bc2702b5-5076-4b78-9331-2b56b8fe4b4d", "sighting--2189a699-b491-4ff3-8b72-6b01e9db54b8", "sighting--fc859595-f05b-4eab-ae4e-db2975c4a6a3", "sighting--a0ffb03d-fc47-493a-a31b-0aa0be3e897c", "sighting--c2d843df-a45b-479c-8e9f-3484e824e593", "sighting--813f8f76-ac11-4f6f-90b6-a3e0358059b1", "sighting--7bbdc761-191b-4a59-a0f7-c37286aca5a3", "sighting--d4b19f3b-5c71-4b16-8a51-aaab21a59a8e", "sighting--c82cdaef-0f34-4e93-9ce6-12c512516197", "sighting--f8c59853-6cb0-4350-a1b6-c122495469f8", "sighting--447fd899-7fba-48a4-b830-20c250c32752", "sighting--62b9a9e6-2845-458e-a169-b5ca1348dc59", "sighting--36924c74-7896-4e8a-a58c-a72cdccefcbb", "sighting--10d1c105-d798-4b46-882f-4db591e6eb89", "sighting--53ba8b0b-6d40-4dc2-91b2-88cdeffe2eef", "sighting--e436ef55-88aa-4437-be0b-0e2b1651ccc9", "sighting--ed27c4ee-b4f9-4ddc-924c-972f3f820221", "sighting--1e9e7708-8c44-4a6e-a463-8b5ec9832018", "sighting--644c1281-cf2e-4dd7-9efe-576e56728de2", "sighting--4fb947a6-5ad3-467e-9bea-e6423c70cfdb", "sighting--d0bc768b-6723-418b-899c-de3e62f603de", "sighting--f7fda867-f58d-4e3c-a572-1c520ba037da", "sighting--0d791f90-8eb5-478c-b435-29cc7483d3e7", "sighting--40be771a-6142-42f4-8f0e-36827dfe213f", "sighting--81531598-bbb1-4b3d-9d7c-25334fc23f80", "sighting--a08e2f02-c5a7-4474-bca3-b5a652d02b0a", "sighting--1f067d02-7f0f-44fd-b978-842610463a87", "sighting--7045341a-b49d-4696-bd2c-ef0bdaf0264a", "sighting--079d9452-f2b9-422e-809d-262f3ba873be", "sighting--f61a696a-9161-46da-986a-6c76521de431", "sighting--9f68f514-98f2-4a53-b587-d6cc3c336c67", "sighting--fa9d1bfa-9603-4c88-ad30-cb19d04e6a03", "sighting--329cbb7d-05ac-45cf-af59-a833f8ea8446", "sighting--b21fcb39-2c87-449c-959c-49cf5233b428", "sighting--ede352c6-3427-4c77-9581-483e3c14c672", "sighting--b171ef31-12c6-4134-b8ec-4443bd1ba3b2", "sighting--ae586ef0-6e1b-4aeb-94f8-1b1fec075775", "sighting--11423ea8-208a-44b7-91bb-9c0d15d9e11a", "sighting--7992242a-088a-42d0-9ecf-16b827784847", "sighting--14f10ff3-9903-488c-9f4c-1e34d5c71015", "sighting--df3be049-b251-4b35-bead-5fbb60cf782d", "sighting--0dcd24e7-d889-48ee-95a7-0dfff2388209", "sighting--fd06203a-63a7-4e2d-8ff8-6bab89b2ecdd", "sighting--7ada6a69-90e0-4f66-94c2-ae0fc2cafe09", "sighting--28883d16-ead0-43d0-b8cd-c47da16e396a", "sighting--3e03e956-fd06-4f46-9882-23e1b0d9e960", "sighting--be0cc1f1-bb91-4f2d-b3c4-ad18d53efcc0", "sighting--eb60741b-dca6-43a1-949f-fac6ac3a61e0", "sighting--e6426bf8-3419-46e8-a68f-6dc7bc6a679a", "sighting--b1c594b6-fffc-43f2-a448-df00626ab14f", "sighting--36c5fef4-7836-4107-8758-ea4a137b39ee", "sighting--a325eb47-3ca6-49e7-bf4e-8bc43982dec8", "sighting--7c040c37-ed4b-4d6a-bbd3-58f0ad3b93c8", "sighting--8ba20398-9f12-4076-9ea1-29c6504f9f5b", "sighting--099358f7-3994-469d-ba40-16ee4980422a", "sighting--de4144bf-40db-4ebe-8f0a-9c7f5ff4a746", "sighting--61c636fc-9520-4c61-89d0-956fed8da4b8", "sighting--7b9c445d-379f-4e7e-a385-1b5e87634d2b", "sighting--6f0543cc-649b-4fd4-99da-e3dbd31bee4b", "sighting--42c4fdd6-a6a6-4d33-af9e-a625b37fa95f", "sighting--854cecd9-7c02-46bf-a2f7-b7885f9899c5", "sighting--0669ca39-915f-413e-b304-702849354f74", "sighting--35a6558a-40e0-4b41-b102-8b2cc65d2c92", "sighting--28d2673b-b324-4a66-a9e5-a16ef2b46c9a", "sighting--95bfa277-070a-4e94-a1cf-4f2a7d9915a4", "sighting--eb85b510-16f9-457b-b9b0-f07482f7efdd", "sighting--5641cdb2-9adb-4304-b026-23dd69365024", "sighting--6629f942-52f2-4eb2-81ef-677703d49e14", "sighting--7cf79c22-de97-4ddf-aef4-ef62bf2350d7", "sighting--97abc928-d146-4885-9dac-2b26b58d693b", "sighting--ad73525b-7838-4813-848d-21eb6df24d7f", "sighting--135ba8c7-2b7e-4ccf-bc1f-ad6a0d8c16d8", "sighting--fe012040-4336-4949-abf4-324b63409de8", "sighting--c4a8a4c5-9d39-4939-ab78-3a0309c33754", "sighting--7c59ccc3-2f30-4183-be85-cbbed8d92dff", "sighting--feae4147-69dd-4b25-8ffa-2612ac5288f2", "sighting--2c92c8ca-cfcd-4b49-a6ef-86cb65637ce0", "sighting--c381b389-ab9b-472c-961b-8bc46fc53f21", "sighting--fabf964f-8966-42fa-b4d2-a8c49d1d878c", "sighting--5b4a0ffa-aeae-4b5e-be0a-3c35c417ea69", "sighting--dfb33b8d-5636-44f9-a367-205e9e1c6483", "sighting--d5d298aa-b441-44f5-9345-e7793f2d900e", "sighting--b4cba79f-e053-4fde-b4c9-a1dbc7285502", "sighting--e540b299-9ab2-4aff-8e9f-88bc5167a37d", "sighting--18fb54f2-a214-4e99-84e1-b30cbf2711d1", "sighting--6c2c9022-4862-4169-aa53-02877845ac18", "sighting--f29f2c0d-9ddd-4ff1-bea7-0a51685eb6d7", "sighting--56cb0911-3dd7-45f9-bcea-738ba808ccf1", "sighting--fe0d91d0-c02f-440b-99e2-1c235ff11c7a", "sighting--7c622044-1600-494e-9c89-fd694e48007c", "sighting--3572c394-3ea7-4b84-96e8-b8dead7779f6", "sighting--8cee5831-8590-43f0-a702-3ae451dc96d4", "sighting--0d2875ae-c064-48e3-b434-f8e0ac91ab77", "sighting--d13c852d-480c-4669-a52d-1ae40a4d64e9", "sighting--e964fbb6-6738-420b-8e7a-e3ac33f39030", "sighting--8c641372-bf9e-4ba3-be8c-c6115fa9f8a6", "sighting--b71e4e25-4d31-4c2c-b2dc-8b4445545edd", "sighting--0570f2e7-208e-438d-818a-ac2e3f851eff", "sighting--0cce8bc1-d388-4548-84ca-ad6ef4c0092f", "sighting--f33d3c55-3a1c-4bd9-8076-093578147a13", "sighting--d0aa0bab-46c2-445c-b6e4-e9ad24b2b076", "sighting--06173016-2d8c-4587-b4f3-ee405a178e1a", "sighting--79e4d8a7-1a4e-4655-a176-f386a82e78b4", "sighting--2165371c-474f-46aa-8ffd-d81c7995a3da", "sighting--518f4a00-d5dd-416c-a55f-000b971aba12", "sighting--61f20643-8ce3-4f43-9867-280964bc0028", "sighting--724cec34-a6f6-480f-9152-c72dbb5c15ae", "sighting--0268e4c4-45f8-4705-a3de-5e5ec94a8058", "sighting--76f0a7ca-6b8e-47e2-b065-201af6932458", "sighting--a8c5ddef-a7ec-4e83-88a1-2786e003d870", "sighting--d0470cd9-d260-4606-b7c7-dc10d5482594", "sighting--8cf857a0-8862-4455-9f9a-86fd7ce7467d", "sighting--b03ad2ce-8eb8-43f2-963f-0088e75799ae", "sighting--54e1b55a-8a71-4729-9535-291dec9a76b1", "sighting--cd619d9b-1314-4928-9b61-7f252084a302", "sighting--b6f9650a-c364-4599-b418-0ec815ad4ae2", "sighting--301143ad-004d-4e0f-b288-d6213193cebd", "sighting--6922d41d-85e0-4efa-a5fd-f3c2f9f61fbd", "sighting--df315b60-f633-412d-80c1-645cecdea100", "sighting--6e3af365-7361-4646-ba4c-047555794914", "sighting--b01a6293-de65-467e-a9e3-51e8e6cb214e", "sighting--79e9a125-7554-4181-beec-8062807941f3", "sighting--fd0b8db5-45f3-4372-b0c4-7cbc54cdd8b2", "sighting--a6dbe3e5-c858-4a39-ba10-32c9a27faa8e", "sighting--10a49866-c6a1-4190-b262-7aaec5b3ef9d", "sighting--4c99b0bc-779a-4939-82a3-c0d5f75218be", "sighting--82f28a8e-4abe-4427-87f2-7a30bd239332", "sighting--3f8b4073-bbcb-4f83-a23a-2e4709a4ce97", "sighting--91c83146-9d15-4e5e-a57f-ccd76b15ba2c", "sighting--5e8eeeb3-d47e-4634-b041-8be1ac709bb4", "sighting--407ba42f-1b83-40e0-a36e-47dc3d86d124", "sighting--0218d26f-bffe-432a-861b-edcd67dce561", "sighting--a57654b3-f813-4e29-a8a1-12789bf8097f", "sighting--2786d683-311a-4129-8610-78d0215b3f47", "sighting--635eda25-cec1-48c2-beca-f5cf99c9ab22", "sighting--541a699f-8fac-46ab-88e8-f4f28d168a3a", "sighting--9412f1eb-29d4-4278-aa63-574209b8c5e8", "sighting--9307ee21-cd57-40ba-be35-fd2001642424", "sighting--70a428ec-503c-43c5-a5ad-68b3e88e361a", "sighting--0beb73bf-10a3-44dc-9aff-68d5448a8f75", "sighting--4df2c346-b4e6-4efd-8103-6adb845e1cca", "sighting--a0e938d8-ba59-477d-9192-3e6c37ce9c88", "sighting--fbdd94bc-0beb-40fb-845c-7a27a9709702", "sighting--8a3bae6c-57c4-4e57-9bb5-66ff3b2b9e04", "sighting--05ee688a-8672-4309-a55e-7ff851af3e92", "sighting--e9c3fe45-d6a3-46d3-ad7f-e7e994a1954d", "sighting--5d9a53fd-b893-4e9a-9a5e-4203d139a4cb", "sighting--92e85f7e-804e-4c02-9fdd-0911a4207682", "sighting--8d245ea7-ba53-4085-9c55-86ccfa4978f7", "sighting--acbdf91b-efec-4237-b37d-aa741a6044a3", "sighting--64672a67-e838-4040-8e6a-ee4f8af71768", "sighting--84c7536b-24bf-4e98-a5dd-00876ce8da6d", "sighting--88c5580f-1aba-4e1d-8826-1d13268f7154", "sighting--6129b6be-c53e-4e02-915b-84d7df08b153", "sighting--dc79af19-fdc3-4a8a-a263-f8955ad14697", "sighting--5dba3bb4-557c-436d-a67e-a3dbf84cde3e", "sighting--e879c64b-ed3f-457d-88cd-91475804ef45", "sighting--9cf5800f-f1ff-4cdb-9daf-0a9a075c0255", "sighting--85c022c2-489f-41a5-b6df-7f806ff019fa", "sighting--afd8e605-e0bd-49e9-bd46-e02fef59e989"], "created_by_ref": "identity--8f46cf6a-622e-4127-bbdd-968d59ea87e0", "created": "2026-09-10T11:00:02.066Z", "modified": "2026-09-10T11:00:02.066Z", "object_marking_refs": ["marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9"]}, {"type": "marking-definition", "spec_version": "2.1", "id": "marking-definition--613f2e26-407d-48c7-9eca-b8e91df99dc9", "created": "2017-01-20T00:00:00.000Z", "definition_type": "tlp", "name": "TLP:WHITE", "definition": {"tlp": "white"}}]}